Generally, most data is transmitted in plaintext over Local Area Network (LAN) links, which brings security risks. For example, the bank account information may be stolen or tampered with.
Configure the MAC Security (MACsec) function to protect transmitted Ethernet data frames and reduce information leak and malicious attack risks.
MACsec ensures secure communication on LANs by complying with IEEE 802.1AE and 802.1X. It provides identity authentication, data encryption, integrity check, and replay protection to protect Ethernet data frames and prevent attack packets.
The MACsec function is not included in the system software and is available only after the MACsec plug-in is loaded. By default, switches do not support the MACsec function. In V200R009 and later versions, switches support the MACsec function after the MACsec plug-in is loaded.
For details about how to configure MACsec, view or obtain MACsec documents at the Huawei technical support website, search for "plug-in usage guide", and choose the desired plug-in usage guide based on the switch model and software version. If you do not have permission to access the website, contact technical support personnel.