An engineer must interconnect two geographically separated data centers. The service provider offers a Layer 2 Metro Ethernet link. The strict security policy requires that the information that is shared between two sites must be sent encrypted. The application deployed between two sites requires a line-rate throughput regardless of the packet size and speed.
Which solution meets these requirements?
MACsec (Media Access Control Security) meets the requirements for encrypting information over a Layer 2 Metro Ethernet link. It provides line-rate throughput and does not require support from the ISP, ensuring that all data sent between the two sites is encrypted as per the strict security policy.
MACsec can encrypt traffic over a Layer 2 Metro Ethernet link without support from the ISP. Answer is C
I'd go with IPsec as MACsec is a Hop to Hop encryption and therefore would need support from ISP.
For deployments requiring encryption and the capability of leveraging an Ethernet transport (public or private), MACsec offers a simplified, line-rate, per port encryption option for secure next-generation deployments.