Exactly four years ago, I upgraded from #mikrotik #routeros 6.x to 7.x (7.1.2). What a magic moment! So many new features and of course my favorite is #wireguard ! Others are #macsec and #vxlan… Forgot to mention #mvrp ;-)

🔐 MACsec: Layer 2 Encryption for Modern Networks
When IPsec or TLS are too high in the stack, MACsec (IEEE 802.1AE) offers an efficient way to secure Ethernet frames at Layer 2—with low latency and line-rate performance.

In this post:
• How MACsec works (SCI, SAK, EAPoL)
• Trust model: Secure vs. insecure ports
• Hardware dependencies & deployment scope
• Typical use cases in data centers and enterprise access

📖 Full breakdown here:
🔗 https://cloudswit.ch/blogs/what-is-macsec-and-how-does-it-work/

#MACsec #8021AE #NetworkSecurity #L2Encryption #DataCenter #ZeroTrust #SONiC #CloudSwit #OpenNetworking #NetSec

I like to purchase TWO New NCS-57D2-18DD-SYS Cisco combining 7.2 Terabits of 400GE/100GE optimized forwarding capacity, high power efficiency, QSFP-DD optics @Cisco #ncs #57D2 #18DD #400ge #100ge #7terabits #macsec @mega

Building and testing #mikrotik network setup with #gsn3 is awesome! Had a problem getting #macsec running on my physical devices, so I built a test setup with gns3. My mistake was, that I had to remove the physical ports from the bridges *before* using them for macsec! No more „internal error“! \o/

If you wonder for hours why the #macsec interfaces on your #mikrotik devices do not forward any reasonable traffic (such as dhcp-requests…) set the MTU of both to 1500 ! 🤦‍♂️