MACSec Mikrotik - Hop by Hop Encryption

[@TheNetworkTrip]

What are your biggest concerns when it comes to securing your network? Have you thought about how traffic is protected between devices like switches and routers? Let’s discuss!

[@drumaddict89]

perfectly explained lab! great work!

[@calvu5290]

Awesome Video, thank you.

[@TheNetworkTrip]

Thanks!

[@dunkov1]

Amazing :)

[@TheNetworkTrip]

Thank you! Cheers!

[@barma1309]

Very cool

[@ТарасЛейтар-ш4ы]

Good day! As I understand it, MACsec cannot work with bonding?

[@TheNetworkTrip]

Hello! Not quite yet. We're hoping to have a fix for that soon.

[@daviesthecoach]

Thanks for this video, I learned a lot. Do you have an existing video on your lab setup? If not, can you list the tools you use for your lab? Thank you.

[@TheNetworkTrip]

Hello! Thank you. I have a video about building a virtual lab. kzbin.info/www/bejne/iHrXZ3RurbJjjNksi=YT9PJJCMCN1MZehO

[@Anavllama]

Very interesting post. Would this be something one uses if one suspects one of hte users might be compromised or susceptible to be compromised, and thus users on the same vlan are a bit more protected from other users on the same vlan??

[@TheNetworkTrip]

Hello! Thanks for your comment! MACsec mainly secures communication between network devices, like switches and routers, and doesn't directly protect users within the same VLAN from each other. For protecting users on the same VLAN, you'd want to use techniques like Private VLANs (PVLANs) or port isolation to limit communication between devices. MACsec is more focused on securing the links between network devices.

[@edekedkowski5952]

@@TheNetworkTrip Hello, good episode. Fan that you are back on the YT channel. I have a question: Can PVLAN be configured on Mikrotik?

[@barma1309]

Too bad that macsec support only encrypting mode. I needed just integrity protection.

[@TheNetworkTrip]

Thanks! 😊 Yeah, it’s true that MikroTik’s MACsec implementation focuses on encryption. Unfortunately, it doesn’t currently support integrity-only protection, but it’s great for securing traffic with full encryption.