Does Zyxel offer any SFP Network Switches with MACsec (IEEE 802.1AE)

USG_User

We are looking for small managed L2 or L3 switches which are able to connect different VLANs of two remote branches via a direct fiber connection (SFP port) and which are able to directly encrypt the layer 2 traffic via MACsec (IEEE 802.1AE). Does Zyxel offer such switches? I'm not able to find any.

Zyxel_Judy

Hi @USG_User ,

Currently, we do not support MACsec.

Could you explain your reasons for needing data encryption? Is it because the branches belong to different companies, or are there other considerations?

Also, could you tell us about your business scale? How many branches and switches will need this feature?

USG_User

Hi Judy,

We additionally hire office rooms at another floor of the building. And cannot use an own wire to connect both premises. Instead of this we could take unused fiber cables from the local internet provider and the provider is patching us together in basement room.

But since we do not have access to this "patch room" we are not able to guarantee data protection to avoid any unwanted disclosure.

That's why we would like to completely encrypt our data traffic with less effort via MACsec to avoid deploying separate service encryptions for DNS, SMB, internal mail, etc.

We are aware of other solutions like VPN but are not interested to hire an additional internet connection. With MACsec we only need a Layer 2 switch on both sides which are able to tag VLANs.

Zyxel_Judy

Hi @USG_User ,

While we do not currently support MACsec, we acknowledge your request and appreciate your detailed description.