Some extra information: Reference: https://www.curtisswrightds.com/news/blog/enhancing-network-security-with-macsec.html MACsec vs IPsec – What’s the Difference? MACsec is used for authentication and encryption of traffic over Ethernet on Layer 2 LAN networks. For Layer 3 networks, by contrast, IPSec is used. Since MACsec and IPsec run on different network layers, IPsec operates on IP packets at Layer 3, while MACsec works on Ethernet frames at Layer 2. So, MACsec can protect all Dynamic Host Configuration Protocol (DHCP) and Address Resolution Protocol (ARP) traffic, which IPsec cannot secure. On the other hand, IPsec can work across the wide area network (WAN) for routers, while MACsec is restricted to switches or end-nodes on a LAN.

MACsec: Layer 2 encryption protocols like the IEEE 802.1AE Media Access Control Security (MACsec) standard need to register with the eEdge session manager to get disconnect notifications and do cleanup.

macsec because it works at layer 2