MACsec Feature Pack for EXTREME X460-G2 series (compatible with X460-G2-24P/24HP-10GE4 and X460-G2-24T/24HT-10GE4)

The MACsec Feature Pack for EXTREME X460-G2 series is an add-on software license that enables hardware-level MACsec encryption on compatible EXTREME X460-G2 switches. When installed on supported models it activates Media Access Control Security (MACsec) to encrypt Ethernet frames carried between switch ports, delivering link-level confidentiality for traffic inside data centers, campus networks and branch locations. The feature pack integrates with the existing X460-G2 platform to secure inter-port links without the need to replace the switches or rewire infrastructure.

Advantages

Enabling the MACsec Feature Pack provides hardware-accelerated encryption that minimizes performance impact while protecting traffic at Layer 2. The solution secures east-west traffic and administrative data flows between ports, reducing the risk of passive or active interception on directly connected links. Integration with the X460-G2 series preserves existing management and switching features, allowing centralized configuration and monitoring through the same management plane.

Suitable for

• Encrypting inter-switch and server-facing links in data centers
• Securing traffic on campus network uplinks and aggregation ports
• Protecting sensitive traffic on branch office switch ports
• Compliance-driven environments requiring link-level confidentiality

Key specifications

• MACsec (IEEE 802.1AE) hardware-based frame encryption support on compatible X460-G2 switches
• Operates at Layer 2 to encrypt Ethernet frames between ports
• Hardware-accelerated encryption to maintain forwarding performance
• Interoperates with existing X460-G2 management and configuration features
• Enables per-link confidentiality without replacing physical switches

How to use

Purchase and apply the MACsec Feature Pack license to a compatible EXTREME X460-G2 switch model using the vendor’s licensing and activation procedures. After activation, configure MACsec policies on individual ports or port groups through the switch command-line interface or management GUI, specifying key management options and security associations as required. Validate the encrypted links by monitoring MACsec status and counters in the management interface and testing traffic flow between secured endpoints.

Usage recommendations

Use MACsec for links carrying sensitive east-west traffic or administrative access. Plan key management and authentication (for example, IEEE 802.1X or centralized key servers) and test performance impact in lab conditions before full deployment. Keep firmware and management tools updated to ensure compatibility and security.