Network switching feature pack EXTREME X670-G2 MACsec LRM adapter for MACsec support

The EXTREME X670-G2 MACsec LRM adapter feature pack enables link-layer security on compatible EXTREME X670-G2 switches by adding MACsec LRM support. This feature pack integrates with the switch software to provide encrypted Layer 2 traffic, packet integrity checks and device authentication for point-to-point links. It is intended for network environments that require link-level encryption and regulatory compliance for protected or sensitive data while maintaining native switching performance.

Advantages

Enabling the MACsec LRM adapter option adds hardware-accelerated link-layer encryption without altering higher-layer routing or switching behavior. The feature pack supports integrity checks to detect tampering and uses device authentication to prevent unauthorized endpoints from joining encrypted links. Deployment on compatible X670-G2 platforms allows organisations to meet compliance requirements for data in transit at Layer 2 while preserving throughput and low latency characteristics of the switch.

Suitable for

• Securing point-to-point fiber or copper links between switches in campus and data center access layers
• Protecting traffic for compliance-sensitive environments such as finance, healthcare, or government
• Encrypting inter-switch links where MACsec is required to meet regulatory or corporate security policies
• Edge deployments that need device authentication and link integrity without changing existing network topologies

Key specifications

• Function: Adds MACsec LRM (Link Remote MACsec) adapter capability to compatible switches
• Layer: Operates at Layer 2 (link layer) to provide frame encryption and integrity
• Security services: Frame confidentiality (encryption), frame integrity (authenticity), and device authentication
• Performance: Designed for hardware-accelerated operation on supported X670-G2 platforms to preserve throughput and low latency
• Compatibility: Requires an EXTREME X670-G2 switch with matching firmware and hardware support for the MACsec LRM adapter option

How to use

Install the feature pack on an EXTREME X670-G2 switch that supports the MACsec LRM adapter option and ensure the switch runs the recommended firmware release. Configure MACsec on the desired interfaces according to EXTREME configuration guidelines, enabling the MACsec LRM mode where supported. Define key management and authentication parameters (for example, using a supported key management protocol or controller) and test link negotiation to verify encrypted sessions are established between peer ports. Monitor link status and encryption counters to confirm proper operation after deployment.

Usage recommendations

Verify firmware compatibility and hardware support on both ends of a link before enabling MACsec LRM. Use centralized key management or a supported controller to manage keys and authentication, and validate performance under expected traffic loads to ensure encryption does not impact critical latency or throughput requirements.