Switching Feature Pack EXTREME X690 MACSEC LRM Adapter 17138 — MACsec support for X690 switches

The Switching Feature Pack EXTREME X690 MACSEC LRM Adapter enables hardware-based MACsec encryption and integrity on compatible Extreme X690 switching platforms. Designed to integrate with X690 switches, this adapter provides link-layer security for traffic between switches and connected devices, protecting data in transit and assisting with regulatory and internal compliance requirements. The adapter is intended to extend existing X690 deployments with MACsec capabilities so administrators can enforce secure connectivity across campus and enterprise networks.

Advantages

The adapter implements MACsec in hardware, reducing CPU overhead on the switch and maintaining line-rate forwarding for secured links. It supports strong packet integrity and encryption to prevent eavesdropping and tampering on point-to-point connections. Integration with the X690 platform delivers consistent management and policy application across the switch fabric, while preserving existing performance and feature sets of the host switch.

Suitable for

• Securing uplinks and inter-switch links within campus and data-center networks
• Protecting sensitive data in transit between servers, storage arrays, and switches
• Meeting regulatory or internal compliance requirements for link encryption
• Extending X690 switch deployments with hardware MACsec support

Key specifications

• Functionality: Link-layer (MACsec) encryption and integrity for compatible X690 switches
• Implementation: Hardware-based MACsec processing to minimize performance impact
• Compatibility: Designed for use with Extreme X690 switching platforms that support the adapter slot
• Use case: Point-to-point link protection between switches and connected devices
• Performance: Maintains line-rate forwarding for secured links when supported by host switch

How to use

Install the adapter in a supported adapter slot on a compatible Extreme X690 switch following the platform hardware installation guide. After physical installation, enable and configure MACsec on the switch using the Extreme management interface or command-line configuration. Define MACsec policies, key exchange (for example, using IEEE 802.1X or a key agreement protocol supported by the platform), and apply them to the appropriate ports or link aggregation groups. Validate secure connectivity by testing traffic between two MACsec-enabled endpoints and monitoring link status and counters in the switch management tools.

Usage recommendations

Use the adapter on links that carry sensitive or regulated traffic and where hardware-based encryption is required to avoid performance degradation. Keep switch firmware and key-management components up to date, and plan MACsec policy deployment to include key rotation and monitoring of link health to ensure continuous secure operation.