On Wed, 23 Feb 2022 09:40:59 +0100 Hans Schultz wrote: > > You still haven't answer my question. Is the data plane clear text in > > the deployment you describe? > > Sorry, I didn't understand your question in the first instance. So as > 802.1X is only about authentication/authorization, the port when opened > for a host is like any other switch port and thus communication is in > the clear. Alright, thanks for clarifying! > I have not looked much into macsec (but know ipsec), and that is a > crypto (key) based connection mechanism, but that is a totally different > ballgame, and I think it would for most practical cases require hardware > encryption.