MACsec is a hop-by-hop security capability which encrypts/decrypts packet s between connected switches or devices. As a link-only encryption, the switches can still apply services to the packet, such as policy or QoS, without compromising the security of packet s across the link.