General restrictions and guidelines
When you configure MACsec, follow these restrictions and guidelines:
In device-oriented mode, the MACsec configuration takes effect on Layer 2 and Layer 3 Ethernet ports.
MACsec is not supported on an aggregate interface, but it is supported on the member ports of an aggregation group.
The MACsec header occupies 38 bytes in each frame. Please take into consideration the header when you plan the network capacity.