MACsec: Bounded delay protection

Media Access Control Security (MACsec) bounded delay protects your network against man-in-the-middle attacks. When you enable MACsec bounded delay protection, the device guarantees that a frame will not be delivered after a delay of two seconds or more. MACsec periodically compares the number of frames transmitted to the number received. If a frame is sent but not received within two seconds, such as during a man-in-the-middle-attack, MACsec drops the packet.