MACsec: Custom Ethertype for EAPOL packets

MACsec uses Extensible Authentication Protocol over LAN (EAPoL) as a transport protocol to establish sessions. Some networks filter packets based on their EtherType value. By default, the EtherType for all EAPoL packets is 0x888e. To ensure the network tunnels the MACsec packets properly, you can set a custom EtherType for EAPoL packets.

To configure an EAPoL profile with a custom EtherType, use the ether-type ether-type-value statement at the [edit forwarding-options custom-eapol-ether-type-profiles ] hierarchy level. You can optionally configure a custom EtherType value using the ether-type option at the same hierarchy. If you configure a different value, you must use an EtherType that isn't already reserved for another use. To apply the EtherType to MACsec packets, configure the eapol-ethertype-profile statement at the [edit security macsec connectivity-association ca-name mka] hierarchy level.