You have been tasked with designing a data center interconnect to provide business continuity. You want to encrypt the traffic over the DCI using IEEE 802.1AE MACsec to prevent the deployment of any f

EoMPLS is a Layer 2 pseudowire that transports raw Ethernet frames across an MPLS backbone, preserving the Ethernet frame structure that MACsec requires to encrypt traffic between PE devices at the MAC sublayer.

MPLS Layer 3 VPN operates at Layer 3 by stripping the original Ethernet frame and forwarding IP packets, removing the Layer 2 Ethernet context that MACsec requires to function.

DMVPN is a Layer 3 GRE/IPsec-based overlay that tunnels IP packets and does not preserve or transport native Ethernet frames, making MACsec inapplicable to its architecture.

OTV encapsulates Ethernet frames inside IP packets for transport across an IP underlay, but MACsec secures point-to-point Ethernet links and cannot encrypt traffic across OTV's IP transport layer.

VPLS is a multipoint Layer 2 VPN over MPLS that emulates an Ethernet LAN segment, maintaining the Ethernet frame boundaries necessary for MACsec to operate between CE and PE devices in the DCI.

GET VPN is a Cisco-proprietary group-keyed IPsec solution that encrypts IP packets at Layer 3 and has no mechanism to operate on Ethernet frames at the Layer 2 boundary MACsec requires.