A method, comprising: causing, by a device, a Media Access Control Security `MACsec' session to be established on a first link of a link aggregation group 'LAG' that includes a plurality of links with a different device; causing, by the device, a data structure to be updated to identify the first link as a MACsec enabled LAG link; sending, by the device and after causing the data structure to be updated to identify the first link as a MACsec enabled LAG link, traffic via the first link, wherein sending the traffic via the first link comprises: determining, based on the data structure, that the first link is a MACsec enabled LAG link and that no other link of the LAG is a MACsec enabled LAG link; configuring, based on determining that the first link is a MACsec enabled LAG link and that no other link of the LAG is a MACsec enabled LAG link, the device to send the traffic via the first link and alternative traffic via at least one link of the LAG that is not MACsec enabled; and sending, based on configuring the device, the traffic via the first link; causing, by the device and while the device is sending traffic via the first link, a MACsec session to be established on at least one additional link of the LAG; causing, by the device, the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link; sending, by the device and after causing the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link, additional traffic via the first link and the at least one additional link; and sending, by the device and after causing the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link, alternative traffic via at least one link of the LAG that is not MACsec enabled. causing, by a device, a Media Access Control Security `MACsec' session to be established on a first link of a link aggregation group 'LAG' that includes a plurality of links with a different device; causing, by the device, a data structure to be updated to identify the first link as a MACsec enabled LAG link; sending, by the device and after causing the data structure to be updated to identify the first link as a MACsec enabled LAG link, traffic via the first link, wherein sending the traffic via the first link comprises: determining, based on the data structure, that the first link is a MACsec enabled LAG link and that no other link of the LAG is a MACsec enabled LAG link; configuring, based on determining that the first link is a MACsec enabled LAG link and that no other link of the LAG is a MACsec enabled LAG link, the device to send the traffic via the first link and alternative traffic via at least one link of the LAG that is not MACsec enabled; and sending, based on configuring the device, the traffic via the first link; determining, based on the data structure, that the first link is a MACsec enabled LAG link and that no other link of the LAG is a MACsec enabled LAG link; configuring, based on determining that the first link is a MACsec enabled LAG link and that no other link of the LAG is a MACsec enabled LAG link, the device to send the traffic via the first link and alternative traffic via at least one link of the LAG that is not MACsec enabled; and sending, based on configuring the device, the traffic via the first link; causing, by the device and while the device is sending traffic via the first link, a MACsec session to be established on at least one additional link of the LAG; causing, by the device, the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link; sending, by the device and after causing the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link, additional traffic via the first link and the at least one additional link; and sending, by the device and after causing the data structure to be updated to identify the at least one additional link as a MACsec enabled LAG link, alternative traffic via at least one link of the LAG that is not MACsec enabled.