Patent ID: 7853691

Claim:
A method for computer networking, the method comprising: performing by one or more processors, one or more circuits, or a combination of one or more processors and one or more circuits in a first network node: determining information of a security association between a second network node and a third network node; determining, utilizing said information, a mapping between Ethernet packets comprising payloads secured utilizing IPsec protocols and Ethernet packets secured utilizing MACsec protocols; and converting, utilizing said information mapping, between said Ethernet packets comprising payloads secured utilizing IPsec protocols and said Ethernet packets secured utilizing MACsec protocols; wherein said payloads secured utilizing IPsec protocols are [i] de-capsulated by removal of IPsec headers and trailer from said payloads secured utilizing IPsec protocols and [ii] decrypted in instances that said payloads secured utilizing IPsec protocols are encrypted; whereby a payload of each converted Ethernet packets secured utilizing MACsec protocols is not secured utilizing IPsec protocols.