i try test in lab:
EX4300 macsec port >>> bridge domain MX >>>> macsec port EX4550
this not working
EX4300 macsec port >>> L2Circ/connections MX >>>> macsec port EX4550
this working.
I don't understand why we can't wrap our 802.1AE in 802.1Q, then we will be able to forward on TAGs 802.1q
cisco support:
Support for VLAN tag in the clear option to enable Carrier Ethernet Service Multiplexing.