Support for AES GCM has been added as a method for storing symmetric secrets in EOS. This applies to secrets that must be

Security Encryption 4.27.0F

VLAN tagged MACsec refers to frames that have a VLAN tag between the MAC source address and the MACsec ethertype.  This VLAN tag is unencrypted (in the clear) so that intermediate devices between the MACsec endpoints can forward the MACsec frames based on this unencrypted VLAN tag.