I am currently working a project dealing with network security, and my question is that what is a feasible way to protect traffic on a switch-to-switch link in a LAN, not end-host-to-end-host encryption. I am only interested in a way to encrypt traffic between two network switches. I am aware that MACsec protocol and its variant Cisco TrustSec can be used for this purpose, but Macsec is used for host-to-switch encryption, and TrustSec is only supported by a few Cisco switch models. I need a more widely acceptable solution.
Apart from that what would really be great is that if the solution can be configured onto the switches using SNMP so that the whole process can be programmatically executed.
I would really appreciate some help finding such a solution.