[A5500-EI] 5500.EI_4800G_F2218: ACL-based IPsec

[MichaelM55]

Nice, we are getting "ACL-based IPsec". Is this kind of 802.1ae/MACSec for IP only?

https://h10145.www1.hp.com/downloads/DownloadSoftware.aspx?SoftwareReleaseUId=9838&ProductNumber=JD374A

"The switch supports IPsec for data flows in standard mode. In standard mode, one tunnel protects one data flow. The data flow permitted by an ACL rule is protected by one tunnel that is established solely for it."

So this is hardware based IPSec? What performance will I get if I create an ACL with:

rule 0 permit ip source any destination any