If one device (e.g. A wireless router) is attempting to communicate with another device (e.g. some gateway to another network) through a unmanaged switch and the router is ciphering frames it transmits using 802.1ae macsec (which the gateway also supports), but the switch that connects them doesn't know anything of 802.1ae and can't decipher the portions of the message that are ciphered, will the switch still be able to route the message between the two?
Or nominally, would most switches drop the message, in this case?
For managed switches, which need to read the VLAN ID from the encrypted part of the message, I assume it would drop it if it didn't support 802.1ae.
But for unmanaged switches, it would seem (nominally) that it would be able to route it correctly based solely on the mac address.