Preferred way to approach wired security?

[dpdrown]

802.1x is not an option with the Turris built in ports Omnia 2020 not receiving EAP packets for 802.1x wired authentication

Tunnels are an option, but keep in mind of the performance overhead