A network security engineer must secure infrastructure switch-to-switch links against Layer 2 sniffing and tampering within the campus. The requirement is to encrypt and authenticate frames on a hop-by-hop basis between directly connected switches, providing confidentiality and integrity at wire speed. Which technology should the engineer deploy?