MACsec

Basic User Flow for MACsec

To do a basic MACsec test, you should follow these steps:

  1. Create and configure a stream on the port as the TX port.

  2. Create a TX Secure Channel (TX SC) on the TX port.

  3. Configure the TX SC.

  4. Configure SAK keys for the TX SC.

  5. Assign the TX SC to the stream, and enable MACsec on the stream.

  6. Create a RX Secure Channel (RX SC) on another port as the RX port.

  7. Configure the RX SC. Set the expected TPLD ID to the stream TPLD ID.

  8. Configure SAK keys of the RX SC.

  9. Enable MACsec for the RX port.

  10. Verify that the TX SC and the RX SC have the same cipher suite, SCI, XPN SSCI, XPN salt, and starting PN value.

  11. Start traffic on stream.

  12. Collect TX and RX statistics

End Station Mode Configuration

Important

On the TX SC side, you may configure any SC End Station (ES).

However, on the RX SC side, since ES packets are always assigned an SC index of 1, you must ensure that an RX SC with index 1 is present on the RX port. This also means that there can only be one ES stream per port.

Secure Channel Configuration