Ethernet Layer 2 Security solution for High speed applications
The MACsec IP provides Ethernet Layer 2 Security for port authentication, data confidentiality and data integrity as standardized in IEEE 802.1AE. It protects components in Ethernet networks especially very high-speed Ethernet used in cloud, data center, and backhaul networks. The MACsec IP is a fully compliant solution that provides line-rate encryption and supports VLAN-in-Clear.
The core is configurable to have multiple Security Entities, SecYs, in a single IP to support multiple Connectivity Associations per port for traffic differentiation, and is prepared for easy interfacing with Comcores or third-party MAC, PCS and TSN Switch IPs. It implements a 128-bit MACsec data processing, where multiple 128-bit pipelines can be configured according to the target speed and input/output data interfaces. The IP can be configured for its placement above or below the MAC. It additionally includes a software tool for MACsec Key Agreement Protocol IEEE 802.1X integration.
