Skip to content

Commit cf91b03

Browse files
MACSec SAI Attribute enhancements
Signed-off-by: rushanmu <rushanmu@cisco.com>
1 parent 1aaf468 commit cf91b03

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

doc/SAI-Proposal-MACSec-Enhancements.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -221,13 +221,19 @@ TCI Octet Structure (8 bits):
221221
- **C (Changed Text, Bit 3)**: Indicates if the frame length has changed
222222
- **AN (Association Number, Bits 2-1)**: Identifies the Security Association used for frame protection
223223
224-
- **End Station(ES)**: The ES bit helps the receiving MACsec entity understand the role of the sender in the network topology. Setting this bit allows receivers to identify traffic originating directly from an endpoint, distinguishing it from traffic that has passed through intermediate switches or other devices.
224+
Currently SAI_MACSEC_SC_ATTR_MACSEC_EXPLICIT_SCI_ENABLE attribute is used to configure the Secure Channel(SC) bit in the TCI field. This proposal introduces attributes to configure ES and SCB bits.
225225
226-
- **Single Copy Broadcast**: The SCB is used to indicate if the ethernet frame belongs to a broadcast/multicast domain (hence its not re-encrypted by intermediate relays) vs a fully protected unicast domain (hence decrypted and re-encrypted hop-by-hop). When the bit is set, it indicates that the frame is associated with an SC that supports the Ethernet Passive Optical Network (EPON) Single Copy Broadcast capability, which is typically point-to-multipoint in nature.
226+
### End Station (ES)
227+
228+
The ES bit helps the receiving MACsec entity understand the role of the sender in the network topology. Setting this bit allows receivers to identify traffic originating directly from an endpoint, distinguishing it from traffic that has passed through intermediate switches or other devices.
229+
230+
### Single Copy Broadcast (SCB)
231+
232+
The SCB is used to indicate if the ethernet frame belongs to a broadcast/multicast domain (hence its not re-encrypted by intermediate relays) vs a fully protected unicast domain (hence decrypted and re-encrypted hop-by-hop). When the bit is set, it indicates that the frame is associated with an SC that supports the Ethernet Passive Optical Network (EPON) Single Copy Broadcast capability, which is typically point-to-multipoint in nature.
227233
228234
## SAI Attribute Enhancement
229235
230-
The below MACSec Secure Channel (SC) attribute is newly introduced to allow configuration of the ES and SCB bits in the TCI. Both the attributes are configurable only when creating a Secure Channel in the Transmit (Egress) direction.
236+
The below MACSec Secure Channel (SC) attributes are newly introduced to allow configuration of the ES and SCB bits in the TCI. Both the attributes are configurable only when creating a Secure Channel in the Transmit (Egress) direction.
231237
232238
```c
233239
/**

0 commit comments

Comments
 (0)