Agilex™ 7 Hard Processor System Technical Reference Manual

ID 683567
Date 10/31/2025
Public
Document Table of Contents

6.1.2.2.1. MPU Firewall (CCU to DDR)

The MPFE NoC implements a firewall on the output of the CCU_CMI initiator NIU that supports 8 memory regions. The firewall region can be configured by software to be as small as 64 kbytes or as large as 128 Gbytes, aligned to a 64 kbyte boundary.

The firewall checks the Secure bit of a transaction (AxPROT) against the Secure state of the slave. A transaction that passes the firewall proceeds normally to the Slave. A transaction that fails the Firewall receives an error response with random data. Transactions that fail the firewall must never be presented to the Slave interface.

The following registers are associated with the MPU Firewall.

Table 59.  MPU Firewall Registers
Base Address of Registers Register Description

firewall_mpu_ddr

(@ 0xF8020200)

enable Enable
Enable_set Sets Master Region Enable field when written with 1
Enable_clear Clears Master Region Enable field when written with 1
mpuregion<N>addr_base Base definition for MPU Region N
mpuregion<N addr_baseext Base extended definition for MPU Region N
mpuregion<N addr_limit Limit definition for MPU Region N
mpuregion<N addr_limitext Limit extended definition for MPU Region N
nonmpuregion<N addr_base Base definition for non MPU Region N
nonmpuregion<N addr_baseext Base extended definition for non MPU Region N
nonmpuregion<N addr_limit Limit definition for non MPU Region N
nonmpuregion<N addr_limitext Limit extended definition for non MPU Region N
Note: <N> = 0 to 7
Note:

“mpuregion” is associated with MPU transactions.

“nonmpuregion” is associated with non-MPU transactions, such as USB, EMAC, DMA, and others.