MACsec Intel® FPGA IP User Guide

ID 736108
Date 10/21/2022

A newer version of this document is available. Customers should click here to go to the newest version.

Document Table of Contents VLAN Tag (Not in Clear)

The following diagram shows the packet format when it is a VLAN tag. The VLAN tag is encrypted together with the payload. This mode can be enabled through setting the PORTX_VLAN_CLEAR parameter to DISABLE. This example is showing a single VLAN packet format. In the case of a double VLAN tag detected in the packet, for example, SVLAN - CVLAN, only the outer VLAN tag (SVLAN) is put in cleartext. For a single VLAN tag, for example, CVLAN, the CVLAN tag is put in cleartext.
Table 54.  VLAN Tag (Not in Clear)
Field (TData) DMAC SMAC 802.1Q Ethertype Payload (plaintext)
Size (Bytes) 6 6 4 2 46 - 9582
Figure 32. VLAN Tag (Not in Clear)