MACsec Intel® FPGA IP User Guide

ID 736108
Date 3/31/2024
Document Table of Contents VLAN Tag (Not in Clear)

The following diagram shows the packet format when it is a VLAN tag. The VLAN tag is encrypted together with the payload. This mode can be enabled through setting the PORTX_VLAN_CLEAR parameter to DISABLE. All the port-specific VLAN_CLEAR settings must be set to the same value. This example is showing a single VLAN packet format. In the case of a double VLAN tag detected in the packet, for example, SVLAN - CVLAN, only the outer VLAN tag (SVLAN) is put in cleartext. For a single VLAN tag, for example, CVLAN, the CVLAN tag is put in cleartext.
Table 49.  VLAN Tag (Not in Clear)
Field (TData) DMAC SMAC 802.1Q Ethertype Payload (plaintext)
Size (Bytes) 6 6 4 2 46 - 9582
Figure 27. VLAN Tag (Not in Clear)