MACsec Intel® FPGA System Design User Guide

ID 767516
Date 10/02/2023
Public

A newer version of this document is available. Customers should click here to go to the newest version.

Document Table of Contents

6.5.1.4. TX Rekeying Sequence

When PN is about to expire, rekeying occurs and below is an example of the rekeying sequence. All of the configuration that needs to happen as part of the rekeying sequence can be programmed.
  • Set “Enable Transmission enable” to False (default value is False) for new SA.
  • Program the per-MACsec instance configuration and Tx Configuration Sequence (section 5.1.2) for the new SA.
  • Ensure no TX traffics entering MACsec IP which using expire SA.
  • Set “Enable Transmission enable” to False for expire SA.
  • Set “Enable Transmission enable” to True for new SA.