# <u>MACsec and TC10 demo</u>
## Show case
The demo should show:
1.  MACsec secured datastream - only one Module is MACsec configured, modules might be swapped for showcasing
2. TC10 controlled SFP plugs

<u>Needed equipment:</u>
* GigaStar
* 2 SFP: MV2221M 1000-Base-T1 modules, enabled for TC10/MACsec
## 1. Preparation
* If SFP module MV2221M 1000-Base-T1 is not yet flashed to support MACsec,\
[RGS_ICS_SFP_FLASHER_REV1_4.vs3](.\SFP_Flasher\v1.4\RGS_ICS_SFP_FLASHER_REV1_4.vs3) is needed to flash the module.
Take care that also the binary [sfp_mv2221m_b1_mchip.msgbin](.\SFP_Flasher\v1.4\sfp_mv2221m_b1_mchip.msgbin) is available.
* To download a MACsec configuration, actually you will need a small python script you find in the [MACsec_Utilities folder](.\MACsec_Utilitie) (see **2.**)\
In this case you might have to install [python](https://www.python.org/downloads/) onto the PC\
Also you will need python_ics ``` pip instal python_ics ``` and ``` pip install pyyaml ```


## 2. Downloading MACsec configuration to SFP module
If the SFP module is ready for MACsec en- and decryption, you can download one of the [Example YAML-Files](.\MACsec_Utilitie\yaml)\
e.g.\
<b>programming SFP01 of device <i>GS0728</i>:</b>
python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C2</b> --yaml test_sfp_macsec_Rule_wildcard_SecY_256_strip_noEncrypt_onlyCheck_sci_SA_sak0.yml\
<b>programming SFP02 of device <i>GS0728</i>:</b> python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C3</b> --yaml test_sfp_macsec_Rule_wildcard_SecY_256_strip_noEncrypt_onlyCheck_sci_SA_sak0.yml\
<b>clearing SFP02 of device <i>GS0728</i>:</b> python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C3</b> --yaml test_sfp_macsec_Rule_wildcard_SecY_256_strip_noEncrypt_onlyCheck_sci_SA_sak0.yml --reset\
or just\
python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C3</b> --reset\
\
There are four example <b>batch-files</b> available to set and reset SFP01 and SFP02 modules. Device SN has to be adjusted.

## 3. Demosetup TC10_MACsec Demo.vs3
![Description](./resources/TX_RX_MV2221M_setup.jpg)\
![Graphical panel](./resources/TC10_MACse_Demo_GP.jpg)
If SFP modules are swapped direction of encryption will change