34 lines
2.3 KiB
Markdown
34 lines
2.3 KiB
Markdown
# <u>MACsec and TC10 demo</u>
|
|
## Show case
|
|
The demo should show:
|
|
1. MACsec secured datastream - only one Module is MACsec configured, modules might be swapped for showcasing
|
|
2. TC10 controlled SFP plugs
|
|
|
|
<u>Needed equipment:</u>
|
|
* GigaStar
|
|
* 2 SFP: MV2221M 1000-Base-T1 modules, enabled for TC10/MACsec
|
|
## 1. Preparation
|
|
* If SFP module MV2221M 1000-Base-T1 is not yet flashed to support MACsec,\
|
|
[RGS_ICS_SFP_FLASHER_REV1_4.vs3](.\SFP_Flasher\v1.4\RGS_ICS_SFP_FLASHER_REV1_4.vs3) is needed to flash the module.
|
|
Take care that also the binary [sfp_mv2221m_b1_mchip.msgbin](.\SFP_Flasher\v1.4\sfp_mv2221m_b1_mchip.msgbin) is available.
|
|
* To download a MACsec configuration, actually you will need a small python script you find in the [MACsec_Utilities folder](.\MACsec_Utilitie) (see **2.**)\
|
|
In this case you might have to install [python](https://www.python.org/downloads/) onto the PC\
|
|
Also you will need python_ics ``` pip instal python_ics ``` and ``` pip install pyyaml ```
|
|
|
|
|
|
## 2. Downloading MACsec configuration to SFP module
|
|
If the SFP module is ready for MACsec en- and decryption, you can download one of the [Example YAML-Files](.\MACsec_Utilitie\yaml)\
|
|
e.g.\
|
|
<b>programming SFP01 of device <i>GS0728</i>:</b>
|
|
python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C2</b> --yaml test_sfp_macsec_Rule_wildcard_SecY_256_strip_noEncrypt_onlyCheck_sci_SA_sak0.yml\
|
|
<b>programming SFP02 of device <i>GS0728</i>:</b> python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C3</b> --yaml test_sfp_macsec_Rule_wildcard_SecY_256_strip_noEncrypt_onlyCheck_sci_SA_sak0.yml\
|
|
<b>clearing SFP02 of device <i>GS0728</i>:</b> python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C3</b> --yaml test_sfp_macsec_Rule_wildcard_SecY_256_strip_noEncrypt_onlyCheck_sci_SA_sak0.yml --reset\
|
|
or just\
|
|
python test_sfp_macsec_util.py <i><b>GS0728</b></i> --sfp --config_netid <b>NETID_I2C3</b> --reset\
|
|
\
|
|
There are four example <b>batch-files</b> available to set and reset SFP01 and SFP02 modules. Device SN has to be adjusted.
|
|
|
|
## 3. Demosetup TC10_MACsec Demo.vs3
|
|
\
|
|
|
|
If SFP modules are swapped direction of encryption will change |