Some AXI4-Stream Interface signals pertain to certain port configuration (that is, Fixed Port or Channelized) modes. Similarly, some Per-Port Interface signals are only relevant in certain crypto modes. The following table summarizes these AXI4-Stream Interface and Per-Port Interface signals with their applicable modes as well as how they should be tied-off or left unconnected when not used in other modes. Refer to Encryption Ingress Segmented AXI4-Stream Interface Signal Descriptions to Decryption Egress Per-Port Interface Signal Descriptions for detailed descriptions of these signals.
| Signal name | I/O | Applicable Mode(s) | Connection in Non-Applicable Mode(s) |
|---|---|---|---|
| Encryption Ingress AXI4-Stream and Per-Port Interface Signals | |||
| enc_igr_axis_skip_id[5:0] | O | 1x400G Channelized mode | It should be ignored and left unconnected in all Fixed Port modes. |
| enc_igr_axis_skip_req | O | 1x400G Channelized mode | It should be ignored and left unconnected in all Fixed Port modes. |
| enc_igr_axis_tid[5:0] | I | 1x400G Channelized mode | It must be set to 0 in all Fixed Port modes. |
| enc_igr_axis_tready_<N> | O | In 1x400G Fixed port and 1x400G Channelized modes, only enc_igr_axis_tready_0 is used. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, only enc_igr_axis_tready_<N> is used as the data ready signal for port N. | In 1x400G Fixed Port and 1x400G Channelized modes, enc_igr_axis_tready_<N>, N=1,2,3 should be ignored and left unconnected. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, enc_igr_axis_tready_<N+1> should be ignored and left unconnected. |
| enc_igr_axis_tvalid_<N> | I | In 1x400G Fixed port and 1x400G Channelized modes, only enc_igr_axis_tvalid_0 is used. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, only enc_igr_axis_tvalid_<N> is used as the data valid signal for port N. | In 1x400G Fixed Port and 1x400G Channelized modes, enc_igr_axis_tvalid_<N>, N=1,2,3 is not used and should be set to 0. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, enc_igr_axis_tvalid_<N+1> is not used and should be set to 0. |
| enc_igr_axis_taf_<N> | O | In 1x400G Fixed port and 1x400G Channelized modes, only enc_igr_axis_taf_0 is used. In Fixed Port mode, if port N is configured in 200G mode, only enc_igr_axis_taf_<N> is used. | In 1x400G Fixed Port and 1x400G Channelized modes, enc_igr_axis_taf_<N>, N=1,2,3 should be ignored and left unconnected. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, enc_igr_axis_taf_<N+1> should be ignored and left unconnected. |
| enc_igr_prtif_crypto_auth_only_p<N> | I | IPsec, MACsec and BulkCrypto modes | It must be set to 0 in BulkECB mode. |
| enc_igr_prtif_crypto_cipher_suite_p<N>[1:0] | I | IPsec, MACsec, BulkCrypto, and BulkECB modes | Bit [1] must be set to 0 in BulkCrypto and BulkECB modes. |
| enc_igr_prtif_crypto_conf_offset_p<N>[5:0] | I | MACsec, BulkCrypto, and BulkECB modes | It must be set to 0 in IPsec mode. |
| enc_igr_prtif_crypto_iv_salt_p<N>[95:0] | I | MACsec, IPsec, and BulkECB modes | It must be set to 0 in BulkECB mode. |
| enc_igr_prtif_crypto_mode_p<N>[1:0] | I | In 1x400G Fixed Port and Channelized mode, only dec_igr_prtif_crypto_mode_p0 is used to indicate the corresponding crypto mode for each channel. In Fixed Port mode, if port <N> is configured in 200G mode, enc_igr_prtif_crypto_mode_p<N> is used to indicate the crypto mode for port N. | enc_igr_prtif_crypto_mode_p<N>, N=1,2,3 must be set to 0 in 1x400G Fixed Port and Channelized mode. In Fixed Port mode, if port <N> is configured in 200G mode, enc_igr_prtif_crypto_mode_p<N+1> must be set to 0. |
| enc_igr_prtif_crypto_pkt_num_p<N>[63:0] | I | MACsec, IPsec, and BulkECB modes | It must be set to 0 in BulkCrypto mode. In BulkECB mode, bits [63:32] must be set to 0 and the value on bits [31:0] is propagated through the datapath and provided on enc_egr_prtif_crypto_icv_p<N>[31:0] at the start of packet. |
| enc_igr_prtif_crypto_sa_index_p<N>[19:0] | I | MACsec, IPsec, BulkCrypto, and BulkECB modes | If all SAs/keys are internal, bits [19:10] must be set to 0 as only 1024 SAs are supported. |
| enc_igr_prtif_crypto_zlen_p<N> | I | IPsec mode | It must be set to 0 in MACsec, BulkCrypto and BulkECB modes. |
| enc_igr_prtif_ext_key_p<N> | I | MACsec, IPsec, BulkCrypto, and BulkECB modes when enc_igr_prtif_crypto_sa_index_p<N> is greater than or equal to 1024 | It must be set to 0 if enc_igr_prtif_crypto_sa_index_p<N> is less than 1024. |
| enc_igr_prtif_macsec_sectag_an_p<N>[1:0] | I | MACsec mode | It must be set to 0 in IPsec, BulkCrypto and BulkECB modes. |
| enc_igr_prtif_macsec_sectag_sci_p<N>[63:0] | I | MACsec mode | It must be set to 0 in IPsec, BulkCrypto and BulkECB modes. |
| enc_igr_prtif_macsec_sectag_shortlen_p<N>[7:0] | I | MACsec and IPsec* modes | It must be set to 0 in BulkCrypto and BulkECB modes. |
| enc_igr_prtif_macsec_sectag_ssci_p<N>[31:0] | I | MACsec and IPsec* modes | It must be set to 0 in BulkCrypto and BulkECB modes. |
| enc_igr_prtif_macsec_sectag_tci_p<N>[5:0] | I | MACsec mode | It must be set to 0 in IPsec, BulkCrypto and BulkECB modes. |
| Encryption Egress AXI4-Stream and Per-Port Interface Signals | |||
| enc_egr_axis_tid[5:0] | O | 1x400G Channelized mode | It should be ignored and left unconnected in all Fixed Port modes. |
| enc_egr_axis_tvalid_<N> | O | In 1x400G Fixed port and 1x400G Channelized modes, only enc_egr_axis_tvalid_0 is used. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, only enc_egr_axis_tvalid_<N> is used as the data valid signal for port N. | In 1x400G Fixed Port and 1x400G Channelized modes, enc_egr_axis_tvalid_<N>, N=1,2,3 is not used and should be left unconnected. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, enc_egr_axis_tvalid_<N+1> is not used and should be left unconnected. |
| enc_egr_prtif_crypto_auth_only_p<N> | O | MACsec, IPsec and BulkCrypto modes | It should be ignored and left unconnected in BulkECB modes. |
| enc_egr_prtif_crypto_icv_p<N>[127:0] | O | MACsec, IPsec, BulkCrypto and BulkECB modes. | In MACsec and IPsec modes, bits [127:64] are unused and should be ignored and left unconnected. Similarly, bits [127:32] are unused in BulkECB mode and should be ignored. |
| enc_egr_prtif_macsec_mtu_check_failure_p<N> | O | MACsec mode | It should be ignored and left unconnected in IPsec, BulkCrypto an BulkECB modes. |
| Decryption Ingress AXI4-Stream and Per-Port Interface Signals | |||
| dec_igr_axis_skip_id[5:0] | O | 1x400G Channelized mode | It should be ignored and left unconnected in all Fixed Port modes. |
| dec_igr_axis_skip_req | O | 1x400G Channelized mode | It should be ignored and left unconnected in all Fixed Port modes. |
| dec_igr_axis_tid[5:0] | I | 1x400G Channelized mode | It must be set to 0 in all Fixed Port modes. |
| dec_igr_axis_tready_<N> | O | In 1x400G Fixed Port and 1x400G Channelized modes, only dec_igr_axis_tready_0 is used. In Fixed Port mode, if port N is configured in 200G mode, only dec_igr_axis_tready_<N> is used as the data ready signal for port N. | In 1x400G Fixed Port and 1x400G Channelized modes, dec_igr_axis_tready_<N>, N=1,2,3 should be ignored and left unconnected. In Fixed Port mode, if port N is configured in 200G mode, dec_igr_axis_tready_<N+1> should be ignored and left unconnected. |
| dec_igr_axis_tvalid_<N> | I | In 1x400G Fixed port and 1x400G Channelized modes, only dec_igr_axis_tvalid_0 is used. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, only dec_igr_axis_tvalid_<N> is used as the data valid signal for port N. | In 1x400G Fixed Port and 1x400G Channelized modes, enc_igr_axis_tvalid_<N>, N=1,2,3 is not used and should be set to 0. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, enc_igr_axis_tvalid_<N+1> is not used and should be set to 0. |
| dec_igr_axis_taf_<N> | O | In 1x400G Fixed Port and 1x400G Channelized modes, only dec_igr_axis_taf_0 is used. In Fixed Port mode, if port N is configured in 200G mode, only dec_igr_axis_taf_<N> is used. | In 1x400G Fixed Port and 1x400G Channelized modes, dec_igr_axis_taf_<N>, N=1,2,3 should be ignored and left unconnected. In Fixed Port mode, if port N is configured in 200G mode, dec_igr_axis_taf_<N+1> should be ignored and left unconnected. |
| dec_igr_prtif_crypto_auth_only_p<N> | I | MACsec, IPsec, and BulkCrypto modes | It must be set to 0 in BulkECB mode. |
| dec_igr_prtif_crypto_cipher_suite_p<N>[1:0] | I | IPsec, MACsec, BulkCrypto, and BulkECB modes | Bit [1] must be set to 0 in BulkCrypto and BulkECB modes. |
| dec_igr_prtif_crypto_conf_offset_p<N>[5:0] | I | MACsec, BulkCrypto and BulkECB modes | It must be set to 0 in IPsec mode. |
| dec_igr_prtif_crypto_icv_p<N>[127:0] | I | MACsec, IPsec, BulkCrypto modes | It must be set to 0 in BulkECB mode. |
| dec_igr_prtif_crypto_iv_salt_p<N>[95:0] | I | MACsec, IPsec and BulkCrypto modes | It must be set to 0 in BulkECB mode. |
| dec_igr_prtif_crypto_mode_p<N>[1:0] | I | In 1x400G Fixed Port and 1x400G Channelized mode, only dec_igr_prtif_crypto_mode_p0 is used to indicate the corresponding crypto mode for each channel. In Fixed Port mode, if port <N> is configured in 200G mode, dec_igr_prtif_crypto_mode_p<N> is used to indicate the crypto mode for port N. | dec_igr_prtif_crypto_mode_p<N>, N=1,2,3 must be set to 0 in 1x400G Fixed Port and 1x400G Channelized mode. In Fixed Port mode, if port <N> is configured in 200G mode, dec_igr_prtif_crypto_mode_p<N+1> must be set to 0. |
| dec_igr_prtif_crypto_replay_prot_en_p<N> | I | MACsec and IPsec modes | It must be set to 0 in ByulkCrypto and BulkECB modes. |
| dec_igr_prtif_crypto_sa_index_p<N>[19:0] | I | MACsec, IPsec and BulkCrypto, and BulkECB modes | If all SAs/keys are internal, bits [19:10] must be set to 0 as only 1024 SAs (indexes 0 to 1023) are supported. |
| dec_igr_prtif_ext_key_p<N>[255:0] | I | MACsec, IPsec, BulkCrypto, and BulkECB modes when enc_igr_prtif_crypto_sa_index_p<N> is greater than or equal to 1024 | It must be set to 0 if enc_igr_prtif_crypto_sa_index_p<N> is less than 1024. |
| dec_igr_prtif_macsec_sa_in_use_p<N> | I | MACsec mode | It must be set to 0 in IPsec, BulkCrypto and BulkECB modes. |
| dec_igr_prtif_macsec_validation_mode_p<N>[1:0] | I | MACsec mode | It must be set to 0 in IPsec, BulkCrypto, and BulkECB modes. |
| Decryption Egress AXI4-Stream and Per-Port Interface Signals | |||
| dec_egr_axis_tid[5:0] | O | 1x400G Channelized mode | It should be ignored and left unconnected in all Fixed Port modes. |
| dec_egr_axis_tvalid_<N> | O | In 1x400G Fixed port and 1x400G Channelized modes, only dec_egr_axis_tvalid_0 is used. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, only dec_egr_axis_tvalid_<N> is used as the data valid signal for port N. | In 1x400G Fixed Port and 1x400G Channelized modes, dec_egr_axis_tvalid_<N>, N=1,2,3 is not used and should be left unconnected. In Fixed Port mode, if port N (N=0,2) is configured in 200G mode, dec_egr_axis_tvalid_<N+1> is not used and should be left unconnected. |
| dec_egr_prtif_crypto_auth_only_p<N> | O | MACsec, IPsec or BulkCrypto modes | It should be ignored and left unconnected in BulkECB modes. |
| dec_egr_prtif_crypto_discard_p<N> | O | MACsec and IPsec modes | It should be ignored and left unconnected in BulkCrypto and BulkECB modes. |
| dec_egr_prtif_crypto_icv_chk_fail_p<N> | O | MACsec, IPsec, and BulkCrypto modes | It should be ignored and left unconnected in BulkECB mode. |
| dec_egr_prtif_crypto_pkt_num_p<N>[63:0] | O | MACsec and IPsec modes. | It should be ignored and left unconnected in BulkCrypto and BulkECB modes. |
| dec_egr_prtif_crypto_replay_chk_fail_p<N> | O | MACsec and IPsec mode | It should be ignored and left unconnected in BulkCrypto and BulkECB modes. |
| dec_egr_prtif_crypto_zlen_p<N> | O | IPsec mode | It should be ignored and left unconnected in MACsec, BulkCrypto and BulkECB modes. |
| dec_egr_prtif_ipsec_next_header_p<N>[7:0] | O | IPsec mode | It should be ignored and left unconnected in MACsec, BulkCrypto and BulkECB modes. |
| dec_egr_prtif_macsec_sectag_an_p<N>[1:0] | O | MACsec mode | It should be ignored and left unconnected in IPsec, BulkCrypto and BulkECB modes. |
|
|||