SNIP_ADAPTIVE_CAN_FIGURE_Figure_6_6_MANIFESTSPECIFICATION

Figure 6.6: MACsec configuration The MACsec standard specifies a set of protocols to meet the security requirements for protecting data traversing Ethernet LANs. MACsec allows unauthorized LAN connections to be identified and excluded from communication within the network. In common with IPsec and TLS, MACsec defines a security infrastructure to provide data confidentiality , data integrity and data origin authentication. With security on the MAC layer, protocols not based on IP as well as protocols using multicast can be protected by MACsec. The MACsec standard relies on the usage of authentic partners, which are called MAC Security Entities (SecYs). The standard organizes this by MACsec Protocol Data Units (MPDU), which resides in the MAC layer (ISO/OSI layer 2). The MAC Security Key Agreement Entity (KaY) will take care of properly configuring and managing of the MAC Security Entities to enable the secure communication channel.