MACsec Frame Format
The following figure shows how the Ethernet frame is converted into a MACsec frame.
The security tag passes MACsec-related information to MACsec peers.
The following figure defines the fields in a security tag.
Processing Incoming Frames
FastIron hardware processes each MACsec frame received or transmitted based on the information in the MACsec security tag.
The FastIron device first confirms the Ethertype on incoming frames as MACsec and then processes incoming MACsec frames as illustrated in the following figure.
Processing Outgoing Frames
The FastIron device parses each outgoing frame and, if MACsec is enabled, processes the outgoing MACsec frame to apply configured MACsec options.
The following figure shows how the device applies configured MACsec options before transmitting the frames.



