MACsec support for FortiGate Rugged Models with hardware switch

MACsec support is added across all applicable FortiGate Rugged (FGR) models with hardware switch. This enables secure Layer-2 encryption and meets mandatory compliance requirements for regulated OT environments where MACsec is required.

1. Enable MACsec:

   # diagnose debug macsec set wan1 0x1234 0x4321 1 2

2. Examine the configured MACsec:

   # diagnose debug macsec get wan1
   Interface                wan1
   MACsec enabled           1
   macsec->encrypt_key      0x00000000000000000000000000001234
   macsec->decrypt_key      0x00000000000000000000000000004321
   macsec->sci              0x0000000000000001
   macsec->ingress_sci      0x0000000000000002

3. Disable MACsec:

   # diagnose debug macsec clear wan1

4. Verify that MACsec is disabled:

   # diagnose debug macsec get wan1
   Interface               wan1
   MACsec enabled          0
   macsec->encrypt_key      0x00000000000000000000000000000000
   macsec->decrypt_key      0x00000000000000000000000000000000
   macsec->sci              0x0000000000000000
   macsec->ingress_sci      0x0000000000000000