The AXI Endpoint Protection Unit IP core has the following features:
- Supports all Versal® devices.
- Supports AXI4. This IP does not support AXI3 or AXI4-Lite.
- An AXI subordinate interface and an AXI manager interface; transactions on the subordinate interface are either passed through unmodified to the manager interface, or are blocked.
- Checks the SMID, TrustZone secure bit, and the access type (read/write) of
transactions against a configurable list of permitted SMIDs / secure / access type, and
blocks those that are not permitted.
- SMID list size is configurable from 1 to 20 entries.
- SMID is specified as a 10-bit value and a 10-bit mask.
- Optionally checks the address of transactions against a configurable list
of permitted address regions, and blocks those that are not permitted.
- The number of regions is configurable from 0 to 256 entries. 0 entries means no address checking is done.
- Each region defines a base address and size.
- If no region is matched, you can configure whether to permit or block transactions.
- Regions are not permitted to have overlapping address spaces.
Note: When a transaction is blocked, writes are prevented and reads return a fixed data value. - Additional actions when blocking a transaction are configurable:
- Return DECERR or OKAY response.
- Record transaction information (can be read from registers).
- Assert an interrupt output with an associated interrupt handling registers.
- Additional AXI4-Lite subordinate interface to access the registers to read (but not set) the protection permissions, read information about blocked transactions, and handle interrupts.