HP Cisco Nexus 5000 Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Re - Page 29

Cisco MDS 9000 NX-OS Release 4.2(1a) New Features, NX-OS Feature Descriptions - switch architecture

Page 29 highlights

New Features in Cisco MDS NX-OS Release 4.2(1a) Send documentation comments to [email protected] In addition, Fabric Manager information has been removed from the Cisco MDS NX-OS Release Notes (this document) and placed into standalone Fabric Manager Release Notes that support both Cisco MDS 9000 Family switches and Cisco Nexus 5000 Series switches. Cisco Fabric Manager Release Notes are available from the following website: http://www.cisco.com/en/US/partner/products/ps10495/prod_release_notes_list.html Note These release notes are specific to this release. For the complete list of NX-OS product documentation, see the "Related Documentation" section. Cisco MDS 9000 NX-OS Release 4.2(1a) New Features Cisco MDS 9000 NX-OS Release 4.2(1a) is a software release that includes new features, enhancements, and bug fixes. It supports the new MDS 9000 Family 16-port Storage Services Node (SSN-16) that offers licensed SAN extension features. This release includes the following major features: • Cisco TrustSec Fibre Channel Link Encryption • FICON XRC Acceleration • I/O Accelerator (IOA) • Enhanced FC ID description • SAN Extension support on the SSN-16 • SME Tape on the SSN-16 • Port Group Monitoring • X2 DWDM and X2 GE support on the MDS 9134 switch NX-OS Feature Descriptions This section includes descriptions of the major new features of MDS NX-OS Release 4.2(1a) and indicates where the feature is documented. Cisco TrustSec Fibre Channel Link Encryption Cisco TrustSec Fibre Channel Link Encryption addresses customer needs to ensure data integrity and privacy. Cisco TrustSec FC Link Encryption is an extension of the Fibre Channel-Security Protocol (FC-SP) feature and uses the existing FC-SP architecture. Starting with Cisco MDS NX-OS Release 4.2(1a), Fibre Channel data that is passed between E ports of 8-Gbps modules can be encrypted. The encryption algorithm is a 128-bit Advanced Encryption Standard (AES) and enables either AES-Galois Counter Mode (GCM) or AES-Galois Message Authentication Code (GMAC) for an interface. AES-GCM provides encryption and authentication of the frames and AES-GMAC provides only the authentication of the frames that are being passed between two EP ports. Encryption is done at line rate by encapsulating frames at egress with encryption using the GCM mode of AES 128-bit encryption. At ingress, frames are decrypted and authenticated for an integrity check. Cisco TrustSec Fibre Channel Link Encryption is enabled on a per-chassis basis by the Enterprise Package license. OL-19964-02 Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Release 4.2(1a) 29

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48

Send documentation comments to [email protected]
29
Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Release 4.2(1a)
OL-19964-02
New Features in Cisco MDS NX-OS Release 4.2(1a)
In addition, Fabric Manager information has been removed from the Cisco MDS NX-OS Release Notes
(this document) and placed into standalone Fabric Manager Release Notes that support both Cisco MDS
9000 Family switches and Cisco Nexus 5000 Series switches. Cisco Fabric Manager Release Notes are
available from the following website:
Note
These release notes are specific to this release. For the complete list of NX-OS product documentation,
see the
“Related Documentation”
section.
Cisco MDS 9000 NX-OS Release 4.2(1a) New Features
Cisco MDS 9000 NX-OS Release 4.2(1a) is a software release that includes new features, enhancements,
and bug fixes. It supports the new MDS 9000 Family 16-port Storage Services Node (SSN-16) that offers
licensed SAN extension features.
This release includes the following major features:
Cisco TrustSec Fibre Channel Link Encryption
FICON XRC Acceleration
I/O Accelerator (IOA)
Enhanced FC ID description
SAN Extension support on the SSN-16
SME Tape on the SSN-16
Port Group Monitoring
X2 DWDM and X2 GE support on the MDS 9134 switch
NX-OS Feature Descriptions
This section includes descriptions of the major new features of MDS NX-OS Release 4.2(1a) and
indicates where the feature is documented.
Cisco TrustSec Fibre Channel Link Encryption
Cisco TrustSec Fibre Channel Link Encryption addresses customer needs to ensure data integrity and
privacy. Cisco TrustSec FC Link Encryption is an extension of the Fibre Channel-Security Protocol
(FC-SP) feature and uses the existing FC-SP architecture. Starting with Cisco MDS NX-OS Release
4.2(1a), Fibre Channel data that is passed between E ports of 8-Gbps modules can be encrypted. The
encryption algorithm is a 128-bit Advanced Encryption Standard (AES) and enables either AES-Galois
Counter Mode (GCM) or AES-Galois Message Authentication Code (GMAC) for an interface.
AES-GCM provides encryption and authentication of the frames and AES-GMAC provides only the
authentication of the frames that are being passed between two EP ports. Encryption is done at line rate
by encapsulating frames at egress with encryption using the GCM mode of AES 128-bit encryption. At
ingress, frames are decrypted and authenticated for an integrity check.
Cisco TrustSec Fibre Channel Link Encryption is enabled on a per-chassis basis by the Enterprise
Package license.