Cisco Network Convergence System 5500 Series: 36X100G MACsec Modular Line Cards Data Sheet

NC55-36X100G-S

Product overview

Based on the Cisco Global Cloud Index, digitalization is projected to grow global data center and public/private cloud network traffic more than 25 percent annually, resulting in a threefold increase by 2019. To help network providers meet these challenges, the Cisco^® Network Convergence System 5500 Series is built with features such as extremely high port densities, deep packet buffering, and forwarding hardware optimized for these types of deployments.

The Cisco NCS 5500 Series modular chassis provides a wide variety of combo line cards to address the customer’s need to use flexible interfaces and port densities along with full bandwidth utilization of the forwarding ASIC. The Cisco NCS 5500 Series also offers a cost-effective solution while being able to support over1 million entries Forwarding Information Base (FIB) scale on this base version of the line card. These line cards are capable of advanced packet forwarding, segment routing, programmable network management, and telemetry along with the robust and mature features already present in 64-bit Cisco IOS^® XR Software.

The Cisco NC55-36X100G-S line card (Figure 1) provides 36 ports of 100G with full line rate MACsec capability. All the ports can support 100G and 40G optics as well as 40G to 10G breakout. This line card uses QSFP28/QSFP+ form factor transceivers and can be used in any of the NCS 5500 Series of modular chassis. This card is designed for base scale configuration needs and is supported starting with Cisco IOS XR Software Release 6.1.3.

Features and benefits

MACsec is a Layer 2 IEEE 802.1AE standard for encrypting packets between two MACsec-capable routers. MACsec secures the data on physical media, making it impossible for data to be compromised at higher layers. As a result, MACsec encryption takes priority over any other encryption method for higher layers, such as IPsec and SSL. MACsec provides encryption at Layer 2, which is provided by the Advanced Encryption Standard (AES) algorithm that replaces the DES algorithm. MACsec uses the MACsec Key Agreement protocol (MKA) to exchange session keys, and manage encryption keys.

Advantages of using MACsec encryption

●    Client-oriented mode: MACsec is used in setups where two routers that are peering with each other can alternate as a key server or a key client prior to exchanging keys. The key server generates and maintains the CAK between the two peers.

●    Data integrity check: MACsec uses MKA to generate an Integrity Check Value (ICV) for the frame arriving on the port. If the generated ICV is the same as the ICV in the frame, then the frame is accepted; otherwise, it is dropped.

●    Data encryption: MACsec provides port-level encryption on the line card of the router. This means that the frames sent out of the configured port are encrypted, and frames received on the port are decrypted. MACsec also provides a mechanism with which you can configure whether only encrypted frames or all frames (encrypted and plain) are accepted on the interface.

●    Replay protection: When frames are transmitted through the network, there is a possibility of frames getting out of the ordered sequence. MACsec provides a configurable window that accepts a specified number of out-of-sequence frames.

●    Support for clear traffic: If configured accordingly, data that is not encrypted is allowed to transit through the port.

Cisco IOS XR Software overview

The Cisco NCS 5500 Series is powered by the industry-leading carrier-class 64-bit version of Cisco IOS XR Software designed on operational efficiency, optimized utilization, and service agility (evolved programmable network). Cisco IOS XR Software offers rich features such as iPXE boot, autoprovisioning, native support for third-party application hosting, machine-to-machine interface, telemetry, and flexible software package delivery. 

For a complete list of supported features, refer to Cisco Feature Navigator.

Software requirements

These NCS 5500 Series line cards will be supported on Cisco IOS XR Software Release 6.1.3 or later.

Specifications

Tables 1 through 6 list primary specifications for the Cisco NCS 5500 Series modular chassis.

Table 1.         Features and Benefits of Cisco NCS 5500 Series Line Cards (Cisco IOS XR Software 6.1.3 or Beyond)

Note:    List of supported features is not exhaustive, and some features are supported in later software releases.

Table 2.         Cisco NCS 5500 Series 36-Port 100GE MACsec base line card

Table 3.         Cisco NCS 5500 Series 36-Port 100GE MACsec base line card

Note:    List of supported features is not exhaustive, and some features are supported in later software releases.

Table 4.         Software Feature Support on NCS 5500 modular chassis in Cisco IOS XR Software 6.0.2 release or beyond

Note:    List of supported features is not exhaustive, and some features are supported in later software releases.

Supported transceivers modules

Check the Cisco NCS 5500 Series supported transceivers module matrix.

https://www.cisco.com/c/en/us/support/interfaces-modules/transceiver-modules/products-device-support-tables-list.html

Environment

Table 5 lists environmental properties.

Table 5.         Environmental properties

Regulatory standards compliance

Table 6 provides regulatory standards compliance information.

Table 6.         Regulatory standards compliance: Safety and EMC

Get additional information related to NCS 5500 regulatory compliance and safety standards.

Ordering information

Table 7 provides ordering information.

Table 7.         Ordering Information for NCS5500 Series line cards

For details on the Cisco Network Convergence System 5500 Series Perpetual Software Licenses, refer to this data sheet and details on the flexible consumption model for the NCS 5500 Series are available in the data sheet for the IOS XR Software flexible consumption model.

Warranty

The Cisco NCS 5500 Series has a 1-year limited hardware warranty. The warranty includes hardware replacement with a 10-day turnaround from receipt of a Return Materials Authorization (RMA).

Service and support

Cisco offers a wide range of services to help accelerate your success in deploying and optimizing the Cisco NCS 5500 Series. These innovative Cisco Services offerings are delivered through a unique combination of people, processes, tools, and partners, and they are focused on helping you increase operating efficiency and improve your data center network. Cisco Advanced Services use an architecture-led approach to help you align your data center infrastructure with your business goals and achieve long-term value. Cisco SMARTnet^™ Service helps you resolve mission-critical problems with direct access at any time to Cisco network experts and award-winning resources. With this service, you can take advantage of the Cisco Smart Call Home service, which offers proactive diagnostics and real-time alerts on your Cisco NCS 5500 Series. Spanning the entire network lifecycle, Cisco Services offerings help increase investment protection, optimize network operations, support migration operations, and strengthen your IT expertise.

Cisco Capital

Flexible payment solutions to help you achieve your objectives

Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.

For more information

For more information about the Cisco NCS 5500 Series, visit Cisco Network Convergence System 5500 Series.