Introducing the brocade encryption switch, In this chapter, Key features – Brocade Encryption Switch Hardware Reference Manual (Supporting Fabric OS v6.1.1_enc) User Manual
Page 15: Chapter 1

Brocade Encryption Switch Hardware Reference Manual
1
53-1001117-02
Chapter
1
Introducing the Brocade Encryption Switch
In this chapter
This chapter introduces the Brocade Encryption Switch and includes these topics.
•
Introducing the Brocade Encryption Switch. . . . . . . . . . . . . . . . . . . . . . . . . . . 1
•
•
•
Introducing the Brocade Encryption Switch
The Brocade Encryption Switch is a high performance 32-port auto-sensing 8 Gbps Fibre Channel
switch with cryptography (encryption/decryption) and data compression capabilities. It is designed
to encrypt data for enterprises to secure their data against theft or unauthorized use, and to
compress tape data for maximum utilization of tape media. The switch is a network-based solution
that secures data-at-rest for heterogeneous tape drives, disk array LUNs, and virtual tape libraries
using IEEE Advanced Encryption Standard (AES) 256-bit algorithms.
In addition to its 32 Fibre Channel ports, the switch has:
•
One RJ45 1000/100/10 Ethernet management port
•
Two RJ45 Gigabit Ethernet (GE) ports for clustering interconnection and re-key, and DEK
synchronization within cluster
•
One RJ45 serial console port, and
•
One USB port for serviceability, error logging, and firmware upgrades.
Deployment of encryption with the switch is non-disruptive. Data can be encrypted without
reconfiguration of the SAN, and provisioning can be implemented without shutting-down
applications. The switch can be configured and managed with the Brocade Data Center Fabric
Manager (DCFM) and CLI management tools, and can be integrated with existing network
infrastructure (FOS and M-EOS).
Key features
The switch has these features.
•
32 front-end 1, 2, 4, or 8 Gbps auto-sensing F, FL, E, EX, or M ports to connect host servers,
SAN disks, SAN tapes, edge switches, or core switches.
•
Encryption and decryption engines to provide in-line crypto services with up to 96 Gbps
throughput for disk I/O and up to 48 Gbps throughput for tape I/O (mix of ciphertext and
cleartext traffic)