The Brocade Encryption Switch - Brocade Communications Systems Brocade 8/12c Administrator's Manual

1

The Brocade Encryption Switch

The Brocade Encryption Switch

The Brocade Encryption Switch (BES) is a high performance 32 port auto-sensing 8 Gbps Fibre
Channel switch with data cryptographic (encryption/decryption) and data compression capabilities.
The switch is a network-based solution that secures data-at-rest for heterogeneous tape drives,
disk array LUNs, and virtual tape libraries by encrypting the data using Advanced Encryption
Standard (AES) 256-bit algorithms. Encryption and decryption engines provide in-line encryption
services with up to 96 Gbps throughput for disk I/O (mix of ciphertext and cleartext traffic) and up
to 48 Gbps throughput for tape I/O (mix of ciphertext and cleartext traffic). Refer to
blade"
In addition to its 32 Fibre Channel ports, the switch has one RJ45 Gigabit Ethernet (GE)
management port, two RJ45 GE ports for clustering interconnection and re-key synchronization,
one RJ45 Serial console port, and one USB port for serviceability, error logging, and firmware
upgrades
4
on page 5 for information about license requirements for 48 Gbps and 96 Gbps throughput.
(Figure 1) .
FIGURE 1
Brocade Encryption Switch
1 Power LED.
2 Status LED.
3 RJ45 gigabit Ethernet ports (labeled eth0 and eth1) for clustering and centralized
management of multiple encryption switches through a group leader.
4
Smart card reader.
5
RJ45 gigabit Ethernet port for the management interface. This interface is used for the secure
connection to the key vault location and to the Data Center Fabric Manager (DCFM).
6 RJ45 serial console port.
7 USB port for firmware upgrades and other support services.
8 Fibre Channel ports (0-31) - 1, 2, 4, or 8 Gbps auto-sensing F, FL, E, EX, or M ports to connect
host servers, SAN disks, SAN tapes, edge switches, or core switches.
"The FS8-18
Fabric OS Encryption Administrator's Guide
53-1002159-03