S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
In addition, Fabric Manager information has been removed from the Cisco MDS NX-OS Release Notes
(this document) and placed into standalone Fabric Manager Release Notes that support both Cisco MDS
9000 Family switches and Cisco Nexus 5000 Series switches. Cisco Fabric Manager Release Notes are
available from the following website:
http://www.cisco.com/en/US/partner/products/ps10495/prod_release_notes_list.html
Note
These release notes are specific to this release. For the complete list of NX-OS product documentation,
see the
Cisco MDS 9000 NX-OS Release 4.2(1a) New Features
Cisco MDS 9000 NX-OS Release 4.2(1a) is a software release that includes new features, enhancements,
and bug fixes. It supports the new MDS 9000 Family 16-port Storage Services Node (SSN-16) that offers
licensed SAN extension features.
This release includes the following major features:
•
•
•
•
•
•
•
•
NX-OS Feature Descriptions
This section includes descriptions of the major new features of MDS NX-OS Release 4.2(1a) and
indicates where the feature is documented.
Cisco TrustSec Fibre Channel Link Encryption
Cisco TrustSec Fibre Channel Link Encryption addresses customer needs to ensure data integrity and
privacy. Cisco TrustSec FC Link Encryption is an extension of the Fibre Channel-Security Protocol
(FC-SP) feature and uses the existing FC-SP architecture. Starting with Cisco MDS NX-OS Release
4.2(1a), Fibre Channel data that is passed between E ports of 8-Gbps modules can be encrypted. The
encryption algorithm is a 128-bit Advanced Encryption Standard (AES) and enables either AES-Galois
Counter Mode (GCM) or AES-Galois Message Authentication Code (GMAC) for an interface.
AES-GCM provides encryption and authentication of the frames and AES-GMAC provides only the
authentication of the frames that are being passed between two EP ports. Encryption is done at line rate
by encapsulating frames at egress with encryption using the GCM mode of AES 128-bit encryption. At
ingress, frames are decrypted and authenticated for an integrity check.
Cisco TrustSec Fibre Channel Link Encryption is enabled on a per-chassis basis by the Enterprise
Package license.
OL-19964-02
"Related Documentation"
Cisco TrustSec Fibre Channel Link Encryption
FICON XRC Acceleration
I/O Accelerator (IOA)
Enhanced FC ID description
SAN Extension support on the SSN-16
SME Tape on the SSN-16
Port Group Monitoring
X2 DWDM and X2 GE support on the MDS 9134 switch
Cisco MDS 9000 Family Release Notes for Cisco MDS NX-OS Release 4.2(1a)
New Features in Cisco MDS NX-OS Release 4.2(1a)
section.
29
Halaman Cetak