Arista 7050X3 MACsec Series

The Arista 7050X3 MACsec Series combines the 100G leaf switching density of the standard 7050X3 platform with hardware IEEE 802.1AE MACsec encryption on every QSFP28 100G port, operating at the full 6.4 Tbps line rate without any throughput reduction. Three 1RU models are available: the 7050CX3M-32S (32x QSFP28 100G + 2x SFP+), 7050SX3-48YC8 (48x SFP28 25G + 8x QSFP28 100G), and 7050TX3-48C8 (48x RJ45 10GBase-T + 8x QSFP28 100G), providing MACsec across optical 100G, 25G server-facing, and copper 10GBase-T configurations in a single switch family.

Encryption key management follows the IEEE 802.1X MACsec Key Agreement (MKA) protocol, enabling automated per-session key rotation without manual key provisioning or external key management infrastructure. Both AES-128-GCM and AES-256-GCM cipher suites are supported. Deployment scenarios include encrypted leaf-to-spine uplinks in regulated data centres (PCI DSS, HIPAA), encrypted campus aggregation links where traffic traverses untrusted physical plant, and encrypted DCI paths where the dark-fibre or carrier Ethernet route is not under the operator's physical control.