4RU modular switch-router at 14.4 Tbps with 512-way ECMP, MACsec, IPsec, and 400G ZR/ZR+ coherent optics for large-scale data center and service provider networks.
The Arista 7280R3A Modular Series is the MACsec-capable modular variant within the 7280R3 switch-router family, scaling the encryption capability of the fixed 7280R3-K models into a multi-slot chassis architecture. Available in 4-slot (7280R3A-4) and 8-slot (7280R3A-8) configurations with the 7280R3A-LC-36CQ line card (36x QSFP28 100G with MACsec), the platform delivers up to 230.4 Tbps of encrypted switching capacity with the full 7280R3 routing feature set: MPLS, Segment Routing, EVPN-VXLAN, BGP-LU, and a routing table sized for 512K IPv4 host routes, 256K IPv4 LPM routes, and 256K IPv6 LPM routes.
The modular chassis architecture allows selective per-slot encryption deployment: line-card slots facing encrypted inter-site or inter-rack links can be populated with MACsec-capable 7280R3A line cards while other slots use non-MACsec variants, avoiding the cost of encrypting internal links that do not traverse untrusted physical plant. Dual hot-swappable supervisors maintain control-plane state through failover, and the same MKA (MACsec Key Agreement) automated key-management framework as the fixed 7280R3-K models handles per-port key negotiation and rotation without manual intervention.
Populating only the line-card slots facing external or untrusted links with MACsec-capable 7280R3A cards avoids encrypting all internal switch-to-switch links within the same facility. This selective model reduces the overall cost of encryption deployment relative to fixed-platform designs where every port on the switch carries the MACsec hardware regardless of whether that port requires encryption.
Starting with a 4-slot chassis and expanding to 8 slots as port count requirements grow provides a capital-efficient path for organisations that are expanding encrypted inter-site connectivity incrementally. The 4-slot chassis uses the same supervisor module, line cards, and EOS version as the 8-slot, so the upgrade path requires only the new chassis and additional power modules, not new licensing, software qualification, or line-card replacement.
The 7280R3A Modular retains the complete 7280R3 routing capability (MPLS, SR-TE, EVPN-VXLAN, BGP-LU, IS-IS, OSPF, 512K IPv4 host routes, 256K IPv4/IPv6 LPM routes) in the same encrypted chassis, without any feature reduction relative to the non-encrypted 7280R3. Organisations do not need to choose between full routing capability and MACsec; the platform provides both simultaneously from a shared hardware forwarding pipeline.
IEEE 802.1X MACsec Key Agreement handles session establishment, key negotiation, and periodic key rotation automatically between MKA-capable peers. Compliance requirements that mandate short key lifetimes (for example, 24-hour or 1-hour key rotation periods) are met through EOS configuration without manual re-keying operations or key-distribution infrastructure beyond the standard BGP/IGP control plane already present in the network.
Full specifications for Arista 7280R3A Modular Series
Download product documentation and resources
Explore other configurations and models that might suit your needs.
Recommended
#7020R4-48Y-8QC
Recommended
#DCS-7280PR3-24
Recommended
#DCS-7280R4-32PE
Our team of experts is ready to help you find the perfect solution for your business needs. Get personalized advice and competitive quotes.
We're here to help with any questions