The Cisco Nexus 7000 M3-Series modules are powered by Cisco Nexus M3-Series switch-on-a-chip (SoC) application-specific integrated circuit (ASICs). The M3-Series SoC is an innovative ASIC designed by Cisco that provides a power-efficient, flexible, high-performance packet engine, making it an excellent choice for building I/O modules that power the network infrastructure for public and private cloud environments. Each I/O module uses multiple M3-Series ASICs, and each M3-Series ASIC powers a set of 1 and 10 Gigabit Ethernet ports, 40 Gigabit Ethernet ports, or 100 Gigabit Ethernet ports, called port groups.
The Cisco Nexus 7000 M3-Series I/O modules provide enhanced security and scalability capabilities such as these:
- MAC Security (MACsec) at wire rate with 128- and 256-bit encryption on all ports at all speeds, supporting both key agreement protocols (Security Association Protocol [SAP] and MACsec Key Agreement [MKA]) in hardware: This feature provides line-rate data confidentiality and data integrity conforming to the IEEE MAC address security standard (IEEE 802.1AE [MACsec]), enabling customers to secure virtual port-channel (vPC) and Cisco Overlay Transport Virtualization (OTV) data center interconnect links and vPC and Cisco FabricPath links within a data center. It also lets customers securely uplink data centers to either their campus or Multiprotocol Label Switching (MPLS) cores.
- Integrated hardware capability for Cisco TrustSec® security, which enhances security access control lists (SACLs) through hardware support for Cisco metadata headers capable of carrying security-group tags (SGTs): SGTs enable security-group ACLs (SGACLs) to provide hardware-based enforcement of security policies, which eliminates dependency on IP addresses, enhances scalability, and simplifies management.
- High-performance onboard fabric services accelerator (FSA): This feature enables distributed services such as Bidirectional Forwarding Detection (BFD) and Cisco NetFlow to operate at scale with high performance.
- Larger IPv4 and IPv6 forwarding tables and ACL tables and more quality-of-service (QoS) entries: The increased sizes provide greater flexibility for various deployment scenarios.
- Virtual device context (VDC) capability: This feature enables users to partition one I/O module into multiple virtual switches. Each port group powered by one M3-Series ASIC can be part of one VDC.
