Arista DCS-7280CR3MK-32P4S-F | 7280R3 32-Port 100G Switch, 4x 400G OSFP, MACsec

Q: What encryption capabilities does the DCS-7280CR3MK-32P4S-F support?
A: This model supports Arista TunnelSec technology for line-rate encryption including MACsec (IEEE 802.1AE) at Layer 2, IPsec (RFC 4303) at Layer 3, and VXLANsec for overlay networks, all using AES-256-GCM cipher. This enables secure point-to-point links or encrypted tunnels across third-party infrastructure for DCI and WAN applications.

Q: Can the 400GbE OSFP ports operate at lower speeds?
A: Yes, the 4x OSFP ports support flexible 400G, 200G, and 100G operation. They can also interoperate with QSFP-DD and standard QSFP modules using appropriate adapters or direct-attach cables, providing deployment flexibility for mixed-speed environments.

Q: What routing scale does the 'large route' designation provide?
A: The 'MK' suffix indicates MACsec with large route capability, supporting over 256K IPv4/IPv6 routes with FlexRoute technology. This makes it suitable for internet peering, multi-tenant cloud environments, service provider edge deployments, and large-scale MPLS/EVPN networks.

Q: Is this switch suitable for spine or leaf deployments?
A: Yes, the DCS-7280CR3MK-32P4S-F is ideal for both spine and leaf roles in modern data center fabrics. The 32x 100G ports serve leaf connections while the 4x 400G OSFP uplinks provide high-bandwidth spine connectivity or DCI links. The deep buffer and VOQ architecture ensure lossless forwarding under traffic congestion.

Q: What power supply configuration does the -F model include?
A: The -F suffix denotes front-to-rear airflow with dual redundant hot-swappable AC power supplies included. For rear-to-front airflow, use the -R model. The configurable model (suffix #) allows custom fan and PSU configurations for mixed airflow data center environments.