Platform-Specific Feature Set Guide
Arista Networks
August 2021
Introduction
This guide provides the list of Arista products which provide ZTP platform support and platform support for hardware authentication.
- ZTP Platform support for CloudVision as-a-Service
- Platform support for Hardware Authentication
Note: This document is intended to be a reference of feature support for certain platform-specific capabilities and is organized on a feature-by-feature basis. For broader feature set support on a particular platform, please consult the appropriate product data sheet.
1.1 ZTP Platform support for CloudVision as-a-Service
Arista Zero Touch Provisioning (ZTP) as-a-Service is a feature that allows customers to bootstrap and provision EOS devices with the CloudVision Service. ZTP as-a-Service uses an "Enrollment Token" to enable the functionality. Arista supports two token-based models: User-Generated Token and Embedded Token.
All Arista switching platforms support the User-Generated Token. The Embedded Token functionality is only available on a specific subset of Arista switching platforms. All new platform SKUs introduced since October 2020 support the Embedded Token functionality, with the specific list of supported platform SKUs listed below:
Table 1: ZTP Platform support for CloudVision as-a-Service
SKU |
---|
DCS-7280SR3-48YC8 |
DCS-7280SR3K-48YC8 |
DCS-7280CR3MK-32D4S |
CCS-720XP-96ZC2 |
(CCS-758-CH)* |
(CCS-755-CH)* |
* Chassis SKUs
1.2 Platform support for Hardware Authentication
Hardware Authentication is provided through a Trusted Platform Module (TPM) chip embedded into new Arista platforms. TPM chip provides hardware-based authentication and tamper detection.
Note: ZTP as-a-Service uses an Enrollment Token; therefore, Hardware Authentication is not required for ZTP as-a-Service.
The following listed Arista switch products (DCS and CCS-based SKUs) support Hardware Authentication.
Table 2: Platform support for Hardware Authentication
SKU |
---|
DCS-7280SR3-48YC8 |
DCS-7280SR3K-48YC8 |
CCS-720XP-96ZC2 |
DCS-7050TX3-48C8 |
DCS-7050CX3M-32S |
DCS-7280PR3-24 |
DCS-7280PR3K-24 |
DCS-7280DR3-24 |
DCS-7280DR3K-24 |
DCS-7280CR3K-32D4 |
DCS-7050SX3-48YC8 |
DCS-7050SX3-48C8 |
DCS-7050SX3-96YC8 |
DCS-7280CR3-32P4 |
DCS-7280CR3K-32P4 |
DCS-7280CR3-32D4 |
DCS-7280CR3MK-32D4S |
DCS-7280CR3-96 |
DCS-7280CR3K-96 |
1.3 Platform support for Secure Boot
Secure Boot is a feature of Arista hardware that enables an operator to only allow signed EOS images to boot on that hardware.
Secure Boot leverages a Trusted Platform Module (TPM) chip embedded into recent Arista platforms. The following listed Arista switch products (DCS and CCS-based SKUs) support Hardware Authentication.
Table 3: Product Families with Support for Secure Boot
Product Family | Exceptions |
---|---|
CCS-720 Series |
|
CCS-750 Series Supervisors |
|
DCS-7050X3 Series | |
DCS-7280R3 Series | |
DCS-7800R3 Supervisors |
Table 4: Product Families with No Support for Secure Boot
Product Family | Product Family |
---|---|
DCS-7000 Series (e.g. 7048T) | DCS-7160 Series |
DCS-7010 Series | DCS-7250X Series |
DCS-7020 Series | DCS-7260X Series |
DCS-7050 Series | DCS-7260X3 Series |
DCS-7050X Series | DCS-7280E Series |
DCS-7050X2-Series | DCS-7280R/RA Series |
DCS-7060X Series | DCS-7280R2/R2A Series |
DCS-7060X2 Series | DCS-7300X, 7300X3, 7320X Supervisors |
DCS-7060X4 Series | DCS-7368X4 Supervisor |
DCS-7100 Series (e.g. 7124S, 7120T) | DCS-7500 Supervisors |
DCS-7150 Series |