 
|
ConnectX-6 Lx OCP 3.0 Ethernet Adapter MCX623436AN-CDAB 25/50GbE PCIe 4.0 x8, Crypto Root-of-Trust
Product Details:
| Brand Name: | Mellanox |
| Model Number: | MCX623436AN-CDAB |
| Document: | connectx-6-lx-en-card.pdf |
Payment & Shipping Terms:
| Minimum Order Quantity: | 1pcs |
|---|---|
| Price: | Negotiate |
| Packaging Details: | outer box |
| Delivery Time: | Based on inventory |
| Payment Terms: | T/T |
| Supply Ability: | Supply by project/batch |
|
Detail Information |
|||
| Model NO.: | MCX623436AN-CDAB | Ports: | Dual |
|---|---|---|---|
| Technology: | Eth | Interface Type: | Osfp56 |
| Specification: | 16.7cm X 6.9cm | Origin: | India / Israel / China |
| Transmission Rate: | 100gbe | Host Interface: | Gen4 X16 |
| Highlight: | ConnectX-6 Lx Ethernet Adapter PCIe 4.0,OCP 3.0 Network Card 25/50GbE,Nvidia Ethernet Adapter with Crypto |
||
Product Description
NVIDIA ConnectX-6 Lx MCX623436AN-CDAB SmartNIC
25/50GbE Ethernet Adapter · PCIe Gen4 x8 · Dual-Port 25G or Single-Port 50G
Scalable, secure, and accelerated networking for modern enterprise data centers. RoCE, IPsec inline crypto, SDN offload, and hardware root-of-trust for end-to-end infrastructure protection.
Product Overview
The NVIDIA ConnectX-6 Lx MCX623436AN-CDAB is a 25/50Gb/s Ethernet SmartNIC designed for cloud and enterprise data centers. It delivers up to 50Gb/s total bandwidth with flexible port configurations: dual-port 10/25GbE or single-port 50GbE. Built on PCIe Gen4 x8 host interface, this adapter offers advanced acceleration for SDN, RoCE, and security workloads. With ASAP² offload, connection tracking, and inline IPsec encryption, the ConnectX-6 Lx reduces CPU overhead while enhancing performance and scalability. It is available in various form factors including OCP 3.0 SFF, making it ideal for high-density server deployments.
Key Features
- Up to 50Gb/s total bandwidth (2*25G or 1*50G)
- PCIe Gen4 x8 (compatible with Gen3)
- Line rate 75Mpps message rate
- Advanced RoCE with Zero-Touch RoCE (ZTR)
- ASAP² SDN & VNF acceleration
- Inline IPsec encryption/decryption (AES-XTS 256/512-bit)
- Overlay tunneling: VXLAN, GENEVE, NVGRE
- Connection tracking (L4 firewall)
- Hardware root-of-trust, secure boot & firmware update
- SR-IOV, VirtIO acceleration
Technology & Acceleration
ASAP² (Accelerated Switch and Packet Processing)
Offloads SDN data plane to the SmartNIC, accelerating performance and freeing CPU resources in virtualized/containerized environments. Supports VXLAN, GENEVE, NVGRE, MPLS, and GTP encapsulations.
Zero-Touch RoCE (ZTR)
Simplifies RDMA over Converged Ethernet deployments without requiring PFC or ECN configuration, enabling seamless RoCE payloads on existing networks.
Inline IPsec Crypto
Provides hardware-accelerated encryption/decryption for IPsec traffic, with AES-XTS 256/512-bit keys, ensuring data privacy without performance compromise.
Hardware Root-of-Trust
Ensures supply chain security via secure boot, authenticated firmware updates (RSA), and device-unique key cloning protection.
Typical Deployments
- Enterprise Data Centers: High-performance 25G/50G server connectivity with advanced security and SDN offload
- Cloud & NFV: Accelerated virtual networking, VNF offload, and connection tracking for firewalls
- AI/ML Clusters: RoCE-based low-latency storage and compute fabrics
- Telecom & Edge: 5G UPF, MEC, and carrier-grade NFV infrastructure
- Security Appliances: IPsec offload for VPN gateways and encrypted interconnects
Specifications
| Parameter | Details |
|---|---|
| Product | NVIDIA ConnectX-6 Lx MCX623436AN-CDAB |
| Port configuration | Dual-port 10/25GbE or single-port 50GbE (SFP28/QSFP28) |
| Total bandwidth | Up to 50Gb/s |
| Host interface | PCIe Gen4 x8 (backward compatible with Gen3) |
| Message rate | 75 Mpps line rate |
| RoCE | RoCEv2, Zero-Touch RoCE (ZTR) |
| Security | Inline IPsec (AES-XTS 256/512-bit), hardware root-of-trust, secure boot, signed firmware |
| SDN offload | ASAP² (VXLAN, GENEVE, NVGRE, MPLS, GTP, connection tracking) |
| Virtualization | SR-IOV, VirtIO acceleration |
| Management | NC-SI, MCTP over SMBus/PCIe, PLDM (DSP0248, DSP0267) |
| Remote boot | iSCSI, PXE, UEFI (x86/ARM) |
| Form factor | OCP 3.0 SFF (also available in PCIe LP) |
| Operating temperature | 0°C to 55°C (typical, depending on airflow) |
| Power consumption | Please confirm before ordering (varies by configuration) |
Note: Some parameters depend on system configuration. Please confirm with your sales representative.
Ordering Information & Variants
| Part Number | Description | Ports | Form Factor |
|---|---|---|---|
| MCX623436AN-CDAB | ConnectX-6 Lx, 25/50GbE, dual-port SFP28, PCIe Gen4 x8, OCP 3.0, Crypto | 2*25G / 1*50G | OCP 3.0 SFF |
| MCX623436AN-ADAB | ConnectX-6 Lx, 25/50GbE, dual-port SFP28, PCIe Gen4 x8, OCP 3.0, Non-Crypto | 2*25G / 1*50G | OCP 3.0 SFF |
| MCX623436AN-CDAI | ConnectX-6 Lx, 25/50GbE, dual-port SFP28, PCIe Gen4 x8, PCIe LP, Crypto | 2*25G / 1*50G | PCIe Low-Profile |
| MCX623436AN-ADAI | ConnectX-6 Lx, 25/50GbE, dual-port SFP28, PCIe Gen4 x8, PCIe LP, Non-Crypto | 2*25G / 1*50G | PCIe Low-Profile |
For other part numbers and configurations, contact NVIDIA sales or visit the official ConnectX-6 Lx user manuals.
Advantages
Cost-effective 25G/50G upgrade: Delivers next-gen performance with PCIe Gen4 and flexible port speeds.
Reduced CPU overhead: Offloads SDN, security, and storage (RoCE) processing to hardware.
Simplified RoCE deployment: Zero-Touch RoCE eliminates complex PFC/ECN tuning.
Built-in security: IPsec crypto and hardware root-of-trust protect data and firmware integrity.
Future-proof: Supports overlay tunneling, connection tracking, and programmable parser.
Ecosystem ready: Works with leading hypervisors, containers, and orchestration platforms.
Frequently Asked Questions (FAQ)
Q: What are the port options on MCX623436AN-CDAB?
A: It supports two ports of 10/25GbE or a single port of 50GbE (using SFP28 or QSFP28 optics/DAC).
Q: Is IPsec acceleration included?
A: Yes, this model includes inline hardware IPsec encryption/decryption (AES-XTS 256/512-bit).
Q: Does it support RoCE?
A: Yes, with advanced RoCEv2 and Zero-Touch RoCE for simplified deployment.
Q: What is ASAP²?
A: Accelerated Switch and Packet Processing – offloads SDN data plane, overlay tunnels, and connection tracking.
Q: What form factor is this card?
A: OCP 3.0 Small Form Factor (SFF). Also available in PCIe Low-Profile variants.
Precautions
- Ensure adequate airflow and cooling in the server chassis; operating temperature depends on system environment
- Use compatible SFP28/QSFP28 transceivers or DAC cables for optimal signal integrity
- Verify PCIe slot supports Gen4 x8 (or Gen3 x8) and provides sufficient power
- Update firmware only with signed, authenticated images from NVIDIA
- Handle the card with ESD precautions to avoid damage
About Hong Kong Starsurge Group
Hong Kong Starsurge Group Co., Limited is a technology-driven provider of network hardware, IT services, and system integration solutions. Founded in 2008, the company serves customers worldwide with products including network switches, NICs, wireless access points, controllers, cables, and related networking equipment. Backed by an experienced sales and technical team, Starsurge supports industries such as government, healthcare, manufacturing, education, finance, and enterprise. The company also offers IoT solutions, network management systems, custom software development, multilingual support, and global delivery. With a customer-first approach, Starsurge focuses on reliable quality, responsive service, and tailored solutions that help clients build efficient, scalable, and dependable network infrastructure.
Key Facts
- Product: NVIDIA ConnectX-6 Lx MCX623436AN-CDAB
- Type: Ethernet SmartNIC
- Ports: 2*25G / 1*50G (SFP28)
- Host: PCIe Gen4 x8
- Security: IPsec, RoT, secure boot
- RoCE: Zero-Touch RoCE
- Form Factor: OCP 3.0 SFF
Compatibility Matrix
- NVIDIA Spectrum™ switches
- BlueField® DPU platforms
- Standard PCIe Gen4/Gen3 servers
- Linux, Windows Server, VMware ESXi
- SFP28 / QSFP28 optics & DAC
Buyer Checklist
- Confirm port speed (25G or 50G) and optics/DAC type
- Verify PCIe slot (Gen4 x8 recommended)
- Check server cooling and airflow
- Confirm OS and driver support
- Determine if IPsec crypto is required
Want to Know more details about this product