| >> Features and Benefits |
| >>Connectivity |
| IEEE 802.3af Power over Ethernet |
provides up to 15.4 W per port to IEEE 802.3af compliant PoE powered devices such as IP phones, wireless access points, and security cameras |
| Pre-standard PoE support |
detects and provides power to pre-standard PoE devices |
| Gigabit Uplink Connectivity |
two 10/100/1000BASE-T ports and two mini-GBIC ports for Connectivity such as Gigabit (SX, LX, LH, 1000BaseT) and 100Base-FX |
| ProCurve Auto-MDIX |
automatically adjusts for straight-through or crossover cables on all 10/100 ports |
| Jumbo packet support |
supports up to 9,216 byte frame size to improve performance of large data transfers |
| >>Resiliency and high availability |
| IEEE 802.3ad Link Aggregation Protocol (LACP) and ProCurve trunking |
support up to 24 trunks, each with up to 8 links (ports) per trunk |
| IEEE 802.1s Multiple Spanning Tree |
provides high link availability in multiple VLAN environments by allowing multiple spanning trees; provides legacy support for IEEE 802.1d and IEEE 802.1w |
| Optional redundant power supply |
provides uninterrupted power (provided by ProCurve 600 RPS/EPS) |
| >>Layer 2 switching |
| VLAN support and tagging |
support complete IEEE 802.1Q (4,096 VLAN IDs) and 253 VLANs simultaneously |
| GARP VLAN Registration Protocol |
allows automatic learning and dynamic assignment of VLANs |
| >>Layer 3 routing |
| Basic IP routing |
enables automatic routing to the connected VLANs and up to 16 static routes—including one default route-in IP networks |
| >>Security |
| Multiple user authentication methods |
IEEE 802.1X: industry-standard way of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server |
|
Web-based authentication: similar to IEEE 802.1X, provides a browser-based environment to authenticate clients that do not support the IEEE 802.1X supplicant |
|
MAC-based authentication: client is authenticated with the RADIUS server based on client's MAC address |
| Authentication flexibility |
Multiple IEEE 802.1X users per port: provides authentication of up to 8 IEEE 802.1X users per port; prevents user "piggybacking" on another user's IEEE 802.1X authentication |
|
Concurrent IEEE 802.1X and Web or MAC authentication schemes per port: switch port will accept any of IEEE 802.1X and either Web or MAC authentications |
| ICMP throttling |
defeats ICMP denial-of-service attacks by throttling of ICMP traffic on the switch |
| Access control lists (ACLs) |
provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number |
| Identity-driven ACL |
enables implementation of a highly granular and flexible access security policy specific to each authenticated network user |
| Port security |
allows access only to specified MAC addresses, which can be learned or specified by the administrator |
| MAC address lockout |
prevents configured particular MAC addresses from connecting to the network |
| Source-port filtering |
allows only specified ports to communicate with each other |
| TACACS+ |
eases switch management security administration by using a password authentication server |
| Secure Shell (SSHv2) |
encrypts all transmitted data for secure, remote command-line interface (CLI) access over IP networks |
| Port monitoring for network threats |
Provides sampled port traffic using sFlow technology to the ProCurve Network Immunity Manager application for Network Behavior Anomaly Detection (NBAD) analysis to detect threats and mitigate threats at the port where the threat originated |
| Secure Sockets Layer (SSL) |
encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch |
| Secure FTP |
allows secure file transfer to/from the switch; protects against unwanted file downloads or unauthorized copying of switch configuration file |
| Switch management logon security |
can require either RADIUS or TACACS+ authentication for secure switch CLI logon |
| Dynamic IP lockdown |
works with DHCP protection to block traffic from unauthorized host, preventing IP source address spoofing |
| Dynamic ARP protection |
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data |
| DHCP protection |
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks |
| BPDU port protection |
blocks Bridge Protocol Data Units (BPDU) on ports that do not require BPDUs, preventing forged BPDU attacks |
| STP Root Guard |
protects root bridge from malicious attack or configuration mistakes |
| >>Convergence |
| IEEE 802.1AB Link Layer Discovery Protocol (LLDP) |
automated device discovery protocol for easy mapping by network management applicationsLLDP-MED (Media Endpoint Discovery): a standard extension of LLDP that stores values forparameters such as QoS and VLAN to automatically configure network devices such as IP phones |
| IP multicast snooping and data-driven IGMP |
automatically prevents flooding of IP multicast traffic |
| >>Quality of Service (QoS) |
| Class of Service (CoS): |
sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), L3 protocol, TCP/UDP port number, source port, and DiffServ |
| Layer 4 prioritization |
enables prioritization based on TCP/UDP port numbers |
| Traffic prioritization (IEEE 802.1p) |
allows real-time traffic classification into 8 priority levels mapped to 4 queues |
| >>Manageability |
| RMON, XRMON, and sFlow |
provide advanced monitoring and reporting capabilities for statistics, history, alarms, and events |
| Friendly port names |
allow assignment of descriptive names to ports |
| Uni-Directional Link Detection (UDLD) |
monitors a link between two switches and blocks the ports on both ends of the link if the link goes down at any point between the two devices |
| Stacking capability |
single IP address management for a virtual stack of up to 16 switches, including the ProCurve 2500 series, 2510 series, 2600 series, 2610 series, 2810 series, 2900 series, 3400cl series, 3500l series, 4200vl series, 6108, 6200yl-24G-mGBIC, and 6400cl series |
| Find-Fix-and-Inform |
finds and fixes common network problems automatically, then informs administrator |
| Troubleshooting |
ingress/egress port monitoring enables network problem-solving |
| Multiple configuration files |
allow multiple config files to be stored to flash image |
| Dual flash images |
provides independent primary and secondary OS files for backup while upgrading |
| Software updates |
free downloads from the Web Monitor and diagnostics |
| Port mirroring |
enables traffic on a port to be simultaneously sent to a network analyzer for monitoring Industry-leading warranty |
| Lifetime warranty |
for as long as you own the product, with next-business-day advance replacement (available in most countries) |
