HP 5120 EI JG236A#ABA 5120-24G-PoE+ EI Switch 10/100/1000Mbps 24 x RJ45 + 4 x SFP 16K MAC Address Table 2MB Buffer Memory

The HP 5120 EI Switch Series is comprised of Gigabit Ethernet switches that support static Layer 3 routing, diversified services, and IPv6 forwarding, as well as provide up to four 10-Gigabit Ethernet (10GbE) extended interfaces. Unique Intelligent Resilient Framework (IRF) technology creates a virtual fabric by managing several switches as one logical device, which increases network resilience, performance, and availability, while reducing operational complexity.

These switches provide Gigabit Ethernet access and can be used at the edge of a network or to connect server clusters in data centers. High scalability provides investment protection with two expansion slots, each of which can support two-port 10GbE expansion modules. High availability, simplified management, and comprehensive security control policies are among the key features that distinguish this series.

Quality of Service (QoS)

• Broadcast Control – Allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic
• Advanced Classifier-Based QoS – Classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority level and rate limit to selected traffic on a port, VLAN, or whole switch
• Powerful QoS Feature – Supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), and SP+WRR
• Traffic Policing – Supports Committed Access Rate (CAR) and line rate

Management

• Friendly Port Names – Allows assignment of descriptive names to ports
• Remote Configuration and Management – Enables configuration and management through a secure Web browser or a CLI located on a remote device
• Manager and Operator Privilege Levels – Provides read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
• Command Authorization – Leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit trail
• Secure Web GUI – Provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
• Multiple Configuration Files – Stores easily to the flash image
• Complete Session Logging – Provides detailed information for problem identification and resolution
• SNMPv1, v2c, and v3 – Facilitate centralized discovery, monitoring, and secure management of networking devices
• Remote Monitoring (RMON) – Uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private alarm extension group
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) – Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network management applications
• sFlow (RFC 3176) – Provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes
• Management VLAN – Segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
• Remote Intelligent Mirroring – Mirrors ingress/egress ACL-selected traffic from a switch port or VLAN to a local or remote switch port anywhere on the network
• Device Link Detection Protocol (DLDP) – Monitors a cable between two switches and shuts down the ports on both ends if the cable is broken, which prevents network problems such as loops
• IPv6 Management – Provides future-proof networking because the switch is capable of being managed whether the attached network is running IPv4 or IPv6; supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, syslogv6, FTPv6, SNMPv6, DHCPv6, and RADIUS for IPv6
• Troubleshooting – Ingress and egress port monitoring enables network problem-solving; virtual cable tests provide visibility into cable problems

Connectivity

• Auto-MDIX – Automatically adjusts for straight-through or crossover cables on all 10/100/1000 ports
• Flow Control – Provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations
• Jumbo Packet Support – Supports up to 9216-byte frame size to improve the performance of large data transfers
• High-Density Connectivity – Provides up to 48 fixed 10/100/1000BASE-T ports in a Layer 2/Layer 3 switch
• Optional 10GbE Ports – Deliver, through the use of optional modules, additional 10GbE connections, which are available for uplinks or high-bandwidth server connections; flexibly support copper, XFP, SFP+, or CX4 local connections
• IEEE 802.3at Power over Ethernet (PoE+) Support – Simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying local power at each access point location
• Ethernet Operations, Administration and Maintenance (OAM) – Detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the link between two devices
• High-Bandwidth CX4 Local Stacking – Achieves 12Gbps per connection when using local CX4 stacking, allowing for up to 96Gbps total stacking bandwidth (full duplex) in a resilient stacking configuration

Performance

• Nonblocking Architecture – Up to 192Gbps nonblocking switching fabric provides wirespeed switching with up to 143 million pps throughput
• Hardware-Based Wirespeed Access Control Lists (ACLs) – Help provide high levels of security and ease of administration without impacting network performance with a feature-rich TCAM-based ACL implementation

Resiliency and High Availability

• Separate Data and Control Paths – Separates control from services and keeps service processing isolated; increases security and performance
• External Redundant Power Supply – Provides high reliability
• Smart Link – Allows 50ms failover between links
• Spanning Tree/MSTP, RSTP – Provides redundant links while preventing network loops
• Rapid Ring Protection Protocol (RRPP) – Connects multiple switches in a high-performance ring using standard Ethernet technology; traffic can be rerouted around the ring in less than 50ms, reducing the impact on traffic and applications
• Intelligent Resilient Framework (IRF) – Creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation

Layer 2 Switching

• 16K MAC Address Table – Provides access to many Layer 2 devices
• VLAN Support and Tagging – Supports IEEE 802.1Q with 4,094 simultaneous VLAN IDs
• GARP VLAN Registration Protocol – Allows automatic learning and dynamic assignment of VLANs
• IEEE 802.1ad QinQ and Selective QinQ – Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network
• 10GbE Port Aggregation – Allows grouping of ports to increase overall data throughput to a remote device
• Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) Protocol Snooping – Controls and manages the flooding of multicast packets in a Layer 2 network
• Per-VLAN Spanning Tree Plus (PVST+) – Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in network environments with multiple VLANs

Layer 3 Services

• Address Resolution Protocol (ARP) – Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network
• Dynamic Host Configuration Protocol (DHCP) – Simplifies the management of large IP networks; supports client; DHCP Relay enables DHCP operation across subnets
• Loopback Interface Address – Defines an address that can always be reachable, improving diagnostic capability
• User Datagram Protocol (UDP) Helper Function – Allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP
• Route Maps – Provide more control during route redistribution; allow filtering and altering of route metrics

Layer 3 Routing

• Static IP Routing – Provides manually configured routing for both IPv4 and IPv6 networks

Security

• Access Control Lists (ACLs) – Provides IP Layer 2 to Layer 4 traffic filtering; supports global ACL, VLAN ACL, port ACL, and IPv6 ACL
• IEEE 802.1X – Industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server
• MAC-Based Authentication – Client is authenticated with the RADIUS server based on the client's MAC address
• Identity-Driven Security and Access Control –
  • Per-User ACLs – Permits or denies user access to specific network resources based on user identity and time of day, allowing multiple types of users on the same network to access specific network services without risking network security or providing unauthorized access to sensitive data
  • Automatic VLAN Assignment – Automatically assigns users to the appropriate VLAN based on their identities
• Secure Management Access – Delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
• Secure FTP – Allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file
• Guest VLAN – Provides a browser-based environment to authenticated clients that is similar to IEEE 802.1X
• Endpoint Admission Defense (EAD) – Provides security policies to users accessing a network
• Port Security – Allows access only to specified MAC addresses, which can be learned or specified by the administrator
• Port Isolation – Secures and adds privacy, and prevents malicious attackers from obtaining user information
• STP BPDU Port Protection – Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
• STP Root Guard – Protects the root bridge from malicious attacks or configuration mistakes
• DHCP Protection – Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• IP Source Guard – Helps prevent IP spoofing attacks
• Dynamic ARP Protection – Blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
• RADIUS/HWTACACS – Eases switch management security administration by using a password authentication server

Convergence

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) – Facilitates easy mapping using network management applications with LLDP automated device discovery protocol
• LLDP-MED – A standard extension that automatically configures network devices, including LLDP-capable IP phones
• LLDP-CDP Compatibility – Receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation
• IEEE 802.3af Power over Ethernet – Provides up to 15.4W per port to PoE-powered devices such as IP phones, wireless access points, and video cameras
• PoE Allocations – Supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power for more efficient energy savings
• Voice VLAN – Automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance
• IP Multicast Snooping (Data-Driven IGMP) – Prevents flooding of IP multicast traffic

Device Support

• Cisco Prestandard PoE Support – Detects and provides power to Cisco's prestandard PoE devices such as wireless LAN access points and IP phones

Additional Information

• Green IT and Power – Improves energy efficiency through the use of the latest advances in silicon development; shuts off unused ports and utilizes variable-speed fans, reducing energy costs
• Green Initiative Support – Provides support for RoHS and WEEE regulations

Warranty and Support

• Lifetime Warranty 2.0 – Advance hardware replacement for as long as you own the product with next-business-day delivery (available in most countries)
• Electronic and Telephone Support (For Lifetime Warranty 2.0) – Limited 24/7 telephone support is available from HP for the first Three years; limited electronic and business hours telephone support is available from HP for the entire warranty period