HP 5500-24G-4SFP HI Switch with 2 Interface Slots

Features

Software-Defined Networking

• New OpenFlow – Supports OpenFlow 1.0 and 1.3 specifications to enable SDN by allowing separation of the data (packet forwarding) and control (routing decision) paths

Quality of Service (QoS)

• Advanced Classifier-Based QoS – Classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority level and rate limit to selected traffic on a per-port or per-VLAN basis
• Traffic Policing – Supports Committed Access Rate (CAR) and line rate
• Powerful QoS Feature – Creates traffic classes based on access control lists (ACLs), IEEE 802.1p precedence, IP, and DSCP or Type of Service (ToS) precedence; supports filter, redirect, mirror, or remark; supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), weighted fair queuing (WFQ), weighted random early discard (WRED), weighted deficit round robin (WDRR), SP+WDRR, and SP+WFQ
• Storm Restraint – Allows limitation of broadcast, multicast, and unknown unicast traffic rate to reduce unwanted broadcast traffic on the network

Management

• Friendly Port Names – Allows assignment of descriptive names to ports
• sFlow (RFC 3176) – Provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes
• Complete Session Logging – Provides detailed information for problem identification and resolution
• Remote Configuration and Management – Enables configuration and management through a secure Web browser or a CLI located on a remote device
• Manager and Operator Privilege Levels – Provides read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
• Management VLAN – Segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
• Command Authorization – Leverages RADIUS to link a custom list of CLI commands to an individual network administrator's login; an audit trail documents activity
• Secure Web GUI – Provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
• SNMPv1, v2c, and v3 – Facilitate centralized discovery, monitoring, and secure management of networking devices
• Remote Monitoring (RMON) – Uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private alarm extension group
• Remote Intelligent Mirroring – Mirrors ingress/egress ACL-selected traffic from a switch port or VLAN to a local or remote switch port anywhere on the network
• In-Service Software Upgrade (ISSU) – Enables operators to perform upgrades in the shortest possible amount of time with reduced risk to network operations or traffic disruptions

Connectivity

• Auto-MDIX – Provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
• Packet Storm Protection – Protects against broadcast, multicast, or unicast storms with user-defined thresholds
• Ethernet Operations, Administration and Maintenance (OAM) – Detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the link between two devices
• Flow Control – Provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations
• Fixed 10GbE Ports – Provides two fixed SFP+ ports for a 20 GbE connection to the network without the need for additional extension interface modules
• Optional 10GbE Ports – Deliver, through the use of optional modules, additional 10GbE connections, which are available for uplinks or high-bandwidth server connections; flexibly support copper, XFP, SFP+, or CX4 local connections
• Optional 8-Port SFP Module – Adds up to eight additional wirespeed Gigabit Ethernet ports for unprecedented Gigabit density in a single 1U enclosure
• Jumbo Packet Support – Supports up to 12288-byte frame size to improve the performance of large data transfers
• High-Bandwidth CX4 Local Stacking – Achieves 12Gbps per connection when using local CX4 stacking, allowing for up to 96Gbps total stacking bandwidth (full duplex) in a resilient stacking configuration
• IEEE 802.3at Power over Ethernet (PoE+) – Provides up to 30W per port that allows support of the latest PoE+-capable devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments

Performance

• Hardware-Based Wirespeed Access Control Lists (ACLs) – Help provide high levels of security and ease of administration without impacting network performance with a feature-rich TCAM-based ACL implementation
• Nonblocking Architecture – Delivers up to 224Gbps of wire-speed switching with a nonblocking switching fabric and up to 167 million pps throughput

Resiliency and High Availability

• Separate Data and Control Paths – Separates control from services and keeps service processing isolated; increases security and performance
• Device Link Detection Protocol (DLDP) – Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based networks
• Intelligent Resilient Framework (IRF) – Creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation
• Rapid Ring Protection Protocol (RRPP) – Connects multiple switches in a high-performance ring using standard Ethernet technology; traffic can be rerouted around the ring in less than 50ms, reducing the impact on traffic and applications
• Smart Link – Allows 50ms failover between links
• Virtual Router Redundancy Protocol (VRRP) – allows groups of two routers to dynamically back each other up to create highly available routed environments
• IRF Capability – Provides single IP address management for a resilient virtual switching fabric of up to nine switches

Manageability

• Dual Flash Images – Provides independent primary and secondary operating system files for backup while upgrading
• Multiple Configuration Files – Allow multiple configuration files to be stored to a flash image
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) – Facilitates easy mapping using network management applications with LLDP automated device discovery protocol
• Troubleshooting – Allows ingress and egress port monitoring, enabling network problem solving; virtual cable tests provide visibility into cable problems
• IPv6 Management – Future-proofs networking, as the switch is capable of being managed whether the attached network is running IPv4 or IPv6; supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, and ARPv6

Layer 2 Switching

• GARP VLAN Registration Protocol – Allows automatic learning and dynamic assignment of VLANs
• IP Multicast Snooping and Data-Driven IGMP – Automatically prevents flooding of IP multicast traffic
• Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) Protocol Snooping – Controls and manages the flooding of multicast packets in a Layer 2 network
• 32K MAC Addresses – Provide access to many Layer 2 devices
• IEEE 802.1ad QinQ and Selective QinQ – Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network
• 10GbE Port Aggregation – Allows grouping of ports to increase overall data throughput to a remote device
• Spanning Tree/MSTP, RSTP, and STP Root Guard – Prevent network loops
• 32 MSTP Instances – Allow multiple configurations of STP per VLAN group

Layer 3 Services

• Loopback Interface Address – Defines an address in Routing Information Protocol (RIP) and Open Standard Path First (OSPF), improving diagnostic capability
• Address Resolution Protocol (ARP) – Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network
• Dynamic Host Configuration Protocol (DHCP) – Simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across subnets
• User Datagram Protocol (UDP) Helper Function – Allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP

Layer 3 Routing

• IPv4 Routing Protocols – Support static routes, RIP, OSPF, ISIS, and BGP
• IPv6 Routing Protocols – Provide routing of IPv6 at wire speed; support static routes, RIPng, OSPFv3, IS-ISv6, and BGP4+ for IPv6
• PIM-SSM, PIM-DM, and PIM-SM (for IPv4 and IPv6) – Support IP Multicast address management and inhibition of DoS attacks
• MPLS Support – Provides extended support of MPLS, including MPLS VPNs and MPLS Traffic Engineering (MPLS TE)
• Virtual Private LAN Service (VPLS) – Establishes point-to-multipoint Layer 2 VPNs across a provider network
• Bidirectional Forwarding Detection (BFD) – Enables link connectivity monitoring and reduces network convergence time for RIP, OSPF, BGP, IS-IS, VRRP, MPLS, and IRF
• Policy-Based Routing – Makes routing decisions based on policies set by the network administrator
• Equal-Cost Multipath (ECMP) – Enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
• IPv6 Tunneling – Allows a smooth transition from IPv4 to IPv6 by encapsulating IPv6 traffic over an existing IPv4 infrastructure

Security

• Access Control Lists (ACLs) – Provide IP Layer 2 to Layer 4 traffic filtering; support global ACL, VLAN ACL, port ACL, and IPv6 ACL; up to 6144 ingress ACLs and 1024 egress ACLs are supported
• IEEE 802.1X – Defines an industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server
• MAC-Based Authentication – Authenticates the client with the RADIUS server based on the client's MAC address
• Identity-Driven Security and Access Control –
  • Per-User ACLs – Permit or deny user access to specific network resources based on user identity and time of day, allowing multiple types of users on the same network to access specific network services without risking network security or providing unauthorized access to sensitive data
  • Automatic VLAN Assignment – Assigns users automatically to the appropriate VLAN based on their identities
• Port Security – Allows access only to specified MAC addresses, which can be learned or specified by the administrator
• Secure FTP – Allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file
• STP BPDU Port Protection – Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
• DHCP Protection – Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• DHCP Snooping – Helps ensure that DHCP clients receive IP addresses from authorized DHCP servers and maintain a list of DHCP entries for trusted ports; prevents reception of fake IP addresses and reduces ARP attacks, improving security
• DHCPv6 Snooping – Ensures that DHCPv6 clients obtain IPv6 addresses from authorized DHCPv6 servers and record IP-to-MAC mappings of DHCPv6 clients
• Dynamic ARP Protection – Blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
• STP Root Guard – Protects the root bridge from malicious attacks or configuration mistakes
• Guest VLAN – Provides a browser-based environment to authenticated clients that is similar to IEEE 802.1X
• Port Isolation – Secures and adds privacy, and prevents malicious attackers from obtaining user information
• Endpoint Admission Defense (EAD) – Provides security policies to users accessing a network
• RADIUS/HWTACACS – Eases switch management security administration by using a password authentication server
• Secure Management Access – Delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2 and SNMPv3
• Unicast Reverse Path Forwarding (URPF) – Allows normal packets to be forwarded correctly, but discards the attaching packet due to lack of reverse path route or incorrect inbound interface; prevents source spoofing and distributed attacks; supports distributed UFPF
• IP Source Guard – Helps prevent IP spoofing attacks
• IPv6 Source Guard – Help prevent IPv6 spoofing attacks using ND Snooping as well as DHCPv6 Snooping
• ND Snooping – Allows only packets with a legally obtained IPv6 address to pass

Virtual Private Network (VPN)

• Generic Routing Encapsulation (GRE) – Transports Layer 2 connectivity over a Layer 3 path in a secured way; enables the segregation of traffic from site to site

Convergence

• LLDP-MED (Media Endpoint Discovery) – Defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones
• Internet Group Management Protocol (IGMP) – Utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks; supports IGMPv1, v2, and v3
• Multicast Source Discovery Protocol (MSDP) – Allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications
• Multicast Border Gateway Protocol (MBGP) – Allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic
• Multicast VLAN – Allows multiple VLANs to receive the same IPv4 or IPv6 multicast traffic, lessening network bandwidth demand by reducing or eliminating multiple streams to each VLAN
• LLDP-CDP Compatibility – Receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation

Additional Information

• Green Initiative Support – Provides support for RoHS and WEEE regulations
• Green IT and Power – Improves energy efficiency through the use of the latest advances in silicon development; shuts off unused ports and utilizes variable-speed fans, reducing energy costs

Warranty and Support

• Lifetime Warranty 2.0 – Advance hardware replacement for as long as you own the product with next-business-day delivery (available in most countries)
• Electronic and Telephone Support (For Lifetime Warranty 2.0) – Limited 24/7 telephone support is available from HP for the first three years; limited electronic and business hours telephone support is available from HP for the entire warranty period