HP 5500-24G-PoE+ EI Layer 3 Switch

HP 5500 EI Switch Series

These Gigabit Ethernet Switches Deliver Outstanding Security, Reliability, and Multi-Service Support Capabilities for Robust Switching

These Gigabit Ethernet switches deliver outstanding security, reliability, and multiservice support capabilities for robust switching at the edge or aggregation layer of large enterprise and campus networks, or in the core layer of SMB networks. The HP 5500 EI Switch Series is comprised of Layer 2/3 Gigabit Ethernet switches that can accommodate the most demanding applications and provide resilient and secure connectivity as well as the latest traffic prioritization technologies to enhance applications on convergent networks.

With complete IPv4/IPv6 dual-stack support, the series provides a migration path from IPv4 to IPv6 and has hardware support for IPv6. Designed for increased flexibility, these switches are available with 24 or 48 Gigabit Ethernet ports. Power over Ethernet (PoE) and non-PoE models are available with optional GbE and 10GbE expansion capability. The all-fiber model with dual power supplies is ideal for applications that require the highest availability.

• High expandability for investment protection
• Premium security and integrated management
• Multilayer reliability
• Convergence-ready support
• Outstanding Quality of Service (QoS)

Features

Software-Defined Networking

• OpenFlow – Supports OpenFlow 1.0 and 1.3 specifications to enable SDN by allowing separation of the data (packet forwarding) and control (routing decision) paths

Quality of Service (QoS)

• Storm Restraint – Allows limitation of broadcast, multicast, and unknown unicast traffic rate to cut down on unwanted broadcast traffic on the network
• Advanced Classifier-Based QoS – Classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies, such as setting priority level and rate limit, to bi-directional selected traffic on a per-port, per-VLAN, or whole switch basis
• Powerful QoS Feature – Creates traffic classes based on ACLs, IEEE 802.1p precedence, IP, DSCP, or ToS precedence; supports filter, redirect, mirror, or remark; supports the following congestion actions: strict priority queuing (SP), weighted round robin (WRR), SP+WRR, weighted fair queuing (WFQ), and weighted random early discard (WRED)
• Traffic Policing – Supports Committed Access Rate (CAR) and line rate

Management

• Friendly Port Names – Allows assignment of descriptive names to ports
• Remote Configuration and Management – Enables configuration and management through a secure Web browser or a CLI located on a remote device
• Manager and Operator Privilege Levels – Provides read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
• Command Authorization – Leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit trail
• Secure Web GUI – Provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
• Dual Flash Images – Provides independent primary and secondary operating system files for backup while upgrading
• Multiple Configuration Files – Stores easily to the flash image
• Complete Session Logging – Provides detailed information for problem identification and resolution
• SNMPv1, v2c, and v3 – Facilitate centralized discovery, monitoring, and secure management of networking devices
• Remote Monitoring (RMON) – Uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private alarm extension group
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) – Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network management applications
• sFlow (RFC 3176) – Provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes
• Management VLAN – Segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
• Remote Intelligent Mirroring – Mirrors ingress/egress ACL-selected traffic from a switch port or VLAN to a local or remote switch port anywhere on the network
• Device Link Detection Protocol (DLDP) – Monitors a cable between two switches and shuts down the ports on both ends if the cable is broken, preventing network problems such as loops
• IPv6 Management – Provides future-proof networking because the switch is capable of being managed whether the attached network is running IPv4 or IPv6; supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, syslogv6, FTPv6, SNMPv6, DHCPv6, and RADIUS for IPv6
• Troubleshooting – Ingress and egress port monitoring enables network problem-solving; virtual cable tests provide visibility into cable problems
• In-Service Software Upgrade (ISSU) – Enables operators to perform upgrades in the shortest possible amount of time with minimal risk to network operations or traffic disruptions

Connectivity

• Auto-MDIX – Automatically adjusts for straight-through or crossover cables on all 10/100/1000 ports
• Flow Control – Provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations
• Jumbo Packet Support – Supports up to 9216-byte frame size to improve the performance of large data transfers
• High-Density Port Connectivity – Provides up to 48 fixed 10/100/1000BASE-T or 24 SFP 100/1000BASE-X ports in a Layer 2/Layer 3 stackable switch supporting unique IRF stacking
• IEEE 802.3at Power over Ethernet (PoE+) Support – Simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying local power at each access point location
• Ethernet Operations, Administration and Maintenance (OAM) – Detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the link between two devices
• High-Bandwidth CX4 and SFP+ Local Stacking – Provide 10Gbps SPF+ or 12Gbps CX4 local stacking cables; achieve a resilient stacking configuration
• Optional 10GbE Ports – Deliver, through the use of optional modules, additional 10GbE connections, which are available for uplinks or high-bandwidth server connections; flexibly support copper, XFP, SFP+, or CX4 local connections

Performance

• Nonblocking Architecture – Up to 192Gbps nonblocking switching fabric provides wire-speed switching with up to 143 million pps throughput
• Hardware-Based Wirespeed Access Control Lists (ACLs) – Help provide high levels of security and ease of administration without impacting network performance with a feature-rich TCAM-based ACL implementation

Resiliency and High Availability

• Separate Data and Control Paths – Separates control from services and keeps service processing isolated; increases security and performance
• External Redundant Power Supply – Provides high reliability
• Smart Link – Allows 50ms failover between links
• Spanning Tree/MSTP, RSTP – Provides redundant links while preventing network loops
• Rapid Ring Protection Protocol (RRPP) – Connects multiple switches in a high-performance ring using standard Ethernet technology; traffic can be rerouted around the ring in less than 50 ms, reducing the impact on traffic and applications
• Virtual Router Redundancy Protocol (VRRP) – Allows a group of routers to dynamically back each other up to create highly available routed environments
• Intelligent Resilient Framework (IRF) – Creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation
• IP Fast Reroute (FRR) – Forms backup paths and allows 50ms switchover in case of a main path fault
• IRF Capability – Provides single IP address management for a resilient virtual switching fabric of up to nine switches

Layer 2 Switching

• 32K MAC Addresses – Provide access to many Layer 2 devices
• IEEE 802.1ad QinQ and Selective QinQ – Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network
• GARP VLAN Registration Protocol – Allows automatic learning and dynamic assignment of VLANs
• IEEE 802.1ad QinQ – Increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a high-speed campus or metro network
• 10GbE Port Aggregation – Allows grouping of ports to increase overall data throughput to a remote device
• Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) Protocol Snooping – Controls and manages the flooding of multicast packets in a Layer 2 network

Layer 3 Services

• Address Resolution Protocol (ARP) – Determines the MAC address of another IP host in the same subnet
• Dynamic Host Configuration Protocol (DHCP) – Simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across subnets
• Loopback Interface Address – Defines an address in Routing Information Protocol (RIP) and Open Standard Path First (OSPF), improving diagnostic capability
• User Datagram Protocol (UDP) Helper Function – Allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP
• Route Maps – Provide more control during route redistribution; allow filtering and altering of route metrics

Layer 3 Routing

• IPv4 Routing Protocols – Support static routes, RIP, OSPF, ISIS, and BGP
• IPv6 Routing Protocols – Provide routing of IPv6 at wire speed; support static routes, RIPng, OSPFv3, IS-ISv6, and BGP4+ for IPv6
• Equal-Cost Multipath (ECMP) – Enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
• Policy-Based Routing – Makes routing decisions based on policies set by the network administrator
• IGMPv1, v2, and v3 – Allow individual hosts to be registered on a particular VLAN
• PIM-SSM, PIM-DM, and PIM-SM (for IPv4 and IPv6) – Support IP Multicast address management and inhibition of DoS attacks
• IPv6 Tunneling – Allows a smooth transition from IPv4 to IPv6 by encapsulating IPv6 traffic over an existing IPv4 infrastructure
• Unicast Reverse Path Forwarding (uRPF) – Limits erroneous or malicious traffic in accordance with RFC 3074
• Bidirectional Forwarding Detection (BFD) – Enables link connectivity monitoring and reduces network convergence time for RIP, OSPF, BGP, IS-IS, VRRP, and IRF

Security

• Access Control Lists (ACLs) – Provide IP Layer 2 to Layer 4 traffic filtering; support global ACL, VLAN ACL, port ACL, and IPv6 ACL. Up to 3072 ingress ACLs and 448 egress ACLs are supported
• IEEE 802.1X – Is an industry-standard method of user authentication that uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server
• MAC-Based Authentication – Authenticates the client with the RADIUS server based on the client's MAC address
• Identity-Driven Security and Access Control –
  • Per-user ACLs – Permit or deny user access to specific network resources based on user identity and time of day, allowing multiple types of users on the same network to access specific network services without risking network security or providing unauthorized access to sensitive data
  • Automatic VLAN Assignment – Automatically assigns users to the appropriate VLAN based on their identities
• Secure Management Access – Delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
• Secure FTP – Allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file
• Guest VLAN – Provides a browser-based environment to authenticated clients that is similar to IEEE 802.1X
• Endpoint Admission Defense (EAD) – Provides security policies to users accessing a network
• Port Security – Allows access only to specified MAC addresses, which can be learned or specified by the administrator
• Port Isolation – Secures and adds privacy, and prevents malicious attackers from obtaining user information
• STP BPDU Port Protection – Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
• STP Root Guard – Protects the root bridge from malicious attacks or configuration mistakes
• DHCP Protection – Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• Dynamic ARP Protection – Blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
• IP Source Guard – Helps prevent IP spoofing attacks
• RADIUS/HWTACACS – Eases switch management security administration by using a password authentication server
• Multiple Customer Edge (MCE) – Facilitates MPLS VPN network integration with up to 64 VPNs support
• Unicast Reverse Path Forwarding (URPF) – Allows normal packets to be forwarded correctly, whereas the attaching packet will be discarded due to lack of reverse path route or incorrect inbound interface; prevents source spoofing and distributed attacks; supports distributed URPF

Convergence

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) – Facilitates easy mapping using network management applications with LLDP automated device discovery protocol
• LLDP-MED – Is a standard extension that automatically configures network devices, including LLDP-capable IP phones
• LLDP-CDP Compatibility – Receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation
• IEEE 802.3af Power over Ethernet – Provides up to 15.4W per port to PoE-powered devices such as IP phones, wireless access points, and video cameras
• PoE Allocations – Supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power for more efficient energy savings
• Voice VLAN – Automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance
• IP Multicast Snooping (data-driven IGMP) – Prevents flooding of IP multicast traffic
• Internet Group Management Protocol (IGMP) – Utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks; supports IGMPv1, v2, and v3
• Protocol Independent Multicast (PIM) – Defines modes of Internet multicasting to allow one-to-many and many-to-many transmission of information; supports PIM Dense Mode (DM), Sparse Mode (SM), and Source-Specific Mode (SSM)
• Multicast Source Discovery Protocol (MSDP) – Allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications
• Multicast Border Gateway Protocol (MBGP) – Allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic
• Multicast VLAN – Allows multiple VLANs to receive the same IPv4 or IPv6 multicast traffic, lessening network bandwidth demand by reducing or eliminating multiple streams to each VLAN

Device Support

• Cisco Prestandard PoE Support – Detects and provides power to Cisco's prestandard PoE devices such as wireless LAN access points and IP phones

Additional Information

• Green IT and Power – Improves energy efficiency through the use of the latest advances in silicon development; shuts off unused ports and utilizes variable-speed fans, reducing energy costs
• Green Initiative Support – Provides support for RoHS and WEEE regulations

Warranty and Support

• Lifetime Warranty 2.0 – Advance hardware replacement for as long as you own the product with next-business-day delivery (available in most countries)
• Electronic and Telephone Support (For Lifetime Warranty 2.0) – Limited 24/7 telephone support is available from HP for the first three years; limited electronic and business hours telephone support is available from HP for the entire warranty period