HPE 3600-48-PoE+ v2 EI

Description

IEEE 802.1ad QinQ and selective QinQ Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network. RMON (remote monitoring) Provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events. IEEE 802.3af Power over Ethernet (PoE) Provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and security cameras. Ethernet OAM Provides a Layer 2 link performance and fault detection monitoring tool, which reduces failover and network convergence times. Gigabit Ethernet uplinks Dual-personality ports for either 10/100/1000 or mini-GBIC SFP connectivity for increased connectivity flexibility. Advanced classifier-based QoS Classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority level and rate limit to selected traffic on a per-port or per-VLAN basis. Powerful QoS feature Supports the following congestion actions:strict priority (SP) queuing, weighted round robin (WRR), weighted fair queuing (WFQ), and WRED. Remote configuration and management Remote configuration and management is available through a secure web browser or a command-line interface (CLI). Manager and operator privilege levels Enable read-only (operator) and read/write (manager) access on CLI and web browser management interfaces. Command authorization Leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit trail. Local and remote intelligent mirroring Mirrors traffic from a switch port or to a remote switch port anywhere on the network, or mirrors ACL-selected traffic to a local switch port. Management VLAN Segments traffic to and from management interfaces, including CLI/telnet, a web browser interface, and SNMP. Device Link Detection Protocol (DLDP) Monitors a cable between two switches and shuts down the ports on both ends if the cable is broken, preventing network problems such as loops. Troubleshooting Ingress and egress port monitoring enable network problem solving; virtual cable tests provide visibility into cable problems. sFlow (RFC 3176) Provides scalable ASIC-based wire-speed network monitoring and accounting with no impact on network performance. Remote intelligent mirroring Mirrors ingress/egress ACL-selected traffic from a switch port or VLAN to a local or remote switch port anywhere on the network. IPv6 management Future-proofs networking, as the switch is capable of being managed whether the attached network is running IPv4 or IPv6. IEEE 802.3at Power over Ethernet (PoE+) support Simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying local power at each access point location. Hardware-based wire-speed access control lists Feature-rich ACL implementation helps ensure high levels of security and ease of administration without impacting network performance. Separate data and control paths Keeps control separated from services and keeps service processing isolated; increases security and performance. Virtual Router Redundancy Protocol (VRRP) Allows a group of routers to dynamically back each other up to create highly available routed environments. Intelligent Resilient Framework (IRF) Creates virtual resilient switching fabrics, where two or more switches perform as a single Layer 2 switch and Layer 3 router. Dynamic Host Configuration Protocol (DHCP) Simplifies the management of large IP networks and supports client and server; DHCP relay enables DHCP operation across subnets. Loopback interface address Defines an address in Routing Information Protocol (RIP) and OSPF that can always be reachable, improving diagnostic capability. User Datagram Protocol (UDP) helper function Allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP. Route maps Provide more control during route redistribution; allow filtering and altering of route metrics. IPv6 routing protocols Provide routing of IPv6 at wire speed; support static routes, RIPng, OSPFv3, ISIS for IPv6, and BGP4+ for IPv6. Equal-Cost Multipath (ECMP) Enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth. PIM-SSM, PIM-DM, and PIM-SM (for IPv4 and IPv6) Support IP Multicast address management and inhibition of DoS attacks. Multicast Source Discovery Protocol (MSDP) Multicast Source Discovery Protocol (MSDP) is used for inter-domain multicast applications, allowing multiple PIM-SM domains to interoperate. Bidirectional Forwarding Detection (BFD) Enables link connectivity monitoring and reduces network convergence time for RIP, OSPF, BGP, IS-IS, VRRP, and IRF. IPv6 tunneling Allows a smooth transition from IPv4 to IPv6 by encapsulating IPv6 traffic over an existing IPv4 infrastructure. Access control lists (ACLs) Provides IP Layer 2 to Layer 4 traffic filtering; supports VLAN ACL and port ACL. Secure management access Securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3. Secure FTP Allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file. Guest VLAN Similar to IEEE 802.1x, it provides a browser-based environment to authenticated clients. Port security Allows access only to specified MAC addresses, which can be learned or specified by the administrator. Port isolation Secures and adds privacy, and prevents malicious attackers from obtaining user information. ICMP throttling Defeats ICMP denial-of-service attacks by enabling any switch port to automatically throttle ICMP traffic. STP BPDU port protection Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks. STP root guard Protects the root bridge from malicious attacks or configuration mistakes. DHCP protection Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks. Dynamic ARP protection Blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data. RADIUS/HWTACACS Eases switch management security administration by using a password authentication server. Multiple Customer Edge (MCE) Facilitates MPLS VPN network integration with support for up to 63 VPNs. IEEE 802.1AB Link Layer Discovery Protocol (LLDP) IEEE 802.1AB Link Layer Discovery Protocol (LLDP) is an automated device discovery protocol that provides easy mapping of network management applications. LLDP-MED LLDP-MED is a standard extension that automatically configures network devices, including LLDP-capable IP phones. LLDP-CDP compatibility Receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation. PoE allocations Support multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user specified) to allocate PoE power for more efficient energy savings. Voice VLAN Automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance. Protocol Independent Multicast (PIM) Protocol Independent Multicast (PIM) is used for multicast applications; supports PIM Dense Mode (PIM-DM) and Sparse Mode (PIM-SM). Multicast VLAN Allows multiple VLANs to receive the same multicast traffic, reducing network bandwidth demand by eliminating multiple streams to each VLAN.