HP 6200

works with DHCP protection to block traffic from unauthorized hosts, preventing IP source address spoofing
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
Detection of malicious attacks
monitors 10 types of network traffic and sends a warning when an anomaly that potentially can be caused by malicious attacks
is detected
Port security
allows access only to specified MAC addresses, which can be learned or specified by the administrator
MAC address lockout
prevents particular configured MAC addresses from connecting to the network
Source-port filtering
allows only specified ports to communicate with each other
RADIUS/TACACS+
eases switch management security administration by using a password authentication server
Secure Shell
encrypts all transmitted data for secure remote CLI access over IP networks
Secure Sockets Layer (SSL)
encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch
configuration file
Management Interface Wizard
helps secure management interfaces such as SNMP, telnet, SSH, SSL, Web, and USB at the desired level
Secure management access
securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
Switch management logon security
can require either RADIUS or TACACS+ authentication for secure switch CLI logon
Security banner : displays customized security policy when users log in to the switch
USB Secure Autorun (requires HP PCM+)
deploys, diagnoses, and updates a switch using a USB flash drive; works with a secure credential to prevent tampering
STP Root Guard
protects the root bridge from malicious attacks or configuration mistakes
Convergence
IP multicast routing
includes PIM Sparse and Dense modes to route IP multicast traffic
IP multicast snooping (data-driven IGMP)
automatically prevents flooding of IP multicast traffic
LLDP-MED (Media Endpoint Discovery)
is a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network
devices such as IP phones
Auto VLAN configuration for voice :
RADIUS VLAN : uses a standard RADIUS attribute and LLDP-MED to automatically configure a VLAN for IP phones
CDPv2 : uses CDPv2 to configure legacy IP phones
NEW Local MAC Authentication
assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes
Warranty and support
QuickSpecs
HP 6200 yl Switch Series
Overview
DA - 12437 North America — Version 17 — December 9, 2013 Page 5