HP ProCurve 2824

HP ProCurve Switch 2800 Series
2
Features and benefits
Industry-leading warranty
♦ For as long as you own the product, with next-business-day advance replacement (available in most countries). The following hardware products and their related series modules have a one-year
hardware warranty with extensions available: HP ProCurve Routing Switch 9300m Series, HP ProCurve Switch 8100fl Series, and HP ProCurve Network Access Controller 800. The following hardware
mobility products have a one-year hardware warranty with extensions available: HP ProCurve M111 Client Bridge, HP ProCurve MSM3xx-R Access Points, HP ProCurve MSM7xx Mobility and Access
Controllers, HP ProCurve RF Manager IDS/IPS Systems, HP ProCurve MSM Power Supplies, HP ProCurve 1-Port Power Injector, and HP ProCurve CNMS Appliances. Disk drives in the HP ProCurve
ONE Services zl Modules have a five-year hardware warranty. Standalone software, upgrades, or licenses may have a different warranty duration. For details, refer to the ProCurve Software License,
Warranty, and Support booklet at http://www.procurve.com/warranty.
Connectivity
• Dual-personality functionality: four 10/100/1000 ports or
mini-GBIC slots for optional fiber connectivity such as Gigabit-SX,
-LX, or -LH
Performance
• 48 Gbps backplane with up to 34.7 million pps (HP ProCurve
Switch 2824) and 96 Gbps backplane with up to 69.8 million
pps (HP ProCurve Switch 2848): ten times the bandwidth for
low-latency throughput
Resiliency and high availability
• IEEE 802.3ad Link Aggregation Protocol (LACP) and
ProCurve trunking: support up to 24 trunks, each with up to 8
links (ports) per trunk
• Spanning Tree Protocol (IEEE 802.1D): provides redundant
links while preventing network loops
• IEEE 802.1w Rapid Convergence Spanning Tree Protocol:
increases network uptime through faster recovery from failed links
• IEEE 802.1s Multiple Spanning Tree: provides high link
availability in multiple VLAN environments by allowing multiple
spanning trees
• Optional external redundant power supply: provides
uninterrupted power
Layer 2 switching
• VLAN support and tagging: supports the IEEE 802.1Q (4,094
VLAN IDs) and 256 VLANs simultaneously
• GARP VLAN Registration Protocol: allows automatic learning
and dynamic assignment of VLANs
• Jumbo packet support: supports up to 9,216 byte frame size to
improve performance of large data transfers
Layer 3 routing
• Basic IP routing: enables automatic routing to the connected
VLANs and up to 16 static routes--including one default route--in
IP networks
Security
• Dynamic ARP protection: blocks ARP broadcasts from
unauthorized hosts, preventing eavesdropping or theft of network
data
• Dynamic IP lockdown: works with DHCP protection to block
traffic from unauthorized hosts, preventing IP source address
spoofing
• Port security: allows access only to specified MAC addresses,
which can be learned or specified by the administrator
• MAC address lockout: prevents configured particular MAC
addresses from connecting to the network
• Multiple user authentication methods:
- IEEE 802.1X: industry-standard method of user authentication
using an IEEE 802.1X supplicant on the client in conjunction with
a RADIUS server
- Web-based authentication: similar to IEEE 802.1X, provides a
browser-based environment to authenticate clients that do not
support the IEEE 802.1X supplicant
- MAC-based authentication: client is authenticated with the
RADIUS server based on the client's MAC address
• Secure FTP: allows secure file transfer to/from the switch;
protects against unwanted file downloads or unauthorized copying
of switch configuration file
• RADIUS/TACACS+: eases switch management security
administration by using a password authentication server
• Source-port filtering: allows only specified ports to
communicate with each other
• Secure Shell (SSHv2): encrypts all transmitted data for secure,
remote command-line interface (CLI) access over IP networks
• Secure Sockets Layer (SSL): encrypts all HTTP traffic, allowing
secure access to the browser-based management GUI in the
switch
• Switch management logon security: can require either
RADIUS or TACACS+ authentication for secure switch CLI logon