HP ProCurve Switch 8212zl
4
• Dynamic ARP protection: blocks ARP broadcasts from
unauthorized hosts, preventing eavesdropping or theft of network
data
• Detection of malicious attacks: monitors ten types of network
traffic and sends a warning when an anomaly that potentially can
be caused by malicious attacks is detected
• Port security: allows access only to specified MAC addresses,
which can be learned or specified by the administrator
• MAC address lockout: prevents configured particular MAC
addresses from connecting to the network
• Source-port filtering: allows only specified ports to
communicate with each other
• RADIUS/TACACS+: eases switch management security
administration by using a password authentication server
• Secure Shell (SSHv2): encrypts all transmitted data for secure,
remote command-line interface (CLI) access over IP networks
• Secure Sockets Layer (SSL): encrypts all HTTP traffic, allowing
secure access to the browser-based management GUI in the
switch
• Secure FTP: allows secure file transfer to/from the switch;
protects against unwanted file downloads or unauthorized copying
of switch configuration file
• Secure management access: all access methods--CLI, GUI, or
MIB--are securely encrypted through SSHv2, SSL, and/or
SNMPv3
• Switch management logon security: can require either
RADIUS or TACACS+ authentication for secure switch CLI logon
• Security banner: displays a customized security policy when
users log in to the switch
NEW USB Secure Autorun (requires HP ProCurve Manager
Plus): deploys, diagnoses, and updates switch using USB flash
drive; works with secure credential to prevent tampering
NEW STP Root Guard: protects root bridge from malicious attack
or configuration mistakes
Convergence
• IP multicast routing: includes PIM Sparse and Dense modes to
route IP multicast traffic
• IP multicast snooping (data-driven IGMP): automatically
prevents flooding of IP multicast traffic
• LLDP-MED (Media Endpoint Discovery): a standard extension
of LLDP that stores values for parameters such as QoS and VLAN
to automatically configure network devices such as IP phones
NEW RADIUS VLAN for voice: uses standard RADIUS attribute
and LLDP-MED to automatically configure VLAN for IP phones
NEW PoE allocations: supports multiple methods (automatic,
IEEE 802.3af class, LLDP-MED, or user specified) to allocate PoE
power for more efficient energy savings
Quality of Service (QoS)
• Layer 4 prioritization: enables prioritization based on TCP/UDP
port numbers
• Traffic prioritization: allows real-time traffic classification into 8
priority levels mapped to 8 queues
• Bandwidth shaping:
- Port-based rate limiting: per-port ingress/egress enforced
maximum bandwidth
- Classifier-based rate limiting: use ACL to enforce maximum
bandwidth for ingress traffic on each port
- Guaranteed minimum: per-port, per-queue egress-based
guaranteed minimum bandwidth
• Class of Service (CoS): sets the IEEE 802.1p priority tag based
on IP address, IP Type of Service (ToS), L3 protocol, TCP/UDP
port number, source port, and DiffServ
Flexibility
• ProCurve Wireless Edge Services zl Module: offers secure,
advanced wireless services with simplified management and
unified wired and wireless operation across the network
• Complete feature set: Gigabit PoE for edge VoIP solutions,
scalable 10-GbE for enterprise-class distribution-layer
implementations, advanced wireless management for
comprehensive mobility solutions, and critical high-availability
features for mid-market core network deployments
• Programmable ASIC design: allows seamless addition of new
QoS and security features over time without costly hardware
upgrades
To Next Page
Loading...
