Техническая Спецификация для HP 5500-24G SI JD369A
Модели
JD369A
4
• Identity-driven security and access control:
– Per-user ACLs: permit or deny user access to
specific network resources based on user identity
and time of day, allowing multiple types of users
on the same network to access specific network
services without risk to network security or
unauthorized access to sensitive data
and time of day, allowing multiple types of users
on the same network to access specific network
services without risk to network security or
unauthorized access to sensitive data
– Automatic VLAN assignment: automatically
assigns users to the appropriate VLAN based on
their identities
their identities
• Secure management access: securely encrypts
all access methods (CLI, GUI, or MIB) through
SSHv2, SSL, and/or SNMPv3
SSHv2, SSL, and/or SNMPv3
• Secure File Transfer Protocol (FTP): allows
secure file transfer to and from the switch; protects
against unwanted file downloads or unauthorized
copying of switch configuration file
against unwanted file downloads or unauthorized
copying of switch configuration file
• Guest VLAN: similar to IEEE 802.1X, it provides a
browser-based environment to authenticated clients
• Endpoint Admission Defense (EAD): provides
security policies to users accessing a network
• Port security: allows access only to specified
MAC addresses, which can be learned or specified
by the administrator
by the administrator
• Port isolation: secures and adds privacy, and
prevents malicious attackers from obtaining user
information
information
• STP BPDU port protection: blocks Bridge
Protocol Data Units (BPDUs) on ports that do not
require BPDUs, preventing forged BPDU attacks
require BPDUs, preventing forged BPDU attacks
• STP Root Guard: protects root bridge from
malicious attack or configuration mistakes
• DHCP protection: blocks DHCP packets from
unauthorized DHCP servers, preventing
denial-of-service attacks
denial-of-service attacks
• Dynamic ARP protection: blocks ARP
broadcasts from unauthorized hosts, preventing
eavesdropping or theft of network data
eavesdropping or theft of network data
• IP source guard: helps prevent IP spoofing
attacks
• RADIUS/HWTACACS: eases switch management
security administration by using a password
authentication server
authentication server
Convergence
• IEEE 802.1AB Link Layer Discovery Protocol
(LLDP): is an automated device discovery protocol
for easy mapping by network management
applications
for easy mapping by network management
applications
• LLDP-MED: is a standard extension that
automatically configures network devices, including
LLDP-capable IP phones
LLDP-capable IP phones
• LLDP-CDP compatibility: receives and
recognizes CDP packets from Cisco's IP phones for
seamless interoperation
seamless interoperation
• IEEE 802.3af Power over Ethernet: provides
up to 15.4 W per port to PoE-powered devices such
as IP phones, wireless access points, and video
cameras
as IP phones, wireless access points, and video
cameras
• PoE allocations: support multiple methods
(automatic, IEEE 802.3af class, LLDP-MED, or user
specified) to allocate PoE power for more efficient
energy savings
specified) to allocate PoE power for more efficient
energy savings
• Voice VLAN: automatically assigns VLAN and
priority for IP phones, simplifying network
configuration and maintenance
configuration and maintenance
• IP multicast snooping (data-driven IGMP):
automatically prevents flooding of IP multicast traffic
• Multicast VLAN: allows multiple VLANs to receive
the same IPv4 or IPv6 multicast traffic, reducing
network bandwidth demand by eliminating multiple
streams to each VLAN
network bandwidth demand by eliminating multiple
streams to each VLAN
Device support
• Cisco prestandard PoE support: detects and
provides power to Cisco's prestandard PoE devices
such as wireless LAN access points and IP phones
such as wireless LAN access points and IP phones
Additional information
• Green IT and power: use the latest advances in
silicon development, shut off unused ports, and use
variable-speed fans to improve power efficiency
variable-speed fans to improve power efficiency
• Green initiative support: provides support for
RoHS and WEEE regulations
Warranty and support
*Hardware warranty replacement for as long as you own the product, with next business day advance replacement (available in most countries) with a five-year hardware warranty
replacement for the disk drive included with HP AllianceONE Services zl Module, HP Threat Management Services zl Module, HP PCM+ Agent with AllianceONE Services zl
Module, and HP E-MSM765 zl Mobility Controller. For details, refer to the HP Software License, Warranty, and Support booklet at
replacement for the disk drive included with HP AllianceONE Services zl Module, HP Threat Management Services zl Module, HP PCM+ Agent with AllianceONE Services zl
Module, and HP E-MSM765 zl Mobility Controller. For details, refer to the HP Software License, Warranty, and Support booklet at
www.hp.com/networking/warranty
.
• Lifetime warranty: for as long as you own the
product with advance replacement and
next-business-day delivery (available in most
countries)*
next-business-day delivery (available in most
countries)*
• Electronic and telephone support: limited
electronic and telephone support is available from
HP; refer to
HP; refer to
www.hp.com/networking/warranty
for
details on the support provided and the period
during which support is available
during which support is available