HP 7500 Series Datasheet page 11

Data sheet | HP 7500 Switch Series
• DHCP snooping
Enables DHCP clients to receive IP addresses from authorized DHCP servers and maintains a
list of DHCP entries for trusted ports; and helps prevent users from receiving fake IP addresses
and reduces ARP attacks, improving security
• IP source guard
Filters packets on a per-port basis to help prevent illegal packets from being forwarded
• ARP attack protection
Protects from attacks using a large number of ARP requests with a host-specific, user-
selectable threshold
• Port security
Allows access only to specified MAC addresses, which can be learned or specified by the
administrator
• IEEE 802.1X support
Provides port-based user authentication, with support for the EAP-MD5, TLS, TTLS, and
PEAP—with choice of AES, TKIP, and static or dynamic WEP encryption for protecting wireless
traffic between authenticated clients and the access point
• MAC authentication
Provides simple authentication, based on a user's MAC address; and supports local or RADIUS-
based authentication
• Multiple user authentication methods
– IEEE 802.1X
Uses an IEEE 802.1X supplicant on the client, in conjunction with a RADIUS server, to
authenticate in accordance with industry standards
– Web-based authentication
Provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that
do not support the IEEE 802.1X supplicant
– MAC-based authentication
Authenticates the client with a RADIUS server, based on the client's MAC address
• DHCP protection
Blocks DHCP packets from unauthorized DHCP servers, helping preventing denial-of-service
attacks
• Endpoint admission defense (EAD)
Assigns security policies to users accessing a network
• Port isolation
Secures and adds privacy; and helps prevent malicious attackers from obtaining user
information
11