Advertisement
QuickSpecs
Overview
Policy routing
allows custom filters for increased performance and security; supports ACLs, IP prefix, AS paths, community lists, and aggregate
policies
Multicast VPN
supports Multicast Domain (MD) multicast VPN, which can be distributed on separate service cards, providing high performance
and flexible configuration
Border Gateway Protocol 4
Exterior Gateway Protocol (EGP) with path vector protocol uses TCP for enhanced reliability for the route discovery process,
reduces bandwidth consumption by advertising only incremental updates, and supports extensive policies to increase flexibility
and scale to large networks
OSPFv3 MCE
Multi-VPN-Instance CE (MCE) binds different VPNs to different interfaces on one single CE; the OSPFv3 MCE feature creates and
maintains separate OSPFv3 routing tables for each IPv6 VPN to isolate VPN services in the device
Security
Access control list
supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent illegal users from accessing the
network or for controlling network traffic flow; rules can either deny or permit traffic to be forwarded; rules can be based on a
Layer 2 header or a Layer 3 protocol header; rules can also be set to operate on specific dates or times
Remote Authentication Dial-In User Service (RADIUS)
eases switch security access administration by using a password authentication server
Terminal Access Controller Access-Control System (TACACS+)
delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security
Network address translation (NAT)
supports repeated multiplexing of a port and automatic 5-tuple collision detection, enabling NAPT to support unlimited
connections; supports blacklist in NAT/NAPT/internal server, a limit on the number of connections, session log, and multi-
instance
Secure shell (SSHv2)
uses external servers to securely log in to a remote device; with authentication and encryption, it protects against IP spoofing
and plain-text password interception; increases the security of Secure FTP (SFTP) transfers
Unicast Reverse Path Forwarding (URPF)
allows normal packets to be forwarded correctly, but discards the attaching packet due to lack of reverse path route or incorrect
inbound interface; prevents source spoofing and distributed attacks; supports distributed URPF
Dynamic Virtual Private Network (DVPN)
collects, maintains, and distributes dynamic public addresses through the VPN Address Management (VAM) protocol, making
VPN establishment available between enterprise branches that use dynamic addresses to access the public network; compared
to traditional VPN technologies, DVPN technology is more flexible and has richer features, such as NAT traversal of DVPN
packets, AAA identity authentication, IPSec protection of data packets, and multiple VPN dom
Multicast support
Internet Group Management Protocol (IGMP)
is used by IP hosts to establish and maintain multicast groups; supports v1, v2, and v3; utilizes Any-Source Multicast (ASM) or
Source-Specific Multicast (SSM) to manage IPv4 multicast networks
Protocol Independent Multicast (PIM)
is used for IPv4 and IPv6 multicast applications; supports PIM Dense Mode (PIM-DM), Sparse Mode (PIM-SM), and Source-Specific
Mode (PIM-SSM)
'Multicast Source Discovery Protocol (MSDP)
is used for interdomain multicast applications, allowing multiple PIM-SM domains to interoperate
Multicast Border Gateway Protocol (MBGP)
DA - 13811 Worldwide — Version 21 — February 18, 2014
HP 6600 Router Series
Page 7
Advertisement
