HP ProCurve 3500yl-24G-PWR Specifications page 3

ProCurve Switch 3500yl-24G-PWR
• ICMP throttling: defeats ICMP
denial-of-service attacks by enabling any
switch port to automatically throttle ICMP
traffic
• Multiple user authentication methods:
- IEEE 802.1X: industry-standard way of
user authentication using an 802.1X
supplicant on the client in conjunction with
a RADIUS server
-
Web-based authentication:
802.1X, provides a browser-based
environment to authenticate clients that do
not support the 802.1X supplicant
-
MAC-based authentication:
authenticated with the RADIUS server
based on the MAC address of the client;
useful for clients that have minimal or no
user interface
• Authentication flexibility:
- Multiple 802.1X users per port:
authentication of multiple 802.1X users per
port; prevents user "piggybacking" on
another user's 802.1X authentication
-
Concurrent 802.1X and Web or MAC
authentication schemes per port:
port will accept any of 802.1X and either
Web or MAC authentications
• access control lists (ACLs):
3 filtering based on the IP field,
source/destination IP address/subnet, and
source/destination TCP/UDP port number
• Identity-driven ACL: enables
implementation of a highly granular and
flexible access security policy specific to
each authenticated network user
prevents unauthorized access
• Port security:
using MAC address lockdown
• MAC address lockout: prevents configured
particular MAC addresses from connecting to
the network
allows only specified
• Source-port filtering:
ports to communicate with each other
eases switch management
• TACACS+:
security administration by using a password
authentication server
• Secure Shell (SSHv2):
• Secure Sockets Layer (SSL):
• Secure FTP:
similar to
• Secure management access:
client is
• Switch management logon security:
• Security banner:
provides
Convergence
• IP multicast routing (Premium Edge
switch
• IP multicast snooping (data-driven
provide IP Layer
• LLDP-MED (Media Endpoint Discovery):
• iSCSI support:
Quality of Service (QoS)
• Layer 4 prioritization:
• Traffic prioritization:
• Bandwidth shaping:
encrypts all
transmitted data for secure, remote
command-line interface (CLI) access over IP
networks
HTTP traffic, allowing secure access to the
browser-based management GUI in the
switch
allows secure file transfer
to/from the switch; protects against unwanted
file downloads or unauthorized copying of
switch configuration file
methods--CLI, GUI, or MIB--are securely
encrypted through SSHv2, SSL, and/or
SNMPv3
require either RADIUS or TACACS+
authentication for secure switch CLI logon
displays customized
security policy when users log in to the
switch
license): includes PIM Sparse and Dense
modes to route IP multicast traffic
automatically prevents flooding of
IGMP):
IP multicast traffic
standard extension of LLDP that stores
values for parameters such as QoS and
VLAN to automatically configure network
devices such as IP phones
enables the deployment of
Ethernet storage area network solutions using
the iSCSI standard
enables prioritization
based on TCP/UDP port numbers
allows real-time traffic
classification into 8 priority levels mapped to
8 queues
- per-port ingress-based
Rate limiting:
encrypts all
all access
can
a
3