Features And Benefits; Layer 3 Routing; Resiliency And High Availability; Layer 2 Switching - HP ProCurve 4204vl Datasheet

HP ProCurve Switch 4200vl Series

Features and benefits

Industry-leading warranty
Management
• Uni-Directional Link Detection (UDLD): monitors cable
between two switches and shuts down the ports on both ends if
the cable is broken turning the bi-directional link into
uni-directional; this prevents network problems such as loops
Connectivity
• Auto-MDIX: automatically adjusts for straight-through or
crossover cables on all 10/100/1000 ports
Performance
• Architecture: up to 76.8 Gbps crossbar switching fabric
provides wire-speed intra- and inter-module switching with up to
48 million pps throughput built on ProCurve custom-designed
ASIC technology

Resiliency and high availability

• IEEE 802.3ad Link Aggregation Control Protocol (LACP) and
ProCurve trunking: support up to 60 trunks, each with up to 8
links (ports) per trunk; trunking across modules is supported
• IEEE 802.1s Multiple Spanning Tree Protocol: provides high
link availability in multiple VLAN environments by allowing multiple
spanning trees; encompasses IEEE 802.1D Spanning Tree
Protocol and IEEE 802.1w Rapid Spanning Tree Protocol
• Hot-swappable modules: permit modules and mini-GBICs to be
added or swapped without interrupting the network
• Optional redundant power supply: provides uninterrupted
power; allows hot-swapping of one of the two supplies when
installed

Layer 2 switching

• VLAN support and tagging: supports the IEEE 802.1Q (4,094
VLAN IDs) and 256 VLANs simultaneously
• GARP VLAN Registration Protocol: allows automatic learning
and dynamic assignment of VLANs
♦ For as long as you own the product, with next-business-day advance replacement (available in most countries). The following hardware products and their related series modules have a one-year
hardware warranty with extensions available: HP ProCurve Routing Switch 9300m Series, HP ProCurve Switch 8100fl Series, and HP ProCurve Network Access Controller 800. The following hardware
mobility products have a one-year hardware warranty with extensions available: HP ProCurve M111 Client Bridge, HP ProCurve MSM3xx-R Access Points, HP ProCurve MSM7xx Mobility and Access
Controllers, HP ProCurve RF Manager IDS/IPS Systems, HP ProCurve MSM Power Supplies, HP ProCurve 1-Port Power Injector, and HP ProCurve CNMS Appliances. Disk drives in the HP ProCurve
ONE Services zl Modules have a five-year hardware warranty. Standalone software, upgrades, or licenses may have a different warranty duration. For details, refer to the ProCurve Software License,
Warranty, and Support booklet at http://www.procurve.com/warranty.

Layer 3 routing

• Basic IP routing: enables automatic routing to the connected
VLANs and up to 16 static routes--including one default route--in
IP networks
Security
• Multiple user authentication methods:
- IEEE 802.1X: industry-standard method of user authentication
using an IEEE 802.1X supplicant on the client in conjunction with
a RADIUS server
- Web-based authentication: similar to IEEE 802.1X, provides a
browser-based environment to authenticate clients that do not
support the IEEE 802.1X supplicant
- MAC-based authentication: client is authenticated with the
RADIUS server based on the client's MAC address
• Authentication flexibility:
- Multiple IEEE 802.1X users per port: provides authentication of
up to eight IEEE 802.1X users per port; prevents user
"piggybacking" on another user's IEEE 802.1X authentication
• Dynamic ARP protection: blocks ARP broadcasts from
unauthorized hosts, preventing eavesdropping or theft of network
data
• Port security: allows access only to specified MAC addresses,
which can be learned or specified by the administrator
• MAC address lockout: prevents configured particular MAC
addresses from connecting to the network
• Secure FTP: allows secure file transfer to/from the switch;
protects against unwanted file downloads or unauthorized copying
of switch configuration file
• RADIUS/TACACS+: eases switch management security
administration by using a password authentication server
• Source-port filtering: allows only specified ports to
communicate with each other
• Secure Shell (SSHv2): encrypts all transmitted data for secure,
remote command-line interface (CLI) access over IP networks
• Secure Sockets Layer (SSL): encrypts all HTTP traffic, allowing
secure access to the browser-based management GUI in the
switch
• Switch management logon security: can require either
RADIUS or TACACS+ authentication for secure switch CLI logon
2