HP 6600 Series Quickspecs page 5

QuickSpecs
Overview
ICMP throttling
defeats ICMP denial-of-service attacks by enabling any switch port to automatically throttle ICMP traffic
Virus throttling
detects traffic patterns typical of worm-type viruses and either throttles or entirely prevents the virus from spreading across the
routed VLANs or bridged interfaces without requiring external appliances
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
Dynamic IP lockdown
works with DHCP protection to block traffic from unauthorized hosts, preventing IP source address spoofing
DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
USB Secure Autorun (requires HP PCM+)
deploys, diagnoses, and updates a switch using a USB flash drive; works with a secure credential to prevent tampering
STP Root Guard
protects the root bridge from malicious attack or configuration mistakes
Management Interface Wizard
helps secure management interfaces such as SNMP, telnet, SSH, SSL, Web, and USB at the desired level
Access control lists (ACLs)
provide filtering based on the IP field, source/destination IP address/subnet, and source/destination TCP/UDP port number on a
per-VLAN or per-port basis
Multiple user authentication methods:
Multiple IEEE 802.1X users per port: authenticates multiple IEEE 802.1X users per port
Web-based authentication: authenticates from Web browser for clients that do not support IEEE 802.1X supplicant
MAC-based authentication: client is authenticated with the RADIUS server based on client's MAC address
Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port: switch port accepts up to 32 sessions of IEEE
802.1X, Web, and MAC authentications
Switch CPU protection
provides automatic protection against malicious network traffic trying to shut down the switch
Identity-driven ACL
enables implementation of a highly granular and flexible access security policy specific to each authenticated network user
Secure Sockets Layer (SSL)
encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
Security banner
displays a customized security policy when users log in to the switch
Multicast support
IP multicast routing (requires Premium License)
includes PIM Sparse and Dense modes to route IP multicast traffic
IP multicast snooping (data-driven IGMP)
automatically prevents flooding of IP multicast traffic
Convergence
NEW Auto VLAN configuration for voice
RADIUS VLAN
uses a standard RADIUS attribute and LLDP-MED to automatically configure a VLAN for IP phones
CDPv2
DA - 13267 Worldwide — Version 19 — November 22, 2013
HP 6600 Switch Series
Page 5