Advertisement
QuickSpecs
Overview
Prevention
Access control list (ACL): supports powerful ACLs for both IPv4 and IPv6; filters traffic to prevent unauthorized users from
accessing the network, or controls network traffic to save resources; rules can either deny or permit traffic to be forwarded;
rules can be based on Layer 2 header or Layer 3 protocol header; rules can be set to operate on specific dates or times
IP Source Guard: filters packets on a per-port basis, which prevents illegal packets from being forwarded
Network address translation (NAT): provides a method for translating private IP addresses to public IP addresses, reducing the
number of IP addresses used, and isolates the enterprise addressing environment
Multiple user authentication methods:
IEEE 802.1X: is an industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in
conjunction with a RADIUS server
Web-based authentication: similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients that
do not support the IEEE 802.1X supplicant
MAC-based authentication: authenticates the client with the RADIUS server based on the client's MAC address
Endpoint Admission Defense (EAD): provides security policies to users accessing a network
Port isolation: secures and adds privacy, and prevents malicious attackers from obtaining user information
Convergence
Multicast Source Discovery Protocol (MSDP): is used for inter-domain multicast applications, allowing multiple PIM-SM
domains to interoperate
Internet Group Management Protocol (IGMP): is used by IP hosts to establish and maintain multicast groups; supports IGMPv1,
v2, and v3; utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks
Protocol Independent Multicast (PIM): is used for IPv4 and IPv6 multicast applications; supports PIM Dense Mode (PIM-DM),
Sparse Mode (PIM-SM), and Source-Specific Mode (PIM-SSM)
Multicast Border Gateway Protocol (MBGP): allows multicast traffic to be forwarded across BGP networks and kept separate
from unicast traffic
Multicast Listener Discovery (MLD) protocol: is used by IP hosts to establish and maintain multicast groups; supports v1 and v2
and utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv6 multicast networks
Multicast VLAN: allows multiple VLANs to receive the same IPv4 or IPv6 multicast traffic, reducing network bandwidth demand
by eliminating multiple streams to each VLAN
Integration
Open Application Architecture (OAA): provides high-performance application-specific modules fully integrated with the
switching architecture; uses the chassis high-speed backplane to access network-related data; increases performance, reduces
costs, and simplifies network management
VPN firewall module: provides enhanced stateful packet inspection and filtering; supports flexible security zones and virtual
firewall containment; provides advanced VPN services with 3DES and AES encryption at high performance and low latency, Web
content filtering, and application prioritization and enhancement
Load-balancing module: local and global server load-balancing module improves traffic distribution using powerful scheduling
algorithms, including Layer 4 to 7 services; monitors the health status of servers and firewalls
NetStream module: provides traffic analysis and statistics capture to allow network administrators to rapidly identify network
anomalies and security threats, as well as capacity planning information; supports NetFlow v5 and v9
Wireless controller module: supports up to 640 access points (APs) per module; supports IEEE 802.11s/b/g/n APs; provides full
user access management and QoS policies on a per-user basis; supports enterprise-class encryption; supports RF monitoring
and control, MAP control, rogue AP detection, and location policy enforcement
Additional information
DA - 13773 North America — Version 10 — July 12, 2013
HP 9500 Switch Series
Page 6
Advertisement
