HP 7500 Series Datasheet page 10

Data sheet | HP 7500 Switch Series
10
• MPLS
Uses BGP to advertise routes across label switched paths (LSPs), but uses simple labels
to forward packets from any L2 or L3 protocol—which reduces complexity and increases
performance; supports graceful restart for reduced failure impact; and provides support for
LSP tunneling and multilevel stacks
• MPLS L3 VPN
Allows L3 VPNs across a provider network; uses MP-BGP to establish private routes for
increased security; and supports RFC 2547bis multiple autonomous system VPNs for added
flexibility
• MPLS L2 VPN
Establishes simple L2 point-to-point VPNs across a provider network, using only MPLS label
distribution protocol (LDP); requires no routing—which decreases complexity, increases
performance, and allows VPNs of non-routable protocols; uses no routing information for
increased security; and supports circuit cross connect, static virtual circuits, a Martini draft,
and Kompella-draft technologies
• Virtual private LAN service (VPLS)
Establishes point-to-multipoint L2 VPNs across a provider network
• Service loopback
Allows any module to take advantage of other modules with higher features, including open
application architecture (OAA) modules, by redirecting traffic; reduces investment and enables
higher bandwidth and load sharing; and supports IPv6, IPv6 multicast, tunneling, and MPLS
Security
• ACL enablement
Supports powerful ACLs for both IPv4 and IPv6; and helps filter traffic to prevent unauthorized
users from accessing the network or control network traffic in order to save resources; rules
can either deny or permit traffic to be forwarded; rules can be based on an L2 header or an L3
protocol header; and rules can be set to operate on specific dates or times
• Remote authentication dial-in user service (RADIUS)
Eases switch security access administration by using a password authentication server
• Terminal access controller access-control system (TACACS+)
Delivers an authentication tool, using TCP with encryption of the full authentication request,
providing additional security
• Switch management logon security
Helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
• SSHv2
Uses external servers to securely log in to a remote device; protects against IP spoofing and
plain-text password interception, with authentication and encryption; and increases the
security of SFTP transfers