HP 10500 Series Datasheet page 8

Data sheet | HP 10500 Switch Series
8
• RIP next generation (RIPng)
Extends RIPv2 to support IPv6 addressing
• OSPFv3
Provides OSPF support for IPv6
• IS-IS for IPv6
Extends IS-IS to support IPv6 addressing
• BGP+
Extends BGP-4 to support multiprotocol BGP, including support for IPv6 addressing
• MPLS
Uses BGP to advertise routes across label switched paths (LSPs), but uses simple labels
to forward packets from any L2 or L3 protocol—which reduces complexity and increases
performance; supports graceful restart for reduced failure impact; and provides support for
LSP tunneling and multilevel stacks
• MPLS L3 VPN
Allows L3 VPNs across a provider network; uses MP-BGP to establish private routes for
increased security; and supports RFC 2547bis multiple autonomous system VPNs for added
flexibility
• MPLS L2 VPN
Establishes simple L2 point-to-point VPNs across a provider network, using only MPLS label
distribution protocol (LDP); requires no routing—which decreases complexity, increases
performance, and allows VPNs of non-routable protocols; uses no routing information for
increased security; and supports circuit cross connect, static virtual circuits, a Martini draft,
and Kompella-draft technologies
• Virtual private LAN service (VPLS)
Establishes point-to-multipoint L2 VPNs across a provider network
• Super VLAN
Saves IP address space, using RFC 3069 standard also called VLAN aggregation
• ECMP
Enables multiple equal-cost links in a routing environment to increase link redundancy and
scale bandwidth
• IPv6 tunneling
Provides an important element for the transition from IPv4 to IPv6; allows IPv6 packets to
traverse IPv4-only networks by encapsulating the IPv6 packet into a standard IPv4 packet;
supports manually configured, 6-to-4, intra-site-automatic-tunnel-addressing-protocol
(ISATAP) tunnels, and IPv6 VPN provider-edge router tunnel
Security
• ACL enablement
Supports powerful ACLs for both IPv4 and IPv6; and helps filter traffic to prevent unauthorized
users from accessing the network or control network traffic in order to save resources; rules
can either deny or permit traffic to be forwarded; rules can be based on an L2 header or an L3
protocol header; and rules can be set to operate on specific dates or times
• Remote authentication dial-in user service (RADIUS)
Eases switch security access administration by using a password authentication server
• Terminal access controller access-control system (TACACS+)
Delivers an authentication tool, using TCP with encryption of the full authentication request,
providing additional security