HPE J9137A Network Switch Networking

E2520-8-PoE
The HP E2520 Switch Series is ideally suited for small and medium businesses looking to deploy voice, video, or wireless solutions that require Power over Ethernet (PoE) connectivity. The series consists of four switches: the HP E2520-8-PoE, the HP E2520-24-PoE, the HP E2520-8G-PoE, and the HP E2520-24G-PoE Switch. The four models offer a choice of either Fast Ethernet or Gigabit Ethernet connectivity. All models also include support for dual-personality Gigabit Ethernet ports that can be used for either copper or fiber connectivity. All products are fully managed via SNMP, command-line interface (CLI), and graphical user interface (GUI) and offer a Layer 2 feature set. In addition, the products provide deployment flexibility with compact, quiet, and energy-efficient designs.

Key features:
- Fully managed Layer 2 switch in 8 or 24 ports;
- Choice of Fast Ethernet or Gigabit PoE models;
- Power over Ethernet for voice, video, and wireless;
- Energy-efficient design and quiet operation;
- Rack-mountable and compact form factors.

Quality of Service (QoS)
Selectable queue configuration:
increases performance and/or traffic reliability by selecting the number of queues that best meet the requirements of your network applications; switch will map 8 priorities to either 2 or 4 queues.

Simplified QoS configuration:
- Port-based: prioritize traffic by specifying a port and priority level;
- VLAN based: prioritize traffic by specifying a VLAN and priority level.
- IEEE 802.1p traffic prioritization: honors and sets IEEE 802.1p priority in the VLAN tag.

Type of service:
- IP Precedence: honors IP Precedence bits and allows mapping to a priority queue;
- Differentiated Services Code Point values: honors Differentiated Services Code Point (DSCP) bits and allows mapping to a priority queue.
Flow control:
helps ensure reliable communications during full-duplex operation.
Management
Choice of management interfaces:
- Web graphical user interface (GUI): easy-to-use graphical interface allows configuration of the switch from any Web browser;
- Command-line interface (CLI): robust command-line interface provides advanced configuration and diagnostics;
- Simple Network Management Protocol (SNMPv2c/SNMPv3): allows switch to be managed with a variety of third-party network management applications.
Integration with HP PCM:
enables discovery, mapping, logging, and configuration via HP PCM, which is available as a free download from the Web.
Virtual stacking:
single IP address manages up to 16 switches.
Port mirroring:
allows traffic to be mirrored on any port or a network analyzer to assist with diagnostics or detecting network attacks.
Multiple configuration files:
configuration file management tools allow up to three configuration files to be managed and stored on the switch.
Dual flash images:
provide independent primary and secondary operating system files for backup while upgrading.
Network tools:
command-line interface includes telnet client, ping, traceroute, and Layer 2 link test tools for diagnostics.
IEEE 802.1AB Link Layer Discovery Protocol (LLDP):
automated device discovery protocol for easy mapping by network management applications.
Command authorization:
leverages RADIUS to link a custom list of CLI commands to individual network administrator's login; also provides an audit trail.
Logging:
local and remote logging of events via SNMP (v2c and v3) and syslog.
IPv6 host:
allows switches to be managed using IPv6 protocols.
RMON:
provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events.
Find-Fix-Inform:
finds and fixes common network problems automatically, then informs administrator.
Front-panel LEDs:
- Locator LED: allows users to set the locator LED on a specific switch to either turn on, blink, or turn off; simplifies troubleshooting by making it easy to locate a particular switch within a rack of similar switches;
- Per-port LEDs: provides an at-a-glance view of status, activity, speed, and full-duplex operation;
- Power and fault LEDs: display any issues.

Connectivity
- Auto-MDIX: automatically adjusts for straight-through or crossover cables on all ports;
- Small Form-Factor Pluggable (SFP) slots: dual-personality ports allow for either copper or fiber connectivity such as Gigabit-SX, -LX, -LH, and -BX or 100-FX and -BX;
- IEEE 802.3af Power over Ethernet: provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and security cameras (see product specifications for total PoE power available); supports some prestandard PoE devices (see product FAQs for more details);
- RJ-45 serial console port: front of unit location provides easy access to switch CLI.

Performance
- Switch on a chip: provides highly integrated, high-performance switch design with a non-blocking architecture;
- Jumbo packet support: supports up to 9216-byte frame size to improve performance of large data transfers (2520G switch).

Resiliency and high availability
Port trunking and link aggregation:
- Trunking: supports up to eight links per trunk to increase bandwidth and create redundant connections;
- IEEE 802.3ad Link Aggregation Protocol (LACP): eases configuration of trunks through automatic configuration.
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP):
provides high link availability in multiple VLAN environments by allowing multiple spanning trees; provides legacy support for IEEE 802.1w (Rapid Reconfiguration of Spanning Tree Protocol) and IEEE 802.1d (Spanning Tree Protocol).

Layer 2 switching
- VLAN support and tagging: supports the IEEE 802.1Q (4,094 VLAN IDs) and up to 256 port-based VLANs simultaneously;
- GARP VLAN Registration Protocol (GVRP): allows automatic learning and dynamic assignment of VLANs;
- Broadcast control: allows limitation of broadcast traffic rate to cut down on unwanted broadcast traffic on the network.

Security
Manager and operator privilege levels:
enables read-only (operator) and read-write (manager) access on management interfaces.
RADIUS/TACACS+ for management access authentication:
eases switch management security administration by using a password authentication server.
Secure protocols for encryption of management traffic:
- Secure Shell (SSHv2): encrypts all transmitted data for secure, remote CLI access over IP networks;
- Secure Sockets Layer (SSL): encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch;
- Simple Network Management Protocol (SNMP) v3: allows encryption of traffic between switch MIBs and network management software;
- Secure FTP (SFTP): encrypts uploads and downloads of configuration file.
Protected ports:
prevents designated ports from communicating with each other while allowing access to unprotected ports.
Port security:
allows access only to specified MAC addresses, which can be learned or specified by the administrator.
MAC address lockout:
prevents particular configured MAC addresses from connecting to the network.
MAC address lockdown:
allows only specified MAC addresses access to the network on a specified port.
Denial-of-service (DoS) attack filtering:
automatically filters and drops common DoS attack traffic types.
User authentication for port access:
- IEEE 802.1X: utilizes an industry-standard user authentication with an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server;
- Web-based: similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients;
- MAC-based: client is authenticated with the RADIUS server based on MAC address;
- Concurrent authentication schemes: each switch port will accept up to two sessions of IEEE 802.1X, Web, and/or MAC authentications concurrently.
Custom banner:
displays security policy when users log in to the switch.
Spanning Tree Protocol Bridge Protocol Data Unit (BPDU) port protection:
blocks BPDUs on ports that do not require BPDUs, preventing forged BPDU attacks.
Spanning Tree Protocol Root Guard:
when running the spanning tree protocol, protects root bridge from malicious attack or configuration mistakes.
Physical security:
- Front-panel buttons: provides the ability to disable reset and clear buttons on front panel for added security;
- Kensington Lock: 2520-8-PoE and 2520G-8-PoE switches include a Kensington Lock slot for securing the switches in open-space deployments.

Convergence:
- LLDP-MED (Media Endpoint Discovery): a standard extension of LLDP that automatically configures network devices such as IP phones;
- IP multicast snooping and data-driven IGMP: automatically prevents flooding of IP multicast traffic;
- Voice VLAN: uses LLDP-MED to automatically configure VLAN for IP phones.

Flexibility
Quiet operation:
- Fanless design (2520-8-PoE and 2520G-8-PoE switches): enables quiet operation for deployment in open spaces;
- Variable-speed fans (2520-24-PoE and 2520G-24-PoE switches): improves fan speed for the operating environment while keeping noise and energy consumption levels to a minimum.
Flexible mounting:
- Rackable: is mountable in a standard 19-inch rack with included hardware (2520-8-PoE and 2520G-8-PoE rack kit available free of charge via the Web);
- Wall mountable: allows the switch to be mounted to a wall using included hardware;
- Surface mountable: allows the product to be mounted above or below a surface (such as a desk or table) with included hardware.
Compact size:
products are designed to reduce space requirements (see product specifications for exact dimensions).

Product architecture
Energy-efficient design:
- Fans: fanless (2520-8-PoE and 2520G-8-PoE) and variable-speed fans (2520-24-PoE and 2520G-24-PoE) help reduce power consumption ;
- Port LEDs: port link and activity LEDs can be turned off to conserve energy;
- Port low-power mode: when no link is detected on a port, the port will automatically go into low-power mode to conserve energy (2520G switch).