HPE JE096A Network Switch Networking

E5500-24G-SFP
Smart, voice-ready HP E5500G Gigabit switches deliver outstanding performance, security, and reliability for robust switching to the enterprise edge. The series consists of Layer 2/3/4 Gigabit Ethernet and PoE switches with advanced features for the most demanding applications. Stackable up to eight units high, one stack can provide up to 448 Gigabit Ethernet ports with 96 Gbps of resilient stacking bandwidth, all centrally managed with high-end enterprise chassis-class availability. The latest traffic prioritization and automatic assignment of VoIP traffic to dedicated VLANs help ensure time-sensitive traffic gets the priority necessary for optimal communications. Further expansion is possible in conjunction with other HP switch series, allowing single IP management for up to 32 devices.

Key features:
- Enterprise-class features;
- Priced for small to mid-sized environments;
- Out-of-the-box setup when using defaults;
- Optional 10 GbE uplink connections;
- Convergence support for today’s business.

Quality of Service (QoS)
Traffic prioritization (IEEE 802.1p): allows real-time traffic classification into eight priority levels mapped to eight queues.
Class of Service (CoS): sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ.
Rate limiting: sets per-port ingress enforced maximums and per-port, per-queue guaranteed minimums.
Bandwidth shaping:
- Rate limiting: provides per-port, ingress-based enforced bandwidth maximums;
- Guaranteed minimums: provides per-port, per-queue egress-based guaranteed bandwidth minimums.

Management
- Remote configuration and management: is available through a secure Web browser or a command-line interface (CLI);
- Manager and operator privilege levels: enable read-only (operator) and read-write (manager) access on CLI and Web browser management interfaces;
- Management VLAN: segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP;
- RADIUS accounting support: separates RADIUS accounting server support per SSID; provides detailed session, usage, and billing information for each client activity;
- IEEE 802.1ab LLDP discovery: advertises and receives management information from adjacent devices on a network;
- Multiple configuration files: can be stored to the flash image;
- Dual flash images: provide independent primary and secondary operating system files for backup while upgrading;
- Secure Web GUI: provides a secure, easy-to-use graphical interface for configuring the module via HTTPS;
- Command-line interface (CLI): provides a secure, easy-to-use command-line interface for configuring the module via SSH or a switch console; provides direct real-time session visibilit;
- SNMPv1, v2c, and v3: facilitate centralized discovery, monitoring, and secure management of networking devices;
- 3Com-heritage Comware V3 Operating System: CLI and Web user interface in common with HP E4XXX and E55XX series switches;
- Port mirroring: enables traffic on a port to be simultaneously sent to a network analyzer for monitoring.

Connectivity
- Auto-MDIX: automatically adjusts for straight-through or crossover cables on all 10/100 and 10/100/1000 ports;
- Built-in dual stacking ports: built-in 24 Gbps stacking ports provide wire-speed high-bandwidth resilient stacking up to 96 Gbps bandwidth full duplex, for enterprise-class performance and scalability;
- Optional 10 Gigabit Ethernet ports: add 10 Gigabit Ethernet connections for uplinks or high-bandwidth server connections; flexibly support XENPAK or XFP-style 10 Gigabit transceivers;
- Optional 8-port SFP module: add up to eight additional wire-speed Gigabit ports for unprecedented Gigabit density in a single 1U enclosure;
- Dual-personality functionality: four 10/100/1000 ports or SFP slots for optional fiber connectivity such as Gigabit-SX, -LX, or -LH;
- Upgradable IEEE 802.3af Power over Ethernet (PoE): Start with a non-PoE unit and field upgrade to PoE by installing a different power supply; provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and security cameras;
- Advanced stacking: locally connect up to eight E5500G switches using built-in stacking ports and manage as a single entity; improves resiliency by spreading aggregated links across multiple stacked units.

Manageability
- RMON (remote monitoring): provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events;
- Dual flash images: provides independent primary and secondary operating system files for backup while upgrading;
- Full-featured console: provides complete control of the switch with a familiar command-line interface (CLI);
- Web interface: allows configuration of the switch from any Web browser on the network;
- Multiple configuration files: allow multiple configuration files to be stored to flash image;
- Software updates: free downloads from the Web;
- IEEE 802.1AB Link Layer Discovery Protocol (LLDP): automated device discovery protocol provides easy mapping using network management applications;
- Virtual stacking capability: single IP address management for a virtual stack of up to 255 Comware-based 3Com legacy devices, including HP E4XXX and E55XX series switches.

Layer 2 switching
- VLAN support and tagging: support IEEE 802.1Q, with 4094 simultaneous VLAN IDs;
- GARP VLAN Registration Protocol (GVRP): allows automatic learning and dynamic assignment of VLANs;
- Jumbo packet support: supports up to 9220-byte frame size to improve performance of large data transfers;
- IEEE 802.1ad QinQ: increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a high-speed campus or metro network.

Layer 3 routing
- Routing protocols: supports static routes, RIP, RIPv2, OSPF, and BGP4;
- OSPF-ECMP (Equal-Cost Multipath): enables multiple equal-cost links in OSPF environment to increase link redundancy and scale bandwidth.

Security
- Access control lists (ACLs): provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number;
- RADIUS/TACACS+: eases switch management security administration by using a password authentication server;
- Secure Shell (SSHv2): encrypts all transmitted data for secure, remote command-line interface (CLI) access over IP networks;
- Secure Web management with HTTPS and SSL: encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch;
- IEEE 802.1X and RADIUS network logins: control port-based access for authentication and accountability;
- Port security: allows access only to specified MAC addresses, which can be learned or specified by the administrator;
- MAC address lockout: prevents particular configured MAC addresses from connecting to the network;
- Switch management logon security: can require either RADIUS or TACACS+ authentication for secure switch CLI logon;
- Secure management access: securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3;
- Custom banner: displays security policy when users log in to the switch;
- Automatic VLAN assignment: automatically assigns users to the appropriate VLAN based on their identity and location and the time of day;
- IEEE 802.1X: provides port-based user authentication with support for Extensible Authentication Protocol (EAP) MD5, TLS, TTLS, and PEAP with choice of AES, TKIP, and static or dynamic WEP encryption for protecting wireless traffic between authenticated clients and the access point;
- Management password: provides security so that only authorized access to the Web browser interface is allowed;
- Dynamic IP lockdown: works with DHCP protection to block traffic from unauthorized hosts, preventing IP source address spoofing;
- DHCP protection: blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks;
- Dynamic ARP protection: blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data.

Convergence
- LLDP-MED (Media Endpoint Discovery): is a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones;
- IEEE 802.1AB Link Layer Discovery Protocol (LLDP): is an automated device discovery protocol for easy mapping by network management applications;
- Automated voice VLAN assignment: recognizes IP phones and automatically assigns voice traffic to a dedicated VLAN for IP phones.