MAC address lockdown
allows only specified MAC addresses access to the network on a specified port
Multiple user authentication methods
IEEE 802.1X
is an industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a
RADIUS server
Web-based authentication
similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients that do not support the IEEE
802.1X supplicant
MAC-based authentication
client is authenticated with the RADIUS server based on the client's MAC address
Authentication flexibility—2 IEEE 802.1X
provides authentication of multiple IEEE 802.1X users per port; prevents user "piggybacking" on another user's IEEE 802.1X
authentication
Protected ports
prevents designated ports from communicating with each other while allowing access to unprotected ports
Per-port broadcast throttling
selectively configures broadcast control on heavy traffic port uplinks
Physical security
Front-panel buttons
provides the ability to disable reset and clear buttons on the front panel for added security
Kensington Lock slot
includes a Kensington Lock slot for securing the switches in open-space deployments
Spanning Tree Protocol Root Guard
when running the Spanning Tree Protocol, it protects the root bridge from malicious attacks or configuration mistakes
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
Convergence
IP multicast snooping and data-driven IGMP
automatically prevent flooding of IP multicast traffic
LLDP-MED
(Media Endpoint Discovery)
is a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network
devices such as IP phones
IEEE 802.1AB Link Layer Discovery Protocol
(LLDP)
is an automated device discovery protocol that provides easy mapping of network management applications
PoE allocations
support multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user specified) to allocate PoE power for more efficient
energy savings
Monitor and diagnostics
Port mirroring
enables traffic on a port to be simultaneously sent to a network analyzer for monitoring
Network tools
CLI includes telnet client, ping, traceroute, and Layer 2 link test tools for diagnostics
Logging
local and remote logging of events via SNMP (v2c and v3) and syslog
Troubleshooting
QuickSpecs
HP 2915 Switch Series
Overview
DA - 13672 Worldwide — Version 8 — December 9, 2013
Page 4
