blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
MAC address lockout
prevents configured particular MAC addresses from connecting to the network
MAC address lockdown
allows only specified MAC addresses access to the network on a specified port
Multiple user authentication methods
IEEE 802.1X
uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry
standards
Web-based authentication
provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X
supplicant
MAC-based authentication
authenticates the client with the RADIUS server based on the client's MAC address
Authentication flexibility—2 IEEE 802.1X
provides authentication of multiple IEEE 802.1X users per port; prevents user "piggybacking" on another user's IEEE 802.1X
authentication
Protected ports
prevents designated ports from communicating with each other while allowing access to unprotected ports
Per-port broadcast throttling
selectively configures broadcast control on heavy traffic port uplinks
Physical security
Front-panel buttons
provides the ability to disable reset and clear buttons on front panel for added security
Kensington Lock slot
includes a Kensington Lock slot for securing the switches in open-space deployments
Spanning Tree Protocol Root Guard
when running the spanning tree protocol, protects root bridge from malicious attacks or configuration mistakes
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
Convergence
IP multicast snooping and data-driven IGMP
automatically prevent flooding of IP multicast traffic
LLDP-MED (Media Endpoint Discovery)
defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure
network devices such as IP phones
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
facilitates easy mapping using network management applications with LLDP automated device discovery protocol
PoE allocations
supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power for more
efficient energy savings
Monitor and diagnostics
Port mirroring
enables traffic on a port to be simultaneously sent to a network analyzer for monitoring
Network tools
command-line interface includes telnet client, ping, traceroute, and Layer 2 link test tools for diagnostics
QuickSpecs
HP 2615 Switch Series
Overview
DA - 13673 North America — Version 11 — December 9, 2013
Page 4
