IEEE 802.1ad QinQ and Selective QinQ
IEEE 802.1ad QinQ and Selective QinQ
IEEE 802.1ad QinQ and Selective QinQ
IEEE 802.1ad QinQ and Selective QinQ: increase the scalability of an Ethernet network by providing a hierarchical
structure; connect multiple LANs on a high-speed campus or metro network
Gigabit Ethernet port aggregation
Gigabit Ethernet port aggregation
Gigabit Ethernet port aggregation
Gigabit Ethernet port aggregation: allows grouping of ports to increase overall data throughput to a remote device
10 GbE port aggregation
10 GbE port aggregation
10 GbE port aggregation
10 GbE port aggregation: allows grouping of ports to increase overall data throughput to a remote device
Spanning Tree/MSTP, RSTP, and STP Root Guard
Spanning Tree/MSTP, RSTP, and STP Root Guard
Spanning Tree/MSTP, RSTP, and STP Root Guard
Spanning Tree/MSTP, RSTP, and STP Root Guard: prevent network loops
IPFIX/sFlow
IPFIX/sFlow
IPFIX/sFlow
IPFIX/sFlow: allows traffic sampling
Layer 3 services
Layer 3 services
Layer 3 services
Layer 3 services
Address Resolution Protocol
Address Resolution Protocol
Address Resolution Protocol
Address Resolution Protocol (ARP): determines the MAC address of another IP host in the same subnet; supports static ARPs;
gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when
subnets are separated by a Layer 2 network
Dynamic Host Configuration Protocol
Dynamic Host Configuration Protocol
Dynamic Host Configuration Protocol
Dynamic Host Configuration Protocol (DHCP): simplifies the management of large IP networks and supports client and
server; DHCP Relay enables DHCP operation across subnets
Layer 3 routing
Layer 3 routing
Layer 3 routing
Layer 3 routing
Layer 3 IPv4 routing
Layer 3 IPv4 routing
Layer 3 IPv4 routing
Layer 3 IPv4 routing: provides routing of IPv4 at media speed; supports static routes, RIP and RIPv2, OSPF, IS-IS, and BGP
RIP and RIPng support
RIP and RIPng support
RIP and RIPng support
RIP and RIPng support: provides complete support of RIP for both IPv4 and IPv6
OSPF and OSPFv3 support
OSPF and OSPFv3 support
OSPF and OSPFv3 support
OSPF and OSPFv3 support: provides complete support of OSPF for both IPv4 and IPv6
IS-IS and IS-ISv6 support
IS-IS and IS-ISv6 support
IS-IS and IS-ISv6 support
IS-IS and IS-ISv6 support: provides complete support of IS-IS for both IPv4 and IPv6
Layer 3 IPv6 routing
Layer 3 IPv6 routing
Layer 3 IPv6 routing
Layer 3 IPv6 routing: provides routing of IPv6 at media speed; supports static routes, RIPng, OSPFv3, IS-ISv6, and BGP4+
Bidirectional Forwarding Detection
Bidirectional Forwarding Detection
Bidirectional Forwarding Detection
Bidirectional Forwarding Detection (BFD): enables link connectivity monitoring and reduces network convergence time for
RIP, OSPF, BGP, IS-IS, VRRP, MPLS, and IRF
Virtual Router Redundancy Protocol
Virtual Router Redundancy Protocol
Virtual Router Redundancy Protocol
Virtual Router Redundancy Protocol (VRRP) and VRRP Extended: allow quick failover of router ports
Policy-based routing
Policy-based routing
Policy-based routing
Policy-based routing: makes routing decisions based on policies set by the network administrator
IGMPv1, v2, and v3
IGMPv1, v2, and v3
IGMPv1, v2, and v3
IGMPv1, v2, and v3: allow individual hosts to be registered on a particular VLAN
PIM-SSM, PIM-DM, and PIM-SM
PIM-SSM, PIM-DM, and PIM-SM
PIM-SSM, PIM-DM, and PIM-SM
PIM-SSM, PIM-DM, and PIM-SM (for IPv4 and IPv6): support IP Multicast address management and inhibition of DoS attacks
Equal-Cost Multipath
Equal-Cost Multipath
Equal-Cost Multipath
Equal-Cost Multipath (ECMP): enables multiple equal-cost links in a routing environment to increase link redundancy and
scale bandwidth
NEW MPLS support
NEW MPLS support
NEW MPLS support
NEW MPLS support: provides extended support of MPLS, including MPLS VPNs and MPLS Traffic Engineering (MPLS TE)
NEW VPLS support
NEW VPLS support
NEW VPLS support
NEW VPLS support: provides extended support of VPLS for data center to data center communication at Layer 2; provides
support of hierarchical VPLS for scalability
Security
Security
Security
Security
Unicast Reverse Path Forwarding
Unicast Reverse Path Forwarding
Unicast Reverse Path Forwarding
Unicast Reverse Path Forwarding (URPF): allows normal packets to be forwarded correctly, but discards the attaching packet
due to lack of reverse path route or incorrect inbound interface; prevents source spoofing and distributed attacks; supports
distributed UFPF
Defense-in-depth security
Defense-in-depth security
Defense-in-depth security
Defense-in-depth security: provides integrated and distributed security enforcement that can be managed from a central
location, such as the HP Intelligent Management Center (IMC)
Advanced processor queuing mechanism
Advanced processor queuing mechanism
Advanced processor queuing mechanism
Advanced processor queuing mechanism: helps prevent denial-of-service (DoS) attacks, while DHCP snooping helps ensure
that devices can only receive an IP address from a legitimate DHCP server on the network
IEEE 802.1X-based dynamic delivery of QoS, ACLs, and VLANs
IEEE 802.1X-based dynamic delivery of QoS, ACLs, and VLANs
IEEE 802.1X-based dynamic delivery of QoS, ACLs, and VLANs
IEEE 802.1X-based dynamic delivery of QoS, ACLs, and VLANs: allows complete control over user network access
Guest VLAN
Guest VLAN
Guest VLAN
Guest VLAN: similar to IEEE 802.1X, it provides a browser-based environment to authenticated clients
Port isolation
Port isolation
Port isolation
Port isolation: secures and adds privacy, and prevents malicious attackers from obtaining user information
MAC-based authentication
MAC-based authentication
MAC-based authentication
MAC-based authentication: allows or denies access to the switch based on client MAC address
IP source guard
IP source guard
IP source guard
IP source guard: helps prevent IP spoofing attacks
HTTPS management
HTTPS management
HTTPS management
HTTPS management: provides secure Web management
Multi-Customer Edge
Multi-Customer Edge
Multi-Customer Edge
Multi-Customer Edge (MCE)-Multicast Virtual Routing and Forwarding
-Multicast Virtual Routing and Forwarding
-Multicast Virtual Routing and Forwarding
-Multicast Virtual Routing and Forwarding (MVRF): provide MPLS Edge router support
Public Key Infrastructure
Public Key Infrastructure
Public Key Infrastructure
Public Key Infrastructure (PKI): is used to control access
RADIUS/HWTACACS
RADIUS/HWTACACS
RADIUS/HWTACACS
RADIUS/HWTACACS: eases switch management security administration by using a password authentication server
QuickSpecs
HP 5800 Switch Series
HP 5800 Switch Series
HP 5800 Switch Series
HP 5800 Switch Series
Overview
DA - 13807 North America — Version 7 — November 16, 2011
Page 3