HP 3500yl QoS functions, Convergence, Bandwidth shaping using, Advanced classifier-based QoS

Page 30

Identity-driven ACL: enables implementation of a highly granular and flexible access security policy specific to each authenticated network user

Port security: prevents unauthorized access using MAC address lockdown

MAC address lockout: prevents configured particular MAC addresses from connecting to the network

Source-port filtering: allows only specified ports to communicate with each other

Security banner: displays customized security policy when users log in to the switch

Management Interface Wizard: CLI-based step-by-step configuration tool to ensure that management interfaces such as SNMP, telnet, SSH, SSL, Web, and USB are secured to desired level

Management access:

All access methods—CLI, GUI, or MIB—are securely encrypted through SSHv2, SSL, and/or SNMPv3

RADIUS and TACACS+: can require either RADIUS or TACACS+ authentication for secure switch CLI logon

Secure FTP: allows secure file transfer to/from the switch and protects against unwanted file downloads or unauthorized copying of switch configuration file

QoS functions

Layer 4 prioritization: enables prioritization based on TCP/UDP ports

Traffic prioritization: allows real-time traffic classification into 8 priority levels mapped to 8 queues

Bandwidth shaping using:

Rate limiting: per-port ingress-based enforced bandwidth maximums

Guaranteed minimums: per-port, per-queue egress-based guaranteed bandwidth minimums

Class of Service (CoS): sets 802.1p priority tag based on IP address, IP Type of Service (ToS), L3 protocol, TCP/UDP port number, source port, and DiffServ

Policy Enforcement Engine: Policy Enforcement Engine is user configured to select packets that are then forwarded or dropped (based on ACLs, QoS, and Rate Limiting). The engine is fast, and can look for multiple variables, such as an IP address and port number, in a single pass through a packet. It provides a common user experience regardless of which switch the user is connected to.

Advanced classifier-based QoS:

Provides finer granularity with multiple match criteria to select and prioritize network traffic

Integrates QoS functions: select traffic for prioritization and remote mirroring, setting priority, QoS policy, and rate limit

QoS policy can be applied to both IPv4 and IPv6 traffic for each port or VLAN

Convergence

IP multicast routing: includes PIM Sparse and Dense modes to route IP multicast traffic

IP multicast data-driven IGMP: automatically prevents flooding of IP multicast traffic

RADIUS VLAN for voice: uses standard RADIUS attribute and LLDP-MED to automatically configure VLAN for IP phones

LLDP-MED (Media Endpoint Discovery): a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones

PoE allocations: supports multiple methods (automatic, 802.3af class, LLDP-MED, or user specified) to allocate PoE power for optimal energy saving

iSCSI support: enables the deployment of Ethernet storage area network solutions using the iSCSI standard

L2/L3 jumbo frames: Layer 2/Layer 3 jumbo frames provide scalability in throughput.

30

Image 30
Contents HP ProCurve Switch 5400zl, 3500yl, and 6200yl Series Ospf Page Executive summary IntroductionProduct positioning OverviewHP ProCurve Switch 5400zl and 3500yl Series HP ProCurve Switch 6200yl-24G-mGBICProVision Asic architecture Inside the ProVision Asic Architecture Classification and lookupPolicy Enforcement Engine Management subsystem Advanced capabilities of the product familyHP ProCurve Switch 5400zl Series ProCurve Switch 5400zl Chassis 5400zl chassis layoutHP ProCurve Switch 5406zl chassis layout Power supplies Power supply types System PoE powerFan tray Zl modules Management modulePower supply configurations HP ProCurve Switch 5400zl series line interface modules5406zl 5412zl Specifications Console port ProcessorMemory Auxiliary portDescription PortsMini-GBICs supported ordered separately Open mini-GBIC slots Transceivers supported ordered separately Maximum distanceHP ProCurve ONE Services zl Module J9289A Description HP ProCurve Radio Ports supported ordered separatelyHP ProCurve Switch 3500yl Series Page LED status indicators Additional line interface moduleHP ProCurve Switch 6200yl HP ProCurve Switch 6200yl-24G-mGBIC J8992A Overview of features and benefits Security featuresPerformance Convergence Bandwidth shaping usingQoS functions Advanced classifier-based QoSRouting protocols Layer 2 switchingBridging protocols IPv6Future-proofing DiagnosticsManagement Low cost of ownershipGeneral protocols Standards and protocolsDevice management IP MulticastMIBs Network managementQoS/Cos Capacity and performance features comparisonPerformance and capacity SecurityPer-port buffer sizes Optimizing the 10-GbE port configuration Page Throughput and latency performance data Gbps Gigabit performance traffic patterns HP ProCurve warranty and support Industry-leading warrantyAppendix a Premium License Intelligent Edge and Premium LicenseTask Manual Using Appendix B Policy Enforcement Engine Granular policy enforcement Wire-speed performance for ACLsPolicy Enforcement Engine benefits Hardware-based performanceAppendix C Power over Ethernet PoE device typesPower delivery options Additional PoE power-external suppliesPoE negotiation Appendix D PIM Sparse Mode Support for pre-802.3af standard powered devicesAppendix E LLDP-MED Appendix F Virus Throttle security Page Sensitivity Appendix G VrrpResponse options Connection-rate ACLXrrp support on 5300xl switch Appendix H Ospf Equal Cost Multipath Appendix I Advanced Classifier-Based QoS Vlan IDAppendix J Server-to-Switch Distributed Trunking Limitations/RestrictionsAppendix K Troubleshooting LED status indicators for 5400zl seriesAn example of upstream traffic forwarding is as follows EPS LED LED status indicators for 3500yl and 6200yl series Temp On green Blinking orange Fan Status PoE Status Off Part numbers and Field Replaceable Units Part number ComponentPart number Component For more information