HP 7500, 7510, 7506-V, 7506, 7503 Datasheet

...
Data sheet
HP 7500 Switch Series
Product overview
The HP 7500 Switch Series comprises modular, multilayer chassis switches that meet the evolving needs of integrated services networks. The switches can be deployed in multiple network environments, including the enterprise LAN core, aggregation layer, and wiring
closet edge. They oer 40GbE connectivity and cost-eective, wire-speed 10GbE ports to safeguard the throughput and bandwidth needed for your mission-critical data and high-speed
communications.
A passive backplane, support for load sharing, and redundant management and fabrics help
support.
A summary of the highlights of the 7500 Switch Series:
• Versatile, high-performance modular switches
• Enterprise LAN core, aggregation, and edge
• Extensive switching and routing, IPv6, and multiprotocol label switching (MPLS)
Advanced functionality with service modules
Robust network and service virtualization
Data sheet | HP 7500 Switch Ser ies
Features and benets
QoS
• IEEE 802.1p prioritization
Delivers data to devices, based on the priority and type of trac
• Class of service (CoS)
Sets the IEEE 802.1p priority tag based on the IP address, IP type of service (ToS), L3 protocol, TCP/ user datagram protocol (UDP) port number, source port, and DiServ
Bandwidth shaping
– Port-based rate limiting
Enabled per-port ingress/egress-enforced bandwidth increase
– Classier-based rate limiting
Uses an access control list (ACL) to enforce increased bandwidth for ingress trac on each
port
– Reduced bandwidth
Provides per-port per-queue egress-based bandwidth reduction
• Weighted random early detection (WRED)/random early detection
Delivers congestion avoidance capabilities through the use of queue management algorithms
Powerful QoS feature
Provides support for these congestion actions: strict priority queuing, weighted round robin, weighted fair queuing, and WRED
• Trac policing
Supports committed access rate and line rate
Intrusion detection system (IDS)/intrusion prevention system (IPS)
Deep packet inspection
Examines the packet payload as well as the frame and packet headers; packets are dropped if attacks or intrusions are detected using signature-based or protocol-anomaly-based
detection
• Signature-based detection
Detects attacks that have known attack patterns; IPS maintains a signature database that contains the pattern denitions for known attacks that can be updated automatically using a
subscription service
• Protocol anomaly-based detection
Detects attacks that use anomalies in application protocol payloads
• Severity-based action policies
Involve action taken against attacks based on their severity; the actions include “allow,” “block,” and “terminate connection” to provide appropriate mitigation
Signature update service
Provides regular updates to the signature database, helping ensure that the latest available signatures are installed
2
Data sheet | HP 7500 Switch Ser ies
Virtual private network (VPN)
• IPSec
Provides secure tunneling over an untrusted network, such as the Internet or a wireless network; and oers data condentiality, authenticity, and integrity between two network
endpoints
• Generic routing encapsulation (GRE)
Transports L2 connectivity over an L3 path in a secured way; and enables the segregation of trac from site to site
• Manual or automatic Internet key exchange (IKE)
Enables the manual or automatic key exchange required for the algorithms used in encryption or authentication; auto-IKE allows automated management of the public key exchange,
helping ensure the highest levels of encryption
Management
Management interface control
Provides management access through a modem port and terminal interface as well as in-band and out-of-band Ethernet ports; and oers access through the terminal interface, telnet, or secure shell (SSH)
• Industry-standard CLI with a hierarchical structure
Reduces training time and expenses; and increases productivity in multivendor installations
Management security
Restricts access to critical conguration commands; oers multiple privilege levels with password protection; uses ACLs to provide telnet and SNMP access; and allows logging of all
access with local and remote syslog capabilities
• SNMPv1, v2, and v3
Provide complete support of the SNMP and industry-standard management information base (MIB) as well as private extensions; SNMPv3 supports increased security using encryption
• sFlow (RFC 3176)
Provides scalable ASIC-based wire-speed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring
purposes
• Remote monitoring (RMON)
Uses standard SNMP to monitor essential network functions; and supports events, alarms, history, and statistics groups as well as a private alarm extension group
• FTP, trivial FTP (TFTP), and secure FTP (SFTP) support
Oers dierent mechanisms for conguration updates; the FTP allows bidirectional transfers over a TCP/IP network; the TFTP is a simpler method that uses the UDP; and the SFTP runs
over an SSH tunnel to provide additional security
3
Data sheet | HP 7500 Switch Ser ies
Debug and sampler utility
Supports ping and trace-route for both IPv4 and IPv6
• Network time protocol (NTP)
Synchronizes timekeeping among distributed time servers and clients; and keeps timekeeping consistent among all clock-dependent devices within the network, so that the devices can
provide diverse applications, based on the consistent time
• Network quality analyzer
Analyzes network performance and service quality by sending test packets; provides network performance and service quality parameters such as jitter, TCP, or FTP connection delays and le transfer rates; and allows a network manager to determine the overall network
performance as well as diagnose and locate network congestion points or failures
• Information center
Provides a central repository for system and network information; aggregates all logs, traps,
and debugging information generated by the system and maintains them in the order of
severity; and sends out the network information to multiple channels, based on user-dened
rules
• IEEE 802.1ab link-layer discovery protocol (LLDP)
Advertises and receives management information from adjacent devices on a network,
facilitating easy mapping by network management applications
• Dual ash images
Provides independent primary and secondary operating system les for backup while
upgrading
• Multiple conguration les
Are easily stored with a ash image
Connectivity
• High-density port connectivity
Provides up to 10 interface module slots and up to 40 40GbE ports, 84 10GbE ports, 480 Fiber Gigabit ports, or 480 PoE-enabled ports per HP 7500 Switch Series system
Jumbo frames
Allow high-performance remote backup and disaster-recovery systems with up to 9,216 bytes
Loopback
Supports internal loopback testing for maintenance purposes and an increase in availability; loopback detection protects against incorrect cabling or network congurations and can be enabled on a per-port or per-VLAN basis for added exibility
4
Data sheet | HP 7500 Switch Ser ies
• Ethernet operations, administration, and maintenance (OAM)
Detects the data link layer problems that occur in the “last mile,” using the IEEE 802.3ah OAM standard; and monitors the status of the link between two devices
• Flexible port selection
Includes 100/1000BASE-X auto speed selection, 10/100/1000BASE-T auto speed detection, as well as auto duplex and MDI/MDI-X
Monitor link
Collects statistics on performance and errors on physical links, increasing system availability
• IEEE 802.3af PoE
Provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP
phones, wireless access points, and security cameras
• Dual-personality functionality
Includes four 10/100/1000 ports or SFP slots for optional ber connectivity, such as Gigabit­SX, -LX, and -LH and 100-FX
Packet storm protection
Protects against unknown broadcast, unknown multicast, or unicast storms with user-dened
thresholds
Flow control
Provides back pressure, using standard IEEE 802.3x—reducing congestion in heavy trac
situations
• IEEE 802.3at PoE+ support
Provides up to 30 W of power to the power sourcing equipment
Performance
• High-speed fully distributed architecture
Supports a maximum of 1,152 Gb/s switching capacity with a 2.4 Tb/s backplane, providing enhanced performance and future expansion capability; delivers up to 714 Mp/s throughput with dual fabrics; performs all switching and routing functions in the I/O modules; and meets the current and future demand of an enterprise’s bandwidth-intensive applications
Scalable system design
Provides investment protection to support future technologies and higher-speed connectivity
with a backplane designed to accommodate bandwidth increases
• Flexible chassis selection
Enables you to tailor your product selections to your budget with a choice of six chassis, ranging from a 10-slot to a 2-slot chassis
5
Data sheet | HP 7500 Switch Ser ies
Resiliency and high availability
• Redundant/load-sharing fabrics, management, fan assemblies, and power supplies
Increase total performance and power availability, while providing hitless, stateful failovers
• All hot-swappable modules
Allows replacement of modules without any impact on other modules
Dual internal power supply
Provides high reliability
Separate data and control paths
Separates control from services and keeps service processing isolated; and increases security
and performance
Passive design system
Delivers increased system reliability as the backplane has no active components
• IEEE 802.3ad link-aggregation control protocol (LACP)
Supports up to 128 trunks, each with 8 links per trunk; and provides support for static or dynamic groups and a user-selectable hashing algorithm
• Intelligent resilient framework (IRF)
Creates virtual resilient switching fabrics, where two or more switches perform as a single
L2 switch and L3 router; switches don’t have to be co-located and can be part of a disaster­recovery system; servers or switches can be attached using the standard LACP for automatic load balancing and high availability; it can help eliminate the need for complex protocols such as spanning tree protocol (STP), equal-cost multipath (ECMP), or virtual router redundancy protocol (VRRP)—simplifying network operations
• IRF capability
Provides single IP address management for a resilient virtual switching fabric of up to four
switches
• Ring resiliency protection protocol (RRPP)
Provides standard sub-100 ms recovery for a ring Ethernet-based topology
VRRP
Allows groups of two routers to dynamically back each other up to create highly available routed environments
Hitless patch upgrades
Allows patches and new service features to be installed without restarting the equipment,
increasing network uptime and facilitating easy maintenance
6
Data sheet | HP 7500 Switch Ser ies
• Graceful restart
Supports graceful restart for the open-shortest path rst (OSPF), IS-IS, border gateway protocol (BGP), LDP, and RSVP; the network remains stable during the active-standby switchover; after the switchover, the device quickly learns the network routes by communicating with adjacent routers; and forwarding remains uninterrupted during the
switchover to achieve nonstop forwarding
• Ultrafast protocol convergence with standards-based failure detection—bidirectional
forwarding detection
Enables link connectivity monitoring and reduces network convergence time for the routing information protocol (RIP), OSPF, BGP, IS-IS, VRRP, MPLS, and IRF
SmartLink
Allows 50 ms failover between links
• IP/LDP FRR
Congures nodes with backup ports, routes, and LSPs; requires no cooperation of adjacent devices for local implementation—simplifying deployment; solves the traditional convergence faults in IP and MPLS forwarding—protecting the links, nodes, and paths without establishing respective backup LSPs for them; and realizes restoration within 50 ms—with the restoration
time independent of the number of routes and fast link switchovers, without route convergence
L2 switching
VLAN
Supports up to 4,096 port-based or IEEE 802.1Q-based VLANs; and supports MAC-based VLANs, protocol-based VLANs, and IP-subnet-based VLANs for added exibility
Port isolation
Increases security by isolating ports within a VLAN, while still allowing them to communicate
with other VLANs
• STP bridge protocol data unit (BPDU) tunneling
Transmits STP BPDUs transparently, allowing correct tree calculations across service
providers, WANs, or MANs
• GARP VLAN registration protocol
Allows automatic learning and dynamic assignment of VLANs
Port mirroring
Duplicates port trac (ingress and egress) to a local or remote monitoring port; and supports
four mirroring groups, with an unlimited number of ports per group
STP
Supports the standard IEEE 802.1D STP, IEEE 802.1w rapid STP for faster convergence, and IEEE 802.1s multiple STP
7
Data sheet | HP 7500 Switch Ser ies
• Internet-group-management protocol (IGMP) and multicast-listener-discovery (MLD) protocol
snooping
Controls and manages the ooding of multicast packets in an L2 network
Device link detection protocol
Monitors link connectivity and shuts down ports at both ends if unidirectional trac is detected, helping prevent loops in STP-based networks
• IEEE 802.1ad Q-in-Q and selective Q-in-Q
Increase the scalability of an Ethernet network by providing a hierarchical structure; and connect multiple LANs on a high-speed campus or metro network
Super VLAN
Saves IP address space, using RFC 3069 standard (also called VLAN aggregation)
• Per-VLAN spanning tree plus
Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in network environments with multiple VLANs
L3 services
• Address resolution protocol (ARP)
Determines the MAC address of another IP host in the same subnet; includes support for static ARPs; a gratuitous ARP allows detection of duplicate IP addresses; and a proxy ARP allows normal ARP operation between subnets or when subnets are separated by an L2 network
• UDP helper
Redirects UDP broadcasts to specic IP subnets to help prevent server spoong
• Dynamic host conguration protocol (DHCP)
Simplies the management of large IP networks and supports both clients and servers; DHCP
relay enables DHCP operation across subnets
• Domain name system (DNS)
Provides a distributed database that translates domain names and IP addresses, simplifying network design; and supports clients and servers
L3 routing
• Static IPv4 routing
Provides simple manually congured IPv4 routing
• RIP
Uses a distance vector algorithm with UDP packets for route determination; supports RIPv1 and RIPv2 routing; and includes loop protection
• OSPF
Delivers faster convergence; uses this link-state routing interior gateway protocol (IGP), which supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for
faster failure recovery
8
Data sheet | HP 7500 Switch Ser ies
• Intermediate system to intermediate system (IS-IS)
Uses a path vector IGP, which is dened by the ISO organization for IS-IS routing and extended by IETF RFC 1195 to operate in both TCP/IP and the OSI reference model (integrated IS-IS)
• BGP-4
Delivers an implementation of the exterior gateway protocol, utilizing path vectors; uses TCP for enhanced reliability for the route discovery process; reduces bandwidth consumption by advertising only incremental updates; supports extensive policies for increased exibility; and
scales to very large networks
• Policy-based routing
Makes routing decisions based on policies set by the network administrator
• IP performance optimization
Provides a set of tools to improve the performance of IPv4 networks; and includes directed broadcasts, customization of TCP parameters, support of ICNP error packets, and extensive
display capabilities
• Unicast reverse path forwarding (uRPF)
Limits erroneous or malicious trac in accordance with RFC 3074
• Static IPv6 routing
Provides simple manually congured IPv6 routing
• Dual IP stack
Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network design to an IPv6-only network design
• RIP next generation (RIPng)
Extends RIPv2 to support IPv6 addressing
• OSPFv3
Provides OSPF support for IPv6
• IS-IS for IPv6
Extends IS-IS to support IPv6 addressing
• BGP+
Extends BGP-4 to support multiprotocol BGP, including support for IPv6 addressing
• IPv6 tunneling
Allows IPv6 packets to traverse IPv4-only networks by encapsulating the IPv6 packet into a standard IPv4 packet; supports manually congured, 6-to-4, and intra-site-automatic-tunnel­addressing-protocol (ISATAP) tunnels; and is an important element for the transition from IPv4 to IPv6
9
Loading...
+ 19 hidden pages