HP 3600-24 v2 SI Switch
HP 3600-48 v2 SI Switch
HP 3600-24-PoE+ v2 SI Switch
HP 3600-48-PoE+ v2 SI Switch
JG304A
JG305A
JG306B
JG307B
Key features
Robust switching at the enterprise network edge
Static and RIP Layer 3 routing
Automatic stacking with IRF
Integrated and distributed security enforcement
Enterprise-level nonblocking performance
Product overview
The HP 3600 SI Switch Series delivers intelligent, resilient performance, security, and reliability for robust switching at the enterprise
network edge. The series consists of Fast Ethernet and PoE/PoE+ switches, with features that can accommodate large
enterprise and SMB applications. Secure, resilient connectivity, as well as the latest traffic-prioritization technologies, enhance
converged networks. The switches are designed for improved flexibility and scalability.
Features and benefits
Quality of Service
Broadcast control
allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic
Advanced classifier-based QoS
classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority
level and rate limit to selected traffic on a per-port or per-VLAN basis
Powerful QoS feature
supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), weighted fair queuing
(WFQ), and WRED
Traffic policing
supports Committed Access Rate (CAR) and line rate
Management
Friendly port names
allows assignment of descriptive names to ports
Remote configuration and management
enables configuration and management through a secure Web browser or a CLI located on a remote device
Manager and operator privilege levels
provides read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
Command authorization
leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit
trail
(QoS)
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 1
QuickSpecs
HP 3600 SI Switch Series
Overview
Secure Web GUI
provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
Multiple configuration files
stores easily to the flash image
Complete session logging
provides detailed information for problem identification and resolution
SNMPv1, v2c, and v3
facilitate centralized discovery, monitoring, and secure management of networking devices
Remote monitoring (RMON)
uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private
alarm extension group
Local and remote intelligent mirroring
mirrors traffic from a switch port to a remote switch port anywhere on the network, or mirror ACL-selected traffic to a local
switch port
Management VLAN
segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network
management applications
Device Link Detection Protocol (DLDP)
monitors a cable between two switches and shuts down the ports on both ends if the cable is broken, preventing network
problems such as loops
sFlow (RFC 3176)
provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this
allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and realtime network monitoring purposes
IPv6 management
future-proofs networking, as the switch is capable of being managed whether the attached network is running IPv4 or IPv6;
supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, syslogv6, FTPv6, SNMPv6, DHCPv6, and RADIUS for IPv6
Troubleshooting
ingress and egress port monitoring enable network problem solving; virtual cable tests provide visibility into cable problems
Connectivity
IPv6
Telnet
for allowing CLI access via IPv6
SNMP
for IPv6 switch management
DNS
for IPv6 host management
DHCP
for auto IPv6 address configuration of a switch
Auto-MDIX
provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
Jumbo packet support
supports up to 9216-byte frame size to improve the performance of large data transfers
Gigabit Ethernet uplinks
are dual-personality ports for either 10/100/1000 or mini-GBIC SFP connectivity for increased connectivity flexibility
High-density access
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 2
QuickSpecs
HP 3600 SI Switch Series
Overview
provides up to 48 fixed 10/100BASE-T PoE or non-PoE ports in a Layer 2 or Layer 3 switch
Ethernet operations, administration and maintenance (OAM)
detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the
link between two devices
IEEE 802.3af Power over Ethernet (PoE)
provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and
security cameras
IEEE 802.3at Power over Ethernet (PoE+)
provides up to 30 W per port that allows support of the latest PoE+-capable devices such as IP phones, wireless access points,
and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and
circuits that would otherwise be necessary in IP phone and WLAN deployments
Performance
Nonblocking performance
up to 17.6 Gbps nonblocking switching fabric provides wire-speed switching with up to 13.1 million pps throughput
Gigabit Ethernet interface
provides a connection to the network that eliminates the network as a bottleneck
Hardware-based wirespeed access control lists
feature-rich ACL implementation helps ensure high levels of security and ease of administration without impacting network
performance
Resiliency and high availability
Separate data and control paths
separates control from services and keeps service processing isolated; increases security and performance
External redundant power supply
provides high reliability
Smart link
allows 50 ms failover between links
Spanning Tree/MSTP, RSTP
provides redundant links while preventing network loops
Intelligent Resilient Framework (IRF)
creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do
not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard
LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree
Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation
IEEE 802.3ad Link Aggregation Control Protocol (LACP)
supports up to 26 trunks, each with 8 links per trunk; supports static or dynamic groups
Virtual Router Redundancy Protocol (VRRP)
allows groups of two routers to dynamically back each other up to create highly available routed environments in IPv4 and IPv6
networks
IRF capability
provides single IP address management for a resilient virtual switching fabric of up to nine switches
Ring Resiliency Protection Protocol (RRPP)
provides standard sub 50 ms recovery for ring Ethernet-based topology
Manageability
RMON (remote monitoring)
provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 3
QuickSpecs
HP 3600 SI Switch Series
Overview
Layer 2 switching
16/32K MAC address table
provides access to many Layer 2 devices
VLAN support and tagging
supports IEEE 802.1Q with 4,094 simultaneous VLAN IDs
GARP VLAN Registration Protocol
allows automatic learning and dynamic assignment of VLANs
IEEE 802.1ad QinQ and selective QinQ
increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed
campus or metro network
Gigabit Ethernet port aggregation
allows grouping of ports to increase overall data throughput to a remote device
Internet Group Management Protocol (IGMP) and Multicast
Listener Discovery (MLD) protocol snooping controls and manages the flooding of multicast packets in a Layer 2 network
Layer 3 services
Address Resolution Protocol (ARP)
determines the MAC address of another IP host in the same subnet
Dynamic Host Configuration Protocol (DHCP)
simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across
subnets
Loopback interface address
defines an address in Routing Information Protocol (RIP) and Open Standard Path First (OSPF), improving diagnostic capability
User Datagram Protocol (UDP) helper function
allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents
server spoofing for UDP services such as DHCP
Route maps
provide more control during route redistribution; allow filtering and altering of route metrics
Layer 3 routing
IPv4 routing protocols
support static routes and RIP
IPv6 routing protocols
provide routing of IPv6 at wire speed; support static routes and RIPng
IPv6 tunneling
allows a smooth transition from IPv4 to IPv6 by encapsulating IPv6
traffic over an existing IPv4 infrastructure
Equal-Cost Multipath (ECMP)
enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
Bidirectional Forwarding Detection (BFD)
enables link connectivity monitoring and reduces network convergence time for VRRP, static routing, and IRF
Security
Access control lists (ACLs)
provides IP Layer 2 to Layer 4 traffic filtering; supports VLAN ACL and port ACL
Multiple user authentication methods
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 4
QuickSpecs
HP 3600 SI Switch Series
Overview
IEEE 802.1X
uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with
industry standards
Web-based authentication
provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE
802.1X supplicant
MAC-based authentication
authenticates the client with the RADIUS server based on the client's MAC address
Identity-driven security and access control
Per-user ACLs
permits or denies user access to specific network resources based on user identity and time of day, allowing multiple
types of users on the same network to access specific network services without risking network security or allowing
unauthorized access to sensitive data
Automatic VLAN assignment
automatically assigns users to the appropriate VLAN based on their identities
Secure management access
delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch
configuration file
Guest VLAN
provides a browser-based environment to authenticated clients that is similar to IEEE 802.1X
Endpoint Admission Defense (EAD)
provides security policies to users accessing a network
Port security
allows access only to specified MAC addresses, which can be learned or specified by the administrator
Port isolation
secures and adds privacy, and prevents malicious attackers from obtaining user information
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
STP root guard
protects the root bridge from malicious attacks or configuration mistakes
DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
IP Source Guard
filters packets on a per-port basis, which prevents illegal packets from being forwarded
RADIUS/HWTACACS
eases switch management security administration by using a password authentication server
Multiple Customer Edge (MCE)
facilitates MPLS VPN network integration with support for up to 63 VPNs
Convergence
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
facilitates easy mapping using network management applications with LLDP automated device discovery protocol
LLDP-MED
is a standard extension that automatically configures network devices, including LLDP-capable IP phones
LLDP-CDP compatibility
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 5
QuickSpecs
HP 3600 SI Switch Series
Overview
receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation
PoE allocations
supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power for more
efficient energy savings
Voice VLAN
automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance
IP multicast snooping and data-driven IGMP
automatically prevent flooding of IP multicast traffic
Multicast VLAN
allows multiple VLANs to receive the same multicast traffic, reducing network bandwidth demand by eliminating multiple
streams to each VLAN
Device support
Cisco prestandard PoE support
detects and provides power to Cisco's prestandard PoE devices such as wireless LAN access points and IP phones
Additional information
Green initiative support
provides support for RoHS and WEEE regulations
Green IT and power
uses the latest advances in silicon development and shuts off unused ports to improve power efficiency
Warranty and support
NEW Lifetime Warranty 2.0
advance hardware replacement for as long as you own the product with next-business-day delivery (available in most countries)†
NEW Electronic and telephone support
limited 24x7 telephone support is available from HP for the first 3 years; limited electronic and business hours telephone
support is available from HP for the entire warranty period; to reach our support centers, refer to
www.hp.com/networking/contact-support
to
www.hp.com/networking/warrantysummary
Software releases
to find software for your product, refer to
with your product purchase, refer to
* HP warranty includes repair or replacement of hardware for as long as you own the product, with next business day advance
replacement (available in most countries). The disk drive included with HP AllianceOne Advanced Services and Services zl Modules, HP
Threat Management Services zl Module, HP AllianceOne Extended zl Module with Riverbed Steelhead, HP MSM765zl Mobility Controller
and HP Survivable Branch Communication zl Module powered by Microsoft Lync has a five-year hardware warranty. For details, refer to
the Software license and hardware warranty statements at www.hp.com/networking/warranty.
(for Lifetime Warranty 2.0)
; for details on the duration of support provided with your product purchase, refer
www.hp.com/networking/support
www.hp.com/networking/warrantysummary
; for details on the software releases available
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 6
QuickSpecs
HP 3600 SI Switch Series
Configuration
Build To Order:
BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack-Shippable solution.
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 8
QuickSpecs
Configuration
HP 3600 SI Switch Series
Remarks
Drop down under power supply should offer the following options and results:
Switch/Router/Power Supply to PDU Power Cord - #B2B in North America, Mexico, Taiwan, and Japan or #B2C
ROW. (Watson Default B2B or B2C for Rack Level CTO)
Switch/Router/Power Supply to Wall Power Cord - Localized Option (Watson Default for BTO and Box Level CTO)
High Volt Switch/Router/Power Supply to Wall Power Cord - #B2E Option. (Offered only in North America, Mexico,
Taiwan, and Japan)
The following Transceivers install into this switch: (SFP 1000 Mbps ports only)
HP X125 1G SFP LC SX Transceiver
HP X120 1G SFP LC LX Transceiver
HP X125 1G SFP LC LH70 Transceiver
HP X125 1G SFP RJ45 T Transceiver
HP X120 1G SFP LC BX 10-D Transceiver
HP X120 1G SFP LC BX 10-D Transceiver
HP X124 1G SFP LC LH40 1310nm Transceiver
JG306B
See
Configuration
Note:1, 3, 4, 5
JG306B#B2B
JG306B#B2C
JG307B
See
Configuration
Note:1, 3, 4, 5
JG307B#B2B
JG307B#B2C
JD118B
JD119B
JD063B
JD089B
JD098B
JD099B
JD061A
DA - 13788 Worldwide — Version 11 — December 9, 2013
Page 9
QuickSpecs
Configuration
HP 3600 SI Switch Series
HP X120 1G SFP LC LH40 1550nm Transceiver
HP X170 1G SFP LC LH70 1550 Transceiver
HP X170 1G SFP LC LH70 1570 Transceiver
HP X170 1G SFP LC LH70 1590 Transceiver
HP X170 1G SFP LC LH70 1610 Transceiver
HP X170 1G SFP LC LH70 1470 Transceiver
HP X170 1G SFP LC LH70 1490 Transceiver
HP X170 1G SFP LC LH70 1510 Transceiver
HP X170 1G SFP LC LH70 1530 Transceiver
Note 3
Note 4
Note 5
Remarks
When Switches are Factory Racked, Then #B2B, or #B2C should be the Defaulted Power Cable option on the
Switches.
Localization (Wall Power Cord) required on orders without #B2B, #B2C (PDU Power Cord). (See Localization Menu)
If the CTO Switch Chassis needs to be racked, Then the CTO Base Model needs to integrate (with #0D1) to the HP
Network Rack.
Drop down under power supply should offer the following options and results:
Switch/Router/Power Supply to PDU Power Cord - #B2B in North America, Mexico, Taiwan, and Japan or #B2C
ROW. (Watson Default B2B or B2C for Rack Level CTO)
Switch/Router/Power Supply to Wall Power Cord - Localized Option (Watson Default for BTO and Box Level CTO)
Transceivers
SFP Transceivers
HP X120 1G SFP LC BX 10-U Transceiver
HP X120 1G SFP LC BX 10-D Transceiver
HP X120 1G SFP LC SX Transceiver
HP X120 1G SFP LC LX Transceiver
HP X125 1G SFP LC LH40 1310nm XCVR
HP X120 1G SFP LC LH40 1550nm XCVR
HP X125 1G SFP LC LH70 Transceiver
HP X120 1G SFP RJ45 T Transceiver
HP X170 1G SFP LC LH70 1550 Transceiver
HP X170 1G SFP LC LH70 1570 Transceiver
HP X170 1G SFP LC LH70 1590 Transceiver
HP X170 1G SFP LC LH70 1610 Transceiver
HP X170 1G SFP LC LH70 1470 Transceiver
HP X170 1G SFP LC LH70 1490 Transceiver
HP X170 1G SFP LC LH70 1510 Transceiver
HP X170 1G SFP LC LH70 1530 Transceiver