HP ProCurve 2910al Switch Series
Product overview
The HP ProCurve 2910al Switch Series consists of four
switches: the HP ProCurve 2910al-24G and
2910al-24G-PoE+ Switches with 24 10/100/1000
ports, and the HP ProCurve 2910al-48G and
2910al-48G-PoE+ Switches with 48 10/100/1000
ports. Each switch has four dual-personality ports for
10/100/1000 or mini-GBIC connectivity. In addition,
the 2910al switch supports up to four optional
10-Gigabit (CX4 and/or SFP+) ports, thereby offering
the most flexible and easy-to-deploy uplinks in its
class. Together with static and RIP IPv4 routing, robust
security and management, enterprise-class features,
free lifetime warranty, and free software updates, the
2910 series is a cost-effective, scalable solution for
customers who are building high-performance
networks. These switches can be deployed at
enterprise edge and remote branch offices, converged
networks, and data center top of rack.
Key features
b
High-performance Gigabit access switch
b
Four optional 10-Gigabit ports (CX4 and/or SFP+)
b
IEEE 802.3af/802.3at functionality ( PoE/PoE+)
b
Layer 2 switching with static and RIP IP routing
b
Lifetime Warranty, sFlow, ACLs, and rate limiting
Features and benefits
Industry-leading warranty
•
Stacking capability: single IP address
management for a virtual stack of up to 16 switches,
including the HP ProCurve Switch 2500 Series,
2510 Series, 2600 Series, 2610 Series, 2800
Series, 2810 Series, 2900 Series, 2910al Series,
3400cl Series, 3500yl Series, 4200vl Series, 6108,
6200yl-24G-mGBIC, and 6400cl Series
Connectivity
•
10 Gbps Ethernet connectivity: Up to four
optional and flexible 10-Gigabit ports (CX4 and/or
SFP+)--with optional interconnect kit for
short-distance connectivity
•
IPv6:
– IPv6 host: the switches can be managed and
deployed at the edge of IPv6 networks
– Dual stack (IPv4/IPv6): provides transition
mechanism from IPv4 to IPv6; supports
connectivity for both protocols
– MLD snooping: forwards IPv6 multicast traffic to
the appropriate interface; prevents IPv6 multicast
traffic from flooding the network
•
IEEE 802.3af Power over Ethernet: provides
up to 15.4 W per port to IEEE 802.3af-compliant
PoE powered devices such as IP phones, wireless
access points, and security cameras
•
IEEE 802.3at Power Over Ethernet Plus:
provides up to 30 W per port to IEEE 802.3at
compliant PoE/PoE+ powered devices such as video
IP phones, IEEE 802.11n wireless access points,
and advanced pan/zoom/tilt security cameras
Performance
•
High-performance architecture: 128 Gbps
switching fabric with up to 95 million pps (24-port
switches) and 176 Gbps switching fabric with up to
131 million pps (48-port switches)
•
Selectable queue configurations: increase
performance by selecting the number of queues and
associated memory buffering that best meet the
requirements of your network applications
Resiliency and high availability
•
IEEE 802.1s Multiple Spanning Tree: provides
high link availability in multiple VLAN environments
by allowing multiple spanning trees; provides
legacy support for IEEE 802.1d and IEEE 802.1w
•
IEEE 802.3ad Link Aggregation Protocol
(LACP) and ProCurve trunking: support up to
24 trunks, each with up to 8 links (ports) per trunk
•
Optional redundant power supply: supplies
backup power in case of power failure (Note: HP
ProCurve 620 Redundant/External Power Supply
provides only RPS functionality for the 2910al
series)
•
Pre-standard PoE support: detects and
provides power to pre-standard PoE devices; see list
of supported devices in the product FAQ at
www.ProCurve.com
•
Auto-MDIX: automatically adjusts for
straight-through or crossover cables on all
10/100/1000 ports
•
Dual-personality functionality: four
10/100/1000 ports or SFP slots for optional fiber
connectivity such as Gigabit-SX, -LX, -LH, 100-FX,
100-BX, and 1000-BX
Manageability
•
RMON, XRMON, and sFlow: provide
advanced monitoring and reporting capabilities for
statistics, history, alarms, and events
•
Uni-Directional Link Detection (UDLD):
monitors a link between two switches and blocks the
ports on both ends of the link if the link goes down
at any point between the two devices
•
Command authorization: leverages RADIUS to
link a custom list of CLI commands to individual
network administrator's login; also provides an audit
trail
•
Dual flash images: provides independent
primary and secondary operating system files for
backup while upgrading
For as long as you own the product, with next-business-day advance replacement (available in most countries). The following hardware products and their related series modules have
a one-year hardware warranty with extensions available: HP ProCurve Routing Switch 9300m Series, HP ProCurve Switch 8100fl Series, HP ProCurve Network Access Controller
800, and HP ProCurve DCM Controller. The following hardware mobility products have a one-year hardware warranty with extensions available: HP ProCurve M111 Client Bridge,
HP ProCurve MSM3xx-R Access Points, HP ProCurve MSM7xx Mobility and Access Controllers, HP ProCurve RF Manager IDS/IPS Systems, HP ProCurve MSM Power Supplies, HP
ProCurve 1-Port Power Injector, and HP ProCurve CNMS Appliances. Disk drives in the HP ProCurve ONE Services zl Modules have a five year hardware warranty. Standalone
software, upgrades, or licenses may have a different warranty duration. For details, refer to the ProCurve Software License, Warranty, and Support booklet at
www.procurve.com/warranty.
2
•
Multiple configuration files: allow multiple
configuration files to be stored to flash image
•
Friendly port names: allow assignment of
descriptive names to ports
•
Find-Fix-and-Inform: finds and fixes common
network problems automatically, then informs
administrator
•
Software updates: free downloads from the
Web
•
Troubleshooting: ingress/egress port monitoring
enables network problem-solving
Layer 2 switching
•
VLAN support and tagging: supports the IEEE
802.1Q (4,094 VLAN IDs) and 256 VLANs
simultaneously
•
GARP VLAN Registration Protocol: allows
automatic learning and dynamic assignment of
VLANs
•
Jumbo packet support: supports up to
9,220-byte frame size to improve performance of
large data transfers
•
Access control lists (ACLs): provide IP Layer 3
filtering based on source/destination IP
address/subnet and source/destination TCP/UDP
port number
•
Identity-driven ACL: enables implementation of
a highly granular and flexible access security policy
and VLAN assignment specific to each authenticated
network user
•
Dynamic ARP protection: blocks ARP
broadcasts from unauthorized hosts, preventing
eavesdropping or theft of network data
•
DHCP protection: blocks DHCP packets from
unauthorized DHCP servers, preventing
denial-of-service attacks
•
Port monitoring for network threats:
provides sampled port traffic using sFlow technology
to the HP ProCurve Network Immunity Manager
application for Network Behavior Anomaly
Detection (NBAD) analysis to detect threats and
mitigate threats at the port where the threat
originated
•
Source-port filtering: allows only specified ports
to communicate with each other
Layer 3 routing
•
Static IP routing: provides manually configured
routing; includes ECMP capability
•
RIP: provides RIPv1 and RIPv2 routing
Security
•
Multiple user authentication methods:
– IEEE 802.1X: industry-standard method of user
authentication using an IEEE 802.1X supplicant on
the client in conjunction with a RADIUS server
– Web-based authentication: similar to IEEE
802.1X, provides a browser-based environment to
authenticate clients that do not support the IEEE
802.1X supplicant
– MAC-based authentication: client is
authenticated with the RADIUS server based on
the client's MAC address
•
Authentication flexibility:
– Multiple IEEE 802.1X users per port:
provides authentication of up to eight IEEE 802.1X
users per port; prevents user "piggybacking" on
another user's IEEE 802.1X authentication
– Concurrent IEEE 802.1X and Web or MAC
authentication schemes per port: switch
port will accept any of IEEE 802.1X and either
Web or MAC authentications
•
RADIUS/TACACS+: eases switch management
security administration by using a password
authentication server
•
Secure Shell (SSHv2): encrypts all transmitted
data for secure, remote command-line interface (CLI)
access over IP networks
•
Secure FTP: allows secure file transfer to/from the
switch; protects against unwanted file downloads or
unauthorized copying of switch configuration file
•
Secure Sockets Layer (SSL): encrypts all HTTP
traffic, allowing secure access to the browser-based
management GUI in the switch
•
Port security: allows access only to specified
MAC addresses, which can be learned or specified
by the administrator
•
MAC address lockout: prevents configured
particular MAC addresses from connecting to the
network
•
Switch management logon security: can
require either RADIUS or TACACS+ authentication
for secure switch CLI logon
•
STP BPDU port protection: blocks Bridge
Protocol Data Units (BPDUs) on ports that do not
require BPDUs, preventing forged BPDU attacks
•
USB Secure Autorun (requires HP ProCurve
Manager Plus): deploys, diagnoses, and updates
switch using USB flash drive; works with secure
credential to prevent tampering
3