HP ProCurve 8212, ProCurve 8212zl, J8715A Datasheet

Datasheet

HP ProCurve Switch 8212zl

Key features

b

High Performance

b

Highly Scalable

b

Advanced Platform and Software High

Availability

b

Advanced Networking Features

b

ProCurve Lifetime Warranty

The ProCurve Switch 8212zl is a high-performance, highly available, chassis switch platform that enables
unified core-to-edge adaptive network solutions and delivers to market the industry’s first core switch with a
lifetime warranty. It has platform and software high-availability features to ensure system continuity and
enhance network productivity. With a full range of connectivity options, comprehensive networking features,
advanced security tools, and unified core-to-edge infrastructure and management tools, the Switch 8212zl
reduces complexity and provides lower cost of ownership. The ProCurve Switch 8212zl is ideal for customers
seeking to cost-effectively meet the stringent availability requirements of today’s converged network
environments without sacrificing performance or flexibility.

HP ProCurve Switch 8212zl

Features and benefits

Management

NEW Remote intelligent mirroring: mirrors selected

ingress/egress traffic based on ACL, port, MAC address, or VLAN
to a local or remote 8200zl/6200yl/5400zl/3500yl switch anywhere
on the network

• RMON, XRMON, and sFlow v5: provide advanced monitoring
and reporting capabilities for statistics, history, alarms, and events

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP):
automated device discovery protocol for easy mapping by network
management applications

• Command authorization: leverages RADIUS to link a custom
list of CLI commands to individual network administrator's login;
also provides an audit trail

• Friendly port names: allow assignment of descriptive names to
ports

• Dual flash images: provides independent primary and
secondary OS files for backup while upgrading or fine-tuning the
switch configuration

• Multiple configuration files: multiple configuration files can be
stored to the flash image

• Uni-Directional Link Detection (UDLD): monitors cable
between two switches and shuts down the ports on both ends if
the cable is broken turning the bi-directional link into
uni-directional; this prevents network problems such as loops

• Unified Core-to-Edge features: ProCurve portfolio-common
feature implementation for faster solution deployment

• ProCurve Core-to-Edge Device/Network Management tools:
ProCurve portfolio-common device-level tools (CLI, Web GUI,
Menu) plus seamless integration into ProCurve Manager Plus
(PCM+)/Identity Driven Manager (IDM) network management
deployments

• High-density port connectivity: 12 interface module slots, up
to 288 wire-speed 10/100/1000 PoE-enabled ports/48 10-GbE
ports per system

• ProCurve Core-to-Edge accessories: ProCurve Intelligent
Edge family-common interface and service modules, Gigabit
optics/10-GbE transceivers, and power supplies enable sparing
simplicity

NEW IPv6:

- IPv6 host: the switches can be managed and deployed at the
edge of IPv6 networks

- Dual stack (IPv4/IPv6): provides transition mechanism from
IPv4 to IPv6; supports connectivity for both protocols

- MLD snooping: forwards IPv6 multicast traffic to the appropriate
interface; prevents IPv6 multicast traffic from flooding the network

- IPv6 ACL/QoS: supports ACL and QoS for IPv6 network traffic

- IPv6 ready: the switch hardware can support IPv6 QoS, ACL,
routing, tunneling, and security; these features will be available
when enabled via software update in follow-on releases

Performance

• High-speed/capacity architecture: 692 Gbps crossbar
switching fabric provides intra- and inter-module switching with
428 million pps throughput on the purpose-built ProVision ASICs

• Selectable queue configurations: increase performance by
selecting the number of queues and associated memory buffering
that best meet the requirements of your network applications

• Scalable system design: chassis architecture/backplane
provides built-in performance capacity/headroom to support
next-generation high-density/high-speed connectivity

Resiliency and high availability

• Proven ASIC and system architecture: the ProCurve
ProVision ASIC and platform architecture, leveraged from
ProCurve's successful 5400zl/3500yl/6200yl families of switches,
minimizes technology risk and ensures reliable support and
flexibility

Connectivity

• IEEE 802.3af Power over Ethernet: provides up to 15.4 W per
port to IEEE 802.3af compliant PoE powered devices such as IP
phones, wireless access points, and security cameras

• Pre-standard PoE support: detects and provides power to
pre-standard PoE devices; see list of supported devices in the
product FAQ at www.procurve.com

• Jumbo frames: on Gigabit and 10-Gigabit ports, allow
high-performance remote backup and disaster-recovery services

• Auto-MDIX: automatically adjusts for straight-through or
crossover cables on all 10/100/1000 ports

• ProCurve zl family componentry: employs market-proven
Intelligent Edge Switch interface modules, optics, and power
supplies to minimize technology risk and enhance system
reliability

• Virtual Router Redundancy Protocol: VRRP allows groups of
two routers to dynamically back each other up to create highly
available routed environments

• IEEE 802.1s Multiple Spanning Tree Protocol: provides high
link availability in multiple VLAN environments by allowing multiple
spanning trees; encompasses IEEE 802.1D Spanning Tree
Protocol and IEEE 802.1w Rapid Spanning Tree Protocol

2

HP ProCurve Switch 8212zl

• IEEE 802.3ad Link Aggregation Control Protocol (LACP) and
ProCurve trunking: support up to 60 trunks, each with up to 8
links (ports) per trunk; trunking across modules is supported

• Hot-swappable modules: interface, management, and fabric
modules as well as mini-GBIC optics and power supplies can be
removed, swapped, or added to the system without interrupting
ongoing switch operations

• Redundant, scalable power design: add/deploy redundant
power supplies to expand power capacity and provide redundancy
to ensure network productivity

• Redundant switch fabric: dual, performance load-sharing fabric
modules provide enhanced system availability and seamless
system resiliency

• Redundant switch management: dual management modules
provide active/standby operation to enhance system availability

• Redundant, hot-swappable cooling: redundant fan design and
hot-swappable fan tray ensure continuity of operation in case of a
single fan failure

• Passive system design: passive chassis backplane (no
traffic-forwarding active componentry) ensures system reliability
and reduces impact of component failure

Layer 2 switching

NEW IEEE 802.1ad Q-in-Q: increases the scalability of Ethernet

network by providing a hierarchical structure; connects multiple
LANs on high-speed campus or metro network

• ProCurve switch meshing: dynamically load-balances across
multiple active redundant links to increase available aggregate
bandwidth

• VLAN support and tagging: supports the IEEE 802.1Q
standard and 2,048 VLANs simultaneously

• IEEE 802.1v protocol VLANs: isolate select non-IPv4 protocols
automatically into their own VLANs

• GARP VLAN Registration Protocol: allows automatic learning
and dynamic assignment of VLANs

Layer 3 services

• UDP helper function: UDP broadcasts can be directed across
router interfaces to specific IP unicast or subnet broadcast
addresses and prevent server spoofing for UDP services such as
DHCP

• Loopback interface address: defines an address in RIP and
OSPF that can always be reachable, improving diagnostic
capability

Layer 3 routing

• Static IP routing: provides manually configured routing; includes
ECMP capability

• RIP: provides RIPv1 and RIPv2 routing

• OSPF: includes host-based ECMP to provide link
redundancy/scalable bandwidth and NSSA

Security

• Switch CPU protection: provides automatic protection against
malicious network traffic trying to shut down the switch

• Virus throttling: detects traffic patterns typical of WORM-type
viruses and either throttles or entirely prevents the ability of the
virus to spread across the routed VLANs or bridged interfaces,
without requiring external appliances

• ICMP throttling: defeats ICMP denial-of-service attacks by
enabling any switch port to automatically throttle ICMP traffic

• Multiple user authentication methods:

- IEEE 802.1X: industry-standard way of user authentication using
an IEEE 802.1X supplicant on the client in conjunction with a
RADIUS server

- Web-based authentication: authenticates from Web browser
for clients that do not support 802.1X supplicant; customized
remediation can be processed on an external Web server

- MAC-based authentication: client is authenticated with the
RADIUS server based on client's MAC address

• Authentication flexibility:

- Multiple IEEE 802.1X users per port: provides authentication of
multiple IEEE 802.1X users per port; prevents user "piggybacking"
on another user's IEEE 802.1X authentication

- Concurrent IEEE 802.1X, Web, and MAC authentication
schemes per port: switch port will accept up to 32 sessions of
IEEE 802.1X, Web, and MAC authentications

• Access control lists (ACLs): provide filtering based on the IP
field, source/destination IP address/subnet, and source/destination
TCP/UDP port number on a per-VLAN or per-port basis

• Identity-driven ACL: enables implementation of a highly
granular and flexible access security policy and VLAN assignment
specific to each authenticated network user

• DHCP protection: blocks DHCP packets from unauthorized
DHCP servers, preventing denial-of-service attacks

• STP BPDU port protection: blocks Bridge Protocol Data Units
(BPDUs) on ports that do not require BPDUs, preventing forged
BPDU attacks

• Dynamic IP lockdown: works with DHCP protection to block
traffic from unauthorized hosts, preventing IP source address
spoofing

3