5400R zl2 Switch Series
Table Of Contents
QuickSpecs
Aruba 5400R zl2 Switch Series
Overview
Page
7
• Secure Sockets Layer (SSL)
encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
• Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a
switch configuration file
• Open Authentication Role
simplifies first-time deployment of AAA in brownfield deployments by allowing full network access for failed clients and
provides instant connectivity as soon as a client is plugged-in
• Critical Authentication Role
ensures that important infrastructure devices such as IP phones are allowed network access even in the absence of a
RADIUS server
• MAC Pinning
allows non-
chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients logoff
or get disconnected
• Management Interface Wizard
helps secure management interfaces such as SNMP, telnet, SSH, SSL, Web, and USB at the desired level
• Switch management logon security
helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
• Security banner
displays a customized security policy when users log in to the switch
• IEEE 802.1AE MACsec
provides security on a link between two switch ports (1Gbps or 10Gbps) using standard encryption and authentication
based on pre-shared key. MACsec software support not yet available for modules with Smart Rate ports (requires v3
modules)
Convergence
• IP multicast routing
includes PIM Sparse and Dense modes to route IP multicast traffic
• IP multicast snooping (data-driven IGMP)
automatically prevents flooding of IP multicast traffic
• Protocol Independent Multicast for IPv6
supports one-to-many and many-to-many media casting use cases such as IPTV over IPv6 networks
• LLDP-MED (Media Endpoint Discovery)
defines a standard extension of LLDP that stores val
ues for parameters such as QoS and VLAN to configure automatically
network devices such as IP phones
• PoE allocations
support multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user specified) to allocate PoE power for more
efficient energy savings
• Auto VLAN configuration for voice
– RADIUS VLAN: uses a standard RADIUS attribute and LLDP-MED to automatically configure a VLAN for IP
phones
– CDPv2: uses CDPv2 to configure legacy IP phones
• Local MAC Authentication
assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes
Warranty and support
• Limited Lifetime Warranty
see http://www.hpe.com/networking/warrantysummary
for warranty and support information included with your
product purchase.