Product Data Sheet / Brochure

Access control list (ACL)
supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent unauthorized users from accessing
the network, or for controlling network traffic to save resources; rules can either deny or permit traffic to be forwarded; rules
can be based on a Layer 2 header or a Layer 3 protocol header; rules can be set to operate on specific dates or times
Terminal Access Controller Access-Control System (TACACS+)
delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security
Unicast Reverse Path Forwarding (URPF)
allows normal packets to be forwarded correctly, but discards the attaching packet due to lack of reverse path route or incorrect
inbound interface; prevents source spoofing and distributed attacks
Network login
allows authentication of multiple users per port
RADIUS
eases security access administration by utilizing a user/password authentication server
Network address translation (NAT)
supports one-to-one NAT, many-to-many NAT, and NAT control, enabling NAT-PT to support multiple connections; supports
blacklist in NAT/NAT-PT, a limit on the number of connections, session logs, and multi-instances
Secure Shell (SSHv2)
uses external servers to securely log in into a remote device; with authentication and encryption, it protects against IP spoofing
and plain text password interception; increases the security of SFTP transfers
Convergence
Internet Group Management Protocol (IGMP)
utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks; supports IGMPv1, v2,
and v3
Protocol Independent Multicast (PIM)
defines modes of Internet IPv4 and IPv6 multicasting to allow one-to-many and many-to-many transmission of information;
supports PIM Dense Mode (DM), Sparse Mode (SM), and Source-Specific Mode (SSM)
Multicast Source Discovery Protocol (MSDP)
allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications
Multicast Border Gateway Protocol (MBGP)
allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic
Integration
Embedded NetStream
improves traffic distribution using powerful scheduling algorithms, including Layer 4 to 7 services; monitors the health status of
servers and firewalls
Embedded VPN and firewall
provides enhanced stateful packet inspection and filtering; delivers advanced VPN services with Triple DES (3DES) and Advanced
Encryption Standard (AES) encryption at high performance and low latency, URL filtering, and application prioritization and
enhancement
SIP trunking
delivers multiple concurrent calls on one link; the carrier authenticates only the link, rather than carrying each SIP call on the link
Resiliency and high availability
Backup Center
acts as a part of the management and backup function to provide backup for device interfaces; delivers reliability by switching
traffic over to a backup interface when the primary one fails
Virtual Router Redundancy Protocol (VRRP)
QuickSpecs
HP MSR2000 Series
Overview
DA - 14642 Worldwide — Version 8 — February 10, 2014 Page 5