Product Id: 27364867
Description: HPE 9508-V - Switch - rack-mountable
Mfr Part #: JC474B
The HP 9500 Switch Series is a family of modular switches that form a next-generation data center/large campus core switching platform. With unprecedented levels of networking performance, industry-leading availability, and flexible and efficient deployment options, these switches enable new services while driving down the cost of network operations. The 9500 series switches can provide more than 1.4 TB of high-performance switching capacity, aggregate up to 192 10-GbE or 576 GbE ports, and offer a future-proof architecture that enables customers to support emerging enterprise core or data center requirements.
- IEEE 802.1p prioritization: delivers data to devices based on the priority and type of traffic
- Stateful firewall: enforces firewall policies to control traffic and filter access to network services; maintains session information for every connection passing through it, enabling the firewall to control packets based on existing sessions
- IPSec: provides secure tunneling over an untrusted network such as the Internet or a wireless network; offers data confidentiality, authenticity, and integrity between two endpoints of the network
- Management interface control: provides management access through a modem port and terminal interface, as well as in-band and out-of-band Ethernet ports; provides access through terminal interface, telnet, or Secure Shell (SSH)
- Quality of Service (QoS)
IEEE 802.1p prioritization: delivers data to devices based on the priority and type of traffic.
Class of Service (CoS): sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ.
Virtual Output Queuing (VOQ) architecture: reduces complexity and increases efficiency and cost-effectiveness by eliminating head-of-line blocking issues within the queuing system.
Bandwidth shaping: Port-based rate limiting: provides per-port ingress-/egress-enforced maximum bandwidth. Classifier-based rate limiting: uses access control list (ACL) to enforce maximum bandwidth for ingress/egress traffic on each port.
Traffic policing: supports Committed Access Rate (CAR) and line rate.
Stateful firewall: enforces firewall policies to control traffic and filter access to network services; maintains session information for every connection passing through it, enabling the firewall to control packets based on existing sessions.
Zone-based access policies: logically groups virtual LANs (VLANs) into zones that share common security policies; allows both unicast and multicast policy settings by zones instead of by individual VLANs.
Application-level gateway (ALG): deep packet inspection in the firewall discovers the IP address and service port information embedded in the application data; the firewall then dynamically opens appropriate connections for specific applications.
NAT/PAT: choice of dynamic or static network address translation (NAT) preserves a network's IP address pool or conceals the private address of network resources, such as Web servers, which are made accessible to users of a guest or public wireless LAN.
- Virtual private network (VPN)
IPSec: provides secure tunneling over an untrusted network such as the Internet or a wireless network; offers data confidentiality, authenticity, and integrity between two endpoints of the network.
Layer 2 Tunneling Protocol (L2TP): an industry standard-based traffic encapsulation mechanism supported by many common operating systems such as Windows XP and Windows Vista ; will tunnel the Point-to-Point Protocol (PPP) traffic over the IP and non-IP networks; may use the IP/UDP transport mechanism in IP networks.
Generic Routing Encapsulation (GRE): can be used to transport Layer 2 connectivity over a Layer 3 path in a secured way; enables the segregation of traffic from site to site.
Manual or automatic Internet Key Exchange (IKE): provides both manual or automatic key exchange required for the algorithms used in encryption or authentication; auto-IKE allows automated management of the public key exchange, providing the highest levels of encryption.