- ページ 5
スイッチ HP 3600-24-SFP v2 EIのPDF 仕様をオンラインで閲覧またはダウンロードできます。HP 3600-24-SFP v2 EI 40 ページ。 3600 ei switch series
ページを印刷するQuickSpecs
Overview
allow individual hosts to be registered on a particular VLAN
Security
Access control lists (ACLs)
provides IP Layer 2 to Layer 4 traffic filtering; supports VLAN ACL and port ACL
Multiple user authentication methods
IEEE 802.1X
is an industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a
RADIUS server
Web-based authentication
similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients that do not support the IEEE
802.1X supplicant
MAC-based authentication
authenticates the client with the RADIUS server based on the client's MAC address
Identity-driven security and access control
Per-user ACLs
permits or denies user access to specific network resources based on user identity and time of day, allowing multiple
types of users on the same network to access specific network services without risking network security or allowing
unauthorized access to sensitive data
Automatic VLAN assignment
automatically assigns users to the appropriate VLAN based on their identities
Secure management access
securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch
configuration file
Guest VLAN
similar to IEEE 802.1X, it provides a browser-based environment to authenticated clients
Endpoint Admission Defense (EAD)
provides security policies to users accessing a network
Port security
allows access only to specified MAC addresses, which can be learned or specified by the administrator
Port isolation
secures and adds privacy, and prevents malicious attackers from obtaining user information
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
STP Root Guard
protects the root bridge from malicious attacks or configuration mistakes
DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
IP Source Guard
helps prevent IP spoofing attacks
RADIUS/HWTACACS
eases switch management security administration by using a password authentication server
Multiple Customer Edge (MCE)
facilitates MPLS VPN network integration with support for up to 63 VPNs
ICMP throttling
DA - 13790 North America — Version 9 — December 18, 2013
HP 3600 EI Switch Series
Page 5