HP 2620 series User Manual

4
Data sheet | HP 2620 Switch Series
• Secure sockets layer (SSL)
Encrypts all HTTP trac, enabling secure access to the browser-based management GUI in
theswitch
• Port security
Allows access only to specied MAC addresses, which can be learned or specied by
theadministrator
• MAC address lockout
Helps prevent certain congured MAC addresses from connecting to the network
• Secure FTP
Allows secure le transfer to and from the switch; and protects against unwanted le
downloads or unauthorized copying of a switch conguration le
• Custom banner
Displays the security policy when users log in to the switch
• Identity-driven ACL
Enables implementation of a highly granular and exible access security policy and VLAN
assignment—specic to each authenticated network user
• STP BPDU port protection
Blocks bridge protocol data units (BPDUs) on ports that do not require BPDUs, mitigating
forged BPDU attacks
• STP root guard
Protects the root bridge from malicious attacks or conguration mistakes
• DHCP protection
Blocks DHCP packets from unauthorized DHCP servers, mitigating denial-of-service attacks
• Dynamic ARP protection
Blocks ARP broadcasts from unauthorized hosts, helping prevent eavesdropping or theft of
network data
• Multiple user authentication methods
– IEEE 802.1X
Uses an IEEE 802.1X supplicant on the client, in conjunction with a RADIUS server, to
authenticate in accordance with industry standards
– Web-based authentication
Provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that
do not support the IEEE 802.1X supplicant
– MAC-based authentication
Authenticates the client with the RADIUS server, based on the client’s MAC address
• Authentication exibility
– Multiple IEEE 802.1X users per port
Enables authentication of multiple IEEE 802.1X users per port; and helps prevent a user from
“piggybacking” on another user’s IEEE 802.1X authentication
– Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port
Allows a switch port to accept up to 32 sessions of IEEE 802.1X, Web, and MAC authentications
• Port mirroring for network threats
Provides sampled port trac, using sFlow technology, to the HP Network Immunity Manager
application for network-behavior-anomaly-detection analysis—to detect and mitigate threats
at the ports where the threats originate
• Per-port broadcast throttling
Selectively congures broadcast control on heavy trac port uplinks

HP 2620 series Specifications

General

Brand	HP
Model	2620 series
Category	Switch
Language	English