Hewlett Packard Enterprise JG639A network switch module
Contents
1. 1757 Remote Network Monitoring MIB RFC 2571 SNMP Framework MIB Bridges with Traffic Classes Multicast Filtering n and Virtual Extensions RFC 2011 SNMPv2 MIB for IP RFC 2572 SNMP MPD MIB RFC 2863 The Interfaces Group MIB RPE ZETI SMON MI RFC 2932IP Multicast Routing MIB Mobility IEEE 802 11a High Speed Physical Layer in the IEEE 802 11e QoS enhancements IEEE 802 111 Medium Access Control MAC 5 GHz Band IEEE 802 11g Further Higher Data Rate Extension in the Security Enhancements IEEE 802 11b Higher Speed Physical Layer Extension in 2 4 GHz Band IEEE 802 11n WLAN Enhancements for Higher Throughput the 2 4 GHz Band IEEE 802 11h Dynamic Frequency Selection Note All of the above standards are now included in IEEE IEEE 802 11d Global Harmonization 802 11 2012 Network management IEEE 802 11k 2008 beacon measurement functionality RFC 1905 SNMPv2 Protocol Operations RFC 2575 VACM for SNMP used as part of radio resource management RFC 2573 SNMPVv3 Applications SNMPv1 v2c BEG IM S5 Si Hetute of Management prormarion RFC 2574 SNMPv3 User based Security Model USM QoS Cos RFC 2474 DS Field in the IPv4 and IPv6 Headers RFC 2475 DiffServ Architecture Wi Fi Multimedia WMM IEEE 802 11e RFC 2474 DSCP DiffServ RFC 3168 The Addition of Explicit Congestion Notification ECN to IP Security IEEE 802 1X Port Based Network Access Control RFC 2548 Microsoft Vendor specific RFC 3579 RADIUS Support For Extensible Authentication RFC 1851 ESP Triple DES Transform RADIUS At2. AP Redundant E LTU JG902AAE Learn more at hp com networking Sign up for updates BH g hp com go getupdated Share with colleagues Rate this document Copyright 2013 2014 Hewlett Packard Development Company L P The information contained herein is subject to change without notice The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services Nothing herein should be construed as constituting an additional warranty HP shall not be liable for technical or editorial errors or omissions contained herein Bluetooth is a trademark owned by its proprietor and used by Hewlett Packard Company under license Microsoft is a U S registered trademark of the Microsoft group of companies 4AA4 6468ENW February 2014 Rev 4
3. Management 6 Textual Conventions and General Group partially RFC 3513 IPv6 Addressing Architecture E i i i support only IPv6 Interface Statistics table 7 RFC 1887 IPv6 Unicast Address Allocation Architecture RFC 2466 Management Information Base for RFC 3542 Advanced Sockets API for IPv6 RFC 1981 IPv6 Path MTU Discovery IP Version 6B ICMPv6 RFC 3587 IPv6 Global Unicast Address Format RFC 2292 Advanced Sockets API for IPv6 RFC 2526 Reserved IPv6 Subnet Anycast Addresses RFC 3596 DNS Extension for IPv6 RFC 2373 IPv6 Addressing Architecture RFC 2553 Basic Socket Interface Extensions for IPv6 RFC 4193 Unique Local IPv6 Unicast Addresses RFC 2375 IPv6 Multicast Address Assignments RFC 2563 ICMPv6 RFC 4443 ICMPv6 RFC 2460 IPv6 Specification RFC 2925 Definitions of Managed Objects for Remote RFC 4541 IGMP amp MLD Snooping Switch RFC 2461 IPv6 Neighbor Discovery Ping Traceroute and Lookup Operations Ping only RFC 4861 IPv6 Neighbor Discovery RFC 2462 IPv6 Stateless Address Auto configuration RFC 3315 DHCPv6 client and relay RFC 4862 IPv6 Stateless Address RFC 2463 ICMPv6 RFC 3363 DNS support Auto configuration RFC 2464 Transmission of IPv6 over Ethernet Networks RFC 3484 Default Address Selection for IPv6 RFC 5095 Deprecation of Type 0 Routing Headers in IPv6 MIBs RFC 1229 Interface MIB Extensions RFC 2012 SNMPve MIB for TCP RFC 2665 Ethernet Like MIB RFC 1643 Ethernet MIB RFC 2013 SNMPve MIB for UDP RFC 2674 Definitions of Managed Objects for RFC
4. aximum supported users via local portal authentication 4 000 aximum supported users via local authentication 1 000 aximum supported configured SSIDs 512 aximum supported ACLs 32 000 Supported MSM APs are automatically discovered Comware firmware is loaded and the APs can be fully managed AP upgrade license rules for redundant HP 10500 7500 20G Unified Wired WLAN Module deployments The primary HP 10500 7500 20G Unified Wired WLAN Module s AP count must be increased using the optional HP Unified Wired WLAN 128 AP E LTU JG649AAE or HP Unified Wired WLAN 32 AP E LTU JG774AAE The secondary HP 10500 7500 20G Unified Wired WLAN Module s AP count can be increased as needed using the reduced cost HP Unified Wired WLAN 128 AP Redundant E LTU JG902AAE Notes The faceplate of the HP 10500 7500 20G Unified Wired WLAN Module uses LSU3WCMDO as the unique product identifier instead of JG639A Services Refer to the HP website at hp com networking services for details on the service level descriptions and product numbers For details about services and response times in your area please contact your local HP sales office Data sheet HP 10500 7500 20G Unified Wired WLAN Module HP 10500 7500 20G Unified Wired WLAN Module continued Standards and protocols applies to all products in series General protocols RFC 768 UDP RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 826 ARP RFC 854 TELNET RFC 855 Telnet Option Specificati
5. backup the 1 1 redundancy configuration of the modules supports subsecond level failure detection APs establish AP module tunnel links with both modules but only the links to the active module are active when the active module fails the heartbeat mechanism between the two modules help ensure that the standby module can sense the failure in subsecond level and then informs the APs to switch over to it thus providing service continuity 802 1X hot backup enables two controllers to sync 802 1X state information and wireless client s 802 11 information from master to backup This feature is only supported on the HP 870 and 20G Unified Module Layer 2 switching VLAN support and tagging supports IEEE 802 1Q with 4 094 simultaneous VLAN IDs Jumbo packet support supports up to 4 KB frame size to improve the performance of large data transfers Scalability Ease of deployment the module uses the backplane for all network and management communications with no need for external network power connections Optional 32 or 128 access point upgrade license Increases support for additional access points without the need to buy additional costly hardware and use additional valuable space in a chassis Areduced cost 128 access point license is available for use on this redundant module Refer to the Specifications and Accessories sections for more detail Comprehensive portfolio Access point support Refer to
6. the HP Access Point Controller Compatibility Matrix Warranty and support 1 year warranty advance hardware replacement with 10 calendar day delivery available in most countries Electronic and telephone support 1 year limited electronic and telephone support is available from HP to reach our support centers refer to hp com networking contact support for details on the duration of support provided with your product purchase refer to hp com networking warrantysummary Software releases includes all offered software releases for as long as you own the product to find software for your product refer to hp com networking support for details on the software releases available with your product purchase refer to hp com networking warrantysummary Datasheet HP 10500 7500 20G Unified Wired WLAN Module HP 10500 7500 20G Unified Wired WLAN Module Specifications HP 10500 7500 20G Unified Wired WLAN Module JG639A 1 0 ports and slots 1 RJ 45 serial console port Duplex 1OBASE T 100BASE TX half or full JOOOBASE T full only IEEE 802 3 Type 10BASE T IEEE 802 3u Type 100BASE TX IEEE 802 3ab Type 1000BASE T 1 RJ 45 out of band management port Duplex 1OBASE T 100BASE TX half or full JOOOBASE T full only IEEE 802 3 Type 10BASE T IEEE 802 3u Type 100BASE TX IEEE 802 3ab Type 1000BASE T Physical characteristics 15 71 w x 13 98 d x 1 57 h in 39 9 x 35 5 x 4 0 cm 1U height We
7. Data sheet HP 10500 7500 20G Unified Wired WLAN Module Product overview The IEEE 802 11ac ready HP 10500 7500 20G Unified Wired WLAN Module delivers enterprise scale features capacity and high reliability as well as offering substantial data processing capacity for wireless networks The HP 10500 7500 20G Unified Wired WLAN Module provides refined user control and management comprehensive RF management and security mechanisms fast roaming QoS and IPv4 IPv6 features and powerful WLAN access control Designed for WLAN access of enterprise networks this module provides an industry leading WLAN solution for large enterprise networks Working together with HP access points the HP 10500 7500 Unified Wired WLAN Module can be easily deployed on Layer 2 or Layer 3 networks without affecting existing configurations Key features e Enterprise scale capacity performance and high reliability for wireless networks e System wide approach to WLAN reliability through Wi Fi Clear Connect e Flexible forwarding modes e Pv4 IPv6 dual stack End to end QoS Datasheet HP 10500 7500 20G Unified Wired WLAN Module Features and benefits Management e Wi Fi Clear Connect provides a system wide approach to help ensure WLAN reliability by proactively determining and adjusting to changing RF conditions and by identifying rogue activity and enforcing prevention policies and optimizing WLAN performance by detecting interference from Wi F
8. P address with a public address enables multiple internal addresses to be mapped to the same public IP address permits only certain internal IP addresses to be NATed and provides an Application Layer Gateway that supports specific application protocols without requiring the NAT platform to be modified IEEE 802 3ad Link Aggregation Control Protocol LACP Performance Flexible forwarding modes enable distributed and centralized traffic forwarding with centralized forwarding wireless traffic is sent to the HP 870 for processing With distributed mode wireless traffic is dropped off locally In the event that connectivity to the HP 870 is lost authenticated clients can continue to access local resources support local drop off or centralization of data traffic after an HTML authentication using the built in portal server or IMC portal authentication Datasheet HP 10500 7500 20G Unified Wired WLAN Module Wireless user access control and management support defining settings such as Committed Access Rate CAS QoS profiles and access control policies based on location for different applications Fast roaming supports Layer 3 roaming and fast roaming satisfying the most demanding voice service requirements Robust switching capacity and wire speed processing deliver powerful forwarding capacity to support large enterprise WLANs Resiliency and high availability e High reliability the module supports 1 1 N 1 and N N
9. i and non Wi Fi sources using spectrum analysis capabilities built into specific access points refer to the HP Access Point Controller Compatibility Matrix for specific access points supported Advanced radio resource management Automatic radio power adjustments include real time power adjustments based on changing environmental conditions and signal coverage adjustment Automatic radio channel provides intelligent channel switching and real time interference detection Intelligent client load balancing balances the number of clients across multiple APs to optimize AP and client throughput Airtime fairness helps ensure equal RF transmission time for wireless clients e Spectrum analysis Signal detection classification identifies source of RF interference such as Bluetooth cordless phones and microwave ovens Evaluation of channel quality helps detect severe channel degradation and improves the reporting of poor RF performance e Band navigation enables automatic redirection of 5 GHz capable clients to the less congested 5 GHz spectrum Enterprise network management is provided by HP Intelligent Management Center IMC Platform Software and the IMC Wireless Services Manager Software Module which effectively integrate traditionally disparate management tools into one easy to use interface e Secure controller management securely manages the controller from a single location with IMC or any o
10. ight 7 98 lb 3 62 kg Memory and processor Processor Eight core 950 MHz 1 GB compact flash 2 GB DDR2 DIMM Performance Switch fabric speed MAC address table size 20 Gb s 24000 entries Environment Operating temperature Operating relative humidity Nonoperating Storage temperature Nonoperating Storage relative humidity 32 F to 113 F 0 C to 45 C 5 to 95 noncondensing 40 F to 158 F 40 C to 70 C 5 to 95 noncondensing Electrical characteristics Maximum heat dissipation Maximum power rating 512 BTU hr 540 16 kJ hr 150W Safety UL 60950 1 CAN CSA 22 2 No 60950 1 IEC 60950 1 EN 60950 1 FDA 21 CFR Subchapter J Emissions EN 55022 Class A CISPR 22 Class A ICES 003 Class A AS NZS CISPR 22 Class A EN 61000 3 2 EN 61000 3 3 VCCI 3 Class A VCCI 4 Class A ETSI EN 300 386 FCC Part 15 CFR 47 Class A Immunity EN EN 55024 CISPR 24 amp ETSI EN 300 386 Management MC Intelligent Management Center command line interface Web browser SNMP Manager Telnet HTTPS RMON1 FTP in line and out of band IEEE 802 3 Ethernet MIB Ethernet Interface MIB Features For use in HP 10500 Switch Series and HP 7500 Switch Series Default supported APs 128 aximum supported APs 1 024 via the purchase of the optional HP Unified Wired WLAN 128 AP E LTU JG649AAE aximum supported clients and centralized throughput e 20 000 clients 20G of centralized throughput
11. on RFC 858 RFC 894 RFC 950 Internet Standard Subnetting Procedure R R R elnet Suppress Go Ahead Option P over Ethernet FC 959 File Transfer Protocol FTP FC 1122 Host Requirements FC 1141 Incremental updating of the Internet checksum RFC 1144 Compressing TCP IP headers for low speed serial links RFC 1256 ICMP Router Discovery Protocol IRDP RFC 1305 NTPv3 IPv4 only RFC 1321 The MD5 Message Digest Algorithm RFC 1334 PPP Authentication Protocols PAP RFC 1350 TFTP Protocol revision 2 RFC 1812 IPv4 Routing RFC 1944 Benchmarking Methodology for Network Interconnect Devices RFC 1994 PPP C Protocol CHAP RFC 2104 HMAC Keyed Hashing for Message Authentication allenge Handshake Authentication R R R R R R R R a R FC 2246 The TLS Protocol Version 1 0 FC 2284 EAP over LAN FC 2644 Directed Broadcast Control FC 2864 The Inverted Stack Table Extension to the Interfaces Group MIB FC 2866 RADIUS Accounting FC 2869 RADIUS Extensions FC 3164 Syslog FC 3268 Advanced Encryption Standard AES iphersuites for Transport Layer Security TLS FC 3619 Ethernet Automatic Protection Switching EAPS IP multicast RFC 1112 IGMP RFC 2236 IGMPv2 IPv6 RFC 1350 TFTP RFC 2465 Management Information Base for IP Version RFC 3493 Basic Socket Interface Extensions for IPv6 RFC 1881 IPv6 Address Allocation
12. reducing threat levels caused by infected wireless clients and improving the overall security of the wireless network e Public Key Infrastructure PKI used to control access Authentication authorization and accounting AAA uses an embedded authentication server or external AAA server for local users Wireless Intelligent Application Aware Feature WIAA provides a user role based or SSID based firewall embedded in WLAN Controller via ACL based packet filter firewall and ASPF firewall Protect clients from outside attacks Restrict specific users from accessing specific network resources Source Address Validation Improvement SAVI ecords the wireless client s IP address and MAC address and at the next data traffic forwarding stage SAVI will validate the client s IP address to prevent attacker spoofing other client s P address Connectivity IPv6 IPv6 host enables controllers to be managed and deployed at the IPv6 network s edge Dual stack IPv4 and IPv6 transitions customers from IPv4 to IPv6 supporting connectivity for both protocols MLD snooping directs IPv6 multicast traffic to the appropriate interface preventing traffic flooding IPv6 ACL QoS supports ACL and QoS for IPv6 network traffic NAT support NAT traversal helps ensure that communication between a branch office AP and HP 870 is supported when the branch uses NAT Integrated NAT support replaces the private source I
13. s Intrusion Detection System WIDS provides support for hybrid and dedicated modes detects flood spoofing and weak IV attacks displays statistics events and history supports configuration of detection policies Integrated Wireless Intrusion Prevention System WIPS automatically identifies and classifies all APs and stations enables packet trigger containment via knowledge based heuristics protects against honeypot attacks and enforces STA security detects Denial of Service DoS attacks via pre defined DoS attacks and provides a Signature mechanism which allows admins to define custom rules enables Virtual Service Domains to deploy security policies by department or location for example Secure user isolation virtual AP services enable the network administrator to provide specific services for different user groups allowing effective resource sharing and simplifying network maintenance and management Secure access by location AP location based user access control helps ensure that wireless users can access and authenticate only to preselected APs enabling system administrators to control the locations where a wireless user can access the network Datasheet HP 10500 7500 20G Unified Wired WLAN Module Endpoint Admission Defense integrated wired and wireless Endpoint Admission Defense EAD helps ensure that only wireless clients that comply with mandated enterprise security policies can access the network
14. ther SNMP management station controller supports SNMPv3 as well as SSH and SSL for secure CLI and Web management VLAN pooling enables wireless clients to be dynamically assigned to different VLANs so administrators can assign different subnets to different clients in the same SSID A VLAN pool can bind to multiple SSIDs e Unified network visibility provides visibility between a wired and wireless network using IEEE 802 1AB Link Layer Discovery Protocol LLDP and sFlow AP Plug and Play PnP provides zero configuration capability An AP without a predefined configuration file can connect to the WLAN controller and the WLAN Controller will provision it with the correct wireless configuration e Policy based forwarding simplifies the deployment of centralized or local forwarding The policy based mode allows user to classify data traffic based on ACL and choose local or centralized forwarding Policy based forwarding can be applied based on SSID or user profile That means a forwarding policy can be applied ona SSID or a specific user or a group of users Datasheet HP 10500 7500 20G Unified Wired WLAN Module AP grouping enables an admin to easily apply AP based or radio based configurations to all the AP that are in the same group Staged Firmware Upgrades enables an admin to selectively upgrade APs typically a group of APs to minimize the impact of upgrading large deployments of APs to a new version of firmware e Cus
15. tom antenna settings allow the admin to select a custom antenna gain Quality of Service QoS End to end QoS the HP 10500 7500 20G Unified Wired WLAN Module supports the DiffServ standard and IPv6 QoS the QoS DiffServ model includes traffic classification and traffic policing and fully implements six groups of services EF AF1 through AF4 and BE IEEE 802 1p prioritization delivers data to devices based on the priority and type of traffic e Class of Service CoS sets the IEEE 802 1p priority tag based on IP address IP Type of Service ToS Layer 3 protocol TCP UDP port number source port and DiffServ Security Web based authentication provides a browser based environment to authenticate clients that do not support the IEEE 802 1X supplicant IEEE 802 1X and RADIUS network logins support port based and SSID based 802 1X authentication and accounting WEP WPA2 or WPA encryption can be deployed at the AP to lock out unauthorized wireless access by authenticating users prior to granting network access robust Advanced Encryption Standard AES or Temporal Key Integrity Protocol TKIP encryption secures the data integrity of wireless traffic Secure shell encrypts all transmitted data for secure remote CLI access over IP networks e Media access control MAC authentication provides simple authentication based on a user s MAC address supports local or RADIUS based authentication Integrated Wireles
16. tributes Protocol EAP REC 2246 Transport Layer Security TLS RFC 2716 PPP EAP TLS Authentication Protocol RFC 3580 IEEE 802 1X RADIUS Guidelines REC 2401 Security Architecture for the RFC 2865 RADIUS Authentication Access Control Lists ACLs Internet Protocol RFC 2867 RADIUS Accounting Modifications for Tunnel Guest VLAN for 802 1x 7 i np Protocol Support RFC 2408 Internet Security Association and Secure Sockets Layer SSL Key Management Protocol ISAKMP era Encryption Standard AES Key SSHv2 Secure Shell RFC 2409 The Internet Key Exchange IKE er RFC 3576 Dynamic Authorization Extensions Web Authentication to RADIUS Disconnect Message and WPA Wi Fi Protected Access WPA2 Session time renewal VPN RFC 2403 The Use of HMACMD5 96 within RFC 2405 The ESP DES CBC Cipher Algorithm RFC 2407 The Internet IP Security Domain of Interpretation ESP and AH with Explicit IV for ISAKMP RFC 2404 The Use of HMAC SHA 1 96 within ESP and AH RFC 2451 The ESP CBC Mode Cipher Algorithms IPSec RFC 1829 The ESP DES CBC Transform RFC 3602 The AES CBC Cipher Algorithm and Its Use with IPSec IKEv1 RFC 3748 Extensible Authentication Protocol EAP PKI RFC 3280 Internet X 509 Public Key Infrastructure Certificate and Certificate Revocation List CRL Profile Data sheet HP 10500 7500 20G Unified Wired WLAN Module HP 10500 7500 20G Unified Wired WLAN Module accessories License HP Unified Wired WLAN 128 AP E LTU JG649AAE NEW HP Unified Wired WLAN 128
Download Pdf Manuals
Related Search