HP ProCurve Switch 5400zl Series

1 HP ProCurve Switch 5400zl SeriesProduct overviewThe HP ProCurve Switch 5400zl Series consists of themost advanced intelligent switches in the HP ProCurveproduct line. The 5400zl Series includes 6-slot and12-slot chassis and associated zl modules andbundles. The foundation for all of these switches is apurpose-built, programmable ProVision ASIC thatallows the most demanding networking features, suchas Quality of Service (QoS) and security, to beimplemented in a scalable yet granular fashion. With10/100, Gigabit and 10-Gigabit interfaces,integrated PoE+ on 10/100 and10/100/1000 Base-T ports, and a choice of formfactors, the 5400zl switches offer excellent investmentprotection, flexibility, and scalability, as well as easeof deployment, operation, and featuresbCore, distribution, and advanced access layerbLayer 2 to 4 and intelligent edge feature setbEnterprise-class performance and securitybHP ProCurve ONE integratedbScalable 10/100/1000 and 10-GbE connectivity2 Features and benefitsIndustry-leading warrantyFor as long as you own the product.

2 With next-business-day advance replacement (available in most countries). The following hardware products have a five-year hardware warrantyfor the disk drive and lifetime hardware warranty (for as long as you own the product) for the rest of the module: HP ProCurve ONE Services zl Module, HP ProCurve ThreatManagement Services zl Module, and HP ProCurve MSM765zl Mobility Controller. The following hardware products and their related Series modules have a one-year hardwarewarranty with extensions available: HP ProCurve Routing Switch 9300m Series , HP ProCurve Switch 8100fl Series , HP ProCurve Network Access Controller 800, and HP ProCurveDCM Controller.

3 The following hardware products have a one-year hardware warranty with extensions available: HP ProCurve M111 Client Bridge, HP ProCurve MSM3xx-R AccessPoints, HP ProCurve MSM7xx Mobility and Access Controllers, HP ProCurve RF Manager IDS/IPS Systems, HP ProCurve MSM Power Supplies, HP ProCurve 1-Port Power Injector,HP ProCurve CNMS Appliances, and HP ProCurve MSM317 Access Device. Standalone software, upgrades, or licenses may have a different warranty duration. For details, refer tothe ProCurve Software License, Warranty, and Support booklet at Remote Intelligent Mirroring: mirrors selectedingress/egress traffic based on ACL, port, MACaddress, or VLAN to a local or remote 8200zl,6200yl, 5400zl , or 3500yl Switch anywhere on thenetwork RMON, XRMON, and sFlow v5: provideadvanced monitoring and reporting capabilities forstatistics, history, alarms, and events IEEE Link Layer Discovery Protocol(LLDP): automated device discovery protocolprovides easy mapping by network managementapplications Uni-Directional Link detection (UDLD).

4 Monitors cable between two switches and shutsdown the ports on both ends if the cable is brokenturning the bi-directional link into uni-directional; thisprevents network problems such as loops Management simplicity: includesProCurve-common networking features and CLIimplementation (common across ProCurve zl and ylswitches) Command authorization: leverages RADIUS tolink a custom list of CLI commands to an individualnetwork administrator's login; also provides an audittrail Friendly port names: allow assignment ofdescriptive names to ports Dual flash images: provide independent primaryand secondary operating system files for backupwhile upgrading Multiple configuration files: can be stored tothe flash imageConnectivity NEW IPv6: IPv6 host: enables switches to be managed anddeployed at the IPv6 network's edge Dual stack (IPv4/IPv6): transitions from IPv4to IPv6, supporting connectivity for both protocols MLD snooping: forwards IPv6 multicast traffic tothe appropriate interface IPv6 ACL/QoS.

5 Supports ACL and QoS for IPv6network traffic , preventing traffic flooding IPv6 routing: supports static and OSPFv3(requires Premium License) routing protocols IEEE Power over Ethernet (PoE):provides up to W per port to PoE-powered devices such as IPphones, wireless access points, and securitycameras IEEE Power Over Ethernet Plus:provides up to 30 W per port to IEEE forPoE-/PoE+-powered devices such as video IPphones, IEEE wireless access points, andadvanced pan/zoom/tilt security cameras Prestandard PoE support: detects and providespower to prestandard PoE devices; see list ofsupported devices in the product FAQ High-density port connectivity: up to 12interface module slots and up to 288 wire-speed10/100/1000 PoE-enabled ports or 48 10-GbEports per system Jumbo frames: on Gigabit and 10-Gigabit ports,allow high-performance remote backup anddisaster-recovery services Auto-MDIX: automatically adjusts forstraight-through or crossover cables on all 10/100and 10/100/1000 portsPerformance High-speed/capacity architecture.

6 Crossbar switching fabric providesintra-module and inter-module switching with pps throughput on the purpose-built ProVisionASICs Selectable queue configurations: increaseperformance by selecting the number of queues andassociated memory buffering that best meet therequirements of your network applications3 Resiliency and high availability Virtual Router Redundancy Protocol(requires Premium License): allows groups oftwo routers to dynamically back each other up tocreate highly available routed environments IEEE Multiple Spanning TreeProtocol: provides high link availability in multipleVLAN environments by allowing multiple spanningtrees; encompasses IEEE Spanning TreeProtocol and IEEE Rapid Spanning TreeProtocol Server-to- Switch distributed trunking: allowsa server to connect to two switches with one logicaltrunk that consists of multiple physical connections.

7 Enables load-balancing and increases resiliency IEEE Link Aggregation ControlProtocol (LACP) and ProCurve trunking:support up to 60 trunks, each with up to 8 links(ports) per trunk Optional redundant power supply (5400zlseries): provides uninterrupted power and allowshot-swapping of the redundant power supplies wheninstalled Hot-swappable modules ( 5400zl Series ):permits modules, mini-GBICs, and power supplies ina redundant power supply configuration to beadded or swapped without interrupting the network Sparing simplicity: ProCurve zl-commonaccessories (interface modules, power supplies)Layer 2 switching IEEE Q-in-Q (requires PremiumLicense): increases the scalability of an Ethernetnetwork by providing a hierarchical structure.

8 Connects multiple LANs on high-speed campus ormetro network ProCurve Switch meshing: dynamicallyload-balances across multiple active redundant linksto increase available aggregate bandwidth VLAN support and tagging: supports the standard and 2,048 VLANs simultaneously IEEE protocol VLANs: isolate selectnon-IPv4 protocols automatically into their ownVLANs GARP VLAN Registration Protocol: allowsautomatic learning and dynamic assignment ofVLANsLayer 3 services UDP helper function: allows UDP broadcasts tobe directed across router interfaces to specific IPunicast or subnet broadcast addresses and preventsserver spoofing for UDP services such as DHCP Loopback interface address: defines anaddress in RIP and OSPF that can always bereachable, improving diagnostic capability NEW Route maps: provide more control duringroute redistribution.

9 Allow filtering and altering ofroute metricsLayer 3 routing NEW Static IP routing: provides manuallyconfigured routing for both IPv4 and IPv6 networks RIP: provides RIPv1 and RIPv2 routing NEW OSPF (requires Premium License):provides OSPFv2 for IPv4 routing and OSPFv3 forIPv6 routingSecurity Access control lists (ACLs): provide filteringbased on the IP field, source/destination IPaddress/subnet, and source/destination TCP/UDPport number on a per-VLAN or per-port basis Multiple user authentication methods: IEEE users per port: providesauthentication of multiple IEEE users perport; prevents user "piggybacking" on anotheruser's IEEE authentication Web-based authentication: authenticatesfrom Web browser for clients that do not supportIEEE supplicant.

10 Customized remediationcan be processed on an external Web server MAC-based authentication: client isauthenticated with the RADIUS server based onclient's MAC address Concurrent IEEE , Web, and MACauthentication schemes per port: switchport will accept up to 32 sessions of IEEE ,Web, and MAC authentications Virus throttling: detects traffic patterns typical ofWORM-type viruses and either throttles or entirelyprevents the virus from spreading across the routedVLANs or bridged interfaces, without requiringexternal appliances DHCP protection: blocks DHCP packets fromunauthorized DHCP servers, preventingdenial-of-service attacks Secure management access: securely encryptsall access methods (CLI, GUI, or MIB) throughSSHv2, SSL, and/or SNMPv34 USB Secure Autorun (requires HP ProCurveManager Plus): deploys, diagnoses, and updatesswitch using a USB flash drive; works with a securecredential to prevent tampering Switch CPU protection: provides automaticprotectio