HP 3600 EI series User manual

Models
HP 3600-24 v2 EI Switch JG299A
HP 3600-48 v2 EI Switch JG300A
HP 3600-24-PoE+ v2 EI Switch JG301B
HP 3600-48-PoE+ v2 EI Switch JG302B
HP 3600-24-SFP v2 EI Switch JG303A
Key features
Robust switching at the enterprise network edge
Advanced Layer 3 and multicast routing
IRF-automated stack and switching fabric setup
Integrated and distributed security enforcement
Enterprise-level nonblocking performance
Product overview
The HP 3600 EI Switch Series delivers premium levels of intelligent and resilient performance, security, and reliability for robust
switching at the enterprise network edge. The series consists of Layer 3 Fast Ethernet and PoE/PoE+ switches, with advanced features
that can accommodate the most demanding applications. Secure, resilient connectivity and the latest traffic-prioritization technologies
enhance converged networks. Designed for increased flexibility and scalability, HP 3600 EI series switches come with 24 or 48 10/100
ports, four active SFP-based Gigabit Ethernet ports for stacking and uplinks, and a 24-port 100BASE-FX switch with two or four Gigabit
Ethernet SFP slots.
Features and benefits
Quality of Service (QoS)
Broadcast control
allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic
Advanced classifier-based QoS
classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority
level and rate limit to selected traffic on a per-port or per-VLAN basis
Powerful QoS feature
supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), weighted fair queuing
(WFQ), and WRED
Traffic policing
supports Committed Access Rate (CAR) and line rate
RRPP
enables ultra high levels of network resiliency, with failover times of less than 50 ms
Management
Friendly port names
allow assignment of descriptive names to ports
Remote configuration and management
is available through a secure Web browser or a command-line interface (CLI)
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 1

Manager and operator privilege levels
enable read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
Command authorization
leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit
trail
Secure Web GUI
provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
Multiple configuration files
can be stored to the flash image
Complete session logging
provides detailed information for problem identification and resolution
SNMPv1, v2c, and v3
facilitate centralized discovery, monitoring, and secure management of networking devices
Remote monitoring (RMON)
uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private
alarm extension group
Local and Remote Intelligent Mirroring
mirrors traffic from a switch port or to a remote switch port anywhere on the network, or mirrors ACL-selected traffic to a local
switch port
Management VLAN
segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network
management applications
Device Link Detection Protocol (DLDP)
monitors a cable between two switches and shuts down the ports on both ends if the cable is broken, preventing network
problems such as loops
sFlow (RFC 3176)
provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this
allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-
time network monitoring purposes
IPv6 management
future-proofs networking, as the switch is capable of being managed whether the attached network is running IPv4 or IPv6;
supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, syslogv6, FTPv6, SNMPv6, DHCPv6, and RADIUS for IPv6
Troubleshooting
ingress and egress port monitoring enable network problem solving; virtual cable tests provide visibility into cable problems
Connectivity
IPv6
Telnet
for allowing CLI access via IPv6
SNMP
for IPv6 switch management
DNS
for IPv6 host management
DHCP
for auto IPv6 address configuration of a switch
Auto-MDIX
provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 2

Jumbo packet support
supports up to 9216-byte frame size to improve the performance of large data transfers
Gigabit Ethernet uplinks
are dual-personality ports for either 10/100/1000 or mini-GBIC SFP connectivity for increased connectivity flexibility
High-density access
provides up to 48 fixed 10/100BASE-T PoE or non-PoE ports or 24 SFP 100BASE-X ports in a Layer 2/Layer 3 switch
Ethernet operations, administration and maintenance (OAM)
detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the
link between two devices
IEEE 802.3af Power over Ethernet (PoE)
provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and
security cameras
IEEE 802.3at Power over Ethernet (PoE+) support
simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying
local power at each access point location
Performance
Nonblocking performance
up to 17.6 Gbps nonblocking switching fabric provides wire-speed switching with up to 13.1 million pps throughput
Gigabit Ethernet interface
provides a connection to the network that eliminates the network as a bottleneck
Hardware-based wire-speed access control lists
feature-rich ACL implementation helps ensure high levels of security and ease of administration without impacting network
performance
Resiliency and high availability
Separate data and control paths
keeps control separated from services and keeps service processing isolated; increases security and performance
External redundant power supply
provides high reliability
Smart link
allows 50 ms failover between links
Spanning Tree/MSTP, RSTP
provides redundant links while preventing network loops
Intelligent Resilient Framework (IRF)
creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do
not have to be co-located and can be part of a disaster recovery system; servers or switches can be attached using standard
LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree
Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation
IEEE 802.3ad Link Aggregation Control Protocol (LACP)
supports up to 24 trunks, each with 8 links per trunk; supports static or dynamic groups
Virtual Router Redundancy Protocol (VRRP)
allows a group of routers to dynamically back each other up to create highly available routed environments
IRF capability
provides single IP address management for a resilient virtual switching fabric of up to nine switches
Manageability
RMON (remote monitoring)
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 3

provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events
Layer 2 switching
16/32K MAC address table
provides access to many Layer 2 devices
VLAN support and tagging
support IEEE 802.1Q with 4,094 simultaneous VLAN IDs
GARP VLAN Registration Protocol
allows automatic learning and dynamic assignment of VLANs
IEEE 802.1ad QinQ and Selective QinQ
increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed
campus or metro network
Gigabit Ethernet port aggregation
allows grouping of ports to increase overall data throughput to a remote device
Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) protocol snooping
effectively control and manage the flooding of multicast packets in a Layer 2 network
Layer 3 services
Address Resolution Protocol (ARP)
determines the MAC address of another IP host in the same subnet
Dynamic Host Configuration Protocol (DHCP)
simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across
subnets
Loopback interface address
defines an address in Routing Information Protocol (RIP) and OSPF, improving diagnostic capability
User Datagram Protocol (UDP) helper function
allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents
server spoofing for UDP services such as DHCP
Route maps
provide more control during route redistribution; allow filtering and altering of route metrics
Layer 3 routing
IPv4 routing protocols
support static routes, RIP, OSPF, ISIS, and BGP
IPv6 routing protocols for v2 switches
provide routing of IPv6 at wire speed; support static routes, RIPng, OSPFv3, ISIS for IPv6, and BGP4+ for IPv6
IPv6 tunneling
allows a smooth transition from IPv4 to IPv6 by encapsulating IPv6 traffic over an existing IPv4 infrastructure
Equal-Cost Multipath (ECMP)
enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
Bidirectional Forwarding Detection (BFD)
enables link connectivity monitoring and reduces network convergence time for RIP, OSPF, BGP, IS-IS, VRRP, and IRF
PIM-SSM, PIM-DM, and PIM-SM (for IPv4 and IPv6)
support IP Multicast address management and inhibition of DoS attacks
Multicast Source Discovery Protocol (MSDP)
is used for inter-domain multicast applications, allowing multiple PIM-SM domains to interoperate
IGMPv1, v2, and v3
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 4

allow individual hosts to be registered on a particular VLAN
Security
Access control lists (ACLs)
provides IP Layer 2 to Layer 4 traffic filtering; supports VLAN ACL and port ACL
Multiple user authentication methods
IEEE 802.1X
is an industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a
RADIUS server
Web-based authentication
similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients that do not support the IEEE
802.1X supplicant
MAC-based authentication
authenticates the client with the RADIUS server based on the client's MAC address
Identity-driven security and access control
Per-user ACLs
permits or denies user access to specific network resources based on user identity and time of day, allowing multiple
types of users on the same network to access specific network services without risking network security or allowing
unauthorized access to sensitive data
Automatic VLAN assignment
automatically assigns users to the appropriate VLAN based on their identities
Secure management access
securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch
configuration file
Guest VLAN
similar to IEEE 802.1X, it provides a browser-based environment to authenticated clients
Endpoint Admission Defense (EAD)
provides security policies to users accessing a network
Port security
allows access only to specified MAC addresses, which can be learned or specified by the administrator
Port isolation
secures and adds privacy, and prevents malicious attackers from obtaining user information
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
STP Root Guard
protects the root bridge from malicious attacks or configuration mistakes
DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
IP Source Guard
helps prevent IP spoofing attacks
RADIUS/HWTACACS
eases switch management security administration by using a password authentication server
Multiple Customer Edge (MCE)
facilitates MPLS VPN network integration with support for up to 63 VPNs
ICMP throttling
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 5

defeats ICMP denial-of-service attacks by enabling any switch port to automatically throttle ICMP traffic
Convergence
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
is an automated device discovery protocol that provides easy mapping of network management applications
LLDP-MED
is a standard extension that automatically configures network devices, including LLDP-capable IP phones
LLDP-CDP compatibility
receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation
PoE allocations
support multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user specified) to allocate PoE power for more
efficient energy savings
Voice VLAN
automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance
IP multicast snooping and data-driven IGMP
automatically prevent flooding of IP multicast traffic
Multicast VLAN
allows multiple VLANs to receive the same multicast traffic, reducing network bandwidth demand by eliminating multiple
streams to each VLAN
Protocol Independent Multicast (PIM)
is used for multicast applications; supports PIM Dense Mode (PIM-DM) and Sparse Mode (PIM-SM)
Multicast Source Discovery Protocol (MSDP)
is used for inter-domain multicast applications, allowing multiple PIM-SM domains to interoperate
Device support
Cisco prestandard PoE support
detects and provides power to Cisco's prestandard PoE devices such as wireless LAN access points and IP phones
Additional information
Green initiative support
provides support for RoHS and WEEE regulations
Green IT and power
uses the latest advances in silicon development and shuts off unused ports to improve power efficiency provides support for
RoHS and WEEE regulations
Warranty and support
NEW Lifetime Warranty 2.0
advance hardware replacement for as long as you own the product with next-business-day delivery (available in most countries)†
NEW Electronic and telephone support (for Lifetime Warranty 2.0)
limited 24x7 telephone support is available from HP for the first 3 years; limited electronic and business hours telephone
support is available from HP for the entire warranty period; to reach our support centers, refer to
www.hp.com/networking/contact-support ; for details on the duration of support provided with your product purchase, refer to
www.hp.com/networking/warrantysummary
Software releases
to find software for your product, refer to www.hp.com/networking/support ; for details on the software releases available with
your product purchase, refer to www.hp.com/networking/warrantysummary
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 6

† HP warranty includes repair or replacement of hardware for as long as you own the product, with next business day advance
replacement (available in most countries). The disk drive included with HP AllianceOne Advanced Services and Services zl Modules, HP
Threat Management Services zl Module, HP AllianceOne Extended zl Module with Riverbed Steelhead, HP MSM765zl Mobility Controller
and HP Survivable Branch Communication zl Module powered by Microsoft Lync has a five-year hardware warranty. For details, refer to
the Software license and hardware warranty statements at www.hp.com/networking/warranty .
QuickSpecs
HP 3600 EI Switch Series
Overview
DA - 13790 North America — Version 9 — December 18, 2013 Page 7

Build To Order:
BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack-Shippable solution.
HP 3600-24 v2 EI Switch JG299A
24 RJ-45 autosensing 10/100 ports
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 2
HP 3600-24-SFP v2 EI Switch JG303A
24 SFP 100 Mbps ports
min=0 \ max=24 SFP 100 Transceivers
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 2, 3
HP 3600-24-PoE+ v2 EI Switch JG301B
24 RJ-45 autosensing 10/100 PoE+ ports
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 4,5,6
PDU Cable NA/MEX/TW/JP JG301B#B2B
C15 PDU Jumper Cord (NA/MEX/TW/JP)
PDU Cable ROW JG301B#B2C
C15 PDU Jumper Cord (ROW)
High Volt Switch/Router to Wall Power Cord JG301B#B2E
NEMA L6-20P Cord (NA/MEX/JP/TW)
HP 3600-48 v2 EI Switch JG300A
48 RJ-45 autosensing 10/100 PoE ports
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 2
HP 3600-48-PoE+ v2 EI Switch JG302B
48 RJ-45 autosensing 10/100 PoE ports
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 4,5,6
QuickSpecs
HP 3600 EI Switch Series
Configuration
DA - 13790 North America — Version 9 — December 18, 2013 Page 8

PDU Cable NA/MEX/TW/JP JG302B#B2B
C15 PDU Jumper Cord (NA/MEX/TW/JP)
PDU Cable ROW JG302B#B2C
C15 PDU Jumper Cord (ROW)
High Volt Switch/Router to Wall Power Cord JG302B#B2E
NEMA L6-20P Cord (NA/MEX/JP/TW)
Configuration Rules:
Note 1 The following Transceivers install into this switch: (SFP 1000 Mbps ports only)
HP X125 1G SFP LC SX Transceiver JD118B
HP X120 1G SFP LC LX Transceiver JD119B
HP X125 1G SFP LC LH70 Transceiver JD063B
HP X125 1G SFP RJ45 T Transceiver JD089B
HP X120 1G SFP LC BX 10-D Transceiver JD098B
HP X120 1G SFP LC BX 10-D Transceiver JD099B
HP X124 1G SFP LC LH40 1310nm Transceiver JD061A
HP X120 1G SFP LC LH40 1550nm Transceiver JD062A
Note 2 Localization required. (See Localization Menu for list.)
Note 3 The following Transceivers install into this switch: (SFP 100 Mbps ports only)
HP X110 100M SFP LC BX 10-U Transceiver JD100A
HP X110 100M SFP LC BX 10-D Transceiver JD101A
HP X115 100M SFP LC FX Transceiver JD102B
HP X110 100M SFP LC LH40 Transceiver JD090A
HP X110 100M SFP LC LH80 Transceiver JD091A
HP X110 100M SFP LC LX Transceiver JD120B
Note 4 When Switches are Not Factory Racked, Then Switch to Wall Power Cord should be the
Defaulted Power Cable option on the Switches.
Note 5 Localization (Wall Power Cord) required on orders without #B2B, #B2C (PDU Power Cord) or
#B2E. (See Localization Menu)
Note 6 #B2E is Offered only in NA, Mexico, Taiwan and Japan.
Remarks Drop down under power supply should offer the following options and results:
Switch/Router/Power Supply to PDU Power Cord - #B2B in North America, Mexico, Taiwan, and
Japan or #B2C ROW. (Watson Default B2B or B2C for Rack Level CTO)
Switch/Router/Power Supply to Wall Power Cord - Localized Option (Watson Default for BTO
and Box Level CTO)
High Volt Switch/Router/Power Supply to Wall Power Cord - #B2E Option. (Offered only in North
QuickSpecs
HP 3600 EI Switch Series
Configuration
DA - 13790 North America — Version 9 — December 18, 2013 Page 9

America, Mexico, Taiwan, and Japan)
Rack Level Integration CTO Models
HP 3600-24-PoE+ v2 EI Switch JG301B
24 RJ-45 autosensing 10/100 PoE+ ports
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 3, 4, 5
PDU Cable NA/MEX/TW/JP JG301B#B2B
C15 PDU Jumper Cord (NA/MEX/TW/JP)
PDU Cable ROW JG301B#B2C
C15 PDU Jumper Cord (ROW)
HP 3600-48-PoE+ v2 EI Switch JG302B
48 RJ-45 autosensing 10/100 PoE ports
2 dual-personality 10/100/1000 ports/ SFP 1000 Mbps ports
2 SFP 1000 Mbps ports
min=0 \ max=4 SFP 1000 Transceivers
1U - Height
See
Configuration
Note:1, 3, 4, 5
PDU Cable NA/MEX/TW/JP JG302B#B2B
C15 PDU Jumper Cord (NA/MEX/TW/JP)
PDU Cable ROW JG302B#B2C
C15 PDU Jumper Cord (ROW)
Configuration Rules:
Note 1 The following Transceivers install into this switch: (SFP 1000 Mbps ports only)
HP X125 1G SFP LC SX Transceiver JD118B
HP X120 1G SFP LC LX Transceiver JD119B
HP X125 1G SFP LC LH70 Transceiver JD063B
HP X125 1G SFP RJ45 T Transceiver JD089B
HP X120 1G SFP LC BX 10-D Transceiver JD098B
HP X120 1G SFP LC BX 10-D Transceiver JD099B
HP X124 1G SFP LC LH40 1310nm Transceiver JD061A
HP X120 1G SFP LC LH40 1550nm Transceiver JD062A
Note 3 When Switches are Factory Racked, Then #B2B, or #B2C should be the Defaulted Power Cable option on the
Switches.
Note 4 Localization (Wall Power Cord) required on orders without #B2B, #B2C (PDU Power Cord). (See Localization Menu)
QuickSpecs
HP 3600 EI Switch Series
Configuration
DA - 13790 North America — Version 9 — December 18, 2013 Page 10