HP 5500 HI Series User instructions

HP 5500-24G-4SFP HI Switch with 2 interface Slots
HP 5500-24G-PoE+-4SFP HI Switch with 2 Interface Slots
HP 5500-48G-4SFP HI Switch with 2 interface Slots
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 1

HP 5500-48G-PoE+-4SFP HI Switch with 2 Interface Slots
HP 5500-24G-SFP HI Switch with 2 Interface Slots
Models
HP 5500-24G-4SFP HI Switch with 2 interface Slots JG311A
HP 5500-48G-4SFP HI Switch with 2 interface Slots JG312A
HP 5500-24G-PoE+-4SFP HI Switch with 2 Interface Slots JG541A
HP 5500-48G-PoE+-4SFP HI Switch with 2 Interface Slots JG542A
HP 5500-24G-SFP HI Switch with 2 Interface Slots JG543A
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 2

Key features
High expandability for investment protection
Premium resiliency and integrated management
SDN readiness with OpenFlow support
Full-featured IPv4/IPv6 dual stack
1440 W of PoE+ power using dual power supplies for high resiliency
Product overview
The HP 5500 HI Switch Series comprises Gigabit Ethernet switches that deliver outstanding resiliency, security, and multiservice
support capabilities at the edge layer of data center, large campus, and metro Ethernet networks. The switches can also be used in the
core layer of SMB networks.
With Intelligent Resilient Fabric (IRF) support and available dual power supplies, the HP 5500 HI Switch Series can deliver the highest
levels of resiliency and manageability. In addition, the PoE+ models provide up to 1,440 W of PoE+ power with the dual power supply
configuration.
Designed with two fixed 10GbE ports and extension module flexibility, these switches can provide up to six 10GbE uplink or 70 GbE
ports. With complete IPv4/IPv6, OpenFlow, and MPLS/VPLS features, the series provides investment protection with an easy transition
from IPv4 to IPv6 networks.
Features and benefits
Software-defined networking
OpenFlow
supports OpenFlow 1.0 and 1.3 specifications to enable SDN by allowing separation of the data (packet forwarding) and control
(routing decision) paths
Quality of Service (QoS)
Advanced classifier-based QoS
classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting priority
level and rate limit to selected traffic on a per-port or per-VLAN basis
Traffic policing
supports Committed Access Rate (CAR) and line rate
Powerful QoS feature
creates traffic classes based on access control lists (ACLs), IEEE 802.1p precedence, IP, and DSCP or Type of Service (ToS)
precedence; supports filter, redirect, mirror, or remark; supports the following congestion actions: strict priority (SP) queuing,
weighted round robin (WRR), weighted fair queuing (WFQ), weighted random early discard (WRED), weighted deficit round robin
(WDRR), SP+WDRR, and SP+WFQ.
Storm restraint
allows limitation of broadcast, multicast, and unknown unicast traffic rate to reduce unwanted broadcast traffic on the network
Management
Friendly port names
allow assignment of descriptive names to ports
sFlow (RFC 3176)
provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 3

allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-
time network monitoring purposes
Complete session logging
provides detailed information for problem identification and resolution
Remote configuration and management
enables configuration and management through a secure Web browser or a CLI located on a remote device
Manager and operator privilege levels
provides read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
Management VLAN
segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
Command authorization
leverages RADIUS to link a custom list of CLI commands to an individual network administrator's login; an audit trail documents
activity
Secure web GUI
provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
SNMPv1, v2c, and v3
facilitate centralized discovery, monitoring, and secure management of networking devices
Remote monitoring (RMON)
uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private
alarm extension group
Remote intelligent mirroring
mirrors ingress/egress ACL-selected traffic from a switch port or VLAN to a local or remote switch port anywhere on the network
In-service software upgrade (ISSU)
enables operators to perform upgrades in the shortest possible amount of time with minimal risk to network operations or
traffic disruptions
Connectivity
Auto-MDIX
provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
Packet storm protection
protects against broadcast, multicast, or unicast storms with user-defined thresholds
Ethernet operations, administration and maintenance (OAM)
detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the
link between two devices
Flow control
provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations
Fixed 10GbE ports
provides two fixed SFP+ ports for a 20 GbE connection to the network without the need for additional extension interface
modules
Optional 10GbE ports
deliver, through the use of optional modules, additional 10GbE connections, which are available for uplinks or high-bandwidth
server connections; flexibly support copper, XFP, SFP+, or CX4 local connections
Optional 8-port SFP module
adds up to eight additional wirespeed Gigabit Ethernet ports for unprecedented Gigabit density in a single 1U enclosure
Jumbo packet support
supports up to 12288-byte frame size to improve the performance of large data transfers
High-bandwidth CX4 local stacking
achieves 12 Gbps per connection when using local CX4 stacking, allowing for up to 96 Gbps total stacking bandwidth (full duplex)
in a resilient stacking configuration
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 4

IEEE 802.3at Power over Ethernet (PoE+)
provides up to 30 W per port that allows support of the latest PoE+-capable devices such as IP phones, wireless access points,
and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and
circuits that would otherwise be necessary in IP phone and WLAN deployments
Performance
Hardware-based wirespeed access control lists (ACLs)
help provide high levels of security and ease of administration without impacting network performance with a feature-rich
TCAM-based ACL implementation
Nonblocking architecture
delivers up to 224 Gb/s of wire-speed switching with a nonblocking switching fabric and up to 167 million pps throughput
Resiliency and high availability
Separate data and control paths
separates control from services and keeps service processing isolated; increases security and performance
Device Link Detection Protocol (DLDP)
monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based
networks
Intelligent Resilient Framework (IRF)
creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do
not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard
LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree
Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation
Rapid Ring Protection Protocol (RRPP)
connects multiple switches in a high-performance ring using standard Ethernet technology; traffic can be rerouted around the
ring in less than 50 ms, reducing the impact on traffic and applications
Smart link
allows 50 ms failover between links
Virtual Router Redundancy Protocol (VRRP)
allows groups of two routers to dynamically back each other up to create highly available routed environments
Manageability
Dual flash images
provides independent primary and secondary operating system files for backup while upgrading
Multiple configuration files
allow multiple configuration files to be stored to a flash image
IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
facilitates easy mapping using network management applications with LLDP automated device discovery protocol
Troubleshooting
allows ingress and egress port monitoring enabling network problem solving; virtual cable tests provide visibility into cable
problems
IPv6 management
future-proofs networking, as the switch is capable of being managed whether the attached network is running IPv4 or IPv6;
supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, and ARPv6
Layer 2 switching
GARP VLAN Registration Protocol
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 5

allows automatic learning and dynamic assignment of VLANs
IP multicast snooping and data-driven IGMP
automatically prevents flooding of IP multicast traffic
Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) protocol snooping
controls and manages the flooding of multicast packets in a Layer 2 network
32K MAC addresses
provide access to many Layer 2 devices
IEEE 802.1ad QinQ and selective QinQ
increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed
campus or metro network
10GbE port aggregation
allows grouping of ports to increase overall data throughput to a remote device
Spanning Tree/MSTP, RSTP, and STP root guard
prevent network loops
32 MSTP instances
allow multiple configurations of STP per VLAN group
Layer 3 services
Loopback interface address
defines an address in Routing Information Protocol (RIP) and Open Standard Path First (OSPF), improving diagnostic capability
Address Resolution Protocol (ARP)
determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of
duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2
network
Dynamic Host Configuration Protocol (DHCP)
simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across
subnets
User Datagram Protocol (UDP) helper function
allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents
server spoofing for UDP services such as DHCP
Layer 3 routing
IPv4 routing protocols
support static routes, RIP, OSPF, ISIS, and BGP
IPv6 routing protocols
provide routing of IPv6 at wire speed; support static routes, RIPng, OSPFv3, IS-ISv6, and BGP4+ for IPv6
PIM-SSM, PIM-DM, and PIM-SM (for IPv4 and IPv6)
support IP Multicast address management and inhibition of DoS attacks
MPLS support
provides extended support of MPLS, including MPLS VPNs and MPLS Traffic Engineering (MPLS TE)
Virtual Private LAN Service (VPLS)
establishes point-to-multipoint Layer 2 VPNs across a provider network
Bidirectional Forwarding Detection (BFD)
enables link connectivity monitoring and reduces network convergence time for RIP, OSPF, BGP, IS-IS, VRRP, MPLS, and IRF
Policy-based routing
makes routing decisions based on policies set by the network administrator
Equal-Cost Multipath (ECMP)
enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 6

IPv6 tunneling
allows a smooth transition from IPv4 to IPv6 by encapsulating IPv6 traffic over an existing IPv4 infrastructure
Security
Access control lists (ACLs)
provide IP Layer 2 to Layer 4 traffic filtering; support global ACL, VLAN ACL, port ACL, and IPv6 ACL; up to 6144 ingress ACLs and
1024 egress ACLs are supported
IEEE 802.1X
defines an industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a
RADIUS server
MAC-based authentication
authenticates the client with the RADIUS server based on the client's MAC address
Identity-driven security and access control
Per-user ACLs
permit or deny user access to specific network resources based on user identity and time of day, allowing multiple types
of users on the same network to access specific network services without risking network security or providing
unauthorized access to sensitive data
Automatic VLAN assignment
assigns users automatically to the appropriate VLAN based on their identities
Port security
allows access only to specified MAC addresses, which can be learned or specified by the administrator
Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch
configuration file
STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
DHCP snooping
helps ensure that DHCP clients receive IP addresses from authorized DHCP servers and maintain a list of DHCP entries for trusted
ports; prevents reception of fake IP addresses and reduces ARP attacks, improving security
DHCPv6 snooping
ensures that DHCPv6 clients obtain IPv6 addresses from authorized DHCPv6 servers and record IP-to-MAC mappings of DHCPv6
clients
Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
STP root guard
protects the root bridge from malicious attacks or configuration mistakes
Guest VLAN
provides a browser-based environment to authenticated clients that is similar to IEEE 802.1X
Port isolation
secures and adds privacy, and prevents malicious attackers from obtaining user information
IP source guard
helps prevent IP spoofing attacks
IPv6 source guard
help prevent IPv6 spoofing attacks using ND Snooping as well as DHCPv6 Snooping
ND Snooping
allows only packets with a legally obtained IPv6 address to pass
Endpoint Admission Defense (EAD)
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 7

provides security policies to users accessing a network
RADIUS/HWTACACS
eases switch management security administration by using a password authentication server
Secure management access
delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2 and SNMPv3
Unicast Reverse Path Forwarding (URPF)
allows normal packets to be forwarded correctly, but discards the attaching packet due to lack of reverse path route or incorrect
inbound interface; prevents source spoofing and distributed attacks; supports distributed UFPF
Convergence
LLDP-MED (Media Endpoint Discovery)
defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure
network devices such as IP phones
Internet Group Management Protocol (IGMP)
utilizes Any-Source Multicast (ASM) or Source-Specific Multicast (SSM) to manage IPv4 multicast networks; supports IGMPv1, v2,
and v3
Multicast Source Discovery Protocol (MSDP)
allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications
Multicast Border Gateway Protocol (MBGP)
allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic
Multicast VLAN
allows multiple VLANs to receive the same IPv4 or IPv6 multicast traffic, lessening network bandwidth demand by reducing or
eliminating multiple streams to each VLAN
LLDP-CDP compatibility
receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation
Additional information
Green initiative support
provides support for RoHS and WEEE regulations
Green IT and power
improves energy efficiency through the use of the latest advances in silicon development; shuts off unused ports and utilizes
variable-speed fans, reducing energy costs
Warranty and support
Lifetime Warranty 2.0
advance hardware replacement for as long as you own the product with next-business-day delivery (available in most countries)†
Electronic and telephone support (for Lifetime Warranty 2.0)
limited 24x7 telephone support is available from HP for the first 3 years; limited electronic and business hours telephone
support is available from HP for the entire warranty period; to reach our support centers, refer to
www.hp.com/networking/contact-support ; for details on the duration of support provided with your product purchase, refer to
www.hp.com/networking/warrantysummary
Software releases
to find software for your product, refer to www.hp.com/networking/support ; for details on the software releases available with
your product purchase, refer to www.hp.com/networking/warrantysummary
†HP warranty includes repair or replacement of hardware for as long as you own the product, with next business day advance
replacement (available in most countries). The disk drive included with HP AllianceOne Advanced Services and Services zl Modules, HP
Threat Management Services zl Module, HP AllianceOne Extended zl Module with Riverbed Steelhead, HP MSM765 zl Mobility Controller
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 8

and HP Survivable Branch Communication zl Module powered by Microsoft® Lync has a five-year hardware warranty. For details, refer
to the Software license and hardware warranty statements at www.hp.com/networking/warranty .
QuickSpecs
HP 5500 HI Switch Series
Overview
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 9

Build To Order:
BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack-Shippable solution.
Switch Chassis
HP 5500-24G-4SFP HI Switch with 2 interface Slots JG311A
24 RJ-45 autosensing 10/100/1000 ports
4 fixed Gigabit Ethernet SFP ports(min=0 \ max=4 SFP Transceivers)
2 SFP+ ports(min=0 \ max=2 SFP+ Transceivers)
2 port expansion module slots
Must select min 1 power supply
1U - Height
HP 5500-24G-SFP HI Switch w/2 Intf Slt JG543A
4 RJ-45 autosensing 10/100/1000 ports
24 SFP fixed Gigabit Ethernet SFP ports (min=0 \ max=24 SFP Transceivers)
2 fixed SFP+ ports (min=0 \ max=2 SFP+ Transceivers)
2 open module slots, or a combination
Must select min 1 power supply
1U - Height
See Configuration
Note:1, 2
ration Note:1, 2
HP 5500-24G-PoE+-4SFP HI Switch w/2 Slt JG541A
24 RJ-45 autosensing 10/100/1000 PoE+ ports
4 SFP fixed Gigabit Ethernet SFP ports (min=0 \ max=4 SFP Transceivers)
2 SFP+ ports (min=0 \ max=2 SFP+ Transceivers)
2 port expansion module slots
Must select min 1 power supply
1U - Height
See Configuration
Note:1, 2
HP 5500-48G-4SFP HI Switch with 2 interface Slots JG312A
48 RJ-45 autosensing 10/100/1000 ports
4 fixed Gigabit Ethernet SFP ports(min=0 \ max=4 SFP Transceivers)
2 SFP+ ports(min=0 \ max=2 SFP+ Transceivers)
2 port expansion module slots
Must select min 1 power supply
1U - Height
See Configuration
Note:1, 2
HP 5500-48G-PoE+-4SFP HI Switch w/2 Slt JG542A
48 RJ-45 autosensing 10/100/1000 PoE+ ports
4 SFP fixed Gigabit Ethernet SFP ports (min=0 \ max=4 SFP Transceivers)
2 SFP+ ports (min=0 \ max=2 SFP+ Transceivers)
2 port expansion module slots
Must select min 1 power supply
1U - Height
See Configuration
Note:1, 2
Configuration Rules:
Note 1 The following Transceivers install into this Switch: (SFP Ports)
QuickSpecs
HP 5500 HI Switch Series
Configuration
DA - 14201 Worldwide — Version 20 — April 15, 2014 Page 10