HP Officejet Pro 7500 Series User manual

Product overview
The HP 7500 Switch Series comprises modular, multilayer chassis switches that meet the
evolving needs of integrated services networks. The switches can be deployed in multiple
network environments, including the enterprise LAN core, aggregation layer, and wiring
closet edge. They oer 40GbE connectivity and cost-eective, wire-speed 10GbE ports to
safeguard the throughput and bandwidth needed for your mission-critical data and high-speed
communications.
A passive backplane, support for load sharing, and redundant management and fabrics help
the switch series provide high availability. Moreover, these switches deliver wire-speed L2 and
L3 routing services for the most demanding applications with hardware-based IPv4 and IPv6
support.
A summary of the highlights of the 7500 Switch Series:
• Versatile, high-performance modular switches
• Enterprise LAN core, aggregation, and edge
• Extensive switching and routing, IPv6, and multiprotocol label switching (MPLS)
• Advanced functionality with service modules
• Robust network and service virtualization
Data sheet
HP 7500 Switch Series

2
Features and benets
QoS
• IEEE 802.1p prioritization
Delivers data to devices, based on the priority and type of trac
• Class of service (CoS)
Sets the IEEE 802.1p priority tag based on the IP address, IP type of service (ToS), L3 protocol,
TCP/ user datagram protocol (UDP) port number, source port, and DiServ
• Bandwidth shaping
– Port-based rate limiting
Enabled per-port ingress/egress-enforced bandwidth increase
– Classier-based rate limiting
Uses an access control list (ACL) to enforce increased bandwidth for ingress trac on each
port
– Reduced bandwidth
Provides per-port per-queue egress-based bandwidth reduction
• Weighted random early detection (WRED)/random early detection
Delivers congestion avoidance capabilities through the use of queue management algorithms
• Powerful QoS feature
Provides support for these congestion actions: strict priority queuing, weighted round robin,
weighted fair queuing, and WRED
• Trac policing
Supports committed access rate and line rate
Intrusion detection system (IDS)/intrusion prevention system (IPS)
• Deep packet inspection
Examines the packet payload as well as the frame and packet headers; packets are dropped
if attacks or intrusions are detected using signature-based or protocol-anomaly-based
detection
• Signature-based detection
Detects attacks that have known attack patterns; IPS maintains a signature database that
contains the pattern denitions for known attacks that can be updated automatically using a
subscription service
• Protocol anomaly-based detection
Detects attacks that use anomalies in application protocol payloads
• Severity-based action policies
Involve action taken against attacks based on their severity; the actions include “allow,”
“block,” and “terminate connection” to provide appropriate mitigation
• Signature update service
Provides regular updates to the signature database, helping ensure that the latest available
signatures are installed
Data sheet | HP 7500 Switch Series

3
Virtual private network (VPN)
• IPSec
Provides secure tunneling over an untrusted network, such as the Internet or a wireless
network; and oers data condentiality, authenticity, and integrity between two network
endpoints
• Generic routing encapsulation (GRE)
Transports L2 connectivity over an L3 path in a secured way; and enables the segregation of
trac from site to site
• Manual or automatic Internet key exchange (IKE)
Enables the manual or automatic key exchange required for the algorithms used in encryption
or authentication; auto-IKE allows automated management of the public key exchange,
helping ensure the highest levels of encryption
Management
• Management interface control
Provides management access through a modem port and terminal interface as well as in-band
and out-of-band Ethernet ports; and oers access through the terminal interface, telnet, or
secure shell (SSH)
• Industry-standard CLI with a hierarchical structure
Reduces training time and expenses; and increases productivity in multivendor installations
• Management security
Restricts access to critical conguration commands; oers multiple privilege levels with
password protection; uses ACLs to provide telnet and SNMP access; and allows logging of all
access with local and remote syslog capabilities
• SNMPv1, v2, and v3
Provide complete support of the SNMP and industry-standard management information base
(MIB) as well as private extensions; SNMPv3 supports increased security using encryption
• sFlow (RFC 3176)
Provides scalable ASIC-based wire-speed network monitoring and accounting with no impact
on network performance; this allows network operators to gather a variety of sophisticated
network statistics and information for capacity planning and real-time network monitoring
purposes
• Remote monitoring (RMON)
Uses standard SNMP to monitor essential network functions; and supports events, alarms,
history, and statistics groups as well as a private alarm extension group
• FTP, trivial FTP (TFTP), and secure FTP (SFTP) support
Oers dierent mechanisms for conguration updates; the FTP allows bidirectional transfers
over a TCP/IP network; the TFTP is a simpler method that uses the UDP; and the SFTP runs
over an SSH tunnel to provide additional security
Data sheet | HP 7500 Switch Series

4
• Debug and sampler utility
Supports ping and trace-route for both IPv4 and IPv6
• Network time protocol (NTP)
Synchronizes timekeeping among distributed time servers and clients; and keeps timekeeping
consistent among all clock-dependent devices within the network, so that the devices can
provide diverse applications, based on the consistent time
• Network quality analyzer
Analyzes network performance and service quality by sending test packets; provides network
performance and service quality parameters such as jitter, TCP, or FTP connection delays
and le transfer rates; and allows a network manager to determine the overall network
performance as well as diagnose and locate network congestion points or failures
• Information center
Provides a central repository for system and network information; aggregates all logs, traps,
and debugging information generated by the system and maintains them in the order of
severity; and sends out the network information to multiple channels, based on user-dened
rules
• IEEE 802.1ab link-layer discovery protocol (LLDP)
Advertises and receives management information from adjacent devices on a network,
facilitating easy mapping by network management applications
• Dual ash images
Provides independent primary and secondary operating system les for backup while
upgrading
• Multiple conguration les
Are easily stored with a ash image
Connectivity
• High-density port connectivity
Provides up to 10 interface module slots and up to 40 40GbE ports, 84 10GbE ports, 480 Fiber
Gigabit ports, or 480 PoE-enabled ports per HP 7500 Switch Series system
• Jumbo frames
Allow high-performance remote backup and disaster-recovery systems with up to 9,216 bytes
• Loopback
Supports internal loopback testing for maintenance purposes and an increase in availability;
loopback detection protects against incorrect cabling or network congurations and can be
enabled on a per-port or per-VLAN basis for added exibility
Data sheet | HP 7500 Switch Series

5
• Ethernet operations, administration, and maintenance (OAM)
Detects the data link layer problems that occur in the “last mile,” using the IEEE 802.3ah OAM
standard; and monitors the status of the link between two devices
• Flexible port selection
Includes 100/1000BASE-X auto speed selection, 10/100/1000BASE-T auto speed detection, as
well as auto duplex and MDI/MDI-X
• Monitor link
Collects statistics on performance and errors on physical links, increasing system availability
• IEEE 802.3af PoE
Provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP
phones, wireless access points, and security cameras
• Dual-personality functionality
Includes four 10/100/1000 ports or SFP slots for optional ber connectivity, such as Gigabit-
SX, -LX, and -LH and 100-FX
• Packet storm protection
Protects against unknown broadcast, unknown multicast, or unicast storms with user-dened
thresholds
• Flow control
Provides back pressure, using standard IEEE 802.3x—reducing congestion in heavy trac
situations
• IEEE 802.3at PoE+ support
Provides up to 30 W of power to the power sourcing equipment
Performance
• High-speed fully distributed architecture
Supports a maximum of 1,152 Gb/s switching capacity with a 2.4 Tb/s backplane, providing
enhanced performance and future expansion capability; delivers up to 714 Mp/s throughput
with dual fabrics; performs all switching and routing functions in the I/O modules; and meets
the current and future demand of an enterprise’s bandwidth-intensive applications
• Scalable system design
Provides investment protection to support future technologies and higher-speed connectivity
with a backplane designed to accommodate bandwidth increases
• Flexible chassis selection
Enables you to tailor your product selections to your budget with a choice of six chassis,
ranging from a 10-slot to a 2-slot chassis
Data sheet | HP 7500 Switch Series

6
Resiliency and high availability
• Redundant/load-sharing fabrics, management, fan assemblies, and power supplies
Increase total performance and power availability, while providing hitless, stateful failovers
• All hot-swappable modules
Allows replacement of modules without any impact on other modules
• Dual internal power supply
Provides high reliability
• Separate data and control paths
Separates control from services and keeps service processing isolated; and increases security
and performance
• Passive design system
Delivers increased system reliability as the backplane has no active components
• IEEE 802.3ad link-aggregation control protocol (LACP)
Supports up to 128 trunks, each with 8 links per trunk; and provides support for static or
dynamic groups and a user-selectable hashing algorithm
• Intelligent resilient framework (IRF)
Creates virtual resilient switching fabrics, where two or more switches perform as a single
L2 switch and L3 router; switches don’t have to be co-located and can be part of a disaster-
recovery system; servers or switches can be attached using the standard LACP for automatic
load balancing and high availability; it can help eliminate the need for complex protocols such
as spanning tree protocol (STP), equal-cost multipath (ECMP), or virtual router redundancy
protocol (VRRP)—simplifying network operations
• IRF capability
Provides single IP address management for a resilient virtual switching fabric of up to four
switches
• Ring resiliency protection protocol (RRPP)
Provides standard sub-100 ms recovery for a ring Ethernet-based topology
• VRRP
Allows groups of two routers to dynamically back each other up to create highly available
routed environments
• Hitless patch upgrades
Allows patches and new service features to be installed without restarting the equipment,
increasing network uptime and facilitating easy maintenance
Data sheet | HP 7500 Switch Series

7
• Graceful restart
Supports graceful restart for the open-shortest path rst (OSPF), IS-IS, border gateway
protocol (BGP), LDP, and RSVP; the network remains stable during the active-standby
switchover; after the switchover, the device quickly learns the network routes by
communicating with adjacent routers; and forwarding remains uninterrupted during the
switchover to achieve nonstop forwarding
• Ultrafast protocol convergence with standards-based failure detection—bidirectional
forwarding detection
Enables link connectivity monitoring and reduces network convergence time for the routing
information protocol (RIP), OSPF, BGP, IS-IS, VRRP, MPLS, and IRF
• SmartLink
Allows 50 ms failover between links
• IP/LDP FRR
Congures nodes with backup ports, routes, and LSPs; requires no cooperation of adjacent
devices for local implementation—simplifying deployment; solves the traditional convergence
faults in IP and MPLS forwarding—protecting the links, nodes, and paths without establishing
respective backup LSPs for them; and realizes restoration within 50 ms—with the restoration
time independent of the number of routes and fast link switchovers, without route
convergence
L2 switching
• VLAN
Supports up to 4,096 port-based or IEEE 802.1Q-based VLANs; and supports MAC-based
VLANs, protocol-based VLANs, and IP-subnet-based VLANs for added exibility
• Port isolation
Increases security by isolating ports within a VLAN, while still allowing them to communicate
with other VLANs
• STP bridge protocol data unit (BPDU) tunneling
Transmits STP BPDUs transparently, allowing correct tree calculations across service
providers, WANs, or MANs
• GARP VLAN registration protocol
Allows automatic learning and dynamic assignment of VLANs
• Port mirroring
Duplicates port trac (ingress and egress) to a local or remote monitoring port; and supports
four mirroring groups, with an unlimited number of ports per group
• STP
Supports the standard IEEE 802.1D STP, IEEE 802.1w rapid STP for faster convergence, and
IEEE 802.1s multiple STP
Data sheet | HP 7500 Switch Series

8
• Internet-group-management protocol (IGMP) and multicast-listener-discovery (MLD) protocol
snooping
Controls and manages the ooding of multicast packets in an L2 network
• Device link detection protocol
Monitors link connectivity and shuts down ports at both ends if unidirectional trac is
detected, helping prevent loops in STP-based networks
• IEEE 802.1ad Q-in-Q and selective Q-in-Q
Increase the scalability of an Ethernet network by providing a hierarchical structure; and
connect multiple LANs on a high-speed campus or metro network
• Super VLAN
Saves IP address space, using RFC 3069 standard (also called VLAN aggregation)
• Per-VLAN spanning tree plus
Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in
network environments with multiple VLANs
L3 services
• Address resolution protocol (ARP)
Determines the MAC address of another IP host in the same subnet; includes support for static
ARPs; a gratuitous ARP allows detection of duplicate IP addresses; and a proxy ARP allows
normal ARP operation between subnets or when subnets are separated by an L2 network
• UDP helper
Redirects UDP broadcasts to specic IP subnets to help prevent server spoong
• Dynamic host conguration protocol (DHCP)
Simplies the management of large IP networks and supports both clients and servers; DHCP
relay enables DHCP operation across subnets
• Domain name system (DNS)
Provides a distributed database that translates domain names and IP addresses, simplifying
network design; and supports clients and servers
L3 routing
• Static IPv4 routing
Provides simple manually congured IPv4 routing
• RIP
Uses a distance vector algorithm with UDP packets for route determination; supports RIPv1
and RIPv2 routing; and includes loop protection
• OSPF
Delivers faster convergence; uses this link-state routing interior gateway protocol (IGP), which
supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for
faster failure recovery
Data sheet | HP 7500 Switch Series

9
• Intermediate system to intermediate system (IS-IS)
Uses a path vector IGP, which is dened by the ISO organization for IS-IS routing and extended
by IETF RFC 1195 to operate in both TCP/IP and the OSI reference model (integrated IS-IS)
• BGP-4
Delivers an implementation of the exterior gateway protocol, utilizing path vectors; uses TCP
for enhanced reliability for the route discovery process; reduces bandwidth consumption by
advertising only incremental updates; supports extensive policies for increased exibility; and
scales to very large networks
• Policy-based routing
Makes routing decisions based on policies set by the network administrator
• IP performance optimization
Provides a set of tools to improve the performance of IPv4 networks; and includes directed
broadcasts, customization of TCP parameters, support of ICNP error packets, and extensive
display capabilities
• Unicast reverse path forwarding (uRPF)
Limits erroneous or malicious trac in accordance with RFC 3074
• Static IPv6 routing
Provides simple manually congured IPv6 routing
• Dual IP stack
Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network
design to an IPv6-only network design
• RIP next generation (RIPng)
Extends RIPv2 to support IPv6 addressing
• OSPFv3
Provides OSPF support for IPv6
• IS-IS for IPv6
Extends IS-IS to support IPv6 addressing
• BGP+
Extends BGP-4 to support multiprotocol BGP, including support for IPv6 addressing
• IPv6 tunneling
Allows IPv6 packets to traverse IPv4-only networks by encapsulating the IPv6 packet into a
standard IPv4 packet; supports manually congured, 6-to-4, and intra-site-automatic-tunnel-
addressing-protocol (ISATAP) tunnels; and is an important element for the transition from IPv4
to IPv6
Data sheet | HP 7500 Switch Series

10
• MPLS
Uses BGP to advertise routes across label switched paths (LSPs), but uses simple labels
to forward packets from any L2 or L3 protocol—which reduces complexity and increases
performance; supports graceful restart for reduced failure impact; and provides support for
LSP tunneling and multilevel stacks
• MPLS L3 VPN
Allows L3 VPNs across a provider network; uses MP-BGP to establish private routes for
increased security; and supports RFC 2547bis multiple autonomous system VPNs for added
exibility
• MPLS L2 VPN
Establishes simple L2 point-to-point VPNs across a provider network, using only MPLS label
distribution protocol (LDP); requires no routing—which decreases complexity, increases
performance, and allows VPNs of non-routable protocols; uses no routing information for
increased security; and supports circuit cross connect, static virtual circuits, a Martini draft,
and Kompella-draft technologies
• Virtual private LAN service (VPLS)
Establishes point-to-multipoint L2 VPNs across a provider network
• Service loopback
Allows any module to take advantage of other modules with higher features, including open
application architecture (OAA) modules, by redirecting trac; reduces investment and enables
higher bandwidth and load sharing; and supports IPv6, IPv6 multicast, tunneling, and MPLS
Security
• ACL enablement
Supports powerful ACLs for both IPv4 and IPv6; and helps lter trac to prevent unauthorized
users from accessing the network or control network trac in order to save resources; rules
can either deny or permit trac to be forwarded; rules can be based on an L2 header or an L3
protocol header; and rules can be set to operate on specic dates or times
• Remote authentication dial-in user service (RADIUS)
Eases switch security access administration by using a password authentication server
• Terminal access controller access-control system (TACACS+)
Delivers an authentication tool, using TCP with encryption of the full authentication request,
providing additional security
• Switch management logon security
Helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
• SSHv2
Uses external servers to securely log in to a remote device; protects against IP spoong and
plain-text password interception, with authentication and encryption; and increases the
security of SFTP transfers
Data sheet | HP 7500 Switch Series