HP 10500 series Specifications page 8

Data sheet | HP 10500 Switch Series
8
• Remote Authentication Dial-In User Service (RADIUS)
Eases switch security access administration by using a password authentication server
• Terminal Access Controller Access-Control System (TACACS+)
Delivers an authentication tool using TCP with encryption of the full authentication request,
providing additional security
• Switch management logon security
Helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
• Secure shell (SSHv2)
Uses external servers to securely log in to a remote device; with authentication and
encryption, it protects against IP spoofing and plain-text password interception; increases the
security of Secure FTP (SFTP) transfers
• DHCP snooping
Enables DHCP clients receive IP addresses from authorized DHCP servers and maintain a list
of DHCP entries for trusted ports; prevents reception of fake IP addresses and reduces ARP
attacks, improving security
• IP Source Guard
Filters packets on a per-port basis, which prevents illegal packets from being forwarded
• ARP attack protection
Protects from attacks using a large number of ARP requests with a host-specific,
user-selectable threshold
• Port security
Allows access only to specified MAC addresses, which can be learned or specified by the
administrator
• IEEE 802.1X support
Provides port-based user authentication with support for Extensible Authentication Protocol
(EAP) MD5, TLS, TTLS, and PEAP with choice of AES, TKIP, and static or dynamic WEP
encryption for protecting wireless traffic between authenticated clients and the access point
• Media access control (MAC) authentication
Provides simple authentication based on a user's MAC address; supports local or
RADIUS-based authentication
• Multiple user authentication methods
– IEEE 802.1X
Uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to
authenticate in accordance with industry standards
– Web-based authentication
Provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that
do not support the IEEE 802.1X supplicant
– MAC-based authentication
Authenticates the client with the RADIUS server based on the client's MAC address
• DHCP protection
Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• Endpoint Admission Defense (EAD)
Provides security policies to users accessing a network