Overview

• HTML-based easy-to-use Web GUI

allows configuration of the switch from any Web browser

–          Robust CLI

provides advanced configuration and diagnostics

–          Simple network management protocol (SNMPv1/v2c/v3)

allows the switch to be managed with a variety of third-party network management applications

·       Flexible management with same hardware

supports both cloud-based Central and on-premise AirWave with the same hardware ensuring change management platform without ripping and replacing switching infrastructure

·       Virtual stacking

provides single IP address management for up to 16 switches

·       sFlow (RFC 3176)

delivers wire-speed traffic accounting and monitoring, configured by SNMP and CLI with three terminal encrypted receivers

·       IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

automates device discovery protocol for easy mapping by network management applications

·       Logging

provides local and remote logging of events via SNMP (v2c and v3) and syslog; provides log throttling and log filtering to reduce the number of log events generated

·       Port mirroring

allows traffic to be mirrored on any port or a network analyzer to assist with diagnostics or detecting network attacks

·       Remote monitoring (RMON)

provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events

·       Find, fix, and inform

finds and fixes common network problems automatically, and then informs the administrator

·       Friendly port names

allows assignment of descriptive names to ports

·       Dual flash images

provides independent primary and secondary operating system files for backup while upgrading

·       Multiple configuration files

are easily stored with a flash image

·       Front-panel LEDs

• Locator LEDs

allows users to set the locator LED on a specific switch to turn on, blink, or turn off; and simplifies troubleshooting by making it easy to locate a particular switch within a rack of similar switches

–          Per-port LEDs

provides an at-a-glance view of the status, activity, speed, and full-duplex operation

–          Power and fault LEDs

display issues, if any

·       Download Software via DHCP

adds the option to specify the location of switch software via DHCP

·       TR-069 support

enables zero-touch configuration for switches

·       Zero-Touch ProVisioning (ZTP)

uses settings in DHCP to enable ZTP with Aruba AirWave

Connectivity

• IPv6
  • IPv6 host

allows the switch to be deployed and managed at the edge of an IPv6 network

–          Dual stack (IPv4/IPv6)

supports connectivity for both protocols; provides a transition mechanism from IPv4 to IPv6

–          MLD snooping

forwards IPv6 multicast traffic to appropriate interface; prevents IPv6 multicast traffic from flooding the network

Overview

–          IPv6 ACL/QoS

supports ACL & QoS for IPv6 network traffic on Gigabit & 48 port 10/100 models

–          Security

RA Guard, DHCPv6 Protection, Dynamic IPv6 Lockdown (YA only)

·       IEEE 802.3at Power over Ethernet (PoE+)

provides up to 30 W per port that allows support of the latest PoE+ capable devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af compliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments

·       Auto-MDIX

adjusts automatically for straight-through or crossover cables on all ports

·       Pre-standard PoE support

detects and provides power to pre-standard PoE devices

·       SFP slots

provides fiber connectivity such as Gigabit-SX, -LX, -LH, and -BX with four SFP slots on all 24- and 48-port Gigabit Ethernet models. Fast Ethernet 24- and 48-port models have two SFP slots and two RJ-45 Gigabit uplinks; 8-port models have two dual-personality ports supporting either SFP or RJ-45 Gigabit uplinks

·       Dual-personality (RJ-45 or USB micro-B) serial console port

gives easy access to switch CLI with front-of-switch location and the flexibility of using either an RJ-45 or USB micro-B serial console port

Layer 2 switching

• VLANs

provides support for 512 VLANs and 4,094 VLAN IDs

·       Jumbo packet support

supports up to 9,220-byte frame size to improve the performance of large data transfers; 8- and 24-port Fast Ethernet models automatically support up to 2,000-byte frames with no configuration needed

·       16K MAC address table

provides access to many Layer 2 devices

·       GARP VLAN Registration Protocol

allows automatic learning and dynamic assignment of VLANs

·       Rapid Per-VLAN Spanning Tree (RPVST+)

allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+

Security

• ACLs

accommodates IPv4/IPv6 port and VLAN-based ACLs (IPv6 ACL is supported only on Gigabit Ethernet and 48-port models.)

·       Source-port filtering

allows only specified ports to communicate with each other

·       RADIUS/TACACS+

eases switch management security administration by using a password authentication server

·       Secure Sockets Layer (SSL)

encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch

·       Port security

allows access only to specified MAC addresses, which can be learned or specified by the administrator

·       MAC address lockout

prevents particular configured MAC addresses from connecting to the network

·       Multiple user authentication methods

• IEEE 802.1X

uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards

Overview

–          Web-based authentication

provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X supplicant

–          MAC-based authentication

authenticates the client with the RADIUS server based on the client's MAC address

·       Secure shell (SSH) v2

encrypts all transmitted data for secure remote CLI access over IP networks

·       Secure shell

encrypts all transmitted data for secure remote CLI access over IP networks

·       STP BPDU port protection

blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks

·       STP root guard

protects the root bridge from malicious attacks or configuration mistakes

·       Secure management access

delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2 and SNMPv3

·       Custom banner

displays security policy when users log in to the switch

·       Secure FTP

allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file

·       Protected ports CLI

offers intuitive CLI to configure the source-port filter feature, by allowing specified ports to be isolated from all other ports on the switch; the protected port or ports can communicate only with the uplink or shared resources

·       Authentication flexibility

• Multiple IEEE 802.1X users per port

provides authentication for up to eight IEEE 802.1X users per port; prevents a user from "piggybacking" on another user's IEEE 802.1X authentication

–          Concurrent IEEE 802.1X and Web or MAC authentication schemes per port

allows a switch port to accept any IEEE 802.1X and either Web or MAC authentications

·       Switch management logon security

helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication

·       DHCP protection

blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks

·       Dynamic ARP protection:

blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data

·       Dynamic IP lockdown

works with DHCP protection to block traffic from unauthorized hosts, preventing IP source address spoofing

·       MAC Pinning

allows non-chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients logoff or get disconnected

Convergence

• LLDP-MED (Media Endpoint Discovery)

defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones

·       IP multicast (data-driven IGMP)

prevents flooding of IP multicast traffic

·       IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

facilitates easy mapping using network management applications with LLDP automated device discovery protocol

·       PoE and PoE+ allocations

support multiple methods—automatic, IEEE 802.3at dynamic, LLDP-MED fine grain, IEEE 802.3af device class, or user specified—to allocate and manage PoE/PoE+ power for more efficient energy use

·       Voice VLAN

uses LLDP-MED to automatically configure a VLAN for IP phones

Overview

·       IP multicast (data-driven IGMPv3)

prevents flooding of IP multicast traffic

·       LLDP-CDP compatibility

receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation

·       Local MAC Authentication

assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes

Resiliency and high availability

• Port trunking and link aggregation
  • Trunking

supports up to eight links per trunk to increase bandwidth and create redundant connections; and supports L2, L3, and L4 trunk load-balancing algorithm (L4 trunk load balancing is supported only on Gigabit Ethernet and 48-port models.)

–          IEEE 802.3ad Link Aggregation Control Protocol (LACP)

eases configuration of trunks through automatic configuration

·       IEEE 802.1s Multiple Spanning Tree

provides high link availability in multiple VLAN environments by allowing multiple spanning trees; provides legacy support for IEEE 802.1d and IEEE 802.1w

·       SmartLink

provides easy-to-configure link redundancy of active and standby links

Product Architecture

• Energy-efficient design
  • IEEE 802.3az

reduces power consumption during periods of low data activity on Gigabit Ethernet switches

–          Port low power mode

enables the port to automatically go into low-power mode to conserve energy when no link is detected

–          Fanless and variable-speed fans

decreases power consumption in fanless (all 8-port, 2530-24, and 2530-48 PoE+ switches) as well as variable- speed fan switches

–          Port LEDs

conserves energy by optionally turning off port link and activity LEDs

·       Switch on a chip

provides a highly integrated, high-performance switch design with a non-blocking architecture

Flexibility

• Flexible mounting
  • Rack mountable

allows the switch to be mounted on a standard 19-inch rack, with the hardware included

–          Wall mountable

allows the switch to be mounted on a wall, using the hardware included

–          Surface mountable

allows the switch to be mounted above or below a surface (such as a desk or table), using the hardware included

·       Quiet operation

lowers noise, making it suitable for deployments in acoustically sensitive environments such as conference rooms and office spaces

·       Compact size

reduces space requirements (refer to the product specifications for the exact dimensions)

Warranty and support