HPE Intelligent Management Center (IMC) provides a single view of the entire network. Support for IPv4/IPv6, and MPLS/VPLS features provide investment protection and an easy transition from IPv4 to IPv6 networks and ease of maintenance is assured with Graceful Insertion and Removal (GIR) and In Service Software Update (ISSU).

Management

HPE intelligent Management Center

The HPE Networking Comware Switch Series 7500X can be seamlessly managed with HPE Intelligent Management Center (IMC) to provide end−to−end network transparency with a consistent network experience.

Management interface control

Provides management access through a modem port and terminal interface, as well as in−band and out−of−band Ethernet ports; provides access through terminal interface, Telnet, or secure shell (SSH)

Industry−standard CLI with a hierarchical structure

Reduces training time and expenses, and increases productivity in multivendor installations

Management security

Restricts access to critical configuration commands; offers multiple privilege levels with password protection; ACLs provide Telnet and SNMP access; local and remote syslog capabilities allow logging of all access

SNMPv1, v2, and v3

Provide complete support of SNMP; provide full support of industry−standard Management Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption

sFlow (RFC 3176)

Provides scalable ASIC−based wire speed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real−time network monitoring purposes

Remote monitoring (RMON)

Uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private alarm extension group

FTP, TFTP, and SFTP support

Offers different mechanisms for configuration updates; FTP allows bidirectional transfers over a TCP/IP network; trivial FTP (TFTP) is a simpler method using User Datagram Protocol (UDP); Secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security

Debug and sampler utility

Supports ping and traceroute for both IPv4 and IPv6

Network Time Protocol (NTP)

Synchronizes timekeeping among distributed time servers and clients; keeps timekeeping consistent among all clock−dependent devices within the network so that the devices can provide diverse applications based on the consistent time

Network Quality Analyzer (NQA)

Analyzes network performance and service quality by sending test packets, and provides network performance and service quality parameters such as jitter, TCP, or FTP connection delays and file transfer rates; allows a network manager to determine overall network performance and to diagnose and locate network congestion points or failures

Information center

Provides a central repository for system and network information; aggregates all logs, traps, and debugging information generated by the system and maintains them in order of severity; outputs the network information to multiple channels based on user−defined rules

IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network management applications

Dual flash images

Provides independent primary and secondary operating system files for backup while upgrading

Multiple configuration files

Stores easily to the flash image

Programmability

Supports entire set of programming tools from legacy CLI/SNMP, to full Netconf/Yang model. RestAPIs combined with scripting (python) allow inclusion of these switches into modern toolchains (Puppet/Chef/Ansible playbooks)

Software−Defined Networking

OpenFlow 1.3

Enables SDN to provide an end−to−end solution to automate the network, allowing for rapid application deployments (Comware v7 only)

Resiliency And High Availability

Redundant/load−sharing fabrics, management, fan assemblies, and power supplies

Increase total performance and power availability while providing hitless, stateful failover

All hot−swappable modules

Allows replacement of modules without any impact on other modules

Dual internal power supply

Provides high reliability

Separate data and control paths

Separate control from services and keeps service processing isolated; increases security and performance

Passive design system

Delivers increased system reliability as the backplane has no active components

IEEE 802.3ad link−aggregation control protocol (LACP)

Supports upto 1000 trunks, each with 32 links per truck; and provides support for static or dynamic groups and a user−selectable hashing algorithm

Intelligent Resilient Fabric (IRF)

Creates virtual resilient switching fabrics, where two or more switches perform as a single L2 switch and L3 router; switches do not have to be co−located and can be part of a disaster−recovery system; servers or switches can be attached using standard LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree Protocol, Equal−Cost Multipath (ECMP), or VRRP, thereby simplifying network operation

IRF capability

Provides single IP address management for a resilient virtual switching fabric of up to four switches

Ring resiliency protection protocol (RRPP)

Provides standard sub−100 ms recovery for a ring Ethernet−based topology

Virtual Router Redundancy Protocol (VRRP)

Allows a group of routers to dynamically back each other up to create highly available routed environments

Graceful restart

Supports graceful restart for OSPF, IS−IS, BGP, LDP, and RSVP; the network remains stable during the active−standby switchover; after the switchover, the device quickly learns the network routes by communicating with adjacent routers; forwarding remains uninterrupted during the switchover to achieve nonstop forwarding (NSF)

Graceful Insertion and Removal

Graceful Insertion and Removal (GIR) minimizes service interruption by instructing affected protocols to isolate the device for maintenance/upgrade and alter to the redundant path. GIR supports: LACP, BGP, IS−IS, OSPF, and OSPFv3.

Ultrafast protocol convergence with standards−based failure detection—bidirectional forwarding detection

Enables link connectivity monitoring and reduces network convergence time for the routing information protocol (RIP), OSPF, BGP, IS−IS, VRRP, MPLS, and IRF

Smart link

Allows 50 ms failover between links

IP/LDP FRR

Nodes are configured with backup ports, routes, and LSPs; local implementation requires no cooperation of adjacent devices, simplifying the deployment; solves the traditional convergence faults in IP forwarding and MPLS forwarding, protecting the links, nodes, and paths without establishing respective backup LSPs for them; realizes restoration within 50 ms, with the restoration time independent of the number of routes and fast link switchovers, without route convergence

In−Service Software Upgrade (ISSU)

Applies patches and new service features to be installed without restarting the system, increasing network uptime and simplifying maintenance. Requires use of IRF, and R7169P01 or later releases.

Performance

High−speed fully distributed architecture

The HPE Networking Comware Switch Series 7500X offers up to 480 Gbps of switching capacity per slot (three times the switching capacity of HPE Networking Comware 7500 Switch series at 160 Gbps per slot.

It offers up to 40x100GbE/ 240x40GbE / 480x10GbE / 480x1GbE ports or a combination of these, along with PoE/PoE+ support for IP phones, cameras, and future high−density Internet of Things (IoT) deployments.

Supports a switching capacity of up to 9.6Tbps for enhanced performance of mission critical environments. Up to 288K MAC, up to 104K ARP, and up to 256K FIB tables allow higher scalability, depending on the LPU and operational mode chosen during first installation.

Scalable system design

Provides investment protection to support future technologies and higher−speed connectivity with a backplane designed to accommodate bandwidth increases

Flexible chassis selection

Enables you to tailor your product selections to your budget with a choice of six chassis, ranging from a 10−slot to a 3slot chassis

Fully distributed forwarding in all I/O Modules

The 7500X is based on a distributed forwarding architecture, with one of several ASICs per line card responsible for forwarding decisions. The control plane, which can be made fully redundant with the addition of a secondary MPU, is used only for the initial learning (MAC, ARP, RIB…) before the information is propagated to each and every line card ASIC. This distributed forwarding architecture provides the best possible results in term of throughput, performance and latency

Layer 2 Switching

VLAN

Supports up to 4,096 port−based or IEEE 802.1Q−based VLANs; and supports MAC−based VLANs, protocol−based VLANs, and IP−subnet−based VLANs for added flexibility

Port isolation

Increases security by isolating ports within a VLAN while still allowing them to communicate with other VLANs

Bridge Protocol Data Unit (BPDU) tunneling

Transmits Spanning Tree Protocol BPDUs transparently, allowing correct tree calculations across service providers, WANs, or MANs

GARP VLAN Registration Protocol

Allows automatic learning and dynamic assignment of VLANs

Port mirroring

Duplicates port traffic (ingress and egress) to a local or remote monitoring port; and supports four mirroring groups, with an unlimited number of ports per group

Spanning Tree Protocol (STP)

Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) protocol snooping

Controls and manages the flooding of multicast packets in a Layer 2 network

Device Link Detection Protocol (DLDP)

Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP−based networks

IEEE 802.1ad QinQ and selective QinQ

Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high−speed campus or metro network

Super VLAN

Saves IP address space, using RFC 3069 standard (also called VLAN aggregation)

Per−VLAN Spanning Tree Plus (PVST+)

Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in network environments with multiple VLANs

Quality of Service (QoS)

IEEE 802.1p prioritization

Delivers data to devices based on the priority and type of traffic

Class of Service (CoS)

Sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ

Micro−segmentation

Micro−segmentation enables grouping of endpoints based on a specific criteria for application of a group−based policy, implemented by using PBR / QoS / PacketFilter.

Enhanced Media Delivery Index (eMDI)

Enhanced Media Delivery Index (eMDI) monitors audio and video service quality. It locate faults by analyzing specific TCP/RTP packets of each node in an IP network in real time to solve packet loss, packet sequence errors, and jitters.

Multicast DNS

Multicast DNS (mDNS) is a zero−configuration networking (zeroconf) protocol. It enables endpoint devices to automatically discover available services advertised by mDNS service providers without using preconfigured name severs such as DNS.Multicast.

Bandwidth shaping

• − Port−based rate limiting

  • Provides per−port ingress−/egress−enforced increased bandwidth
• − Classifier−based rate limiting

  • Uses an access control list (ACL) to enforce increased bandwidth for ingress traffic on each port
• − Reduced bandwidth

  • Provides per−port, per−queue egress−based reduced bandwidth

Weighted random early detection (WRED)/random early detection (RED)

Delivers congestion avoidance capabilities through the use of queue management algorithms

Powerful QoS feature

Supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), weighted fair queuing (WFQ), and WRED

Traffic policing

Supports Committed Access Rate (CAR) and line rate

Intrusion Detection/Prevention System (IDS/IPS)

Deep packet inspection

Module supports deep packet inspection and examines the packet payload as well as the frame and packet headers; packets are dropped if attacks or intrusions are detected using signature−based or protocol anomaly−based detection

Signature−based detection

Detects attacks that have known attack patterns; IPS maintains a signature database that contains the pattern definitions for known attacks that can be updated automatically using a subscription service

Protocol anomaly−based detection

Detects attacks that use anomalies in application protocol payloads

Severity−based action policies

Involve action taken against attacks based on their severity; available actions are "allow," "block," and "terminate connection" to provide appropriate mitigation

Signature update service

Provides regular updates to the signature database, helping to ensure that the latest available signatures are installed

Connectivity

Jumbo frames

Allow high−performance remote backup and disaster−recovery systems with up to 9,216 bytes

Loopback

Supports internal loopback testing for maintenance purposes and an increase in availability; loopback detection protects against incorrect cabling or network configurations and can be enabled on a per−port or per−VLAN basis for added flexibility

Ethernet operations, administration and maintenance (OAM)

Detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the link between two devices

Flexible port selection

Includes 100/1000BASE−X auto speed selection, 10/100/1000BASE−T auto speed detection, as well as auto duplex and MDI/MDI−X

Monitor link

Collects statistics on performance and errors on physical links, increasing system availability

IEEE 802.3af Power over Ethernet (PoE)

Provides up to 15.4 W per port to IEEE 802.3af−compliant PoE−powered devices such as IP phones, wireless access points, and security cameras

Dual−personality functionality

Includes four 10/100/1000 ports or SFP slots for optional fiber connectivity such as Gigabit−SX, −LX, and −LH, or 100−FX

Packet storm protection

Protects against unknown broadcast, unknown multicast, or unicast storms with user−defined thresholds

Flow control

Provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations

IEEE 802.3at Power over Ethernet (PoE+) support

Provides up to 30 watts of power at the power sourcing equipment (PSE)

Layer 3 Routing

Static IPv4 routing

Provides simple manually configured IPv4 routing

Routing Information Protocol (RIP)

Uses a distance vector algorithm with UDP packets for route determination; supports RIPv1 and RIPv2 routing; includes loop protection

Open shortest path first (OSPF)

Delivers faster convergence; uses this link−state routing Interior Gateway Protocol (IGP), which supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for faster failure recovery

Intermediate system to intermediate system (IS−IS)

Uses a path vector Interior Gateway Protocol (IGP), which is defined by the ISO organization for IS−IS routing and extended by IETF RFC 1195 to operate in both TCP/IP and the OSI reference model (Integrated IS−IS)

Border Gateway Protocol 4 (BGP−4)

Delivers an implementation of the Exterior Gateway Protocol (EGP) utilizing path vectors; uses TCP for enhanced reliability for the route discovery process; reduces bandwidth consumption by advertising only incremental updates; supports extensive policies for increased flexibility; scales to very large networks

Policy−based routing

Makes routing decisions based on policies set by the network administrator

IP performance optimization

Provides a set of tools to improve the performance of IPv4 networks; and includes directed broadcasts, customization of TCP parameters, support of ICNP error packets, and extensive display capabilities

Unicast Reverse Path Forwarding (uRPF)

Limits erroneous or malicious traffic in accordance with RFC 3074

Static IPv6 routing

Provides simple manually configured IPv6 routing

Dual IP stack

Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4−only network to an IPv6−only network design

Routing Information Protocol next generation (RIPng)

Extends RIPv2 to support IPv6 addressing

OSPFv3

Provides OSPF support for IPv6

IS−IS for IPv6

Extends IS−IS to support IPv6 addressing

BGP+

Extends BGP−4 to support Multiprotocol BGP (MBGP), including support for IPv6 addressing

IPv6 tunneling

Allows IPv6 packets to traverse IPv4−only networks by encapsulating the IPv6 packet into a standard IPv4 packet; supports manually configured, 6to4, and Intra−Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels; is an important element for the transition from IPv4 to IPv6

Multiprotocol Label Switching (MPLS)

Uses BGP to advertise routes across Label Switched Paths (LSPs), but uses simple labels to forward packets from any Layer 2 or Layer 3 protocol, which reduces complexity and increases performance; supports graceful restart for reduced failure impact; supports LSP tunneling and multilevel stacks

Multiprotocol Label Switching (MPLS) Layer 3 VPN

Allows Layer 3 VPNs across a provider network; uses MP−BGP to establish private routes for increased security; supports RFC 2547bis multiple autonomous system VPNs for added flexibility

Multiprotocol Label Switching (MPLS) Layer 2 VPN

Establishes simple Layer 2 point−to−point VPNs across a provider network using only MPLS Label Distribution Protocol (LDP); requires no routing and therefore decreases complexity, increases performance, and allows VPNs of non−routable protocols; uses no routing information for increased security; supports Circuit Cross Connect (CCC), Static Virtual Circuits (SVCs), Martini draft, and Kompella−draft technologies

Virtual Private LAN Service (VPLS)

Establishes point−to−multipoint Layer 2 VPNs across a provider network

Service loopback

Allows any module to take advantage of higher−featured modules, by redirecting traffic; reduces investment and enables higher bandwidth and load sharing; supports IPv6, IPv6 multicast, tunneling, and MPLS

Security

Access control list (ACL)

Supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent unauthorized users from accessing the network, or for controlling network traffic to save resources; rules can either deny or permit traffic to be forwarded; rules can be based on a Layer 2 header or a Layer 3 protocol header; rules can be set to operate on specific dates or times

Remote Authentication Dial−In User Service (RADIUS)

Eases switch security access administration by using a password authentication server

Terminal Access Controller Access−Control System (TACACS+)

Delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security

Switch management logon security

Helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication

Secure shell (SSHv2)

Uses external servers to securely log in to a remote device; with authentication and encryption, it protects against IP spoofing and plain−text password interception; increases the security of Secure FTP (SFTP) transfers

DHCP snooping

Enables DHCP clients to receive IP addresses from authorized DHCP servers and maintains a list of DHCP entries for trusted ports; prevents users from receiving fake IP addresses and reduces ARP attacks, improving security

IP source guard

Filters packets on a per−port basis to prevent illegal packets from being forwarded

ARP attack protection

Protects from attacks using a large number of ARP requests with a host−specific, user−selectable threshold

Port security

Allows access only to specified MAC addresses, which can be learned or specified by the administrator

IEEE 802.1X support

Provides port−based user authentication with support for Extensible Authentication Protocol (EAP) MD5, TLS, TTLS, and PEAP with choice of AES, TKIP, and static or dynamic WEP encryption for protecting wireless traffic between authenticated clients and the access point

Media access control (MAC) authentication

Provides simple authentication based on a user's MAC address; supports local or RADIUS−based authentication

Multiple user authentication methods

• − IEEE 802.1X

  • Uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards
• − Web−based authentication

  • Provides a browser−based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X supplicant
• − MAC−based authentication

  • Authenticates the client with the RADIUS server based on the client's MAC address

DHCP protection

Blocks DHCP packets from unauthorized DHCP servers, preventing denial−of−service attacks

Endpoint Admission Defense (EAD)

Provides security policies to users accessing a network

Advanced distributed denial of service (DDOS)

DHCP Snooping, IP Source Guard, and ARP Protection, and flexible traffic controls, such as policy−based routing, QoS, and ACLs are available to manage end−to−end application priorities.

Port isolation

Secures and adds privacy, and prevents malicious attackers from obtaining user information

IEEE 802.1AE MACsec

Provides switch−to−host with IEEE 802.1X or switch−to−switch hardware encryption, and authentication. Requires Comware v7 with specific hardware only. Refer to the hardware manuals for details.

No hidden costs with the license−free L2 / L3 feature set which includes IPv6, MPLS functionality and robust QoS. It also supports varying security management login, RADIUS, SSH, TACACS/TACACS+ to protect and control change management access.

Additional Information

Green initiative support

Provides support for RoHS and WEEE regulations

Low power−consumption switch

Is rated among the switches with the lowest power consumption in the industry by Miercom independent tests

Unified Hewlett Packard Enterprise Comware operating system with modular architecture

Provides an easy−to−enhance−and−extend feature set, which doesn't require whole−scale changes; all switching, routing, and security platforms leverage the Comware OS, a common unified modular operating system

OPEX savings

Simplifies and streamlines deployment, management, and training through the use of a common operating system, thereby cutting costs as well as reducing the risk of human errors associated with having to manage multiple operating systems across different platforms and network layers

Convergence

LLDP−MED (Media Endpoint Discovery)

Defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones

Multicast Source Discovery Protocol (MSDP)

Allows multiple PIM−SM domains to interoperate; is used for inter−domain multicast applications

Internet Group Management Protocol (IGMP)

Utilizes Any−Source Multicast (ASM) or Source−Specific Multicast (SSM) to manage IPv4 multicast networks; supports IGMPv1, v2, and v3

Protocol Independent Multicast (PIM)

Defines modes of Internet IPv4 and IPv6 multicasting to allow one−to−many and many−to−many transmission of information; supports PIM Dense Mode (DM), Sparse Mode (SM), and Source−Specific Multicast(SSM)

Multicast Border Gateway Protocol (MBGP)

Allows multicast traffic to be forwarded across BGP networks and kept separate from unicast traffic

Multicast Listener Discovery (MLD) protocol

Establishes, maintains, and manages IPv6 multicast groups and networks; supports v1 and v2 and utilizes Any−Source Multicast (ASM) or Source−Specific Multicast (SSM)

Multicast VLAN

Allows multiple VLANs to receive the same IPv4 or IPv6 multicast traffic, lessening network bandwidth demand by reducing or eliminating multiple streams to each VLAN

Voice VLAN

Automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance

Layer 3 Services

Address Resolution Protocol (ARP)

Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 Network

User Datagram Protocol (UDP) helper

Redirects UDP broadcasts to specific IP subnets to prevent server spoofing

Dynamic Host Configuration Protocol (DHCP)

Simplifies the management of large IP networks and supports client and server; DHCP Relay enables DHCP operation across subnets

Domain Name System (DNS)

Provides a distributed database that translates domain names and IP addresses, which simplifies network design; supports client and server

Virtual Private Network (VPN)

IPSec

Provides secure tunneling over an untrusted network such as the Internet or a wireless network; offers data confidentiality, authenticity, and integrity between two network endpoints

Generic Routing Encapsulation (GRE)

Transports Layer 2 connectivity over a Layer 3 path in a secured way; enables the segregation of traffic from site to site

Manual or Automatic Internet Key Exchange (IKE)

Provides both manual or automatic key exchange required for the algorithms used in encryption or authentication; auto−IKE allows automated management of the public key exchange, providing the highest levels of encryption

Virtual Extensible LAN (VXLAN) and Ethernet VPN (BGP EVPN)

Enables greater network integration flexibility, improved performance, better scalability without redesigning the underlay network, restrict attacks with enhanced security, especially in spine−leaf architectures.

Warranty and Support

• − 1−year warranty

See Warranty and support summary for warranty and support information included with your product purchase.

• − Software releases

To find software for your product, refer to http://www.hpe.com/networking/support; for details on the software releases available with your product purchase, refer to http://www.hpe.com/networking/warrantysummary