The HPE Networking Comware Switch Series 5150 HI is a family of stackable L3 access switches powered by HPE Comware OS delivering scalability and resiliency for medium and large enterprise campus networks.

With 24 and 48 MACsec-256 enabled 1 GbE downlink ports, 10/25 GbE uplinks, combo ports, add-on modules, and up to 90 watts of 802.3bt PoE per port, this flexible series delivers security and performance for your, clients, servers, and IoT devices. Intelligent Resilient Fabric (IRF) stacking up to 9-members adds scale and high availability while Intelligent Network Quality Analyzer (iNQA) supports real-time visibility into network health and performance.

Network visibility, management, and operation tools for this series include standard CLI and the Smart Management Center (SmartMC), embedded and ready to use at no additional cost. The series integrates with HPE Aruba Networking IMC, delivering a centralized point of control for your entire network

Security

Access control lists (ACLs)

Provides IP Layer 2 to Layer 4 traffic filtering; supports global ACL, VLAN ACL, port ACL, and IPv6 ACL

IEEE 802.1X

Industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server

MAC-based authentication

Client is authenticated with the RADIUS server based on the client's MAC address

Supports industry standard AES256 MACsec which provides increased MAC port binding and link group capacity for greater end-to-end security.

Identity-driven security and access control

• Per-user ACLs
• Permits or denies user access to specific network resources based on user identity and time of day, allowing multiple types of users on the same network to access specific network services without risking network security or providing unauthorized access to sensitive data
• Automatic VLAN assignment
• Automatically assigns users to the appropriate VLAN based on their identities

Secure management access

Delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, HTTPS and/or SNMPv3

Secure FTP/ SCP

Allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file

Guest VLAN

Provides a browser-based environment to authenticated clients that is similar to IEEE 802.1X

Port security

Allows access only to specified MAC addresses, which can be learned or specified by the administrator

Port isolation

Secures and adds privacy, and prevents malicious attackers from obtaining user information

STP BPDU port protection

Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks

STP root guard

Protects the root bridge from malicious attacks or configuration mistakes

DHCP protection

Blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks

IP source guard

Helps prevent IP spoofing attacks

Dynamic ARP protection

Blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data

RADIUS/HWTACACS

Eases switch management security administration by using a password authentication server

Endpoint Admission Defense (EAD)

Provides security policies to users accessing a network

IPv6 source guard

Help prevent IPv6 spoofing attacks using ND Snooping as well as DHCPv6 Snooping

Quality of Service (QoS)

Broadcast control

Allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic

Advanced classifier-based QoS

Classifies traffic using multiple match criteria based on Layers 2, 3, and 4 information; applies QoS policies such as setting priority level and rate limit to selected traffic on a port, VLAN, or entire switch

Powerful QoS feature

Supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), and SP+WRR

Traffic policing

Supports Committed Access Rate (CAR) and line rate

Connectivity

Auto-MDIX

Automatically adjusts for straight-through or crossover cables on all 10/100/1000 ports

Flow control

Provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations

High-density connectivity

Provides up to 48 fixed 10/100/1000BASE-T ports in a Layer 2/Lite Layer 3 switch

IEEE 802.3at Power over Ethernet (PoE+) support

Simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying local power at each access point location

Ethernet operations, administration and maintenance (OAM)

Detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the link between two devices

Performance

Nonblocking architecture

Up to 216 Gb/s nonblocking switching fabric provides wirespeed switching with up to 190.5 million pps throughput DRNI, enables link aggregation from multiple switches to implement device-level link backup for node redundancy. DRNI also simplifies network topology by virtualizing two physical devices into a logical device.

iNQA helps in measuring network packet loss performance, forward, reverse, and two-way packet loss, including lost number of messages and bytes, message loss and byte loss rate.

Hardware-based wirespeed access control lists (ACLs)

Help provide high levels of security and ease of administration without impacting network performance with a feature-rich TCAM-based ACL implementation

Resiliency and High Availability

Separate data and control paths

Separates control from services and keeps service processing isolated; increases security and performance

Smart Link

Allows under 100ms failover between links

Spanning Tree/PVST+, MSTP, RSTP

Provides redundant links while preventing network loops

Intelligent Resilient Fabric (IRF)

Creates virtual resilient switching fabrics, where two to nine switches perform as a single L2 switch and L3 router; switches do not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard LACP for automatic load balancing and high availability; can eliminate need for complex protocols like Spanning Tree Protocol, Equal-Cost Multipath (ECMP), or VRRP, thereby simplifying network operation

Internal Dual Redundant Power Supply

Provides high reliability by keeping network up while delivering up to 1440 Watts of PoE+

Layer 2 Switching

32K MAC address table

Provides access to many Layer 2 devices

VLAN support and tagging

Supports IEEE 802.1Q with 4,094 simultaneous VLAN IDs

IEEE 802.1ad QinQ and selective QinQ

Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network

10/25GbE port aggregation

Allows grouping of ports to increase overall data throughput to a remote device

Device Link Detection Protocol (DLDP)

Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based networks

Jumbo frame support

Improves the performance of large data transfers; supports frame size of up to 9K-bytes

Layer 3 Services

Address Resolution Protocol (ARP)

Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network

Dynamic Host Configuration Protocol (DHCP)

Simplifies the management of large IP networks; supports client; DHCP Relay enables DHCP operation across subnets

Loopback interface address

Defines an address that can always be reachable, improving diagnostic capability

User Datagram Protocol (UDP) helper function

Allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP

Route maps

Provide more control during route redistribution; allow filtering and altering of route metrics

DHCP server

Centralizes and reduces the cost of IPv4 address management

Policy Based Routing

Provides a mechanism for indicating and executing forwarding/routing of data packets based on the policies defined by the network administrator

Layer 3 Routing

Static IP routing

Provides manually configured routing for both IPv4 and IPv6 networks

Open shortest path first (OSPF)

Delivers faster convergence; uses this link-state routing Interior Gateway Protocol (IGP), which supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for faster failure recovery

Routing Information Protocol (RIP)

Uses a distance vector algorithm with UDP packets for route determination; supports RIPv1 and RIPv2 routing; includes loop protection

Policy Based Routing

Provides a mechanism for indicating and executing forwarding/routing of data packets based on the policies defined by the network administrator

Convergence

IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

Facilitates easy mapping using network management applications with LLDP automated device discovery protocol

LLDP-MED (Media Endpoint Discovery)

Defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones

LLDP-CDP compatibility

Receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation

IEEE 802.3at Power over Ethernet (PoE+)

Provides up to 30 W per port that allows support of the latest PoE+-capable devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments

PoE allocations

Supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power for more efficient energy savings

Voice VLAN

Automatically assigns VLAN and priority for IP phones, simplifying network configuration and maintenance

IP multicast snooping (data-driven IGMP)

Prevents flooding of IP multicast traffic

Multicast Source Discovery Protocol (MSDP)

Allows multiple PIM-SM domains to interoperate; is used for inter-domain multicast applications

Device Support

Pre-standard PoE support

Detects and provides power to pre-standard PoE devices such as wireless LAN access points and IP phones

Manageability

Dual flash images

Provides independent primary and secondary operating system files for backup while upgrading

Multiple configuration files

Allow multiple configuration files to be stored to a flash image

IPv6 management

Future-proofs networking, as the switch is capable of being managed whether the attached network is running IPv4 or IPv6; supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, and ARPv6

Troubleshooting

Allows ingress and egress port monitoring, enabling network problem solving; virtual cable tests provide visibility into cable problems

Additional Information

Green IT and power

Improves energy efficiency through the use of the latest advances in silicon development; shuts off unused ports and utilizes variable-speed fans, reducing energy costs

Green initiative support

Provides support for RoHS and WEEE regulations

Unified Hewlett Packard Enterprise Comware operating system with modular architecture

Provides an easy-to-enhance-and-extend feature set, which doesn't require whole-scale changes; all switching, routing, and security platforms leverage the Comware OS, a common unified modular operating system

Energy Efficient Ethernet (EEE) support

Reduces power consumption in accordance with IEEE 802.3az

Warranty and Support

Limited Lifetime Warranty

See HPE Aruba Networking Support for warranty and support information included with your product purchase.

Software releases

To find software for your product, refer to http://www.hpe.com/networking/support; for details on the software releases available with your product purchase, refer to HPE Aruba Networking Support.