??????? ???????????? ProCurve Networking by HP: ???????????? ? ??????????

1
??????? ????????????ProCurve Networking by HP
???????????? ? ??????????

• ?????? ???????
• ???????? ?? ?????? ?? ??????????????? ????????
• Sergei.perrote_at_hp.com
• 7 916 993 3480 7 495 797 3576
• ProCurve Networking by HP, ??????

2
??????? ????? ? ???????? ??????? ???????
ProCurveNetworking by HP
HP ProCurveHubs Switches(? ????? 1998 ?.)
HPAdvanceStack
HPEtherTwist
3
????????????? ????? ????? ?????????
ProCurve (????????) ?????????????
????????????? RIP/OSPF EIGRP
?????????? 802.1s PVST
VLANs 802.1Q ISL
?????????????? ?????? 802.3ad (LACP) FEC
??????????? ????????? 802.1AB (LLDP) LLDP-MED CDP PDA - Phone Discovery Algorithm
??????? ????? Ethernet 802.3af Cisco PoE
??????? 802.11(fast roaming) WLCPP
???????????? 802.1X LEAP
??????????? ??????? (Client Access Integrity) Trusted Network Connect (TNC/TCG) Cisco NAC
???????????? 802.11i Cisco Compatible Extensions (CCX)
4
???????? ????????
5
???? ??????????????? ?? ????

• ?????? ?????????? ??????????? ?? ???????
  ??????????? ???????? ????????? ??????? ?? ????
  ??????????? ??????????? ????????
• ????/?????????????????? ??? ??????????? ???? ??
  ???????? ??????? ? ?????????? ????????????
• ?????? ???????? ?????? ?? ????? ??????????????
  ???? ?? ???????? ??????????? ????????? ??
  ??????? ??????????

6
Adaptive EDGE ????

• ?????? EDGE-?????????? ????????? ???????
  ???????? ??????? ???????? ??????????????? ?
  ???????????? ????????? ?? ??????? ???????????
• EDGE-??????????? ??????? ???? ???????? ??
  ???????????????? ??????????? ?????????
  ??????????
• ??????????? ???? ?????????? ????? (layer 2) ?
  ???????? ?????? ?? ???????? ?????? ??????????? ?
  ?????????? ???????? ???? ? ?????????

7
??????? ????? ??????? ???? ?????????, ?? ?????
??????

• ? ????? ????????, ?????????? ????????
  ???????????? ??????????? ??? ???? ???? ?
  ????????? ?? ? ????????? ??????? ??? ???????
  ???????????????? ????
• ??????? ?????????? ???????? ????????? ???????????
  ??? ???? ???? ??? ????????? ???????????, ?????
  ????????????? ??????????? ? ????????????????
  ???????????? ?? ???????
• ???????????? ????????? ??????????? ?? ????
  ??????? ??? ?????????? ???????????????? ?
  ??????????? ??????? ????!

?????? HP ProCurve Networking ??????????
???????????????? ??????? ??? ??????? ???? ?
????, ? ????????????? ??????? ????? ???
????????? ???? ???????!
8
The ProVision ASICThe Next Step in ProCurve
Technology
9
Inside the ProVision ASIC

• Gig-ASIC
• 24 GbE ports per chip
• 28.8 Gbps Interface to fabric ASIC
• Management CPU interface
• Embedded MACs, classifier, various memory, packet
  processors
• 10Gig-ASIC
• 4 10-GbE ports per chip
• 28.8 Gbps Interface to fabric ASIC
• Management CPU interface
• Embedded MACs, classifier, various memory, packet
  processors

Architecture layout of a ProCurve 5406zl Switch

• Fabric ASIC
• Multi-stage capable cross-bar switching fabric
• Interface connections to management CPU, Gig-ASIC
  and 10Gig-ASIC

10
ProVision ASIC
11
ProCurve Networking
Intelligent Edge Switches
Edge DevicesLAN
ProCurve Switch 5406zl-48G (J8699A)
ProCurve Switch 3500yl-48G-PWR (J8693A)
ProCurve Switch 5406zl (J8697A)
ProCurve Switch 5412zl (J8698A)
ProCurve Switch 5412zl-96G (J8700A)
ProCurve Switch 3500yl-24G-PWR (J8692A)
ProCurve Switch 5304xl-32G (J8166A)
ProCurve Switch 5308xl-48G (J8167A)
ProCurve Switch 5308xl (J4819A)
ProCurve Switch 5304xl (J4850A)
ProCurve Switch 5372xl (J4848B)
ProCurve Switch 5348xl (J4849B)
ProCurve Switch 3400cl-48G (J4906A)
ProCurve Switch 3400cl-24G (J4905A)
Power over Ethernet
Edge SwitchesManaged
ProCurve Switch 4208vl-96 (J8775A)
ProCurve Switch 4202vl-48G (J8771A)
ProCurve Switch 4202vl-72 (J8772A)
ProCurve Switch 4208vl (J8773A)
ProCurve Switch 4208vl-64G (J8774A)
ProCurve Switch 4204vl (J8770A)
ProCurve Switch 4140gl (J8151A)
ProCurve Switch 4160gl (J8152A)
ProCurve Switch 4108gl Bundle (J4861A)
ProCurve Switch 4148gl (J4888A)
ProCurve Switch 4108gl (J4865A)
ProCurve Switch 4104gl (J4887A)
ProCurve Switch 2848 (J4904A)
ProCurve Switch 2824 (J4903A)
ProCurve Switch 2650 (J4899B)
ProCurve Switch 2626 (J4900B)
ProCurve Switch 2626-PWR (J8164A)
ProCurve Switch 2810-24G (J9021A)
ProCurve Switch 2810-48G (J9022A)
ProCurve Switch 2524 (J4813A)
ProCurve Switch 2512 (J4812A)
ProCurve Switch 2650-PWR (J8165A)
ProCurve Switch 2600-8-PWR (J8762A)
ProCurve Switch 2510-24 (J9019A)
Power over Ethernet
Edge SwitchesWeb Managed
ProCurve Switch 1800-24G (J9028A)
ProCurve Switch 1800-8G (J9029A)
12
ProCurve Networking
Edge SwitchesUnmanaged
Edge DevicesLAN(continued)
ProCurve Switch 2724 (J4897A)
ProCurve Switch 2708 (J4898A)
ProCurve Switch 2312 (J4817A)
ProCurve Switch 408 (J4097B)
ProCurve Switch 2324 (J4818A)
ProCurve Switch 2124 (J4868A)
Edge DevicesWAN
ProCurve Secure Router 7102dl (J8752A)
ProCurve Secure Router 7203dl (J8753A)
Traditional Core Switches
Inter-connect Switches
ProCurve Routing Switch 9315m (J4874A)
ProCurve Routing Switch 9308m (J4138A)
ProCurve Routing Switch 9304m (J4139A)
ProCurve Routing Switch 9408sl (J8680A)
Interconnect Fabric Switches
ProCurve Routing Switch 8108fl (J8727A)
ProCurve Routing Switch 8116fl (J8728A)
Aggregators
ProCurve Switch 6400cl (J8433A)
ProCurve Switch 6108 (J4902A)
ProCurve Switch 6410cl (J8474A)
ProCurve Switch 6200yl-24G-mGBIC (J8992A)
13
ProCurve Networking
Network Management Software
ProCurve Manager 2.1
ProCurve Manager Plus 2.1 (J8778A, J9009A,
J8991A, J8779A)
ProCurve Identity Driven Manager 2.0 (J9012A,
J9013A, J9014A)
ProCurve Mobility Manager 1.0 (J8990A)
14
ProCurve Networking
Wireless Edge Services
Edge Devices Wireless LAN
ProCurve Wireless EdgeServices xl Module
(J9001A)
ProCurve Redundant Wireless Services xl Module
(J9003A) 
ProCurve Radio Port 220 (J9005A)
ProCurve Radio Port 230 (J9006A)
ProCurve Radio Port 210 (J9004A)
Secure Access
ProCurve Access Control Server 745wl (J9038A)
Access Points
15
???????? ???????????? ??? ?????????????
???????? ????????
???????????? ?? ????????????
?????????? ?????????
???????????? ???????????-??? ?????????
???????? ???????
16
??????????? ?????? ProCurve ??? ???????
??????????????
??????? ???????? ????????????
??????????? ????????? ???? VLAN, ACL ???????????
?? ????????? - Enable mitigation
??????? ??????????? ???????
?????????? ????????? ???? - ?????? -
???????? - ????????????? ???? ???????
????????????? ???????? ?? ?????? ??????????? ??
????????? - ????????
17
?????????????? ?? ?????? 802.1x ??? ????????? ?
???????????? ????????

• LDAP ??????
• Microsoft Active Directory
• Novell eDirectory
• OpenLDAP

• RADIUS ??????
• Microsoft Internet Authentication Server
• Funk Steel-Belted RADIUS
• FreeRADIUS

• ???????? ??????????
• IEEE 802.1x Port Security
• RADIUS ??????
• ?????? LDAP
• Multi-host 802.1x
• Mac Lockdown

• 802.1x Port Security
• ????? ??????? ? ?? ?????????? ??????

ProCurve5300xl

• ?????? ?
• Windows XP

• ?????? B
• Windows 2000 SP2

18
?????????????? ?? ?????? 802.1x ??? ????????? ?
???????????? ????????

• LDAP ??????
• Microsoft Active Directory
• Novell eDirectory
• OpenLDAP

• RADIUS ??????
• Microsoft Internet Authentication Server
• Funk Steel-Belted RADIUS
• FreeRADIUS

• ???????? ??????????
• IEEE 802.1x Port Security
• RADIUS ??????
• ?????? LDAP
• Multi-host 802.1x
• Mac Lockdown

• 802.1x Port Security
• ??????????? ???? ??? ??????? A

ProCurve5300xl

• ?????? ?
• Windows XP

• ?????? B
• Windows 2000 SP2

19
???????????? ???????? ??? ??????????? ???????? ?
???????, ?????????????? ????? ? ??????????? ?
??????????????
????????
sFlow
????
??????????-?????? ??????????
??????? ???????
???????????
???
????????
????????? ???????? ?? ?????? ?????, ??? ?????
???? ????? ??????? ? ?????????
20
sFlow ? ????????
?????????? / ?????????????
sFlow Datagram
????? sFlow
forwarding tables
packet header
src/dst i/f
sampling parms
forwarding
user ID
URL
i/f counters
eg 128B
rate pool
src 802.1p/Q dst 802.1p/Q next hop src/dst
mask AS path communities localPref
src/dst Radius TACACS
interface counters
????????? ? ?????????? sFlow
21
?????????? ???? ? ? ??????? ??
?????? ????? ???????????, ???????????? ??? ?????
sFlow
????????? / ?????????? sFlow
sFlow
sFlow
sFlow
?????? ?????????, ??????????? ? ???????? ???????
????????? ? ??????? ????? ???????????? ?
????????? sFlow, ? ????????? ????????????????,
?????????? ??????? ????. ??????? ?? ????????
???? ????????? ?????????? ???????
?????????????????? ? ??????? ?????????? ????
??????? ??????????????.
sFlow
22
??????????? ????????? ????? ? ????????
?????????????????? ? ?????????? ????

• ????????????? ????? ????????????
• ?????????????? ? ?????????? ?????????
• ????????? ? ????
• ????????? ??????? (Policy violation)
• ???????????????? ???????
• ??????? ????????????
• ????? ???? ????? ? ???????????? (DoS)
• ARP-??????
• ??????????? ???????? ???????????? (QoS) ? ?????
  VoIP ? ??????????????? ????? (converged networks)
• ??????????? ??????? ? ????? (network
  troubleshooting) ? ??????? ? ????????????
• ?????? ??? ???? ????? ??????????
• ???? ???????? (??????????) ? ???????????
  ???????????????? ??????, ??? ???????????
  ????????????? ?? ????????????? ???? ?? ??
  ??????????
• ??????????? ????????? BGP
• ?????????? ????????????????? ????????? (multicast
  traffic)
• ?????????????? ??????? ? ????????????? ????, ???
  ??????????? ???????????? ???????? ????

23
?????????? ?????, IDS ???????? ???????????? ???
?????? ????????? ????, ??
?? ??????????? ??????? ??? ???? ???? Day Zero
?? ???????????? ?????? ? ??.?????, ???, ?????????
????????
???????????? ??? ???????????????? ?????? ?
???????????? ????
?????????????? ??????????, ??????????? ?????
?????? ????????? ????? ???? ???????? ???
????????. ?????? ?????????? ?? ???????????
?????? ????????? ??? ?????? ?? ???? ??????
24
??????????? ?????????? ????? ? ????????
???????????? ? sFlow
sFlow
sFlow
????????? / ?????????? sFlow
sFlow

• ???????????
• ?????? ???????????? ??????????
• ??????? ????? ? ??????????? ???????
• ?????? ??????????? ?????????

???????????, ?????????? ?????????? ???? ???? ?
sFlow ????????? ?????????? ??????????
?????????? ????????? ? ?????????? ??????
25
????????? ??????? ????? ?????? ? ??????????
???????? ???? CIO ? ????????? ??????????????? ?
?????????? ??????, ??????????? ? ??????????
???????????? ? ??????????????? ???????? Virus
Throttling
?????? ?????? ? ????????? ???? (LAN)
26
ProCurve 5300xl Software Release 3The Virus
Problem
0529 Jan 25 0 infected

• ???????????? ????????? ?????? ??? ?????? ??
  ???????
• ??? ????????, ?? ??? ?? ????? ???????? day zero
  ??????
• Day zero, ?????? ???? ????? ???????????? ?????
  ?????? ? ??????? ????? ?????
• ????????? ?????????????? ???????????
• ?????????? ? ?????????? ????
• ??????? ???????
• SQLSlammer
• Sasser

0600 Jan 25 74855 infected
27
ProCurve 5300xl Software Release 3Network
Integrated Virus Throttling

• Virus Throttling (??????????? ???????????????
  ??????) - ?????????? ??????? (?? ?????????
  ??????????) ??? ?????????? ?????? ???????
  ??????????????, ??? ????????????? ?????????
  ??????????? ??
• ??????????? ???????? ?????? ?? ????????? ???? ???
  ?????? ?? ??????? ?????? ????? ?
  ???????????????????? ????? day zero
• ????????????? ??????????????? ?????? ??????????
  ???????? ??????? ?? ?????????
• ????????? ?????? ? ?????? ??????? ?
  ???????????????? SNMP trap-? ?? ProCurve Manager
  Plus ??? ?????????????? IT ??? ????????
  ?????????? ???
• ?????????? ??? ?????????? ??????????
  ??????????????, ????? ??? ?????????????
  ?????????, ??????? ???? ?? ???????????????
  ???????
• ?????????? ? ????????????? ? ??????????? HP
  ProCurve Labs ? ??????????? ??? ????????????
  5300xl by ProCurve Networking ??? ??????? ??????
  ????????? ?? ????????????

28
ProCurve ??????????????? Virus Throttling ???
??? ????????

• ????? ???????????????? ?? ?????????? ??????
  ?????? ??????????? ? ??????? ????????
  (SQLSlammer gt800/sec)
• ???????? ?????? ???????????? ? ????????
  ?????????? ????? ? ??????????? ???? (1/sec)
• ??????? ???????????? ??????? ?? ???????? ?
  ??????? ????????
• ??? ?????? ????? ?????????? ????????????????,
  5300 ????????? ?????????? ?????????
• ???????? ??????? ?? ?????????????? ?????? ??
  ??????? VLAN ????????? ??????????? ?????????
  ??????????????? ?????? ???
• ?????????????? ????????????? ????? ??????? ??
  ?????????????? ?????? ?? ?????? ????? ????

Virus
ProCurve 5300xl Switch
Virus ThrottlingBuilt In
Anomalousbehavior detection
Immediate machine speed response limits spread of
virus until human action can be taken
29
HP ProCurve Networking?????????? ?????
30
HP ProCurve Manager

• ????????????????? ?????????
• ???????????????? ? ?????????? ?????????????
• ????????? ??????????? ??? ???????? ??????????
• ???????? ????????? ? ????? Windows-Explorer
  (?????????)
• ???? ?????? ? ??????????? ? ????????? ???????
• ????????? ??????????????? ?????????? ?????????
• ?????????? ???? ? ??????? ?????????
• LLDP (802.1ab) discovery
• ?????????????? ??????????? ?????????
  ProCurve ????? web

???? 0 (???? ? ????????? ? ?????? ???????????
????????????. ????? ???????? ?? ???-?????
www.hp.com/go/hpprocurve)
31
HP ProCurve Manager Plus

• ???? ?????????? HP ProCurve Manager ????
• ?????? ?????????? ?????????? ? ???????, ???????
  ???????????????? ????? ?????????
• ??????????? ??????? ?? ?????????? ?????????????
  ????
• ?????????? ????????????? ?????? ?????????,
  ???????? ??????? ????????
• ???????? ? ???????????????? VLAN
• ????? ????????? ?????????? ? ?????? ???????
  (XRMON, sFlow)
• ?????????? ?????????????? (????????????? ??? ??
  ???????)

?????????? 30-??????? trial-?????? ???? ?
????????? ? HP ProCurve Manager. List Price PCM
1.6 2920
32
IDM 2.0 - Identity Driven Management

• ?????????????? ????? ?????? ??? IT-?????????? ??
  ?????????????? ? ?????
• - ?????????? ??????? ???? (wire, wireless, WAN)
• - ?????????? ????????? ? ??????????, ??????
  ????????????
• - ????? ?? ???????????? ? ??????????
  ???????????? ??????????
• - ???? ???????????? ??? ?????????? ?/??? ??????
  ???????????

AccessRequestEvaluation
AccessPolicySelection
AccessRightsEnforcement
????????????
??????? ???????
33
Identity Driven Manager 2.0

• ???????????? ????????? ?????????? ????????????,
  ??????? ? ?????????????????? ?? ?????????
  ????????????, ??????????????, ???????, ? ??????
  ??????? ??????????? ???????
• ??????? ???????? ? ?????????? ????????
  ???????????????? ?????? (??????? ???????) ???
  ??????????? ?????????????????? ???? ? ?????????
  ?????????????? ?????????????, ? ????? ?????????
  ????? ????????????? (??????????????? ??????
  ???????)
• ?? ????????? ??????????? ?????? ????? ???????????
  ????????? ???? ??? ??????????? ????????
  ????????????????

????????? ???????? gt
Bandwidth Limit
ACLs
QoS
VLAN
Client Integrity Status
Device ID
User ID
Location
Time
?? ????????? gt
34
Identity Driven Per-Port ACL
???????????
?????? ? ???? ????? ???????????? ??????
????????????

• ???????? ???? ????? ????????????????? ? ???????
  ????????? ???????????? ???????
• ?????? ?????????????? 802.1X, Web, MAC
• ????????? ???? ???? ???????????? ? ??????
  ??????????? ???????? ?????? ? ????? ???????
  ????????, ? ???? ????? ??????????? ?????? ?
  ???????? ?????????? ?? ???????????? ??????
• ??????? ????? ??????????? ????????????? ???
  ??????? ????? ?? ???? IP ??????? ?????, ???????
  IP, ?????????? (?????? TCP/UDP ??????), ??? ????
  ????????? IP
• ???????? ? ??????? ?????????? ? ?????????????

?????? ??? ??????????? ?????? ?????? ? ??????????
??????? (?????? A)
???????????? ???????????? ? ???? ?????????
802.1X, web, ??? MAC ??????????????
?????? A
?????????
PCM and IDM
???????
????????? ???????
IDM ????????????? ?????????? ??????????? ?????? ?
??????? ? ???? ????? ??????????? ???????????
4
35
?????????? Client Integrity User Experience
?????????? ?????????? ??????? ????? ??????? ?
??????? ??????????????
?????????-???
????????
Edge Switch
?????? ??????? ???????
LAN ???????????
????????????? ??????
???????????? ?????? ??? ??????????????
?????????-???
36
ProCurve Mobility Manager 1.0 (PMM)??????????
???????????? ????????????????? ??????????

• ???????, ?????????????????????? ???????? ???
  ?????????? ????????????? ?????????? ??????
  ProCurve
• ? ????????? ? PCM Plus ???????? ???????????
  ??????? ??? ???????????????? ?????????? ?????

?????? ?????? ??????? 2005 ?. ???? ? ?????? 1752
????. ???
37
???????? ??? ??????????????????? ? ?????????????
???????????? Deployment Assistance

1. ?????????? ??????? (??????????? ???? ??? AP,
   ????????? ???????? ???????????? ? ??.) ? ?????????

Back Office

1. IT Manager ??????? ???????????????? ??????? ? PCM
   ????????? ????? ????????? ???????? ?????????
   ???????????? (????? WEP, WPA), dhcp ip lookup,
   SSIDs, ? ??.

1. PCM ????????????? ???????????? ????? ???????,
   ????????? ?? ?????? ????1, ?????????
   ???????????????? ?????????, ????????? ?? (????
   ?????), ?????????? ????????????????, ??????????
   ???????? ACS (?????????????? ????? ???????)

IT Manager

1. PCM ????????? ??????????? ?????????? ACS ?
   ??????????? ???????? ??????? ? ???????????? ?????
   ???????.

ProCurve Mobility Manager 1.0
Channel1
Channel6
Channel11
Note Site survey and visualization not provided
by ProCurve Mobility Manager 1.0
???? ????? ?????
38
???????? ??? ????????? ?????????? ????????????
????

1. ?????????? ????? ??????????, ???????????
   ?????????????? ????? ??????? ??? ????????
   ????????? ???

Back Office

1. PCM ????????? ????? AP, ???????? ?? ????????????
   ??????, ???????? ???????? ????????? ? ??????? ??

1. PCM ????????? ??-???????????? ACS ??? ???? ??????

IT Manager

1. PCM ????????? ??????? ACS, ?????????????
   ????????? ?????? ? ????????? ?? ???????? ?
   ???????????? ????? ???????

ProCurve Mobility Manager 1.0
Channel1
Channel6
Channel11
Floor1
2.1.0 Config4.2
Note Site survey and visualization not provided
by ProCurve Mobility Manager 1.0
Office Floor Plan
39
???????????? ??

• ?????????? ?????????? ???????????? ???????????
  (firmware) ??? ???? ????????????
• ?????????? ??????????? ??????????? ??? ??????????
  ?????
• HP ProCurve Manager
• ???????????, ?????? ? ?????????????
  ???????????????? ?????????
• ????-??????????? ?????????, ?????
  ?????????,?????? ???-??????
• ?????????????????? ? ???????????? ?? ??????????
  ?????????
• ??????????? ????????
• ?????????? ??????????? ???????? ?? ???? ????
  ???????? ????????????? ? ??????? ?? ?????????
  ??????? ????!
• ??? ????????? ?????? - ?? ???? ?????? ????????
  ???????????, ???????????????? ? ?.?. ?? ???
  ??????, ???????????, ????????? ???????
• ?????????? ?????????? ??????? ????????? ?? ?????
  (MTBF ?? 79 000 ?? 319 000 ?????(gt36 ???!))
• ??? ???????? ????? ????? 8100fl, 9300m, 9400sl
  ? 700wl

40
ProCurve Networking by HP

• ?????? ???????
• ???????? ?? ?????? ?? ??????????????? ?????????,
• ??????? ????????????? ProCurve Networking by HP,
  ??????
• ???????-???????
• 115054 ??????, ??????
• ??????????????? ???., 52, ???????? 1
• ???. [phone]
• ???. [phone]
• ??. ????? perrottet_at_hp.com