1. HP ProCurve Switch 2520 and 2520G NPI Technical Training
Version: 1.0b
9 October 2009

2. 2520/2520G NPI Technical Training
Disclaimer
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
The only warranties for ProCurve Networking products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. ProCurve Networking shall not be liable for technical or editorial errors or omissions contained herein.
Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett-Packard.
© Copyright 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Rev. 1.0b

3. 2520/2520G NPI Technical Training
Objectives
2520/2520G NPI Technical Training
After completing this training, you will be able to:
Describe the features and functionality of the HP ProCurve Switch 2520 series
Install and configure the 2520 series switches
Describe the appropriate marketing and technical positioning of the 2520 series switches
Differentiate among the 2520 series switches according to criteria such as support for gigabit connectivity
Describe the roles of the 2520 series switches in the ProCurve product line
Compare and contrast the 2520 series with similar products from other vendors
Rev. 1.0b

4. 2520/2520G NPI Technical Training
Introduction
2520/2520G NPI Technical Training
Introduction
ProCurve switch portfolio
Comparing ProCurve switches
Deployment models
Competitor switches
Hardware architecture overview
Switch 2520 software features
The first section of the presentation provides a high-level introduction to the four switches covered in this training. This will include:
A look at the ProCurve switch portfolio
Introductions to the architecture and features of the switches
Use models for the switches
Comparisons with competing switches
Rev. 1.0b

5. ProCurve portfolio overview
2520/2520G NPI Technical Training
…Intelligent Edge Switches
2910al-PoE 2910al
2610-PWR
2610
Lite Layer 3 Managed
2810
2520G-PoE 2520-PoE
Functionality
2520G/2520:
Managed layer 2 PoE switch family
8 or 24 10/100 or Gigabit ports
Ability to prioritize traffic using QoS for reliable VoIP deployments
Quiet operation and small form-factor for open space deployment
ProCurve portfolio overview
As the latest member of ProCurve’ Layer 2 managed switch offerings, the 2520G-PoE and 2520-PoE switches offer feature and functionality positioned between the 2510 and 2610 series, as shown above. The 2520 series offers PoE options not available on the 2510 series, but does not offer the Layer 3 lite routing capabilities available on the 2610 and 2910al. As such, the 2520 and 2520G are appropriately positioned to offer plug and play convergence features suitable for small and medium businesses. The graphic above illustrates the flexibility and options offered by the ProCurve product line. As the arrow moves upward and to the right, the features and performance, as well as the price, of the switches increases.
Web-managed
The 1810G and 1700 are web-managed switches that offer basic plug and play connectivity for the small and medium businesses. As such, these switches can be excellent for customers who are migrating to their first managed switches, but do not have extensive IT departments or technical requirements. The 2520G, one of ProCurve’s newest offerings, offers a 24-port version with two dual-personality uplinks that support RJ-45 copper connectivity or SFP+ mini-GBICs for fiber-optic connectivity.
Layer 2 managed
The 2510G/2510 switches offer more advanced Layer 2 feature sets, along with the option of 48-port models as shown. The 2510 series offers 24 or 48 10/100 ports plus gigabit uplinks. (The uplink options for the two switches vary. For details, see the 2510 series datasheet.) The 2510G series offers many of the same features as the 2510 with the addition of gigabit connectivity for edge ports.
The 2810 provides a managed Layer 2 feature set with 24 or 48 gigabit ports plus four SFP gigabit ports. Additionally, the 2810 supports significant software features not found on the 2510, including sFlow, source port filtering, redundancy with RPS support, and robust and granular QoS.
(continued on next page)
2510G 2510
Layer 2 Managed
1810G
Layer 2 Web Managed
1700
Price/Performance
Rev. 1.0b

6. ProCurve portfolio overview
2520/2520G NPI Technical Training
…Intelligent Edge Switches
2910al-PoE 2910al
2610-PWR
2610
Lite Layer 3 Managed
2810
2520G-PoE 2520-PoE
Functionality
2520G/2520:
Managed layer 2 PoE switch family
8 or 24 10/100 or Gigabit ports
Ability to prioritize traffic using QoS for reliable VoIP deployments
Quiet operation and small form-factor for open space deployment
Layer 3 lite
The 2610/2610-PWR is a 10/100 access-layer switch with RJ-45 and SFP uplinks and a PoE option. As a Layer 3 lite switch, the 2610 supports static IP routes and routing between directly connected VLANs. Furthermore, the 2610 supports robust and granular security and QoS policies and redundancy with RPS support.
The 2910al/2910al-PoE is a high-performance gigabit access switch with four optional 10-GbE ports for high-speed uplinks. With models supporting PoE and PoE+, the 2910al is suitable for deployments in the enterprise edge, as well as in SMBs. As well as support static routes and routes between connected VLANs, the 2910al also supports the RIP dynamic routing protocol.
Intelligent Edge switches
For enterprise deployments that require a more robust feature set, ProCurve offers the Intelligent Edge switches, including the 3500 series and 5400zl series. Based on the ProVision ASIC, these switches offer gigabit connectivity with options for 10-GbE uplinks. All models are PoE capable. With the addition of a Premium License, they all support advanced routing features such as OSPF, VRRP, and PIM.
2510G 2510
Layer 2 Managed
1810G
Layer 2 Web Managed
1700
Price/Performance
Rev. 1.0b

7. Introducing the ProCurve 2520/2520G Switch Series
2520/2520G NPI Technical Training
HP ProCurve PoE Switch (J9138A)
HP ProCurve PoE Switch (J9137A)
HP ProCurve 2520G-8-PoE Switch (J9279A)
HP ProCurve 2520G-24-PoE Switch (J9280A)
PoE /100-T ports + two shared 10/100/1000-T SFP ports for fiber connectivity
2520G-8-PoE /100/1000-T ports + two shared 10/100/1000-T SFP ports for fiber connectivity
PoE /100-T ports /100/1000-T ports + two shared 10/100/1000-T or SFP ports for fiber connectivity
2520G-24-PoE /100/1000-T ports + four shared 10/100/1000-T or SFP ports for fiber connectivity
Introducing the ProCurve 2520/2520G Switch Series
As shown above, the 2520/2520G series features four switches to offer SMBs an array of flexible, affordable edge connectivity options. With PoE standard on all four models, the 2520/2520G series offers SMBs the choices they need to provide cost-effective converged networks for users requiring gigabit or 10/100 connectivity.
2520/2520G-8
Ideal for use in open spaces, the eight port models feature small form-factors, slots for Kensington locks, and fan-less operation to reduce noise levels. For more flexibility, they support wall or racking mounting. For on-site management access, the switch offers a management console port on the front panel that supports a DB9-to-RJ45 console cable, which is included in the shipping kit. The switches all use an external power supply and offer up to 7.5W of PoE (Class 2) on all 8 ports.
2520/2520G-24
The 24-port models feature variable-speed fans for optimal noise level, energy efficiency, and cooling. With internal power supplies, the 24-port models offer up to 7.5W of PoE (Class 2) on all 24 ports. Like the eight-port models, the 24-port models are wall or rack-mountable and support a provided DB9-to-RJ45 console cable.
For fiber-optic connectivity, all four models support mini-GBIC transceivers for:
100-FX
100-BX
1000-SX
1000-LX
1000-LH
1000-BX
The 2520/2520G switches also offer ProCurve’s Industry-leading lifetime warranty with next-day advance replacement, as well as free software updates and telephone support.
Rev. 1.0b

8. Key software features: ProCurve 2520/2520G Switch Series
2520/2520G NPI Technical Training
Key software features: ProCurve 2520/2520G Switch Series
Security Features
Secure network access – Port Security
802.1X
Web-based and MAC-based authentication
Protected ports
MAC Lockdown/Lockout
RADIUS/TACACS+ for management authentication
Denial of Service attack filtering
Spanning Tree Root Guard and BPDU Guard
Management and Monitoring
IEEE 802.1AB Link Layer Discovery Protocol (LLDP-MED)
Full CLI accessible through front console port or Telnet/SSH
Web user interface with SSL
Single IP stacking capability for managing multiple devices
SNMP v1/v2c/v3
Network management using ProCurve Manager
RMON (four groups)
Port mirroring
Traffic Management
Up to 256 port-based VLANs, IEEE 802.1Q tagging
IPv6 host for Layer 2 IPv6 networks
Two or four configurable hardware queues
IEEE 802.1p VLAN tagging for QoS
Honors DCSP/ToS/CoS values
Protected ports for isolating ports from one another
Guest VLAN
Voice VLAN
IGMPv3 with Data-Driven IGMP Snooping
Ease of Use
Auto MDI-X for easy deployment
Find Fix and Inform to automatically fix common issues
User experience consistent with ProCurve product line
Intuitive Web Management Interface
Energy Saving features
PoE power management for optimal power use
Unused ports power down (2520G)
Port LEDs can be turned off and easily reactivated
Variable speed fans for optimal cooling and power consumption
Highly integrated system design
Availability
IEEE 802.1s Multiple Instance Spanning Tree
IEEE 802.3ad Link Aggregation and Trunking
Rev. 1.0b

9. 2520 switches add new features to 25xx Series
2520/2520G NPI Technical Training
2520-PoE provides features not available on 2510:
PoE
IPv6 host Support
Denial of Service attack filtering
Energy saving features
Eight-port form factor
HP ProCurve Switch 2510G-24
HP ProCurve Switch
HP ProCurve Switch 2510G-48
2520 switches add new flexibility to 25xx Series
The 2520 and 2520G switches add new options to the 25xx series. As well as offering PoE, the 2520 switches provide an eight-port form factor, denial of service attack filtering, support for IPv6 host addressing, and energy-saving features such as variable speed fans on the 24-port models, LED-off and the option to power down unused ports on the gigabit models.
As such, the 2520 switches do not replace the 2510 switches, which provide non-PoE connectivity options for SMBs. As shown above, the 2510 series includes 24-port and 48-port models with support for 10/100 and 10/100/1000 connectivity.
HP ProCurve Switch
Rev. 1.0b

10. 2520G does not compete with 2910al
2520/2520G NPI Technical Training m
HP ProCurve Switch 2520G-24-PoE
ProCurve Switch 2910al-24G-PoE
2910al features not available on 2520G include:
RPS/EPS support
Full PoE on all ports, PoE+
Rate Limiting
RIP/Static Routing
DHCP snooping
Dynamic ARP Protection/IP Lockdown
ACLs
Source port filtering
Optional 10-GbE blade
2520G does not compete with 2910al
Although it offers PoE and can support 24 gigabit clients, the 2520G-24-PoE should not be considered a suitable substitute for the 2910al-24G-PoE in low-cost enterprise designs, even though the 2520G-24-PoE can support 24 gigabit clients and PoE. As shown above, the 2910al features significant enterprise-grade features not available on the 2520G-24-PoE. Furthermore, the 2910al includes a 48-port model, which is not available on the 2520G.
Of course, as a purpose-built SMB switch, the 2520G offers features not available on the 2910al, including an eight-port form factor and green features such as LED off and Low Power Mode.
Rev. 1.0b

11. 2520/2520G NPI Technical Training
2520/2520G energy efficiency
2520/2520G NPI Technical Training
Power-efficient cooling
Low Power Mode for ports when not connected
LEDs can be turned off when not needed to conserve energy
Platform design with minimal components
Dynamic PoE power negotiation
2520/2520G energy efficiency
The 2520/2520G series offers several features to optimize power usage without degrading performance in small business environments. Some key green features are:
Variable speed fans on the 24-port models. As well as enabling quiet operation in open areas such as conference rooms, the variable speed fans provide power-efficient cooling by adjusting automatically to temperature requirements.
Fanless operation on eight-port models. The eight-port models for gigabit and 10/100 connectivity provide fanless designs that minimize power usage and noise.
Port LEDs can be turned off using the savepower command, which will be described later in the presentation.
On the 2520G models, the Ethernet ports automatically enter Low Power Mode when no devices are connected or when devices are turned off. The 2520 series switches automatically power up the ports when devices are connected or turned on.
Support for LLDP-MED enables 2520/2520G switches to negotiate power requirements with connected devices, enabling efficient power usage per device. By default, the power detection feature is disabled, but can be enabled at the CLI or web interface.
2520/2520G power usage
For 24-port models, the maximum power usage is approximately 295 Watts. The switches use approximately 29 Watts with no PoE devices connected. The 24-port models can provide up to 195 Watts of PoE power.
For eight-port models, the maximum power usage is about 79 Watts. The switches use approximately 8 Watts with no PoE devices connected. The eight-port models can provide up to 67 Watts of PoE power.
Energy savings through product process
As well as reducing power consumption through innovative design, the 2520/2520G series implements important process improvements designed to reduce power and resource consumption throughout the product’s lifecycle. These include:
Use of recyclable packaging materials
Reduction of documentation shipped with the switch
Compliance with Restriction of Hazardous Substances (RoHS) directives
Factory trades for compliance with Hewlett-Packard Supply Chain Social and Environmental Responsibility Policy 11
Rev. 1.0b

12. 2520/2520G NPI Technical Training
Deploying the 2520/2520G
2520/2520G NPI Technical Training
802.11a/g
Access Points
802.11n
Access Points
VoWLAN
VoWLAN
Surveillance Cameras
Surveillance Cameras
PoE
2520-8G-PoE
Unified Management
ProCurve Manager
ProCurve Manager Plus
Internet
2510G-24
ProCurve 7000dl
Deploying the 2520/2520G
The 2520/2520G series offers plug-and-play convergence features easily deployed by SMBs. In the example above, 2500 series switches provide network connectivity for a small business. Four 2520 switches are interconnected by a 2510G-24 that is also connected to a ProCurve Secure Router 7000dl that provides connectivity to the business’s ISP and to the Internet. Because all devices in this business network are in the same IP subnet, the devices inside the office are connected entirely at Layer 2, with the 2510G interconnecting devices that do not require PoE. The 2520G switches provide an advanced edge feature set that supports a complex, though small, converged network. These features include data-driven IGMP, LLDP-MED, 802.1p prioritization, 802.1X multi-user authentication, and voice VLANs. This enables the switch to support the converged application needs of the video cameras, VoIP phones, and IP telephones “daisy-chained” with PCs.
Some key features of this topology include:
Two 24-port 2520 switches provide connectivity for desktop computers and IP telephones in the business’s main work areas. The 2520G-24-PoE switch in the lower right corner provides secure gigabit connectivity for high-performance desktop computers, while the PoE switch in the lower left corner provides 10/100 connectivity for less demanding users. Both switches provide the features necessary to support VoIP, including PoE, voice VLANs, 802.1p prioritization, and multi-user 802.1X authentication. Together, these features enable the 2520 switches to ensure proper handling of for the VoIP traffic as soon as it enters the network.
Two eight-port 2520 switches provide connectivity in conference rooms and public areas. This includes support for wireless access points and web-enabled surveillance cameras. In this example, one of the eight-port switches supports gigabit connectivity, while the other provides 10/100 connectivity.
ProCurve Manager Plus enables administrators to manage all of the ProCurve infrastructure devices. The PCM+ server is connected to the 2510G.
PoE
2520G-24-PoE
IP Telephony
IP Telephony
Phone + PC
Phone + PC
Rev. 1.0b

13. 2520/2520G NPI Technical Training
2520/2520G mounting options
2520/2520G NPI Technical Training
Brackets included
In wall mounts, ports should always face up
Rack mount kit extends to rack width
Physical security in open-area installations
Lock is not provided
Wall or under table
Rack mounting
2520/2520G mounting options
In keeping with SMB deployment model of the 2520/2520G series, all models support mounting options suitable for conference rooms or warehouses, as well as racks in dedicated wiring closets. As shown above, the eight-port models and 24-port models include brackets for mounting on flat surfaces such as walls or tables. In wall mounting, the switches should be installed with the ports facing up for proper ventilation. The switches also include self-adhesive pads for use on tabletops. The eight-port model additionally supports a Kensington lock for added security in open-area installations.
Both switches also support an optional rack mount kit for deployment in standard 1U spaces in wiring closets. As shown, the rack mount kit for the eight-port model uses ears that extend the footprint of the switch to a full rack. The rack mount kit is included with the 24-port models. Kits for the eight-port models can be ordered for free through the ProCurve web site by going to The part number for the eight-port rack mounting kit is
Kensington Lock supported on
eight-port models
Rev. 1.0b

14. 2520/2520G NPI Technical Training
2520/2520G-PoE vs. Cisco ESW PoE
2520/2520G NPI Technical Training
ProCurve 2520/2520G
Cisco ESW 520/540
Port Density
8/24 ports
24/48 ports
Energy Saving Features
LED power savings Power down for unused ports No
Fans
Variable speed on 24-port models fanless eight port
No fanless product
Operating Temperature
0-45C
(2520G C)
0-40C
Management
Command Line Interface, Web GUI, SNMP
Menu-driven console, Web GUI, SNMP
Discovery
LLDP-MED
IPv6
IPv6 host
Warranty
Lifetime
5 year limited
Phone Support
90 days
2520/2520G-PoE vs. Cisco ESW PoE
The HP ProCurve 2520/2520G-PoE switches compete effectively with Cisco’s ESW switches for small businesses. As the slide shows, the ProCurve 2520 line offers significant advantages in several key categories, including:
Support for LLDP-MED to simplify deployment, configuration, and management of PoE devices. The Cisco ESW switches support no discovery protocol.
Support for IPv6 host addressing
A broader operating temperature range
A lifetime warranty
More flexible configuration options, with support for a full featured-CLI as well as for web and SNMP. The 2520 CLI offers a menu interface, a switch setup application, and a management interface configuration wizard similar to those offered on the Intelligent Edge switches. The Cisco ESW switches offer only a menu interface, web GUI, and SNMP support. 14
Rev. 1.0b

15. 2520/2520G-PoE vs. Cisco Catalyst 2960 LAN Lite PoE
2520/2520G NPI Technical Training
ProCurve 2520/2520G
Cisco Catalyst 2960 LAN Lite
Port Density
8/24 ports
24/48 ports
Speed
Available in Fast Ethernet or Gigabit
Fast Ethernet only
Uplinks
2 dual personality + 2 Gigabit copper ( ) 2 dual personality (8-port models) 4 shared dual personality (2520G-24)
2 dual personality
Fans
Variable speed on 24-port models fanless eight port
No Fanless Product
Denial of Service Attack Filtering
Yes
N/A
Discovery
LLDP-MED
CDP/LLDP
IPv6
IPv6 host
Warranty
Lifetime
Limited Lifetime
Phone Support
Add on Service
2520/2520G-PoE vs. Cisco Catalyst 2960 LAN Lite PoE
The 2520 series compares favorably to Cisco Systems’ 2960 Catalyst PoE switches with their LAN Lite software. Some key advantages include:
Support for LLDP-MED. The Cisco switch supports Cisco’s proprietary Cisco Discovery Protocol (CDP) and the older LLDP standard that does not support the Media Endpoint Device (MED) extensions for auto-detection and configuration of devices such as VoIP phones.
A lifetime warranty. The Cisco switches offer a limited lifetime warranty, with five year warranties for fans and power supplies.
Deployment flexibility with options for 10/100 (Fast Ethernet) or gigabit connectivity
An eight-port form factor for low-density deployments
Quiet operation with fanless eight-port models and variable speed 24-port models
More uplink options with four gigabit uplinks for servers, aggregation, or redundancy on the 24-port models
IPv6 Host for future-proofing and management flexibility 15
Rev. 1.0b

16. 2520/2520G-PoE vs. Cisco Catalyst Express PoE
2520/2520G NPI Technical Training
ProCurve 2520/2520G
Cisco Catalyst Express 500/520
Speed
Available in Fast Ethernet or Gigabit
Fast Ethernet only
Uplinks
2 dual personality + 2 Gigabit copper ( ) 2 dual personality (8-port models) 4 shared dual personality (2520G-24)
1 dual personality (8-port)
2 dual personality (24 port)
Management
Command Line Interface, Web GUI, SNMP
Web GUI, SNMP
Discovery
LLDP-MED
Proprietary CDP
IPv6
IPv6 host
N/A
Warranty
Lifetime
Limited Lifetime
Phone Support
90 days
2520/2520G-PoE vs. Cisco Catalyst Express PoE
The comparison between the 2520 series and the Cisco Catalyst Express PoE switches shows that the ProCurve switch enjoys the same advantages as it does when compared with other Cisco models earlier in this presentation: more deployment options, more uplink flexibility, more administrative flexibility, and support for software features such as LLDP-MED and IPv6. 16
Rev. 1.0b

17. 2520/2520G-PoE vs. Cisco Small Business SRW (Linksys)
2520/2520G NPI Technical Training
ProCurve 2520/2520G
Cisco Small Business SRW (Linksys)
Fans
Variable Speed (quiet), and fanless 8 port
No Fanless Product
Energy Saving Features
LED power savings, Unused Port power down,
Variable Speed Fans
N/A
Denial of Service Attack Filtering
Yes
Discovery
LLDP-MED
Management
Command Line Interface, Web GUI, SNMP
Menu Driven console, Web GUI, SNMP
Operating Temperature
0-45C
(2520G C)
0-40C (8 –port)
0-45C (24-port)
Warranty
Lifetime
5 year limited
Phone Support
12 months
2520/2520G-PoE vs. Cisco Small Business SRW (Linksys)
The 2520 series competes effectively with Cisco’s SRW switches, which are its small business offerings in the Linksys Business Series for many of the same reasons that it competes well with the other Cisco switches discussed earlier. 17
Rev. 1.0b

18. 2520/2520G-PoE vs. 3Com Baseline Plus/OfficeConnect
2520/2520G NPI Technical Training
ProCurve 2520/2520G
3com Baseline Plus/OfficeConnect
Uplinks
2 dual personality + 2 Gigabit copper ( ) 2 dual personality (8-port models) 4 shared dual personality (2520G-24)
1 dual personality (8-port FE )
2 dual personality (24 port FE)
Energy Saving Features
LED power savings, Unused Port power down
N/A
Management
Command Line Interface, Web GUI, SNMP
Limited CLI, Web GUI, SNMP
Discovery
LLDP-MED
IPv6
IPv6 host
Warranty
Lifetime
3 years
Phone Support
90 days
2520/2520G-PoE vs. 3Com Baseline Plus/OfficeConnect
Like the 2520 series, 3Com’s Baseline Plus and OfficeConnect switches are managed and unmanaged Layer 2 switches designed for small-business deployments. The 2520 series enjoys several important advantages over the 3Com switch families, including:
Lifetime warranty versus 3Com’s three-year warranty
Energy Saving Features that are environmentally friendly and save money
More ports with 2 extra Gigabit uplinks for servers, aggregation or redundancy on the PoE and 1 extra Gigabit uplink on the PoE vs. 3Com
IPv6 Host for future-proofing and management flexibility
ProCurve Command Line Interface allows for robust management and advanced configurability vs. limited “compact” CLI
LLDP-MED allows for easy discovery and configuration of PoE devices and power management 18
Rev. 1.0b

19. 2520/2520G NPI Technical Training
2520/2520G-PoE vs. 3Com 4210
2520/2520G NPI Technical Training
ProCurve 2520/2520G
3Com 4210
Speed
Available in Fast Ethernet or Gigabit
Fast Ethernet only
Uplinks
2 dual personality + 2 Gigabit copper ( ) 2 dual personality (8-port models) 4 shared dual personality (2520G-24)
1 dual personality (8-port)
2 dual personality (24 port)
Energy Saving Features
LED power savings, Unused Port power down
N/A
Warranty
Lifetime
Limited Lifetime
Phone Support
90 days
2520/2520G-PoE vs. 3Com 4210
3Com’s 4210 family offers Layer 2 switches for 10/100 connectivity. The 2520 has many of the same advantages over this switch family as it does over other 3Com and Cisco switches mentioned earlier. 19
Rev. 1.0b

20. 2520/2520G-PoE vs. D-Link DES/DGS PoE
2520/2520G NPI Technical Training
ProCurve 2520/2520G
D-Link DES/DGS
Energy Saving Features
LED power savings Unused port power down
N/A
Management
Command Line Interface, Web GUI, SNMP
Basic CLI, Web GUI, SNMP
Discovery
LLDP-MED
IPv6
IPv6 host
Warranty
Lifetime
Limited Lifetime
ProCurve 2520/2520G-PoE vs. D-Link DES/DGS PoE
D-Link’s DES/DGS product is designed to provide basic 10/100/1000 connectivity to small businesses. However, the D-Link product link lacks several important features that are included in the 2520 series and can be crucial to sophisticated small business networks. These include:
IPv6 Host for future-proofing and management flexibility
ProCurve Command Line Interface allows for robust management and advanced configurability
LLDP-MED allows for easy discovery and configuration of PoE devices and power management
Lifetime warranty versus limited lifetime warranty that includes a five-year warranty for fans and power supplies
Energy Saving Features that are environmentally friendly and save money
Gigabit uplink port on eight-port model 20
Rev. 1.0b

21. 2520/2520G-PoE vs. Netgear Smart Switch
2520/2520G NPI Technical Training
ProCurve 2520/2520G
Netgear Smart Switch
Speed
Available in Fast Ethernet or Gigabit
Fast Ethernet only
Port Density
8/24 ports
24/48 ports
Energy Saving Features
LED power savings, Unused Port power down
N/A
Management
Command Line Interface, Web GUI, SNMP
Web GUI, SNMP only
IPv6
IPv6 host
Warranty
Lifetime
Limited Lifetime
2520/2520G-PoE vs. Netgear Smart Switch
The final competitor to be reviewed in this course is the Netgear Smart Switch, a small-business line that features managed Layer 2 PoE switches. As with the competitors from D-Link, 3Com, and Cisco, the Netgear switches do not offers several sophisticated features that are available on the 2520/2520G. These include:
Lifetime warranty versus limited lifetime warranty
Energy Saving Features that are environmentally friendly and save money
Deployment flexibility with eight-port form factor and broader operating temperature range.
IPv6 Host for future-proofing and management flexibility
ProCurve Command Line Interface allows for robust management and advanced configurability. The Smart Switches are web managed. 21
Rev. 1.0b

22. Hardware architecture overview
2520/2520G NPI Technical Training
Introduction
Hardware architecture overview
Front panels
Block diagrams
Accessories
2520/2520G software features
Hardware architecture overview
The second section of the presentation provides an overview of the hardware architecture of the 2520 and 2520G series. This includes an overview of the front and rear panels of the switches, block diagrams of hardware architecture, and a list of support accessories.
Rev. 1.0b

23. Front Panel View: 2520G-8-PoE and 2520-8-PoE
2520/2520G NPI Technical Training
RJ45 Console Port
Dual personality ports
10/100/1000 Base-T Ethernet Ports
Power, Fault, Locator LEDS
Reset & Clear
Port LED Mode select button and indicator LEDs
Front Panel View: 2520G-8-PoE and PoE
The front panels of the eight-port models in the 2520/2520G series includes features that are familiar to users of any ProCurve’s switches. As shown in the graphic above, the 2520G-8-PoE includes eight 10/100/100 Base-T Ethernet ports plus two dual-personality ports for fiber or copper uplinks. The panel also provides the LED indicators used on other ProCurve switches, including Power, Fault, and Locator LEDs and a Mode button for setting the parameter displayed by the port LEDs. The Reset and Clear buttons function in much the same way as on other ProCurve switches, including the Intelligent Edge switches. The console port requires a DB9-to-RJ45 serial cable, which is included in the shipping kit for the switch.
The front panel of the PoE is identical to the front panel of the 2520G-8-PoE, except that ports 1-8 support 10/100 connectivity.
PoE is identical, except that ports 1-8 are 10/100
Rev. 1.0b

24. Front Panel View: 2520G-24-PoE and 2520-24-PoE
2520/2520G NPI Technical Training
RJ45 Console Port
Dual personality ports
10/100/1000 Base-T Ethernet Ports
Power, Fault, Locator LEDS
PoE, Fan, Test LEDS
Reset & Clear
Port LED Mode select button and indicator LEDs
2520G-24-PoE
RJ45 Console Port
Dual personality ports
10/100 Base-T Ethernet Ports
Power, Fault, Locator LEDS
PoE, Fan, Test LEDS
10/100/1000 Base-T Ethernet Ports
Reset & Clear
Port LED Mode select button and indicator LEDs
PoE
Front Panel View: 2520G-24-PoE and PoE
The front panels of the 24-port models include many features seen on the eight-port models and on most ProCurve switches. These include the LEDs, RJ45 console port, and LED mode button.
However, the uplink architecture of the gigabit and 10/100 models are significantly different. As shown above, the 2520G-24-PoE features four dual-personality ports that support fiber or copper connections. The PoE features two copper ports and two dual personality ports.
Note that the PoE includes 24 10/100 ports, meaning that the total port density of the switch, including uplink ports, is 28 ports. The total port density of the 2520G-24-PoE is 24 ports, including 20 10/100/1000 ports and four dual-personality ports.
Rev. 1.0b

25. 2520/2520G NPI Technical Training
2520G-8-PoE architecture
2520/2520G NPI Technical Training
BCM59101
PoE on board
512Kb x 8
Boot Flash
128Mb
SPI Flash
SPI
Freescale MPC8313
PCI
BCM53312S
2X4 RJ45
MDI
Broadcom
BCM5482S
1x1
RJ45
Mini
GBIC
MDC/MDIO
Parallel
SGMII
25MHz
32MbX16
DDRII
33MHz
2520G-8-PoE architecture
The 2520G-8-PoE is based on Broadcom’s Freescale architecture, featuring a Freescale PowerPC processor running at 266 MhZ. The switch features 64 Mb of DDR2 RAM and two flash areas with 128Mb each.
The gigabit model features 512 KB of buffer, which is dynamically allocated among the ports. The 10/100 model features 384 KB of buffer, also dynamically allocated.
Rev. 1.0b

26. 2520/2520G NPI Technical Training
2520G-24-PoE architecture
2520/2520G NPI Technical Training
512Kb x 8
Boot Flash
128Mb
SPI Flash
128Mb
SPI Flash
32MbX16
DDRII
Freescale MPC8313
33MHz
32MbX16
DDRII
BCM53314S
25MHz
Broadcom
BCM54684
2520G-24-PoE architecture
The 2520G-24-PoE is based on Broadcom’s Freescale architecture, featuring a Freescale PowerPC processor running at 266 MhZ. The switch features 64 Mb of DDR2 RAM and two flash areas with 128Mb each.
The gigabit model features 512 KB of buffer, which is dynamically allocated among the ports. The 10/100 model features 384 KB of buffer, also dynamically allocated.
Broadcom
BCM54684
PoE daughter board
Mini
GBIC
2X6 RJ45
2X6 RJ45
Rev. 1.0b

27. 2520/2520G NPI Technical Training
PoE overview
2520/2520G NPI Technical Training
Total amount of available PoE power
Port supported at 7.5 Watts
Port supported at 15.4 Watts
PoE & 2520G-8-PoE
67 Watt 8 4
PoE & 2520G-24-PoE
195 Watt 24 12
PoE overview
The 2520/2520G switches can provide PoE power on all of their ports except RJ-45 uplink ports and dual-personality ports. As shown, the eight-port and 24-port models can be provide power to 7.5 Watt devices on all ports simultaneously. This can be useful in VoIP solutions because VoIP phones often draw as little as 7 Watts. When powering more demanding devices, such as surveillance cameras, the switches support fewer devices for PoE. For instance, for 15.4 Watt devices, the switches support PoE on half of their non-uplink ports.
Furthermore, you can mix of 7.5 and 15.4 Watt devices in a single switch because power is provided.
Power allocation can be configured using steps that will be shown later in the next section of the presentation.
The 2520/2520G also supports devices using the Cisco legacy PoE standard, which predates the IEEE 802.3af PoE standard. 27
Rev. 1.0b
Rev. 1.0 (Alpha)

28. 2520/2520G NPI Technical Training
2520/2520G accessories
2520/2520G NPI Technical Training
Transceivers
HP ProCurve 100-FX SFP-LC Transceiver (J9054B)
HP ProCurve 100-BX-D SFP-LC Transceiver (J9099B)
HP ProCurve 100-BX-U SFP-LC Transceiver (J9100B)
Mini-GBICS
HP ProCurve Gigabit-SX-LC Mini-GBIC (J4858C)
HP ProCurve Gigabit-LX-LC Mini-GBIC (J4859C)
HP ProCurve Gigabit-LH-LC Mini-GBIC (J4860C)
HP ProCurve 1000-BX-D SFP-LC Mini-GBIC (J9142B)
HP ProCurve 1000-BX-U SFP-LC Mini-GBIC (J9143B)
Rev. 1.0b

29. 2520/2520G NPI Technical Training
2520/2520G software features
2520/2520G NPI Technical Training
Introduction
Hardware architecture overview
2520/2520G software features
Management interfaces
Similarities to Intelligent Edge software
Configuring power features
Configuring security features
The final section of the presentation provides an introduction to the software features of the Switch 2520 and 2520G. Key features include:
Management interfaces
Similarities to Intelligent Edge software
Configuring power features
Configuring security features
Rev. 1.0b

30. 2520/2520G NPI Technical Training
Software families
2520/2520G NPI Technical Training
&
2520G-8 & 2520G-24
S.14.03
J.14.01
Software versions
The 2520 and 2520G have separate code families in order to support their different chip architectures.
Rev. 1.0b

31. 2520/2520G management interfaces
2520/2520G NPI Technical Training
ProCurve CLI
Consistent with Intelligent Edge switches
Includes menu and setup
Web interface
Java application similar to app used by other ProCurve switches
PCM/PCM+
Will be discovered and can be managed through PCM
2520/2520G management interfaces
The 2520/2520G features the same management interfaces ProCurve’s more advanced switches, including the Intelligent Edge switches.
The CLI offers the same command syntax and privilege structure as ProCurve’s more advanced switches, including the Intelligent Edge switches. These include the menu and switch setup features. We will examine some of these commands in this section of the presentation.
The web interface is identical to the Java-based web interface familiar to users of the Intelligent Edge switches. Like the interface on those switches, the web interface does not support all of the features and options available through the CLI. For instance, you can use the web interface to enable Multiple Spanning Tree (IEEE 802.1s) globally, but you cannot define MST instances or configuration parameters.
ProCurve Manager and ProCurve Manager Plus will support the 2520/2520G with the full range of discovery and management features, including software and security management, as well as access to features such as VLANs and IP addressing.
Rev. 1.0b

32. Comparing 2520/2520G software with Intelligent Edge software
2520/2520G NPI Technical Training
For features supported, 2520/2520G uses same CLI commands as Intelligent Edge switches
Advanced features include:
IPv6 host
Multiple configuration files
show interface display for dynamic port information
show commands support pattern matching
show <command option> | <include | exclude | begin > <regular-expression>
Example: show running-config | include lldp
Management Interface Wizard
setup mgmt-interfaces
Comparing 2520/2520G software with 3500yl software
The 2520/2520G software provides a subset of the commands and features available on the ProCurve Intelligent Edge switches. For features that the 2520/2520G shares with the Intelligent Edge switches, the CLI commands and web interfaces are identical. Some of the features supported by the Intelligent Edge switches that are also supported by the 2520/2520G are shown in the graphic.
The pattern matching feature for enables administrators to use a regular expression to filter output from show commands. For example, to view only lines in the running configuration that included the string “lldp,” an administrator would enter show running-config | include lldp. The character between “running-config” and “include” is entered using the [SHIFT] \.
The Management Interface Wizard provides an interface setting basic security parameters such as Operator and Manager passwords and SNMP community names and for the enabling or disabling of the Telnet, SSH, HTTP, and SSL management interfaces.
Rev. 1.0b

33. Configuring green features
2520/2520G NPI Technical Training
Two key power conservation features
LED off for decreased power consumption
Lower Power Mode for unused ports on 2520G models
Can be enabled or disabled at CLI
2520G-8-PoE(config)# savepower ?
led Turn on/off the port LEDs
port-low-pwr Put ports in Low Power Mode.
Configuring green features
The 2520 series offers two key features to enable energy conservation with no effect on switch performance. Both the 10/100 and the gigabit models support a LED off feature that enables administrators to turn off port LEDs when observation is not necessary. The feature can save up to 2W, a 10 percent reduction in overall power usage.
The 2520G switches feature Lower Power Mode, which places unused ports in a “sleep mode” when they are disconnected or when connected devices are turned off. The Low Power Mode feature saves about 1W of power (approximately 5 percent) on a 24 port switch with 24 ports that are empty or connected to powered-down devices. This can be particularly useful to organizations that require all workstations to be shut down during off hours.
The 2520/2520G provides the savepower command to manage the LED off and Lower Power Mode features. As shown above, the savepower command for the 2520G switches offers options for enabling and disabling both features. The 2520 switches do not support Low Power Mode and do not offer an option for this command.
By default, both features are disabled. To learn the status of each feature, use show savepower followed by “led” or “port-low-pwr.”
Rev. 1.0b

34. Configuring PoE allocation
2520/2520G NPI Technical Training
PoE allocation can be configured per port
Allocated by class, usage, or value
2520G-8-PoE(config)# interface 1-8 poe-allocate-by ?
usage
class
value
2520G-8-PoE(config)# interface 1-8 poe-allocate-by value
2520G-8-PoE(config)# interface 1-8 poe-value 7
2520G-8-PoE(config)# show power-over-ethernet brief
...
PoE | Power Power Alloc Alloc Actual Configured Detection Power Port | Enable Priority By Power Power Type Status Class
| Yes low value 7 W 0 W Searching
Configuring PoE allocation
The 2520 series supports many of the same options for configuration PoE allocation that are available on ProCurve’s more advanced switches, such as the 2910al. As shown above, the poe-allocate-by command enables administrators to set power allocation by usage, class, or value. The default setting is usage, which enables the PD to set its own allocation. The class setting enables the switch to set power according to five 802.3af classes. See the Management and Configuration Guide for more details.
In the example, an administrator configures a 2520G-8-PoE switch to allocate 7W to ports 1-8. This will enable the switch to support low-power devices, such as VoIP phones, on all eight of its edge ports. Note that the switch is not yet connected to a PoE device.
Rev. 1.0b

35. 2520/2520G NPI Technical Training
PoE and LLDP-MED
2520/2520G NPI Technical Training
LLDP-MED extensions for PoE
Enable and disable PoE through LLDP
Manage PoE power allocation
Fine-grained power negotiation in 0.1W increments
Ongoing dynamic re-negotiation
For instance, more power required for video call than when phone is on standby
Prioritize power allocation
Critical, high, or low
PoE and LLDP-MED
The 2520 series supports LLDP-MED enhancements that enable fine-grained power negotiation and monitoring between PSEs and PDs using LLDP-MED.
The basis of this enhancement is data link layer classification (DLC) for PoE, which enables power negotiation at Layer 2. The power negotiation between a PSE and a PD can be implemented at the physical layer or at the data link layer. After the link is powered at the physical layer, the PSE can use LLDP to repeatedly query the PD to discover the power needs of the PD. Communication over the data link layer allows finer control of power allotment, which makes it possible for the PSE to supply dynamically the power levels needed by the PD.
The next several slides will describe the interfaces available on the 2520 for enabling and monitoring PoE operation using LLDP-MED.
Power Priority
LLDP-MED supports communication of power priority to the PD. On the 2910al, priority is set using the power-over-ethernet [critical | high | low] command issued in the interface context. The default priority is “low.” In some cases, the PD may advertise a different priority value. However, the PD priority will not overwrite the priority set on the 2910al.
Rev. 1.0b

36. LLDP: Enabling PoE detection at CLI
2520/2520G NPI Technical Training
By default, LLDP detection of PoE devices is disabled
Can be enabled at the CLI or in web interface
Basic LLDP operation is enabled by default
2520g-8-PoE(config)# interface 1 poe-lldp-detect enabled
2520G-8-PoE(config)# show power-over-ethernet brief
PoE | Power Power Alloc Alloc Actual Configured Detection Power Port | Enable Priority By Power Power Type Status Class
| Yes low lldp 17 W 5.6 W Delivering 3
LLDP: Enabling PoE Detection at CLI
On the 2520, as on other ProCurve switches, LLDP in enabled by default on all ports. However, PoE detection through LLDP is disabled by default, but can be enabled at the CLI or in the web interface. Once LLDP detect is enabled, the information will be displayed by the show power-over-ethernet command. Note that the LLDP detect status is indicated by a value in the Alloc By field. On other ProCurve switches, such as the 2910al, the LLDP detection status is indicated by a separate field.
Rev. 1.0b

37. Configuring Denial of Service filtering
2520/2520G NPI Technical Training
To enable Denial of Service filtering:
2520G-8-PoE(config)# dos-filter
No options available
Configuring Denial of Service filtering
For enhanced security in SMB environments, the 2520 series offers a single-command option to turn on filters that will guard against common Denial of Service attacks. Designed for simple operation and usage, the DoS filtering feature does not offer any configuration options or significant monitoring options. As shown above, the dos-filter command used to enable the feature offers no options for configuration. The show dos-filter command shows only whether the feature is enabled or disabled, which is the default state.
Some of the types of attacks addressed by this feature are:
Land Attack, when switch receives packets with same source and destination IP addresses
PingOfDeath Attack, when switch receives ping packets larger than 63,536 bytes through the use of fragments
InvalidTCPFlags Attack, when switch receives packets with the following invalid TCP flags:
TCP Flag SYN set and Source Port less than 1024
TCP Control Flags = 0 and TCP Sequence Number = 0
TCP Flags FIN, URG, and PSH set and TCP Sequence Number = 0
TCP Flags SYN and FIN set
PingFlood Attack, when switch receives excess number of ICMP packets. The limit when AutoDoS is enabled is 1000 ICMP packets per second.
The DoS filtering is handled in hardware, not in software.
Rev. 1.0b

38. Port authentication options
2520/2520G NPI Technical Training
2520/2520G supports 802.1X, Web-auth, MAC-auth
Can apply any two types simultaneously
Can support two concurrent users per authentication type
Port authentication options
The 2520 series supports many of the same port authentication features seen on ProCurve’s more advanced switches. All 2520 and 2520G models support 802.1X, Web-auth, and MAC-auth on all ports. For any port, administrators can apply any two authentication types simultaneously. Possible combinations include:
802.1X and MAC-Auth
802.1X and Web-Auth
Web-Auth and MAC-Auth
MAC-Auth and MAC-Auth
Web-Auth and Web-Auth
802.1X and 802.1X
Furthermore, the switches can support up to two concurrent users for each authentication type. This enables high levels of flexibility for designs, such as daisy-chained VoIP phones and PCs, that require multiple devices and users per port.
Rev. 1.0b

39. QoS configuration options
2520/2520G NPI Technical Training
By default, maintains incoming 802.1p priority
Can prioritize or re-mark traffic based on:
VLAN ID
Port
IP ToS precedence bits
IP ToS DiffServ bits
By default, supports four outbound queues
Can be configured for two queues
QoS configuration options
Like many ProCurve switches, the 2520 maintains incoming 802.1p priority on tagged VLANs. Furthermore, the 2520 switches can remark traffic according to four common criteria.
The hardware queues on the 2520 are configured using the same command set used in the ProVision ASIC switches.
Rev. 1.0b

40. Configuring IPv6 host addressing
2520/2520G NPI Technical Training
2520/2520G supports IPv6 host addressing per VLAN
2520(config)# vlan 55 ipv6 ?
address Set IPv6 parameters for communication within an IP
network.
enable Enable IPv6 on an interface and configures an
automatically generated link-local addr.
nd IPv6 nodes on the same link use Neighbor Discovery to
discover each other's presence, link-layer addresses,
routers and to maintain reachability information about
the paths to active neighbors.
Configuring IPv6 host addressing
Like the ProVision ASIC switches, the 2520/2520G supports IPv6 host addressing. Although the help menu includes an ipv6 enable command, it is not necessary to issue a separate command to enable the protocol. Instead, the protocol is enabled when an IPv6 address is configured through any means. However, when IPv6 is enabled on the interface, the switch will generate a link-local address.
Rev. 1.0b

41. 2520/2520G NPI Technical Training
2520/2520G at a glance
2520/2520G NPI Technical Training
PoE & 2520G-8-PoE
PoE & 2520G-24-PoE
Routing/switching capacity
5.6 Gpbs (2520)
20 Gbps (2520G)
8.4 Gbps (2520) 48 Gpbs (2520G)
Throughput
4.1 million pps (2520)
14.8 million pps(2520G)
6.2 million pps(2520) 25.7 million pps (2520G)
Maximum VLANs
256
Trunking support
Eight links per trunk
Four trunks
12 trunks
MAC address table size
8000 entries
Maximum heat dissipation
87 BTU/hr (2520)
89 BTU/hr (2520G)
208 BTU/hr (2520)
223 BTU/hr (2520G)
Acoustic
Power: 0 dB
Pressure: 0db
2520 Power: 27 dB
2520 Pressure: 36 dB
2520G Power: 28.3 dB
2520G Pressure: 37.7 dB
Rev. 1.0b

42. Product Structure and NTE Pricing
2520/2520G NPI Technical Training
Product Number
Model Number
NTE List Price
J9137A
HP ProCurve PoE Switch
$749
J9138A
HP ProCurve PoE Switch
$1199
J9279A
HP ProCurve 2520G-8-PoE Switch
$1099
J9280A
HP ProCurve 2520G-24-PoE Switch
$2199 42
Rev. 1.0b
HP ProCurve Confidential

43. 2520/2520G NPI Technical Training

44. 2520/2520G NPI Technical Training
ProCurve PoE Switch Feature Matrix
2520/2520G NPI Technical Training
Feature
Intelligent Edge (8200/5400/3500)
Traditional Edge (2910al/2610)
Small Business (2520)
Command Authorization
Yes
Classifier-based QoS No
Denial Service Attack Filtering
Detection of Malicious Attacks
Friendly port names
DHCP protection
GARP
Distributed Trunking - Server to Switch
IGMP - Data Driven
Dynamic ARP Protection
IPv6 Host
Fan Redundancy
Jumbo Frames
ICMP Throttle
LED on-off
IP Lockdown
LLDP
IP VLANs 2K
256
LLDP VOIP Auto cfg
IPv6 ACLs
LLDP-MED
L4 Prioritization Y
Loop Detection
Local Proxy ARP
MAC lockout
Meshing
MAC only/lockdown
MLD snooping
MSTP (802.1s)
NBAD / Virus Throttle
PC attached to Phone Auth
OSPF
PoE
Yes, PoE
PIM-D
Port inactivity (Sleep Mode)
PIM-S
Port Mirroring
Port Based
Port Trunking/LACP
Protocol VLAN
Protected Ports
Q-in-Q
RADIUS (Mgmt access)
RADIUS based named VLAN
RMON
Redundant POE Pwr
Secure Copy
Redundant System PS
Single IP Stacking
Remote Intelligent (via ACL) Mirroring
SNMPv3
Remote WebAuth portal
Spanning Tree Root protection
Replaceable Fan Tray
SSH (Mgmt access)
Replaceable Power Supplies
SSL (Mgmt access)
RIP
Yes, 10K routes
Yes, 2K routes
Support negotiated power via LLDP/MED
RL Max Outbound
TACACS+ (Mgmt access)
RL Max Inbound
Mac Auth (RADIUS based) / per port
Y/2
RL Minimum Outbnd / Queue
Web Auth
Route / L3
Queue service
Strict, WFQ
Strict, WFQ or WRR (2610)
WRR
Secure Credential
802.1p
Policy Map, Set, Honor
Honor/Set
sFlow
DSCP/CoS
Honor
Source-port filtering
MAC Address table size
64K 8k 8K
Static Routes 64
Maximum # of VLANs
UDLD
Queues (#) 8 4
USB Auto-run
802.1X Users per port 32 2
User-based ACLs (IDM)
Accept OA Blade
VLAN Based ACLs
ACL/ACEs / switch 3K
512
VRRP
Rev. 1.0b