Hewlett Packard Aruba 5406R 44GT PoE 4SFP (No PSU) v3 zl2 - JL003A

The Aruba 5400R zl2 Switch Series is an industry-leading mobile campus access solution with HPE Smart Rate multigigabit ports for high-speed 802.11ac devices. It delivers enterprise-class resiliency with innovative flexibility and scalability for customers creating digital workplaces that are optimized for mobile users with an integrated wired and wireless approach. This series brings scalable aggregation with Virtual Switching Framework (VSF) stacking technology; hitless failover; and Fast Software Upgrade for 5400R VSF stacks. The advanced Layer 2 and 3 feature set includes OSPF; IPv6; IPv4 BGP; Dynamic Segmentation; robust QoS and policy-based routing with no software licensing required.

Based on a powerful ProVision ASIC; the Aruba 5400R zl2 Switch Series has a high-speed; high-capacity architecture with 2 Tbps crossbar switching fabric with low 2.1µ latency; robust feature support; and value with flexible programmability for future applications. This series offers flexible connectivity options with 6- or 12-slot compact chassis; line rate 40GbE; up to 96 line rate 10GbE ports and up to 288 ports of PoE+. The 5400R is easy to deploy and manage with advanced security and network management tools like Aruba ClearPass Policy Manager; Aruba AirWave and cloud-based Aruba Central.

Software-defined networks

Supports multiple programmatic interfaces; including REST APIs and Openflow 1.0 and 1.3; to enable automation of network operations; monitoring; and troubleshooting

Unified Wired and Wireless

ClearPass Policy Manager supports unified wired and wireless policies using Aruba ClearPass Policy Manager

Switch auto-configuration automatically configures switch for different settings such as VLAN; CoS; PoE max power; and PoE priority when Aruba AP is detected

User Role defines a set of switch-based policies in areas such as security; authentication; and QoS. A user role can be assigned to a group of users or devices; using switchbased local user role or download from ClearPass

Dynamic Segmentation provides a secure tunnel that transports network traffic on a per-port or per-user role basis to an Aruba Controller. In a per-user role Tunnel Node; users are authenticated by the ClearPass Policy Manager which directs traffic to be tunneled to an Aruba controller or switch locally

Static IP Visibility allows ClearPass to do accounting for clients with static IP address

Quality of Service (QoS)

Advanced classifier-based QoS classifies traffic using multiple match criteria based on Layer 2; 3; and 4 information; applies QoS policies such as setting priority level and rate limit to selected traffic on a per-port or per-VLAN basis

Traffic prioritization allows real-time traffic classification into eight priority levels mapped to eight queues

Bandwidth shaping

• Port-based rate limiting provides per-port ingress-/ egress-enforced increased bandwidth
• Classifier-based rate limiting uses an access control list (ACL) to enforce increased bandwidth for ingress traffic on each port
• Reduced bandwidth provides per-port; per-queue egress-based reduced bandwidth

Class of Service (CoS) sets the IEEE 802.1p priority tag based on IP address; IP Type of Service (ToS); Layer 3 protocol; TCP/UDP port number; source port; and DiffServ

Unknown Unicast Rate Limiting throttles unicast packets with unknown destination addresses and limits flooding on the VLAN

Management

Aruba Central cloud-based management platform offers simple; secure; and cost effective way to manage switches

Zero-Touch ProVisioning (ZTP) simplifies installation of the switch infrastructure using Aruba Activate-based or DHCPbased process with AirWave Network Management

Flexible management with same hardware - Supports both cloud-based Central and on-premise AirWave with the same hardware ensuring change management platform without ripping and replacing switching infrastructure

IP SLA for Voice monitors quality of voice traffic using the UDP Jitter and UDP Jitter for VoIP tests (requires v3 modules)

Built-in programmable and easy to use REST API interface provides configuration automation for Mobile-first campus networks

Remote intelligent mirroring mirrors selected ingress/egress traffic based on ACL; port; MAC address; or VLAN to a local or remote HPE 8200 zl; 6600; 6200 yl; 5400 zl; 5400R; 3500; or 3800 Switch located anywhere on the network

RMON; XRMON; and sFlow v5 provide advanced monitoring and reporting capabilities for statistics; history; alarms; and events

IEEE 802.1AB Link Layer Discovery Protocol (LLDP) advertises and receives management information from adjacent devices on a network; facilitating easy mapping by network management applications

Uni-Directional Link Detection (UDLD) support Hewlett Packard Enterprise (HPE) UDLD and DLDP protocols to monitor a cable between two switches and shut down the ports on both ends if the cable is broken

Management simplicity provides common software features and CLI implementation across all HPE ProVision-based switches (including the zl and yl switches)

Command authorization leverages RADIUS to link a custom list of CLI commands to an individual network administrator's login; an audit trail documents activity

Friendly port names allows assignment of descriptive names to ports

Dual flash images provides independent primary and secondary operating system files for backup while upgrading

Multiple configuration files stores easily to the flash image

Comware CLI

• Comware-compatible CLI bridges the experience of HPE Comware CLI users who are using the ArubaOS-Switch software CLI
• Display and fundamental Comware CLI commands are embedded in the switch CLI as native commands; display output is formatted as on Comware-based switches; and fundamental commands provide a Comware-familiar initial switch setup
• Configuration Comware CLI commands when Comware commands are entered; CLI help is elicited to formulate the correct ArubaOS-Switch software CLI command

Connectivity

IEEE 802.3az Energy Efficient Ethernet lowers power consumption in periods of low link usage (supported on v2 zl 10/100/1000 and 10/100 modules)

IEEE 802.3at Power over Ethernet (PoE+) provides up to 30 W per port that allows support of the latest PoE+ capable devices such as IP phones; wireless access points; and security cameras; as well as any IEEE 802.3afcompliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments

Prestandard PoE support detects and provides power to prestandard PoE devices

High-density port connectivity provides up to 12 interface module slots and up to 288 wire-speed 10/100/1000 PoEenabled ports or 96 10GbE ports per system

Jumbo frames on Gigabit Ethernet and 10-Gigabit Ethernet ports; jumbo frames allow high-performance remote backup and disaster-recovery services

Auto-MDIX provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports

IPv6

• IPv6 host enables switches to be managed in an IPv6 network
• Dual stack (IPv4 and IPv6) transitions IPv4 to IPv6; supporting connectivity for both protocols
• MLD snooping forwards IPv6 multicast traffic to the appropriate interface
• IPv6 ACL/QoS supports ACL and QoS for IPv6 traffic
• IPv6 routing supports static; RIPng; OSPFv3 routing protocols
• 6in4 tunneling supports encapsulation of IPv6 traffic in IPv4 packets
• Security provides RA guard; DHCPv6 protection; dynamic IPv6 lockdown; and ND snooping

Performance

High-speed; high-capacity architecture 2 Tbps crossbar switching fabric provides intra-module and inter-module switching with 785.7 million pps throughput on the purpose-built ProVision ASICs

Selectable queue configurations allows for increased performance by selecting the number of queues and associated memory buffering that best meet the requirements of the network applications

Resiliency and high availability

Virtual Switching Framework (VSF) creates one virtual resilient switch from two switches; servers or switches can be attached using standard LACP for automatic load balancing and high availability; simplify network operation by reduce the need for complex protocols like Spanning Tree Protocol (STP); EqualCost Multipath (ECMP); and VRRP (requires v3 modules)

Fast Software Upgrade reduces downtime of the VSF stack during an upgrade by sequentially upgrading the members in the stack shrinking the downtime to a few seconds (requires v3 modules)

Virtual Router Redundancy Protocol (VRRP) allows groups of two routers to dynamically back each other up to create highly available routed environments for IPv4 and IPv6 networks

Nonstop switching improves network availability to better support critical applications such as unified communication and mobility; interface and fabric modules continue switching traffic during failover from active to standby management module

Nonstop routing enhances Layer 3 high availability; OSPFv2/v3 and VRRP will continue to operate and route network traffic during failover from an active to a standby management module

Redundant management and power provide enhanced system availability and continuity of operations

IEEE 802.1s Multiple Spanning Tree Protocol provides high link availability in multiple VLAN environments by allowing multiple spanning trees; encompasses IEEE 802.1D Spanning Tree Protocol and IEEE 802.1w Rapid Spanning Tree Protocol

IEEE 802.3ad Link Aggregation Control Protocol (LACP) and HPE port trunking support up to 144 trunks; each with up to eight links (ports) per trunk

Distributed trunking enables loop-free and redundant network topology without using Spanning Tree Protocol; allows a server or switch to connect to two switches using one logical trunk for redundancy and load sharing

Optional redundant power supply provides uninterrupted power and allows hot-swapping of the redundant power supplies when installed

Hot-swappable modules allows dissimilar modules; and power supplies in a redundant power supply configuration to be added or swapped without interrupting the network

Sparing simplicity HPE zl-common accessories (interface modules and power supplies)

Uplink Failure Detection provides active-standby network path redundancy for servers that are configured for active-standby NIC teaming

SmartLink provides easy-to-configure link redundancy of active and standby links

Layer 2 switching

VLAN support and tagging supports the IEEE 802.1Q standard and 4;094 VLANs simultaneously

IEEE 802.1v protocol VLANs isolate select non-IPv4 protocols automatically into their own VLANs

VxLAN encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment (requires v3 modules)

GVRP and MVRP allows automatic learning and dynamic assignment of VLANs

IEEE 802.1ad Q-in-Q increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a high-speed campus or metro network

MAC-based VLAN provides granular control and security; uses RADIUS to map a MAC address/user to specific VLANs (requires v2 or higher modules)

Rapid Per-VLAN Spanning Tree (RPVST+) allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+

HPE switch meshing dynamically load balances across multiple active redundant links to increase available aggregate bandwidth; allows concurrent Layer 3 routing with v2 or higher modules

Layer 3 services

Bidirectional Forwarding Detection (BFD) enables link connectivity monitoring and reduces network convergence time for static route; OSPFv2 and VRRP (requires v3 modules)

User Datagram Protocol (UDP) helper function allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP

Loopback interface address defines an address in Routing Information Protocol (RIP) and Open Standard Path First (OSPF); improving diagnostic capability

Route maps provide more control during route redistribution; allow filtering and altering of route metrics

DHCPserver centralizes and reduces the cost of IPv4 address management

Layer 3 routing

Static IP routing provides manually configured routing for both IPv4 and IPv6 networks

Routing Information Protocol (RIP) provides RIPv1; RIPv2; and RIPng routing

OSPF provides OSPFv2 for IPv4 routing and OSPFv3 for IPv6 routing

Policy-based routing uses a classifier to select traffic that can be forwarded based on policy set by the network administrator (requires v2 or higher modules)

Border Gateway Protocol (BGP) provides IPv4 Border Gateway Protocol routing; which is scalable; robust; and flexible

Security

Control Plane Policing sets rate limit on control protocols to protect CPU overload from DOS attacks

Access control lists (ACLs) provide filtering based on the IP field; source/destination IP address/subnet; and source/ destination TCP/UDP port number on a per-VLAN or perport basis

Multiple user authentication methods

• IEEE 802.1X users per port provides authentication of multiple IEEE 802.1X users per port
• Web-based authentication authenticates from a Web browser for clients that do not support IEEE 802.1X supplicant
• MAC-based authentication client is authenticated with the RADIUS server based on the client's MAC address
• Concurrent IEEE 802.1X; Web; and MAC authentication schemes per port switch port accepts up to 32 sessions of IEEE 802.1X; Web; and MAC authentications

Private VLAN provides network security by restricting peerto-peer communication to prevent a variety of malicious attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port; regardless of VLAN ID or destination MAC address

DHCP protection blocks DHCP packets from unauthorized DHCP servers; preventing denial-of-service attacks

Secure management access delivers secure encryption of all access methods (CLI; GUI; or MIB) through SSHv2; SSL; and/or SNMPv3

Switch CPU protection provides automatic protection against malicious network traffic trying to shut down the switch

ICMP throttling defeats ICMP denial-of-service attacks by enabling any switch port to automatically throttle ICMP traffic

Identity-driven ACL enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each authenticated network user

STP BPDU port protection blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs; preventing forged BPDU attacks

Dynamic IP lockdown works with DHCP protection to block traffic from unauthorized hosts; preventing IP source address spoofing

Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts; preventing eavesdropping or theft of network data

STP root guard protects the root bridge from malicious attacks or configuration mistakes

Detection of malicious attacks monitors 10 types of network traffic and sends a warning when an anomaly that potentially can be caused by malicious attacks is detected

Port security allows access only to specified MAC addresses; which can be learned or specified by the administrator

MAC address lockout prevents particular configured MAC addresses from connecting to the network

Source-port filtering allows only specified ports to communicate with each other

RADIUS/TACACS+ eases switch management security administration by using a password authentication server

Secure shell encrypts all transmitted data for secure remote CLI access over IP networks

Secure Sockets Layer (SSL) encrypts all HTTP traffic; allowing secure access to the browser-based management GUI in the switch

Secure FTP allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file

Open Authentication Role simplifies first-time deployment of AAA in brownfield deployments by allowing full network access for failed clients and provides instant connectivity as soon as a client is plugged-in

Critical Authentication Role ensures that important infrastructure devices such as IP phones are allowed network access even in the absence of a RADIUS server

MAC Pinning allows non-chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients logoff or get disconnected

Management Interface Wizard helps secure management interfaces such as SNMP; telnet; SSH; SSL; Web; and USB at the desired level

Switch management logon security helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication

Security banner displays a customized security policy when users log in to the switch

IEEE 802.1AE MACsec provides security on a link between two switch ports (1Gbps or 10Gbps) using standard encryption and authentication (requires v3 modules)

Convergence

IP multicast routing includes PIM Sparse and Dense modes to route IP multicast traffic

IP multicast snooping (data-driven IGMP) prevents flooding of IP multicast traffic

Protocol Independent Multicast for IPv6 supports one-tomany and many-to-many media casting use cases such as IPTV over IPv6 networks

LLDP-MED (Media Endpoint Discovery) defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones

PoE allocations supports multiple methods (automatic; IEEE 802.3af class; LLDP-MED; or user-specified) to allocate PoE power for more efficient energy savings

Auto VLAN configuration for voice

• RADIUS VLAN uses a standard RADIUS attribute and LLDPMED to automatically configure a VLAN for IP phones
• CDPv2 uses CDPv2 to configure legacy IP phones

Local MAC Authentication assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes

Product Features:

• Powerful Aruba Layer 3 modular switch series with VSF stacking; Dynamic Segmentation; low latency and resiliency.
• HPE Smart Rate for high-speed multi-gigabit bandwidth (IEEE 802.3bz) and PoE+ power
• Scalable line rate 40GbE for wireless traffic aggregation
• Ready for the software defined network with REST APIs and OpenFlow support
• Security and network management tools with ClearPass Policy Manager; AirWave and cloudbased Central

Specifications:

Included accessories

• 1 Aruba 5400R zl2 Management Module (J9827A)
• 1 Aruba 5406R zl2 Switch Fan Tray (J9831A)
• 1 Aruba 24-port 10/100/1000BASE-T PoE+ MACsec v3 zl2 Module (J9986A)
• 1 Aruba 20-port 10/100/1000BASE-T PoE+/4-port 1G/10GbE SFP+ MACsec v3 zl2 Module (J9990A)

I/O ports and slots

• 44 RJ-45 autosensing 10/100/1000 PoE+ ports (IEEE 802.3 Type 10BASE-T; IEEE 802.3u Type 100BASE-TX; IEEE 802.3ab Type 1000BASE-T; IEEE 802.3at PoE+); Media Type: Auto-MDIX; Duplex: 10BASE-T/100BASE-TX: half or full; 1000BASE-T: full only
• 4 open 10GbE SFP+ transceiver slots
• 4 open module slots
• Supports a maximum of 144 autosensing 10/100/1000 ports or 144 SFP ports or 48 SFP+ ports or 48 HPE Smart Rate Multi-Gigabit or 12 40GbE ports; or a combination

Power supplies

• 2 power supply slots
• 1 minimum power supply required (ordered separately)

Fan tray

• Includes: 1 x J9831A 1 fan tray slot

Physical characteristics

• Dimensions: 17.5 (w) x 17.75 (d) x 6.9 (h) in (44.45 x 45.09 x 17.53 cm) (4U height)
• Weight: 28.11 lbs. (12.75 kg)

Memory and processor

• v3 Gigabit Module: Dual ARM Coretex A9 @ 1 GHz; Packet buffer size: 13.5 MB internal
• v2 Gigabit module: ARM11 @ 450 MHz; Packet buffer size: 18 MB internal
• v3 10G module: Dual ARM Coretex A9 @ 1 GHz; Packet buffer size: 13.5 MB internal
• v2 10G module: ARM11 @ 550 MHz; Packet buffer size: 18 MB internal
• v3 40G Module: Dual ARM Coretex A9 @ 1 GHz; Packet buffer size: 13.5 MB internal
• Management Module: Freescale P2020 dual core @ 1.2 GHz; 16 MB flash; 1 GB SD Card; 4 GB DDR3 SODIMM

Mounting and enclosure

• Mounts in an EIA standard 19-inch telco rack or equipment cabinet (hardware included); Horizontal surface mounting only

Performance

• 1000 Mb Latency: < 2.8 µs (FIFO 64-byte packets)
• 10 Gbps Latency: < 1.8 µs (FIFO 64-byte packets)
• 40 Gbps Latency: < 1.5 µs (FIFO 64-byte packets)
• Throughput: Up to 571.4 Mpps
• Routing/Switching capacity: 960 Gbps
• Switch fabric speed: 1015 Gbps
• Routing table size: 10000 entries (IPv4); 5000 entries (IPv6)
• MAC address table size: 64000 entries

Environment

• Operating temperature: 32 degreeF to 113 degreeF (0 degreeC to 45 degreeC); 0 degreeC to 40 degreeC with J8177C transceiver installed; 0 degreeC to 35 degreeC with FIPS Opacity Shield installed
• Operating relative humidity: 15% to 95% @ 113 degreeF (45 degreeC); noncondensing
• Nonoperating/Storage temperature: -40 degreeF to 158 degreeF (-40 degreeC to 70 degreeC)
• Nonoperating/Storage relative humidity: 15% to 95% @ 149 degreeF (65 degreeC); noncondensing
• Altitude: Up to 10;000 ft (3 km)
• Acoustic: Power: 44 dB; Pressure: 31.7 dB ISO 7779; ISO 9296

Electrical characteristics

• Frequency 50: 60 Hz
• 80plus.org Certification: Gold
• Description: Does not come with power supply. Two open power supply slots are available; three different power supplies are available. See power supply products for additional specifications
• Maximum heat dissipation: 2450 BTU/hr (2584.75 kJ/hr); (max. non-PoE); 3700 BTU/hr (3903 kJ/hr) (max. using PoE)
• Voltage: 110 - 127/200 - 240 VAC; rated (depending on power supply chosen)
• Idle power: 215 W

Safety

• CSA 22.2 No. 60950; UL 60950; IEC 60950; EN 60950

Emissions

• FCC part 15 Class A; EN 55022/CISPR 22 Class A

Immunity

• EN: EN 55024; CISPR 24
• ESD: IEC 61000-4-2; 4 kV CD; 8 kV AD; HPE ENV. 765.002
• Radiated: IEC 61000-4-3; 3 V/m
• EFT/Burst: IEC 61000-4-4; 1.0 kV (power line); 0.5 kV (signal line)
• Surge: IEC 61000-4-5; 1 kV/2 kV AC; 1kV signal; 0.5 kV DC
• Conducted: IEC 61000-4-6; 3 Vrms
• Power frequency magnetic field: IEC 61000-4-8; 1 A/m; 50 or 60 Hz
• Voltage dips and interruptions: IEC 61000-4-11; >95% reduction; 0.5 period; 30% reduction; 25 periods
• Harmonics: EN 61000-3-2; IEC 61000-3-2
• Flicker: EN 61000-3-3; IEC 61000-3-3

Management

• Aruba Central; Aruba AirWave Network Management; IMC-Intelligent Management Center; Command-line interface; Web browser; Configuration menu; REST interface; SNMP manager Telnet; RMON1; FTP; Out-of-band management (Serial RS-232C; Micro USB Serial)

BGP

• RFC 1997 BGP Communities Attribute
• RFC 2918 Route Refresh Capability
• RFC 4271 A Border Gateway Protocol 4 (BGP-4)
• RFC 4456 BGP Route Reflection: An Alternative to Full Mesh Internal BGP (IBGP)
• RFC 5492 Capabilities Advertisement with BGP-4

Device Management

• RFC 1591 DNS (client)
• RFC 2576 (Coexistence between SNMP V1; V2; V3)
• RFC 2579 (SMIv2 Text Conventions)
• RFC 2580 (SMIv2 Conformance)
• RFC 3416 (SNMP Protocol Operations v2)
• HTML and telnet management

General Protocols

• IEEE 802.1ad Q-in-Q
• IEEE 802.1AX-2008 Link Aggregation
• IEEE 802.1D MAC Bridges
• IEEE 802.1p Priority
• IEEE 802.1Q VLANs
• IEEE 802.1s Multiple Spanning Trees
• IEEE 802.1v VLAN classification by Protocol and Port
• IEEE 802.1w Rapid Reconfiguration of Spanning Tree
• IEEE 802.3ad Link Aggregation Control Protocol (LACP)
• IEEE 802.3af Power over Ethernet
• IEEE 802.3az Energy Efficient Ethernet
• IEEE 802.3x Flow Control
• IEEE 802.3bz 2.5Gb
• RFC 768 UDP
• RFC 783 TFTP Protocol (revision 2)
• RFC 792 ICMP
• RFC 793 TCP
• RFC 826 ARP
• RFC 854 TELNET
• RFC 868 Time Protocol
• RFC 951 BOOTP
• RFC 1058 RIPv1
• RFC 1350 TFTP Protocol (revision 2)
• RFC 1519 CIDR
• RFC 1542 BOOTP Extensions
• RFC 1918 Address Allocation for Private Internet
• RFC 2030 Simple Network Time Protocol (SNTP) v4
• RFC 2131 DHCP
• RFC 2453 RIPv2
• RFC 2548 (MS-RAS-Vendor only)
• RFC 3046 DHCP Relay Agent Information Option
• RFC 3575 IANA Considerations for RADIUS
• RFC 3576 Ext to RADIUS (CoA only)
• RFC 3768 VRRP
• RFC 4675 RADIUS VLAN & Priority
• RFC 5880 Bidirectional Forwarding Detection
• RFC 5905 Network Time Protocol Version 4: Protocol and Algorithms Specification
• UDLD (Uni-directional Link Detection)
• RFC 5880 BFD
• RFC 5905 NTP Client

IP Multicast

• RFC 3376 IGMPv3
• RFC 3973 PIM Dense Mode
• RFC 4601 PIM Sparse Mode

IPv6

• RFC 1981 IPv6 Path MTU Discovery
• RFC 2080 RIPng for IPv6
• RFC 2081 RIPng Protocol Applicability Statement
• RFC 2082 RIP-2 MD5
• RFC 2375 IPv6 Multicast Address Assignments
• RFC 2460 IPv6 Specification
• RFC 2464 Transmission of IPv6 over Ethernet Networks
• RFC 2710 Multicast Listener Discovery (MLD) for IPv6
• RFC 2925 Definitions of Managed Objects for Remote Ping; Traceroute; and Lookup Operations (Ping only)
• RFC 3019 MLDv1 MIB
• RFC 3315 DHCPv6 (client and relay)
• RFC 3484 Default Address Selection for IPv6
• RFC 3587 IPv6 Global Unicast Address Format
• RFC 3596 DNS Extension for IPv6
• RFC 3810 MLDv2 for IPv6
• RFC 4022 MIB for TCP
• RFC 4087 IP Tunnel MIB
• RFC 4113 MIB for UDP
• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers
• RFC 4251 SSHv6 Architecture
• RFC 4252 SSHv6 Authentication
• RFC 4253 SSHv6 Transport Layer
• RFC 4254 SSHv6 Connection
• RFC 4291 IP Version 6 Addressing Architecture
• RFC 4293 MIB for IP
• RFC 4294 IPv6 Node Requirements
• RFC 4419 Key Exchange for SSH
• RFC 4443 ICMPv6
• RFC 4541 IGMP & MLD Snooping Switch
• RFC 4861 IPv6 Neighbor Discovery
• RFC 4862 IPv6 Stateless Address Auto-configuration
• RFC 5095 Deprecation of Type 0 Routing Headers in IPv6
• RFC 5340 OSPFv3 for IPv6
• RFC 5453 Reserved IPv6 Interface Identifiers
• RFC 5519 Multicast Group Membership Discovery MIB (MLDv2 only)
• RFC 5722 Handling of Overlapping IPv6 Fragments
• RFC 6620 FCFS SAVI
• Draft-ietf-savi-mix

MIBs

• IEEE 802.1ap (MSTP and STP MIB's only)
• IEEE 8021-Bridge-MIB (2008)
• IEEE 8021-Q-Bridge-MIB (2008)
• RFC 1155 Structure & ID of Mgmt Info for TCP
• RFC 1213 MIB II
• RFC 1493 Bridge MIB
• RFC 1724 RIPv2 MIB
• RFC 1850 OSPFv2 MIB
• RFC 2021 RMONv2 MIB
• RFC 2096 IP Forwarding Table MIB
• RFC 2578 Structure of Management Information Version 2 (SMIv2)
• RFC 2613 SMON MIB
• RFC 2618 RADIUS Client MIB
• RFC 2620 RADIUS Accounting MIB
• RFC 2665 Ethernet-Like-MIB
• RFC 2668 802.3 MAU MIB
• RFC 2674 802.1p and IEEE 802.1Q Bridge MIB
• RFC 2737 Entity MIB (Version 2)
• RFC 2787 VRRP MIB
• RFC 2863 The Interfaces Group MIB
• RFC 2925 Ping MIB
• RFC 2932 IP (Multicast Routing MIB)
• RFC 2933 IGMP MIB
• RFC 4292 IP Forwarding Table MIB
• RFC 4836 Managed Objects for 802.3 Medium Attachment Units (MAU)
• RFC 7331 BFD MIB

Network management

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
• RFC 2819 Four groups of RMON: 1 (statistics); 2 (history); 3 (alarm) and 9 (events)
• RFC 3176 sFlow
• RFC 3411 SNMP Management Frameworks
• RFC 3412 Message Processing and Dispatching for the Simple Network Management Protocol (SNMP)
• RFC 3413 Simple Network Management Protocol (SNMP) Applications
• RFC 3414 User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3)
• RFC 3415 View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP)
• RFC 3418 Management Information Base (MIB) for the Simple Network Management Protocol (SNMP)
• RFC 5424 Syslog Protocol
• ANSI/TIA-1057 LLDP Media Endpoint
• Discovery (LLDP-MED)
• SNMPv1/v2c/v3 XRMON
• XRMON

OSPF

• RFC 2328 OSPFv2
• RFC 3101 OSPF NSSA
• RFC 5340 OSPFv3 for IPv6

QoS/CoS

• RFC 2474 DiffServ Precedence; including 8 queues
• RFC 2475 DiffServ Architecture
• RFC 2597 DiffServ Assured Forwarding (AF)
• RFC 2598 DiffServ Expedited Forwarding (EF)

Security

• IEEE 802.1AE MAC Security Standard (MACSec)
• IEEE 802.1X Port Based Network Access Control
• RFC 1492 TACACS+
• RFC 1321 The MD5 Message-Digest Algorithm
• RFC 2698 A Two Rate Three Color Marker
• RFC 2818 HTTP Over TLS
• RFC 2865 RADIUS (client only)
• RFC 2866 RADIUS Accounting
• RFC 3579 RADIUS Support For Extensible Authentication
• Protocol (EAP)
• Secure Sockets Layer (SSL)
• SSHv2 Secure Shell