Search the Community
- ClearPass Recipe Review
- ClearPass Recipe Submission
- Admin Tool - Assign Role in Bulk
- Admin Tool - User Search
- CWNP Conf 2015
- Airheads Conference Vegas 2015
- Wlan Pro Conference 2015
- Airheads Conference Shanghai 2014
- WLAN Pro Conf EU 2014
- CWNP Conference 2014 (Sep 22 - 24)
- Airheads Local 2014
- Wireless Field Day 7 (Aug 6-8, 2014)
- Black Hat 2014 Contest
- Airheads EMEA Italy 2014 (June 9 - 13)
- Americas Airheads Conference 2014
- WLAN Professionals Summit 2014
- Airheads Roadshow 2013
- EMEA Airheads Conference 2013
- APJ Airheads Conference 2013
- Americas Airheads Conference 2013
- Americas Airheads Conference 2012
- APJ Airheads Conference 2012
- EMEA Airheads Conference 2012
- Airheads EMEA 2012 Contest: How to Enter - Contest Terms & Conditions
- Airheads EMEA 2012 Contest: Create your Entry to Win Here!
- Airheads Conferences Prior to 2012
- Americas Airheads Local Events 2012
- EMEA Airheads Local Events 2012
- Wireless Field Day 3 @ Aruba Networks
- Wireless Tech Field Day 2- Silicon Valley
- Wi-Fi Mobility Symposium- San Jose, CA USA
- SDN Apps
- Connector Translation Testing area
we have two datacenter with two 5400R zl2 in each datacenter as core, as we need a configuration with no SPOF.
With our current setup, we had connection errors. It looks like our setup ist not working as expected and the switches in each datacenter receive mac addresses within the same vlan from two uplinks.
I will attach two pictures. One with our current setup and a second one with "the only right solution?"
Who can tell if our setup should work or if it just works another way?
VSF is no option, because we have only v2 modules.
I think there is a solution, because HPE documents Distributed trunking overview shows a diagram, but no configuration example.
Hi Justin, thank you for the guide, but it looks like it was a bug. We opened a support ca...
thank you for the guide, but it looks like it was a bug. We opened a support case and HPE Aruba now addresses the issue by "The fix CR# 241657 has been released to support in KB.16.04.0013 and KB.16.05.0007". We currently have not upgraded the firmware, but as soon as possible we will do it and give feedback.
I have two doubts about this feature:
- I saw the BPDU protection feature is enabled on a per-port basis with the command "spanning-tree <port-list> bpdu-protection". Cisco has the command "spanning-tree portfast bpduguard" which allows to enable the feature in all the portfast ports at the same time. Is there any command to enable this feature in all auto-edge ports at the same time in Aruba?
- When this feature is enabled, is the port disabled always it receives a BPDU or only when it receives a better BPDU?
Greetings! Addressing your questions in order: ArubaOS-Switch allows config...
Addressing your questions in order:
- ArubaOS-Switch allows configuration of BPDU protection on a per-port basis only; we do not have an equivalent to the command you provided. I will provide feedback to engineering.
- BPDU protection will shut down a port if any BPDU is received. To cause a port to shut down only when a superior BPDU is received, you would instead use the root guard feature, which is configured in a nearly identical manner to BPDU protection:
switch(config)# spanning-tree <port-list> root-guard
I know that we can create different name for manager/operator access for ArubaOS16.05. But the guide didn't specify the maximum number of username that can be created? Is there a hard limit?
After checking with engineering, the number we got back was 102 local users being the limit — the d...
After checking with engineering, the number we got back was 102 local users being the limit — the default 'manager' and 'operator' accounts, plus 100 role-based access control (RBAC) local users. (Note that the latter can be distributed amongst any number of predefined or custom user roles on the switch, up to a total of 100 accounts.)
is there any other possibility to "stack" the switches other than IRF? I mean anything like Cisco StackWise...
If not, I noticed to make an IRF Cluster with 5130 Switches the switch type should be the same?! But it is possible to use an 24 and 48 Ports 5130 Switch within an IRF cluster?
Greetings! The 5130 switch series does not provide a backplane stacking capability; if y...
The 5130 switch series does not provide a backplane stacking capability; if you want to stack these switches, IRF would be the means to do so.
As far as mixing switches in an IRF stack — you can use different models within the same switch series (e.g., all 5130 EI or all 5130 HI, but not a mix of both), as long as all switches in the fabric are running exactly the same software build.
Is there a way to get serial numbers from switches using ClearPass or Mobility Manager or AirWave?
Hi if are devices support in airwave yes, you can see the serial number. regards. Ángel de la Encar...Hi if are devices support in airwave yes, you can see the serial number. regards. Ángel de la Encarnación ACMP, ACCP, ACDX #544
Greetings! It is fairly straightforward to create a custom report that displays basic de...
It is fairly straightforward to create a custom report that displays basic device info, including device name, type, model, and serial number.
In your AirWave instance, browse to Reports -> Definitions, then add a new report definition. Give your new report a useful description (e.g., "Device inventory with serial"), and choose the Custom type.
Under Custom Options -> Available Options, expand Inventory and drag the item Devices to the Selected Options box.
Next, under Report Restrictions, choose the desired group, folder, and device filter options. In the Devices section, uncheck all options except Name, Type, Model, and Device Serial.
Choose your desired scheduling, visibility, email, and export options, then click Add (or Add and Run).
Browse to Reports -> Generated, and once your custom report has been generated, check the output to verify that it is what you are expecting. If not, return to your custom report definition and make sure the filter options are selected appropriately.
it's not clear to me what is the future of HPE Comware devices? Expecially for access switches (eg 5130 series).
I've not see any 5140 series or 2,5Gbps/5Gbps on comware devices by HPE. If we are let's said a "comware" based company make still sense buy HPE comware 5130EI devices or comware devices by HPE are dead walking devices (At least for access segment)?
Hi Marco, In the Campus/Branch space, the Comware switches (5130, 5510, etc.) cont...
Hi Marco, In the Campus/Branch space, the Comware switches (5130, 5510, etc.) continue to be available, with no end-of-sale date scheduled. That said, there are no plans to introduce follow-on generations of Comware switches for the Campus/Branch... with the focus on our R&D investment and innovation being in the Aruba brand switch portfolio. It is in the Aruba Switch portfolio that you'll find the Mobile First architecture differentiated functionality and the tight integration with the rest of the Aruba software platforms (AirWave, ClearPass, Activate, Central, IntroSpect, etc.). We recommend a migration to the Aruba Switch portfolio as your needs require and timing allows.
Is it possible to enable dynamic voice vlan assignment on switch Aruba 3810M (ROM Ver: KB.16.01.0008)? Scenario: Users are authenticated via 802.1x and ipphones are authenticated via MAB thru radius server. I have ipphones form 2 different vendors and i would like them to use differen VLANs - let's say after connecting to switch Cisco ippohne will be assigned to vlan 90 and after connecting Alcatel ipphone to same port will be assigned to vlan 100.
Is it possible?
Thanks for any help!
If you are using ClearPass, you can create a policy like: Authorization:Endpoint Repository equals...
If you are using ClearPass, you can create a policy like:
Authorization:Endpoint Repository equals VoIP Phone AND
Connection:Client-Mac-Vendor equals Cisco
Then assign Enforcement profile for VLAN 90
Authorization:Endpoint Repository equals VoIP Phone AND
Connection:Client-Mac-Vendor equals Alcatel
Then assign Enforcement profile for VLAN 100
For this policy to work, make sure DHCP profiling is working with ClearPass.
I have 4 Aruba 2920 switches setup in a stack confirmation. I have several VLANS setup and a default Gateway of my Firewall for internet access. I have a secondary Firewall connected to another ISP. How would I configure the stack to use this secondary ISP if default gateway is not available?
Route Map? Second gateway of last resort? I don't mind doing the leg work just not sure where to start.
I am trying to setup VLANs on our network. I am having trouble with any client that is not on the same subnet as the router. I have VLAN 99 and 100. The router IP is located on the subnet for VLAN 99. Any client on that subnet can ping the router. However, any computer on VLAN 100 can not pint the router. They can ping other clients on VLAN 99 just not the router. I have tried two different routers one is a Netgear and one is an Adtran. The Aruba switch I have is a 2930F. Below is my config and I have attached a Visio diagram of the setup. Any help would be greatly appreciated.
; JL256A Configuration Editor; Created on release #WC.16.05.0004
; Ver #12:08.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:ba
hostname "switch 1"
ip route 0.0.0.0 0.0.0.0 10.63.1.2
no untagged 1-4,13-16
no ip address
ip address 10.63.1.1 255.255.252.0
ip address 10.63.4.1 255.255.252.0
Hi Guys (and of course girls),
I'm a little bit stuck in an IRF-Configuration and i hope you all somehow can help me a little.
I've set up an IRF-Stack of 6x HPE 5700AF Switches with a 20GBit/s IRF-Link as a Ring. To prevent Split-Brain-Situation i wanted to set up LACP-MAD with an assist device. (customers wish for a seperate device...)
Here I wanted to use one Aruba 2930F Switch with 3x 1G RJ45 Ethernet for the local Stack-Members and 3x 1G SFP-Fiber for the remote devices (different building about 650ft/210m away).
I actually don't know how to set those devices correctly up.
Right now i created a Link-Aggregation on the IRF with 6 member ports an the MAD-VLAN 3999 as access ports. On the 2930F i created a lacp-trunk with 3 copper and 3 fiber ports and the same access-vlan.
Here is the moment where i got stuck.
On the a-Series Switch stack i activated lacp-mad.
But what to do on the Aruba switch?
Maybe someone can support me with a corerct mad-Config on the A-series switch and a correct assist-config for the 2930F device...
Would be nice.
Any idea appreciated!
- 2930F LACP-MAD
At the comware switch configure a dynamic link-aggregation interface. In the bridge interface enter...At the comware switch configure a dynamic link-aggregation interface. In the bridge interface enter the command “mad enable”.
At the 2930f switch create a trunk interface with lacp. Within the trunk interface enable mad passtrough. For example: “interface trk1 lacp mad-passthrough enable”
To validate the passtrough use the command “show lacp mad-passthrough counters”
To validate if mad is working enforce a split brain.