Wired

last person joined: 17 hours ago 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

Aruba 2530 reserve static route

Jump to Best Answer
This thread has been viewed 4 times
  • 1.  Aruba 2530 reserve static route

    Posted Apr 20, 2020 10:00 AM

    Hello Dears!

    I've a question. Soon I will get an Aruba 2530 switch and two Fortinet firewalls. The firewall will have DHCP for all networks. In Aruba, static route to the firewalls will be registered.

    For example:

    0.0.0.0 0.0.0.0 10.60.0.11 (main firewall)

    so i need make reserve route to reserve firewall

    0.0.0.0 0.0.0.0 10.60.0.12 (reserve firewall)

     

    Reserve route must be in standby mode and track main route. If I lose main route, reserve static route must be automatically on.

     

    I know that it aruba present command "ip-profile" and here I can make reserve route with metric. But, on the 2530 Aruba doesn't present this command.

     

    How can I do it?

    Sheme.jpg


    #2530


  • 2.  RE: Aruba 2530 reserve static route

    Posted Apr 20, 2020 10:56 AM

    Hi, supposing that each Firewall in your scenario really acts as a standalone device (so no clustering feature - AKA HA Active/Active or Active/Backup - is really deployed <- and it shouldn't since you listed two different IP addresses for them and not a common virtual IP address for both if clustered), the only thing you could do is trying with static routing metrics...but there are caveats (as discussed here)...and, more importantly, to do that you a Layer 3 Switch (to deploy routing features) is required, that's essential...the Aruba 2530 is simply not a Layer 3 Switch, it provides just Layer 2 features.



  • 3.  RE: Aruba 2530 reserve static route

    Posted Apr 20, 2020 11:00 AM

    I suspect it is due to the 2530 being a Layer 2 only switch.

     

    Failing that, can you configure VRRP or similar on the Fortinet FW?



  • 4.  RE: Aruba 2530 reserve static route

    Posted Apr 20, 2020 11:05 AM

    Yep, VRRP on the Fortigate Firewalls would be a way to overcome that limitation if no HA will be available at Firewall level.



  • 5.  RE: Aruba 2530 reserve static route
    Best Answer

    Posted Apr 20, 2020 11:21 AM

    Thank For Your answer. Fortigate will be on HA cluster , It's mean that will only one IP address for a both Fortigate. It's like a VSS cisco.

    On aruba will be only one route 0.0.0.0/0 10.50.0.11



  • 6.  RE: Aruba 2530 reserve static route

    Posted Apr 20, 2020 12:39 PM

    Initial scenario rearranged --> issue self-solved. Great.