Wired Intelligent Edge (Campus Switching and Routing)

Contributor I

2930F max local user-roles

Hello all,


I've ran into a limitation on 2930F switches with local user-roles. When I try to define a new user-role I get the following error:


"The maximum number of local user roles allowed is 32".


This is a big problem since our customer is using more then 32 vlan's on their access layer. I personally don't want to go back to the days of having to manually configure a port so I'm working with support to get this resolved. Also posting here since I didn't find this particular limit anywhere in docs or community posts.


I'm considering to try downloadable user roles if it allows me to add more then 32 user-roles to the switches, but I don't know if that'll let me pass the limitation. More testing required ;-)


I've included a configuration for review.



MVP Expert

Re: 2930F max local user-roles



Our engineering team is taking a look at local user role limits on each switching platform and investigating whether they can be increased. We will post any updates on this feature in this forum as we get them.

Matt Fern
Technical Marketing Engineer, Wired Intelligent Edge

Aruba, a Hewlett Packard Enterprise company

T: 916.540.1759  |  E: mfern@hpe.com   |   Matt @ Twitter
Contributor I

Re: 2930F max local user-roles

Hi Matthew,


Support told me something similair. As a workaround (and maybe the better way to go) support told me to use Downloadable User Roles as these aren't limited like local user roles are. If I run into limits with DUR's I'll update this thread.


I hope the local role limits are increased, I like to have options to choose from ;-). Maybe update docs to reflect these local roles are limited?

MVP Guru Elite

Re: 2930F max local user-roles



There is the ArubaOS 16.08(.0001) available with :




Local User Roles
To address use cases with hundreds of types of users, the number of Local User Roles has been increased to
512. For more information, see the User Roles chapter in the Access Security Guide.



PowerArubaSW: Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP... More info

PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...) More info

PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)

PowerArubaIAP: Powershell Module to use Aruba Instant AP

PowerArubaMC: Powershell Module to use Mobility Controller / Master

ACMP 6.4 / ACMX #107 / ACCP 6.5 / ACSP