Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Command for switches to see inactive ports

This thread has been viewed 15 times
  • 1.  Command for switches to see inactive ports

    Posted 15 days ago

    Hello colleagues,

    do you know a command to see how long switchports are already inactive or what time they were active the last time? 

    I have following switches:

    • HP J9851A Switch 5412Rzl2
    • Aruba JL357A 2540-48G-PoE+-4SFP+ Switch

    Maybe this is not possible to see?

    Thank you!



  • 2.  RE: Command for switches to see inactive ports

    Posted 14 days ago

    What do you mean by "inactive"?  From a physical connection standpoint?  From an authentication standpoint?  Admin down?  Something else?




  • 3.  RE: Command for switches to see inactive ports

    Posted 14 days ago

    What do you mean by "inactive"?  Authentication?  Physical link?  Admin down?  Something else?




  • 4.  RE: Command for switches to see inactive ports

    Posted 14 days ago
    A proper network management tool should keep track of this.

    One open source solution I've been using for some years now, is Netdisco. You could spin this up quickly on a VM. There are docker containers, but had issues updating it last time I tried, so reverted back to setting up its own instance.  netdisco.org


    --
    °(((=((===°°°(((================================================





  • 5.  RE: Command for switches to see inactive ports

    Posted 12 days ago

    Comware switch will show you when it transition last time.

    GigabitEthernet1/0/2
    Current state: DOWN
    Line protocol state: DOWN
    ---
    Last link flapping: 27 weeks 3 days 7 hours 3 minutes<
    Last clearing of counters: Never
    Current system time:2024-05-03 14:02:18
    Last time when physical state changed to up:2023-10-23 13:57:00
    Last time when physical state changed to down:2023-10-24 07:02:52
    ...

    For 2540 you can check logs  with

    show log -r | include ports

    In both cases you need to parse the output. Comware is more reliable as logs on ArubaOS-S switches will roll over.

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------