6 votes
Accepted

Port channel to two different switches

I understand that this is an incorrect configuration, but what was blocking traffic to the new switch? Is this part of the port channel or spanning tree or something else? Nothing was actually "...
YLearn's user avatar
  • 27.3k
4 votes
Accepted

How to set IPv6 RA values for RDNSS and DNSSL on HPE/Aruba 5400R

As it turns out this cannot be configured in a sane manner. Both values are taken from the configuration of the DNS resolver and search-list for the management plane of the switch. This implies that ...
Andreas Rogge's user avatar
3 votes

how can I find out deployment date?

Usually you'd have that date in your inventory. For HPE/Aruba gear you can use the warranty check (requires registration as of late): https://support.hpe.com/connect/s/?card=wc. Cisco: https://...
Zac67's user avatar
  • 84.4k
3 votes
Accepted

How to verify ACL rules on Aruba without access to source and destination?

What you are looking for is not specific to Aruba. Testing such things is the same, regardless of the router or firewall vendor. There are penetration testing (pen test) tools and approaches that ...
Ron Maupin's user avatar
  • 99.6k
3 votes

Exporting cisco ASA configuration into HP aruba?

I don't think there is a way to copy config from Cisco to Aruba as both run on different OS.
user3465367's user avatar
3 votes
Accepted

Configuring multiple management ports (HP/Aruba)

On the 5400R zl2 series, the front management ports are for dedicated out-of-band management (OOBM). You can connect them to a dedicated management network - if you have one - or use them locally in ...
Zac67's user avatar
  • 84.4k
2 votes

Is it possible to emulate ARUBA device in GNS3 environment?

No. GNS3 is limited to Cisco devices due to being based on Dynamips.
Zac67's user avatar
  • 84.4k
2 votes
Accepted

Aruba OS equivalent for default interface

There doesn't seem to be a simple command to reset an interface to default. If it's any help you can quickly display the current config by running show config interface n - saves you from searching ...
Zac67's user avatar
  • 84.4k
2 votes

How to avoid microbursts causing drops?

Your network is becoming too thin too fast between the server and the clients. While the server can send well over 1 Gbit/s to each client switch, those switch uplinks are bottlenecks - more than 1 ...
Zac67's user avatar
  • 84.4k
2 votes
Accepted

Using IGMP but Multicast still Flooding

You need to configure the 2530 for IGMP forwarding, otherwise it'll simply flood. For instance, vlan 1 ip igmp turns on IGMP forwarding for VLAN 1 and sets the switch querier to automatic mode. ...
Zac67's user avatar
  • 84.4k
2 votes
Accepted

Connecting two Stacked Aruba 2930M Switch with third one using LACP

A stack of 2 switches forms a single logical switch. So you first configure the stack, without considering the third one. You now have 2 switches (one stack and one standalone) Then you create a Ling ...
JFL's user avatar
  • 19.6k
2 votes

Aruba switch -- rate limiting causing TCP packet reordering?

Have you noticed that rate limiting (at least on HPE/Aruba) is done in bursts, not smoothly? That may interfere with TCP congestion control which might not be able to adapt to the bandwidth limitation....
Zac67's user avatar
  • 84.4k
2 votes
Accepted

mirroring-group not possible on Aruba switch

The Aruba 2530 are rebranded HPE (Provision), yes. I'm using the "ArubaOS-Switch Management and Configuration Guide for YA/YB.16.04" pp. 272 which should be fairly easy to find at HPE. You can ...
Zac67's user avatar
  • 84.4k
2 votes

Stacking different HPE switches

I am going to say no, running latest firmware on my 2920 (J9728A), the only stacking member options are as follows: J9729A J9727A J9728A J9726A
Windex's user avatar
  • 21
2 votes

Show LLDP neighbors history

No, not on Aruba/HPE switches. You'd need to have debug logged LLDP events (creating quite a mess likely) or polled the neighbors via SNMP. Otherwise, past information is lost.
Zac67's user avatar
  • 84.4k
2 votes

Exclude a certain vlan/subnet from layer3 inter-vlan routing

If you define a management VLAN it'll be excluded from normal IP forwarding/routing. management-vlan [ <vlan-id> | <vlan-name> ] In a more complex scenario you can use route policies/maps ...
Zac67's user avatar
  • 84.4k
2 votes
Accepted

How should edge switches have their routing configured (when there is a mgmt vlan in the mix)

I think it's best to answer from bottom up. I'm assuming all your subnets are /24. In the scenario above, should edge switches have "ip route 0.0.0.0 0.0.0.0 10.10.3.100" on their configs? ...
Zac67's user avatar
  • 84.4k
2 votes

RMA'ed device configuration

After you power up the new device and update any soft/firmware, you can simply upload a backup of the device configuration. You do have a backup of the configuration, don't you?
Ron Trunk's user avatar
  • 67.5k
2 votes
Accepted

aruba access point join uptime and device uptime

I can't find any specific distinction in the documentation whether that means controller association uptime or hardware uptime since power on. This debug command might be more useful for you but you ...
FrameHowitzer's user avatar
1 vote

How to verify ACL rules on Aruba without access to source and destination?

You can't synthesize or simulate the traffic on the switch triggering the ACL entries, but if the traffic is actually there, show statistics shows you the rule hits and can be very helpful: show ...
Zac67's user avatar
  • 84.4k
1 vote

Port channel to two different switches

Based on your diagram, you cannot port channel. A port channel is between two devices. An port channel must start on one device, and terminate on another device. The port channel represents a single ...
Ron Maupin's user avatar
  • 99.6k
1 vote

how to show updown log event on aruba switch port

You could use show log | i ports: or more specifically show log | i port .* is now.
Zac67's user avatar
  • 84.4k
1 vote

Does Loop Protect Protocol work with Port-Security?

By logic, port-level security makes active loop detection pretty much gratuitous. Loop detection is designed to detect and disable loops created by accident or maliciously - both are very hard (if not ...
Zac67's user avatar
  • 84.4k
1 vote

DHCP Help 3560-CX + Aruba AP515

You need to assign an IP address to the VLAN 100 SVI to be the gateway address. DHCP will automatically assign DHCP on an addressed interface from the correct pool based on the interface address. You ...
Ron Maupin's user avatar
  • 99.6k
1 vote

Working with credentials encrypted credentials on Aruba / HP switches

You can SHA1 encrypt the local password, e.g. password manager admin sha1 <hash> I have extensively used RSA authentication for SSH and SFTP access - imho the best option since there's no ...
Zac67's user avatar
  • 84.4k
1 vote
Accepted

Aruba 2930M - the NTP server is unreachable

It's poorly documented but Jesse's hit the nail on the head: The switch uses the IP default gateway only while operating as a Layer 2 device. While routing is enabled on the switch, the IP default ...
Zac67's user avatar
  • 84.4k
1 vote

Create a dead end vLAN for untagged/native between Aruba and Cisco switches

I understand your question as "How do I get untagged frames to go nowhere on trunk ports?" - your approach with a dummy native VLAN would work. However, as you point out, the dummy VLAN would be ...
Zac67's user avatar
  • 84.4k

Only top scored, non community-wiki answers of a minimum length are eligible