To Next Page

To Previous Page

1. Create the basic configuration for your spoke device manually, using the username/password from ISP and

BIMS URL.

2. The IPSec VPN configuration is generated by IVM and deployed by BIMS.

3. The IPSec VPN tunnel is automatically created.

4. The device in the branch private network can DHCP relay to HQ to continue the zero touch configuration.

Zero-touch configuration setup and execution

1. DHCP configuration

2. BIMS configuration

3. Execution

CLI commands

756 Aruba 2930F / 2930M Management and Configuration Guide

for ArubaOS-Switch 16.08

Default Chapter3
- Table of Contents3
Chapter 1 About this Guide26
- Applicable Products26
- Switch Prompts Used in this Guide26
Chapter 2 Time Protocols27
- General Steps for Running a Time Protocol on the Switch27
- Selecting a Time Synchronization Protocol28
- Disabling Time Synchronization29
- Timep: Selecting and Configuring29
  - Viewing the Current Timep Configuration (CLI)29
    - Configuring (Enabling or Disabling) the Timep Mode31
- SNTP: Selecting and Configuring34
  - Viewing and Configuring SNTP (CLI)35
    - Configuring (Enabling or Disabling) the SNTP Mode36
  - SNTP Client Authentication42
- SNTP Unicast Time Polling with Multiple SNTP Servers48
  - Displaying All SNTP Server Addresses Configured on the Switch (CLI)48
  - Adding and Deleting SNTP Server Addresses49
    - Adding Addresses49
    - Deleting Addresses49
- SNTP Messages in the Event Log49
- Network Time Protocol (NTP)49
  - Commands50
    - Timesync Ntp50
- Ntp50
- [No] Ntp50
Chapter 3 Port Status and Configuration69
- Viewing Port Status and Configuring Port Parameters69
- Using Friendly (Optional) Port Names90
- Uni-Directional Link Detection (UDLD)95
  - Configuring UDLD96
  - Viewing UDLD Information (CLI)98
- Uplink Failure Detection99
- Basic USB Port Commands104
  - Usb-Port104
  - Show Usb-Port104
Chapter 4 Power over Ethernet (Poe/Poe+) Operation106
- Introduction to Poe106
  - Poe Terminology106
- Planning and Implementing a Poe Configuration106
- Poe Operation107
- Configuring Poe Operation109
- Poe/Poe+ Allocation Using LLDP Information114
  - LLDP with Poe114
    - Enabling or Disabling Ports for Allocating Power Using LLDP115
    - Enabling Poe Detection Via LLDP TLV Advertisement115
  - LLDP with Poe115
- Viewing the Global Poe Power Status of the Switch118
  - Viewing Poe Status on All Ports119
  - Viewing the Poe Status on Specific Ports121
- 802.3Bt Support122
- Poe Event Log Messages127
Chapter 5 Port Trunking129
- Overview of Port Trunking129
  - Port Connections and Configuration129
- Port Trunk Features and Operation130
  - Fault Tolerance130
- Trunk Configuration Methods130
  - Dynamic LACP Trunk130
    - Using Keys to Control Dynamic LACP Trunk Configuration130
  - Static Trunk131
- Viewing and Configuring Port Trunk Groups (CLI)135
- Viewing Existing Port Trunk Groups (Webagent)142
- Trunk Group Operation Using LACP142
  - Default Port Operation145
  - LACP Notes and Restrictions147
- Trunk Group Operation Using the "Trunk" Option149
- How the Switch Lists Trunk Data149
- Outbound Traffic Distribution Across Trunked Links150
- Trunk Load Balancing Using Port Layers151
  - Enabling Trunk Load Balancing151
Chapter 6 Port Traffic Controls153
- Rate-Limiting153
  - All Traffic Rate-Limiting153
- ICMP Rate-Limiting157
- Guaranteed Minimum Bandwidth (GMB)165
  - GMB Operation165
  - GMB Operating Notes170
    - Impact of Qos Queue Configuration on GMB Commands170
- Rate-Limiting Unknown Unicast Traffic170
- Jumbo Frames173
- Fault Finder178
  - Fault Finder Thresholds179
  - Enabling Fault Finder179
Chapter 7 Configuring for Network Management Applications184
- Using SNMP Tools to Manage the Switch184
- SNMP Notifications194
- Hardware Events and Traps207
- Configuring the MAC Address Count Option211
  - Displaying Information about the Mac-Count-Notify Option212
- Advanced Management: RMON213
- CLI-Configured Sflow with Multiple Instances213
  - Configuring Sflow (CLI)213
  - Viewing Sflow Configuration and Status (CLI)214
- Configuring UDLD Verify before Forwarding215
- Lldp218
Chapter 8 Dhcpv4 Server257
- Overview257
- IP Pools257
- DHCP Options257
- Bootp Support257
- Authoritative Server and Support for DHCP Inform Packets257
- Authoritative Pools258
- Authoritative Dummy Pools258
- Change in Server Behavior258
- Dhcpv4 Configuration Commands259
- Show Commands269
  - Show Dhcp-Server269
- Event Log270
  - Event Log Messages270
Chapter 9 Dhcpv6 Server273
- Dhcpv6 Hardware Address273
- Dhcpv6 Snooping and Relay273
- Show Commands for Dhcpv6-Snooping282
- Dhcpv6 Event Log287
- Dhcpv6 Event Messages291
Chapter 10 Zero Touch Provisioning with Airwave and Central293
- ZTP with Airwave293
- Ipsec for Airwave Connectivity314
- ZTP with Aruba Central324
- HTTP Proxy Support with ZTP Overview336
Chapter 11 File Transfers344
- Overview344
- Downloading Switch Software344
- Copying Software Images356
  - TFTP: Copying a Software Image to a Remote Host (CLI)356
  - Xmodem: Copying a Software Image from the Switch to a Serially Connected PC or UNIX Workstation (CLI)357
- Copying Diagnostic Data357
  - Copy Command-Log357
  - Copy Event-Log357
- Transferring Switch Configurations358
- Transferring ACL Command Files362
  - TFTP: Uploading an ACL Command File from a TFTP Server (CLI)362
  - Xmodem: Uploading an ACL Command File from a Serially Connected PC or UNIX Workstation (CLI)363
- Single Copy Command363
- Flight Data Recorder (FDR)368
- Usb369
Chapter 12 Monitoring and Analyzing Switch Operation373
- Overview373
- Switch and Network Operations373
- Status and Counters Data374
  - Show System374
    - Chassislocate375
    - Chassislocate at Startup376
  - General System Information377
    - Accessing System Information (CLI)377
  - Collecting Processor Data with the Task Monitor (CLI)378
    - Task-Monitor Cpu378
  - Switch Management Address Information Access379
    - Show Management379
  - Component Information Views379
    - Show Modules379
  - Task Usage Reporting380
  - Switch Management Address Information383
    - Accessing Switch Management Address Information (CLI)383
    - Overview of MAC Address Management383
  - Port Status385
    - Viewing Port and Trunk Group Statistics (Webagent)385
    - Viewing Port Status (CLI)385
  - Port and Trunk Group Statistics and Flow Control Status386
  - Accessing Port and Trunk Group Statistics (CLI)386
  - Displaying Trunk Load Balancing Statistics386
  - Clearing Trunk Load Balancing Statistics387
  - Resetting the Port Counters387
- Viewing the Switch's MAC Address Tables387
  - Accessing MAC Address Views and Searches (CLI)388
- Accessing MSTP Data (CLI)388
- Viewing Internet IGMP Status (CLI)389
- Viewing VLAN Information (CLI)390
- Webagent Status Information392
- Compatibility Mode for V2 Zl and Zl Modules392
  - Allow-V1-Modules392
- Port Status393
  - Show Interfaces Brief393
- Accessing Port and Trunk Group Statistics393
  - Trunk Bandwidth Utilization393
  - Reset Port Counters397
    - Clear Statistics397
- MAC Address Tables398
  - MAC Address Views and Searches398
  - Show Spanning-Tree401
- IP IGMP Status402
  - Show Ip Igmp402
- VLAN Information404
- Show Vlan404
- Configuring Local Mirroring405
  - Local Mirroring Sessions406
  - Traffic-Direction Criteria406
    - Interface Monitor All406
  - Mirror Policy for Inbound Traffic406
    - Class [Ipv4|Ipv6]407
    - Policy Mirror407
  - MAC-Based Criteria to Select Traffic407
    - Monitor Mac407
- Remote Mirroring Destination on a Remote Switch408
- Remote Mirroring Destination on a Local Switch408
  - Mirror Remote Ip408
- Local Mirroring Destination on the Local Switch408
  - Mirror Port408
- Monitored Traffic408
  - Interface408
  - Monitor All408
  - Service-Policy409
- Destination Mirror on a Remote Switch409
  - Mirror Endpoint409
- Source Mirror on the Local Switch409
  - Mirror Remote Ip409
- Traffic-Direction Criteria409
- Configure ACL Criteria to Select Inbound410
  - Interface Monitor Ip Access-Group410
- Configuring a Destination Switch in a Remote Mirroring Session410
- Configuring a Source Switch in a Local Mirroring Session411
- Configuring a Source Switch in a Remote Mirroring Session411
- Selecting All Traffic on a Port Interface for Mirroring According to Traffic Direction412
- Selecting All Traffic on a VLAN Interface for Mirroring According to Traffic Direction413
- Configuring a MAC Address to Filter Mirrored Traffic on an Interface414
- Configuring Classifier-Based Mirroring415
  - Applying a Mirroring Policy on a Port or VLAN Interface417
- Viewing a Classifier-Based Mirroring Configuration417
- Viewing All Mirroring Session Configured on the Switch418
- Viewing the Remote Endpoints Configured on the Switch418
- Viewing the Mirroring Configuration for a Specific Session419
- Viewing a Remote Mirroring Session420
- Viewing a MAC-Based Mirroring Session421
- Viewing a Local Mirroring Session421
- Viewing Information on a Classifier-Based Mirroring Session422
- Viewing Information about a Classifier-Based Mirroring Configuration422
- Viewing Information about a Classifier-Based Mirroring Configuration423
- Viewing Resource Usage for Mirroring Policies423
- Viewing the Mirroring Configurations in the Running Configuration File424
- Compatibility Mode424
- Traffic Mirroring Overview425
  - Mirroring Overview425
  - Mirroring Destinations426
  - Mirroring Sources and Sessions426
  - Mirroring Sessions426
    - Mirroring Session Limits427
    - Selecting Mirrored Traffic427
  - Mirrored Traffic Destinations427
    - Local Destinations428
    - Remote Destinations428
  - Monitored Traffic Sources428
  - Criteria for Selecting Mirrored Traffic428
  - Mirroring Configuration428
  - Remote Mirroring Endpoint and Intermediate Devices429
- Remote Mirroring Overview429
  - Quick Reference to Remote Mirroring Setup430
- High-Level Overview of the Mirror Configuration Process430
  - Determine the Mirroring Session and Destination430
    - For a Local Mirroring Session430
    - For a Remote Mirroring Session430
  - Configure a Mirroring Destination on a Remote Switch431
    - Configure a Destination Switch in a Remote Mirroring Session431
  - Configure a Mirroring Session on the Source Switch431
    - Configure a Source Switch in a Remote Mirroring Session431
  - Configure the Monitored Traffic in a Mirror Session432
    - Mirroring-Source Restrictions432
    - Traffic Selection Options432
- About Selecting All Inbound/Outbound Traffic to Mirror433
  - Untagged Mirrored Packets433
    - About Using SNMP to Configure No-Tag-Added433
    - Operating Notes434
  - About Selecting Inbound/Outbound Traffic Using a MAC Address434
    - About Selecting Inbound Traffic Using Advanced Classifier-Based Mirroring435
  - Classifier-Based Mirroring Configuration436
  - Maximum Supported Frame Size443
    - Enabling Jumbo Frames to Increase the Mirroring Path MTU444
  - Effect of Downstream VLAN Tagging on Untagged, Mirrored Traffic444
    - Operating Notes for Traffic Mirroring445
  - Troubleshooting Traffic Mirroring446
  - Interface Monitoring Features447
  - Fans449
Chapter 13 Troubleshooting458
- Overview458
- Troubleshooting Approaches458
- Browser or Telnet Access Problems459
  - Cannot Access the Webagent459
  - Cannot Telnet into the Switch Console from a Station on the Network459
- Unusual Network Activity460
  - General Problems460
  - 802.1Q Prioritization Problems461
    - Ports Configured for Non-Default Prioritization (Level 1 to 7) Are Not Performing the Specified Action461
  - Addressing ACL Problems461
  - IGMP-Related Problems464
    - IP Multicast (IGMP) Traffic that Is Directed by IGMP Does Not Reach IGMP Hosts or a Multicast Router Connected to a Port464
    - IP Multicast Traffic Floods out All Ports; IGMP Does Not Appear to Filter Traffic464
  - LACP-Related Problems464
    - Unable to Enable LACP on a Port with the Interface <Port-Number> Lacp Command465
  - Port-Based Access Control (802.1X)-Related Problems465
- The Switch Does Not Receive a Response to RADIUS Authentication Requests465
- The Switch Does Not Authenticate a Client Even Though the RADIUS Server Is Properly Configured and Providing a Response to the Authentication Request465
- During RADIUS-Authenticated Client Sessions, Access to a VLAN on the Port Used for the Client Sessions Is Lost465
- The Switch Appears to be Properly Configured as a Supplicant, but Cannot Gain Access to the Intended Authenticator Port on the Switch to Which It Is Connected466
- The Supplicant Statistics Listing Shows Multiple Ports with the same Authenticator MAC Address466
- The Show Port-Access Authenticator <Port-List> Command Shows One or more Ports Remain Open after They Have Been Configured with Control Unauthorized466
- RADIUS Server Fails to Respond to a Request for Service, Even Though the Server's IP Address Is Correctly Configured in the Switch466
- Authenticator <Port-List> Initialize467
- A Trunked Port Configured for 802.1X Is Blocked467
- Qos-Related Problems467
  - Loss of Communication When Using VLAN-Tagged Traffic467
- Radius-Related Problems467
  - The Switch Does Not Receive a Response to RADIUS Authentication Requests467
  - RADIUS Server Fails to Respond to a Request for Service, Even Though the Server's IP Address Is Correctly Configured in the Switch468
- MSTP and Fast-Uplink Problems468
  - Broadcast Storms Appearing in the Network468
  - STP Blocks a Link in a VLAN Even Though There Are no Redundant Links in that VLAN468
  - Fast-Uplink Troubleshooting469
- SSH-Related Problems469
  - Switch Access Refused to a Client469
  - Executing IP SSH Does Not Enable SSH on the Switch469
  - Switch Does Not Detect a Client's Public Key that Does Appear in the Switch's Public Key File (Show Ip Client-Public-Key)469
  - An Attempt to Copy a Client Public-Key File into the Switch Has Failed and the Switch Lists One of the Following Messages469
  - Client Ceases to Respond ("Hangs") During Connection Phase470
- TACACS-Related Problems470
- Event Log470
  - All Users Are Locked out of Access to the Switch470
  - No Communication between the Switch and the TACACS+ Server Application470
  - Access Is Denied Even Though the Username/Password Pair Is Correct471
  - Unknown Users Allowed to Login to the Switch471
  - System Allows Fewer Login Attempts than Specified in the Switch Configuration471
- Timep, SNTP, or Gateway Problems471
  - The Switch Cannot Find the Time Server or the Configured Gateway471
- VLAN-Related Problems471
  - Monitor Port471
  - None of the Devices Assigned to One or more Vlans on an 802.1Q-Compliant Switch Are Being Recognized472
  - Link Configured for Multiple Vlans Does Not Support Traffic for One or more Vlans472
  - Duplicate MAC Addresses Across Vlans472
  - Disabled Overlapping Subnet Configuration473
- Fan Failure474
- Mitigating Flapping Transceivers474
  - Fault-Finder Link-Flap475
  - Show Fault-Finder Link-Flap477
  - Event Log478
    - Restrictions478
- Viewing Transceiver Information478
  - Viewing Information about Transceivers (CLI)480
  - MIB Support480
  - Viewing Transceiver Information480
    - Information Displayed with the Detail Parameter481
- Viewing Transceiver Information for Copper Transceivers with VCT Support485
  - Testing the Cable485
- Viewing Transceiver Information487
- Using the Event Log for Troubleshooting Switch Problems488
  - Event Log Entries489
  - Using the CLI500
  - Clearing Event Log Entries501
  - Turning Event Numbering on501
  - Using Log Throttling to Reduce Duplicate Event Log and SNMP Messages502
    - Log Throttle Periods502
    - Example: of Event Counter Operation503
  - Reporting Information about Changes to the Running Configuration504
- Debug/Syslog Operation504
  - Debug/Syslog Messaging504
  - Hostname in Syslog Messages505
  - Debug/Syslog Destination Devices509
  - Debug/Syslog Configuration Commands510
  - Configuring Debug/Syslog Operation513
    - Viewing a Debug/Syslog Configuration515
  - Debug Command517
    - Debug Messages517
    - Debug Destinations519
  - Logging Command520
    - Configuring a Syslog Server521
  - Adding a Description for a Syslog Server523
  - Adding a Priority Description524
  - Configuring the Severity Level for Event Log Messages Sent to a Syslog Server524
    - Configuring the System Module Used to Select the Event Log Messages Sent to a Syslog Server525
  - Enabling Local Command Logging525
  - Operating Notes for Debug and Syslog526
- Diagnostic Tools527
  - Port Auto-Negotiation527
  - Ping and Link Tests527
  - Ping Test527
  - Link Test527
  - Tracing the Route from the Switch to a Host Address530
- Viewing Switch Configuration and Operation533
  - Viewing the Startup or Running Configuration File533
  - Viewing the Configuration File (Webagent)534
  - Viewing a Summary of Switch Operational Data534
  - Restoring the Factory-Default Configuration541
  - Restoring a Flash Image542
    - Recovering from an Empty or Corrupted Flash State542
  - DNS Resolver544
  - Locating a Switch (Locator LED)550
Chapter 14 Job Scheduler551
- Job Scheduler551
- Commands551
Chapter 15 Configuration Backup and Restore Without Reboot554
- Overview554
  - Benefits of Configuration Restore Without Reboot554
- Recommended Scenarios554
- Use Cases554
  - Switching to a New Configuration555
  - Rolling Back to a Stable Configuration Using Job Scheduler556
- Commands Used in Switch Configuration Restore Without Reboot557
- Configuration Backup557
  - Cfg-Backup558
  - Show Config Files558
- Configuration Restore Without Reboot560
- Show Commands to Show the SHA of a Configuration574
  - Show Hash574
- Scenarios that Block the Configuration Restoration Process575
- Troubleshooting and Support575
  - Debug Cfg-Restore575
Chapter 16 Virtual Technician577
- Cisco Discovery Protocol (CDP)577
- Enable/Disable Debug Tracing for MOCANA Code578
  - Debug Security578
- User Diagnostic Crash Via Front Panel Security (FPS) Button579
- User Initiated Diagnostic Crash Via the Serial Console584
Chapter 17 IP Service Level Agreement586
- Overview586
- How IP SLA Works588
- Configuration Commands588
- Show Commands593
- Clear Ip-Sla Responder Statistics600
- Validation Rules601
- Event Log Messages603
- Interoperability604
- IP SLA UDP Jitter and Jitter for Voip604
Chapter 18 Dynamic Segmentation608
- Definition of Terms608
- Overview608
- Benefits of Dynamic Segmentation609
- Use Cases609
- Users/Devices and Policy Enforcement Recommendations611
- Colorless Ports612
- Port-Based Tunneling612
- User-Based Tunneling620
- PAPI Security638
- Frequently Asked Questions640
Chapter 19 Cable Diagnostics643
- Virtual Cable Testing643
- Cable Diagnostics643
- Show Cable-Diagnostics646
- Clear Cable-Diagnostics646
- Limitations646
Chapter 20 Virtual Switching Framework (VSF)648
- List of Abbreviated Terms648
- Overview of VSF648
- Benefits of VSF650
- VSF Domain ID651
- VSF Link651
- Physical VSF Ports651
- VSF Member ID651
- Interface Naming Conventions652
- VSF Member Roles652
- Member Priority652
- Supported Topologies653
- Running-Configuration Synchronization654
- VSF Split655
- VSF Merge655
- VSF Commands655
Chapter 21 Simplifying Wireless and Iot Deployments713
- Overview713
- Auto Configuring Aruba Aps713
  - Associating a Device with a Profile713
  - Show Device-Profile716
- Auto Configuring Iot Devices720
- Isolating Rogue Aps724
- Requirements728
- Limitations728
- Feature Interactions729
- Troubleshooting730
- Dynamic Configuration Not Displayed When Using "Show Running-Config730
  - The Show Run Command Displays Non-Numerical Value for Untagged-Vlan730
  - Show Commands731
Chapter 22 Network Out-Of-Band Management (OOBM)732
- OOBM Concepts732
  - OOBM and Switch Applications733
  - Example733
- OOBM Configuration734
- OOBM Show Commands739
- Application Server Commands743
- Application Client Commands743
Chapter 23 Websites746
Chapter 24 Support and Other Resources747
- Accessing Hewlett Packard Enterprise Support747
- Accessing Updates747
- Customer Self Repair748
- Remote Support748
- Warranty Information748
- Regulatory Information749
- Documentation Feedback749
LACP-MAD Passthrough750
- Aruba 2930F / 2930M Management and Configuration Guide750
- Overview750
- LACP-MAD Passthrough Commands750
Remote Device Deployment (TR-069)752
- Introduction752
- CLI Commands756
- Event Logging761
  - System Logging761
  - Status/Control Commands762
Configuration Backup and Restore Without Reboot764
- Limitations766
  - Blocking of Configuration from Other Sessions766
Smart Rate Technology767
- Show Smart Rate Port767
  - Rate-Limiting - GMB Features When Fast-Connect Smartrate Ports Are Configured768
  - Error Messages769
- Speed-Duplex769
  - Limitations on 5Gbps Ports769
  - Error Messages770
- 100 Mbps Support on Smart Rate Ports770
Glossary774

Brand	HP
Model	Aruba JL253A
Category	Switch
Language	English

HP Aruba JL253A User Manual

Table of Contents

Questions and Answers:

HP Aruba JL253A Specifications

Related product manuals