Loading, please wait ...
- Home
- About this guide
- Time Protocols
- General steps for running a time protocol on the switch
- Selecting a time synchronization protocol
- Disabling time synchronization
- TimeP: Selecting and configuring
- SNTP: Selecting and configuring
- Viewing and configuring SNTP (CLI)
- SNTP client authentication
- Requirements
- Configuring the key-identifier, authentication mode, and key-value (CLI)
- Configuring a trusted key
- Associating a key with an SNTP server (CLI)
- Enabling SNTP client authentication
- Configuring unicast and broadcast mode for authentication
- Viewing SNTP authentication configuration information (CLI)
- Saving configuration files and the include-credentials command
- SNTP unicast time polling with multiple SNTP servers
- SNTP messages in the Event Log
- Network Time Protocol (NTP)
- Precision Time Protocol (PTP)
- Monitoring resources
- Port Status and Configuration
- Viewing port status and configuring port parameters
- Connecting transceivers to fixed-configuration devices
- Viewing port status and configuration (CLI)
- Customizing the show interfaces command (CLI)
- show interface smartrate
- Viewing port utilization statistics (CLI)
- Viewing transceiver status (CLI)
- Enabling or disabling ports and configuring port mode (CLI)
- Enabling or disabling flow control (CLI)
- Port shutdown with broadcast storm
- Multicast Storm Control
- Configuring auto-MDIX
- Using friendly (optional) port names
- Uni-directional link detection (UDLD)
- Uplink Failure Detection
- Basic USB port commands
- Viewing port status and configuring port parameters
- Power Over Ethernet (PoE/PoE+) Operation
- Port Trunking
- Overview of port trunking
- Port trunk features and operation
- Trunk configuration methods
- Viewing and configuring port trunk groups (CLI)
- Viewing static trunk type and group for all ports or for selected ports
- Viewing static LACP and dynamic LACP trunk data
- Dynamic LACP Standby Links
- Configuring a static trunk or static LACP trunk group
- Removing ports from a static trunk group
- Enabling a dynamic LACP trunk group
- Removing ports from a dynamic LACP trunk group
- Specifying Minimum Active Links for LACP
- Viewing existing port trunk groups (WebAgent)
- Trunk group operation using LACP
- Default port operation
- LACP notes and restrictions
- 802.1X (Port-based access control) configured on a port
- Port security configured on a port
- Changing trunking methods
- Static LACP trunks
- Dynamic LACP trunks
- VLANs and dynamic LACP
- Blocked ports with older devices
- Spanning Tree and IGMP
- Half-duplex, different port speeds, or both not allowed in LACP trunks
- Dynamic/static LACP interoperation
- Trunk group operation using the "trunk" option
- How the switch lists trunk data
- Outbound traffic distribution across trunked links
- Trunk load balancing using port layers
- Port Traffic Controls
- Rate-limiting
- ICMP rate-limiting
- Guidelines for configuring ICMP rate-limiting
- Configuring ICMP rate-limiting
- Using both ICMP rate-limiting and all-traffic rate-limiting on the same interface
- Viewing the current ICMP rate-limit configuration
- Operating notes for ICMP rate-limiting
- ICMP rate-limiting trap and Event Log messages
- Configuring inbound rate-limiting for broadcast and multicast traffic
- Guaranteed minimum bandwidth (GMB)
- Rate-limiting Unknown Unicast Traffic
- Jumbo frames
- Fault Finder
- Configuring for Network Management Applications
- Using SNMP tools to manage the switch
- SNMP management features
- SNMPv1 and v2c access to the switch
- SNMPv3 access to the switch
- Enabling and disabling switch for access from SNMPv3 agents
- Enabling or disabling restrictions to access from only SNMPv3 agents
- Enabling or disabling restrictions from all non-SNMPv3 agents to read-only access
- Viewing the operating status of SNMPv3
- Viewing status of message reception of non-SNMPv3 messages
- Viewing status of write messages of non-SNMPv3 messages
- Enabling SNMPv3
- SNMPv3 users
- Group access levels
- SNMPv3 communities
- Listing community names and values (CLI)
- SNMP notifications
- Supported Notifications
- General steps for configuring SNMP notifications
- SNMPv1 and SNMPv2c Traps
- SNMP trap receivers
- Overview
- SNMP trap when MAC address table changes
- SNMPv2c informs
- Configuring SNMPv3 notifications (CLI)
- Network security notifications
- Enabling Link-Change Traps (CLI)
- Source IP address for SNMP notifications
- Viewing SNMP notification configuration (CLI)
- Hardware events and traps
- Configuring the MAC address count option
- Advanced management: RMON
- CLI-configured sFlow with multiple instances
- Configuring UDLD Verify before forwarding
- LLDP
- General LLDP operation
- Packet boundaries in a network topology
- LLDP operation configuration options
- Enable or disable LLDP on the switch
- Enable or disable LLDP-MED
- Change the frequency of LLDP packet transmission to neighbor devices
- Change the Time-To-Live for LLDP packets sent to neighbors
- Transmit and receive mode
- SNMP notification
- Per-port (outbound) data options
- Remote management address
- Debug logging
- Options for reading LLDP information collected by the switch
- LLDP and LLDP-MED standards compatibility
- LLDP operating rules
- Configuring LLDP operation
- Port VLAN ID TLV support on LLDP
- LLDP-MED (media-endpoint-discovery)
- Viewing switch information available for outbound advertisements
- LLDP Operating Notes
- LLDP and CDP data management
- Configuring CDPv2 for voice transmission
- Filtering CDP information
- Filtering PVID mismatch log messages
- Overview
- Commands
- Show commands
- Using SNMP tools to manage the switch
- DHCPv4 server
- Overview
- IP pools
- DHCP options
- BootP support
- Authoritative server and support for DHCP inform packets
- Authoritative pools
- Authoritative dummy pools
- Change in server behavior
- DHCPv4 configuration commands
- DHCPv4 server
- DHCP address pool name
- DHCP client boot file
- DHCP client default router
- DNS IP servers
- Configure a domain name
- Configure lease time
- NetBIOS WINS servers
- NetBIOS node type
- Subnet and mask
- DHCP server options
- IP address range
- Static bindings
- TFTP server domain name
- Configure the TFTP server address
- Number of ping packets
- Save DHCP server automatic bindings
- DHCP server and SNMP notifications
- Conflict logging on a DHCP server
- Enable the DHCP server on a VLAN
- Clear commands
- Reset all DHCP server and BOOTP counters
- Delete an automatic address binding
- Show commands
- DHCPv6 snooping and relay
- dhcpv6–snooping
- dhcpv6 snooping trust
- dhcpv6–snooping authorized-server
- ddhcpv6–snooping database file
- dhcpv6–snooping max-bindings
- dhcpv6–relay option 79
- snmp-server enable traps dhcpv6-snooping
- clear dhcpv6–snooping stats
- debug security dhcpv6–snooping
- ipv6 source-lockdown ethernet
- ipv6 source-binding
- snmp-server enable traps dyn-ipv6-lockdown
- debug security dynamic-ipv6-lockdown
- Show commands for DHCPv6–snooping
- Zero Touch Provisioning with AirWave and Central
- ZTP with AirWave
- IPsec for AirWave Connectivity
- ZTP with Aruba Central
- HTTP Proxy support with ZTP overview
- File Transfers
- Overview
- Downloading switch software
- General software download rules
- Using TFTP to download software from a server
- Use USB to transfer files to and from the switch
- Using SCP and SFTP
- Enabling SCP and SFTP
- Using Xmodem to download switch software from a PC or UNIX workstation
- Switch-to-switch download
- Using AirWave to update switch software
- Using IMC to update switch software
- Copying software images
- Copying diagnostic data
- Transferring switch configurations
- TFTP: Copying a configuration file to a remote host (CLI)
- TFTP: Copying a configuration file from a remote host (CLI)
- TFTP: Copying a customized command file to a switch (CLI)
- USB: Copying a configuration file to a USB device
- USB: Copying a configuration file from a USB device
- Xmodem: Copying a configuration file to a serially connected PC or UNIX workstation (CLI)
- Xmodem: Copying a configuration file from a serially connected PC or UNIX workstation (CLI)
- Transferring ACL command files
- Single copy command
- Flight Data Recorder (FDR)
- USB
- Monitoring and Analyzing Switch Operation
- Overview
- Switch and network operations
- Status and counters data
- show system
- General system information
- Collecting processor data with the task monitor (CLI)
- Switch management address information access
- Component information views
- Task usage reporting
- Switch management address information
- Port Status
- Port and trunk group statistics and flow control status
- Viewing the switch's MAC address tables
- Accessing MSTP Data (CLI)
- Viewing internet IGMP status (CLI)
- Viewing VLAN information (CLI)
- WebAgent status information
- Compatibility mode for v2 zl and zl modules
- Port status
- Accessing port and trunk group statistics
- MAC address tables
- MSTP data
- IP IGMP status
- VLAN information
- Configuring local mirroring
- Remote mirroring destination on a remote switch
- Remote mirroring destination on a local switch
- Local mirroring destination on the local switch
- Monitored traffic
- Destination mirror on a remote switch
- Source mirror on the local switch
- Traffic-direction criteria
- Configure ACL criteria to select inbound
- Configuring a destination switch in a remote mirroring session
- Configuring a source switch in a local mirroring session
- Configuring a source switch in a remote mirroring session
- Selecting all traffic on a port interface for mirroring according to traffic direction
- Selecting all traffic on a VLAN interface for mirroring according to traffic direction
- Configuring a MAC address to filter mirrored traffic on an interface
- Configuring classifier-based mirroring
- Viewing a classifier-based mirroring configuration
- Viewing all mirroring session configured on the switch
- Viewing the remote endpoints configured on the switch
- Viewing the mirroring configuration for a specific session
- Viewing a remote mirroring session
- Viewing a MAC-based mirroring session
- Viewing a local mirroring session
- Viewing information on a classifier-based mirroring session
- Viewing information about a classifier-based mirroring with classname configuration
- Viewing information about a classifier-based mirroring with policy-name configuration
- Viewing resource usage for mirroring policies
- Viewing the mirroring configurations in the running configuration file
- Compatibility mode
- Traffic mirroring overview
- Remote mirroring overview
- High-level overview of the mirror configuration process
- About selecting all inbound/outbound traffic to mirror
- Classifier-based mirroring configuration
- Maximum supported frame size
- Effect of downstream VLAN tagging on untagged, mirrored traffic
- Troubleshooting traffic mirroring
- Interface monitoring features
- Show Aruba Switch Memory
- Fans
- Troubleshooting
- Overview
- Troubleshooting approaches
- Browser or Telnet access problems
- Unusual network activity
- General problems
- 802.1Q Prioritization problems
- Addressing ACL problems
- ACLs are properly configured and assigned to VLANs, but the switch is not using the ACLs to filter IP layer 3 packets
- The switch does not allow management access from a device on the same VLAN
- Error (Invalid input) when entering an IP address
- Apparent failure to log all "deny" matches
- The switch does not allow any routed access from a specific host, group of hosts, or subnet
- The switch is not performing routing functions on a VLAN
- Routing through a gateway on the switch fails
- IGMP-related problems
- LACP-related problems
- Port-based access control (802.1X)-related problems
- The switch does not receive a response to RADIUS authentication requests
- The switch does not authenticate a client even though the RADIUS server is properly configured and providing a response to the authentication request
- During RADIUS-authenticated client sessions, access to a VLAN on the port used for the client sessions is lost
- The switch appears to be properly configured as a supplicant, but cannot gain access to the intended authenticator port on the switch to which it is connected
- The supplicant statistics listing shows multiple ports with the same authenticator MAC address
- The show port-access authenticator <port-list> command shows one or more ports remain open after they have been configured with control unauthorized
- RADIUS server fails to respond to a request for service, even though the server's IP address is correctly configured in the switch
- The authorized MAC address on a port that is configured for both 802.1X and port security either changes or is re-acquired after execution of aaa port-access authenticator <port-list> initialize
- A trunked port configured for 802.1X is blocked
- QoS-related problems
- Radius-related problems
- MSTP and fast-uplink problems
- SSH-related problems
- Switch access refused to a client
- Executing IP SSH does not enable SSH on the switch
- Switch does not detect a client's public key that does appear in the switch's public key file (show ip client-public-key)
- An attempt to copy a client public-key file into the switch has failed and the switch lists one of the following messages
- Client ceases to respond ("hangs") during connection phase
- TACACS-related problems
- All users are locked out of access to the switch
- No communication between the switch and the TACACS+ server application
- Access is denied even though the username/password pair is correct
- Unknown users allowed to login to the switch
- System allows fewer login attempts than specified in the switch configuration
- TimeP, SNTP, or Gateway problems
- VLAN-related problems
- Fan failure
- Mitigating flapping transceivers
- Viewing transceiver information
- Viewing transceiver information for copper transceivers with VCT support
- Viewing transceiver information
- Using the Event Log for troubleshooting switch problems
- Debug/syslog operation
- Debug/syslog messaging
- Hostname in syslog messages
- Debug/syslog destination devices
- Debug/syslog configuration commands
- Configuring debug/syslog operation
- Debug command
- Logging command
- Adding a description for a Syslog server
- Adding a priority description
- Configuring the severity level for Event Log messages sent to a syslog server
- Enabling local command logging
- Operating notes for debug and Syslog
- Diagnostic tools
- Viewing switch configuration and operation
- Restoring the factory-default configuration
- Restoring a flash image
- DNS resolver
- Locating a switch (Locator LED)
- Job Scheduler
- Configuration backup and restore without reboot
- Overview
- Recommended scenarios
- Use cases
- Commands used in switch configuration restore without reboot
- Configuration backup
- Configuration restore without reboot
- Show commands to show the SHA of a configuration
- Scenarios that block the configuration restoration process
- Troubleshooting and support
- Virtual Technician
- IP Service Level Agreement
- Overview
- How IP SLA works
- Configuration commands
- no ip-sla <ID>
- ip-sla <ID> clear
- no ip-sla <ID> history-size
- no ip-sla <ID> icmp-echo
- no ip-sla <ID> udp-echo
- no ip-sla <ID> tcp-connect
- ip-sla <ID> monitor threshold-config
- no ip-sla <ID> monitor packet-loss
- no ip-sla <ID> monitor test-completion
- no ip-sla <ID> schedule
- no ip-sla <ID> tos
- no ip-sla responder
- no ip-sla <ID> udp-jitter
- no ip-sla <ID> udp-jitter-voip
- Show commands
- clear ip-sla responder statistics
- Interoperability
- IP SLA UDP Jitter and Jitter for VoIP
- Dynamic Segmentation
- Definition of Terms
- Overview
- Benefits of Dynamic Segmentation
- Use Cases
- Users/Devices and Policy Enforcement Recommendations
- Colorless Ports
- Port-Based Tunneling
- User-Based Tunneling
- PAPI security
- Frequently Asked Questions
- Cable Diagnostics
- Virtual Switching Framework (VSF)
- List of abbreviated terms
- Overview of VSF
- Benefits of VSF
- VSF domain ID
- VSF link
- Physical VSF ports
- VSF member ID
- Interface naming conventions
- VSF member roles
- Member priority
- Supported topologies
- Running-configuration synchronization
- VSF split
- VSF merge
- VSF commands
- Configuration commands
- Show commands
- show vsf
- show vsf detail
- show vsf link
- show vsf link detail
- show vsf member
- show vsf topology
- show vsf topology detail
- show vsf topology change-history
- show vsf lldp-mad
- show vsf vlan-mad
- show vsf trunk-designated-forwarder
- show cpu
- show power-over-ethernet
- show system information
- show system information vsf member
- show system fans
- show system chassislocate
- show system power-supply
- show uptime
- Support commands
- VSF configuration
- Port speed
- VSF port LED front panel
- VSF port LEDs
- Diagnostic tips for stacking error
- LED 1 and LED 2 display solid green color, whereas, LED 3 displays solid orange
- LED 1 displays slow flash orange, LED 2 displays solid green, whereas, LED 3 displays different colors
- LED 1 displays slow flash orange and LED 2 displays solid green color, whereas, LED 3 displays different colors
- LED 1 and LED 2 display solid green, whereas, LED 3 displays different colors
- Locating LED behavior in stacking system
- VSF restrictions
- VSF Use Cases
- Simplifying Wireless and IoT Deployments
- Network Out-of-Band Management (OOBM)
- OOBM concepts
- OOBM Configuration
- Entering the OOBM configuration context from the general configuration context
- Enabling and disabling OOBM
- Enabling and disabling the OOBM port
- Setting the OOBM port speed
- Configuring an OOBM IPv4 address
- Configuring an OOBM IPv4 default gateway
- Configuring an IPv6 default gateway for OOBM devices
- IPv6 default router preferences
- OOBM show commands
- Application server commands
- Application client commands
- Websites
- Support and other resources
- LACP-MAD Passthrough
- Remote Device Deployment (TR-069)
- Configuration backup and restore without reboot
- Smart Rate Technology
- Glossary