Hewlett Packard Enterprise Aruba 3810

To Next Page

Aruba 3810 / 5400R Management and

Configuration Guide for ArubaOS-

Switch 16.08

Part Number: 5200-5491a

Published: January 2019

Edition: 2

Main Page

Aruba 3810 / 5400R Management and Configuration Guide for ArubaOS-Switch 16.081
Contents3
1 About this guide33
- Applicable products33
- Switch prompts used in this guide33
2 Time synchronization34
- NTP34
  - NTP related commands34
  - FQDN support for NTP servers45
    - FQDN support for NTP servers45
- Elements of time synchronization47
- Time synchronization protocols47
  - timesync48
- Setting a time protocol on the switch48
- The SNTP protocol48
- The TimeP Protocol66
- Disable time synchronization protocols70
- Other time protocol commands75
3 Resource usage79
- Viewing current resource usage79
  - showquos79
- Viewing information on resource usage80
4 Hardware components84
- Services84
- Transceiver status92
  - Operating notes92
  - show interfaces transceivers93
- Configuring the type of a module93
  - module type93
- Clearing the module configuration94
- Configuring transceivers and modules that have not been inserted94
- Power consumption95
  - show system power-supply95
- Fans98
- System boot diagnostics106
5 Port status and configuration110
- Viewing port status and configuration110
  - show interfaces110
- Viewing transceiver information112
- The port VLAN tagged status113
- Dynamically updating the show interfaces command114
  - command name114
- Customizing the show interfaces command115
- Enabling or disabling ports and configuring port mode117
  - interface117
- Basic USB port commands118
  - usb-port119
  - show usb-port119
- Enabling or disabling flow control119
  - interface flow-control120
- Configuring auto-MDIX121
- Configuring friendly port names123
- Listing all ports or selected ports with their friendly port names124
- Configuring uni-directional link detection127
- Port status and Port parameters131
  - Connecting transceivers to fixed-configuration devices131
  - Error messages associated with the show interfaces command133
    - Using pattern matching with the show interfaces custom command134
- Auto-MDIX configurations134
  - Manual override134
- About using friendly port names135
  - Configuring and operating rules for friendly port names135
- Uni-directional link detection (UDLD)136
  - Configuring UDLD136
    - Prerequisites137
- Uplink Failure Detection137
- Port Shutdown with Broadcast Storm141
- Multicast Storm Control146
6 Power over ethernet (PoE/PoE+) operation151
- PoE151
  - PoE terminology151
- Planning and implementing a PoE configuration151
  - Power requirements151
  - Assigning PoE ports to VLANs152
  - Applying security features to PoE configurations152
  - Assigning priority policies to PoE traffic152
- PoE operation152
  - PoE configuration options153
  - PD support153
  - PoE power priority154
    - Assigning PoE priority with two or more modules154
- About configuring PoE154
- Disabling or re-enabling PoE port operation156
  - interface157
- Enabling support for pre-standard devices157
  - power-over-ethernet157
- Configuring the PoE port priority157
  - interface157
- Controlling PoE allocation158
  - int158
- Manually configuring PoE power levels159
  - Detection status: fault160
- Configuring PoE redundancy (chassis switches only)160
  - power-over-ethernet redundancy160
- Changing the threshold for generating a power notice161
  - power-over-ethernet slot161
- Enabling or disabling ports for allocating power using LLDP161
  - int poe-lldp-detect161
- Enabling PoE detection via LLDP TLV advertisement162
  - lldp config162
- Negotiating power using the DLL162
  - int poe-lldp-detect162
- Initiating advertisement of PoE+ TLVs164
  - lldp config164
  - Temporary PoE+ power drop164
- Viewing PoE when using LLDP information165
  - show lldp config165
- Viewing the global PoE power status of the switch167
  - show power-over-ethernet167
- Viewing PoE status on all ports168
  - show power-over-ethernet169
- Viewing the PoE status on specific ports170
  - show power-over-ethernet170
- Configuring thresholds for generating a power notice173
- PoE/PoE+ allocation using LLDP173
  - LLDP with PoE173
  - LLDP with PoE+173
    - PoE+ with LLDP Overview173
    - PoE allocation174
  - Operation note174
7 Port trunking175
- Port trunking overview175
  - Port trunk connections and configuration175
- Viewing and configuring port trunk groups176
- Viewing and configuring a static trunk group (Menu)183
- Enable L4-based trunk load balancing185
  - trunk-load-balance185
- Viewing trunk load balancing186
  - show trunks186
  - Operating notes187
- Distributed trunking187
- Port trunk operations191
  - Fault tolerance191
- Trunk configuration methods191
- Trunk group operation using LACP200
  - Default port operation202
  - LACP operating notes and restrictions204
- Trunk group operation using the "trunk" option206
- Viewing trunk data on the switch207
- Outbound traffic distribution across trunked links207
- Trunk load balancing using Layer 4 ports208
- Distributed trunking overview208
  - Distributed trunking interconnect protocol210
  - Configuring distributed trunking210
- Configuring peer-keepalive links211
- Updating software versions with DT218
8 Port Traffic Controls221
- ICMP rate-limiting221
- Guaranteed minimum bandwidth (GMB)228
  - GMB operation228
  - GMB operating notes233
    - Impact of QoS queue configuration on GMB commands233
- Rate-limiting Unknown Unicast Traffic233
- Jumbo frames236
- Fault Finder242
  - Fault Finder thresholds243
  - Enabling Fault Finder243
9 Configuring for Network Management Applications247
- Configuring the switch to filter untagged traffic247
  - ignore-untagged-mac247
- Viewing configuration file change information247
  - show running-config247
- Minimal interval for successive data change notifications249
  - setmib249
- Viewing the current port speed and duplex configuration on a switch port249
  - show interfaces250
- Viewing the configuration251
  - show running-config251
- RMON advanced management251
  - rmon alarm252
- Configuring UDLD verify before forwarding255
- MAC configurations257
- Configuring sFlow261
- Configuring SNMP266
- CDP configuration301
- LLDP configuration306
- Overview342
- Commands342
  - [no] lldp config basicTlvEnable management_addr342
  - lldp config343
- Show commands343
- TVL configuration344
- Generic header ID in configuration file347
10 DHCPv4 server349
- Overview349
- IP pools349
- DHCP options349
- BootP support349
- Authoritative server and support for DHCP inform packets349
- Authoritative pools350
- Authoritative dummy pools350
- Change in server behavior350
- DHCPv4 configuration commands351
- Show commands361
  - show dhcp-server361
- Event log362
  - Event Log Messages362
11 DHCPv6 server365
- DHCPv6 hardware address365
- DHCPv6 snooping and relay365
- Show commands for DHCPv6–snooping374
- DHCPv6 event log379
- DHCPv6 event messages383
12 Zero Touch Provisioning with AirWave and Central385
- ZTP with AirWave385
- IPsec for AirWave Connectivity406
- ZTP with Aruba Central416
- HTTP Proxy support with ZTP overview428
13 File transfers436
- File transfer methods436
- TFTP436
- SCP and SFTP447
  - Enabling SCP and SFTP447
  - Using SCP and SFTP447
- Xmodem448
  - Downloading software using Xmodem448
    - Prerequisites449
    - Downloading to Flash449
  - Downloading to primary flash using Xmodem (Menu)450
- USB451
  - Downloading switch software using USB451
    - Enable or disable the USB port451
    - Prerequisites451
  - USB port status451
    - show usb-port451
    - 452
- Switch to Switch452
  - Switch-to-switch download452
- Copying454
- Transferring460
  - Switch configuration transfer461
  - ACL command file transfer465
- Switch software download467
  - Switch software download rules468
    - TFTP download failures468
- Single copy command469
14 Monitoring and Analyzing Switch Operation474
- Switch and network operations474
- Status and counters data474
  - show system474
    - chassislocate475
    - Chassislocate at startup476
  - Collecting processor data with the task monitor477
    - task-monitor cpu477
  - Switch management address information access477
    - show management477
  - Component information views477
    - show modules478
- Compatibility mode for v2 zl and zl modules479
  - allow-v1-modules479
- Port status480
  - show interfaces brief480
- Accessing port and trunk group statistics480
  - Trunk bandwidth utilization480
  - Reset port counters484
    - clear statics484
- MAC address tables485
  - MAC address views and searches485
- MSTP data490
  - show spanning-tree490
- IP IGMP status491
  - show ip igmp491
- VLAN information493
  - show vlan493
- WebAgent status information495
- Configuring local mirroring495
  - Local mirroring sessions496
  - Traffic-direction criteria496
    - interface monitor all496
  - ACL criteria for inbound traffic — deprecated496
    - interface monitor ip497
  - Mirror policy for inbound traffic497
    - class [ipv4|ipv6]497
    - policy mirror497
  - MAC-based criteria to select traffic497
    - monitor mac497
- Remote mirroring destination on a remote switch498
- Remote mirroring destination on a local switch498
  - mirror remote ip498
- Local mirroring destination on the local switch498
  - mirror port498
- Monitored traffic498
  - interface499
  - monitor all499
  - service-policy499
- Configuring local mirroring (Menu)499
- Destination mirror on a remote switch501
  - mirror endpoint501
- Source mirror on the local switch502
  - mirror remote ip502
- Traffic-direction criteria502
- Configure ACL criteria to select inbound502
  - interface monitor ip access-group502
- Mirror policy for inbound traffic502
  - class [ipv4|ipv6]502
  - policy mirror503
- Configuring a destination switch in a remote mirroring session503
- Configuring a source switch in a local mirroring session504
- Configuring a source switch in a remote mirroring session504
- Selecting all traffic on a port interface for mirroring according to traffic direction506
- Selecting all traffic on a VLAN interface for mirroring according to traffic direction507
- Configuring a MAC address to filter mirrored traffic on an interface507
- Configuring classifier-based mirroring508
  - Applying a mirroring policy on a port or VLAN interface510
- Viewing a classifier-based mirroring configuration510
- Viewing all mirroring sessions configured on the switch511
- Viewing the remote endpoints configured on the switch512
- Viewing the mirroring configuration for a specific session513
- Viewing a remote mirroring session514
- Viewing a MAC-based mirroring session515
- Viewing a local mirroring session515
- Viewing information on a classifier-based mirroring session516
- Viewing information about a classifier-based mirroring configuration516
- Viewing information about a classifier-based mirroring configuration517
- Viewing information about statistics on one or more mirroring policies517
- Viewing resource usage for mirroring policies518
- Viewing the mirroring configurations in the running configuration file519
- Compatibility mode520
- Port and trunk group statistics and flow control status521
- Traffic mirroring overview521
  - Mirroring overview521
  - Mirroring destinations522
  - Mirroring sources and sessions522
  - Mirroring sessions522
    - Mirroring session limits523
    - Selecting mirrored traffic523
  - Mirrored traffic destinations523
    - Local destinations523
    - Remote destinations524
  - Monitored traffic sources524
  - Criteria for selecting mirrored traffic524
  - Mirroring configuration524
  - Remote mirroring endpoint and intermediate devices525
  - Migration to release K.12.xx525
  - Migration to release K.14.01 or greater526
- Using the Menu to configure local mirroring526
  - Menu and WebAgent limits526
- Remote mirroring overview527
  - Quick reference to remote mirroring setup527
- High-level overview of the mirror configuration process528
  - Determine the mirroring session and destination528
    - For a local mirroring session528
    - For a remote mirroring session528
  - Configure a mirroring destination on a remote switch528
    - Configure a destination switch in a remote mirroring session529
  - Configure a mirroring session on the source switch529
    - Configure a source switch in a remote mirroring session529
  - Configure the monitored traffic in a mirror session529
    - Traffic selection options529
    - Mirroring-source restrictions530
- About selecting all inbound/outbound traffic to mirror530
  - Untagged mirrored packets530
    - About using SNMP to configure no-tag-added531
    - Operating notes531
  - About selecting inbound traffic using an ACL (deprecated)532
  - About selecting inbound/outbound traffic using a MAC address532
  - About selecting inbound traffic using advanced classifier-based mirroring533
- Classifier-based mirroring configuration534
  - Classifier-based mirroring restrictions536
  - About applying multiple mirroring sessions to an interface537
  - Mirroring configuration examples538
- Maximum supported frame size542
  - Enabling jumbo frames to increase the mirroring path MTU542
- Effect of downstream VLAN tagging on untagged, mirrored traffic543
  - Operating notes for traffic mirroring543
- Troubleshooting traffic mirroring545
15 Virtual Technician546
- Cisco Discovery Protocol (CDP)546
- Enable/Disable debug tracing for MOCANA code547
  - debug security547
- User diagnostic crash via Front Panel Security (FPS) button547
- User initiated diagnostic crash via the serial console553
  - front-panel-security diagnostic-reset serial-console553
  - Serial console error messages554
16 Troubleshooting555
- Overview555
- Troubleshooting approaches555
- Browser or Telnet access problems556
  - Cannot access the WebAgent556
  - Cannot Telnet into the switch console from a station on the network556
- Unusual network activity557
- Viewing transceiver information574
- Using the Event Log for troubleshooting switch problems583
- Debug/syslog operation589
- Diagnostic tools605
- Viewing switch configuration and operation609
- Restoring the factory-default configuration614
  - Resetting to the factory-default configuration614
    - Using the CLI614
    - Using Clear/Reset615
- Restoring a flash image615
  - Recovering from an empty or corrupted flash state615
- DNS resolver617
17 Job Scheduler623
- Job Scheduler623
- Commands623
18 Configuration backup and restore without reboot626
- Overview626
  - Benefits of configuration restore without reboot626
- Recommended scenarios626
- Use cases626
  - Switching to a new configuration627
  - Rolling back to a stable configuration using job scheduler628
- Commands used in switch configuration restore without reboot629
- Configuration backup629
  - cfg-backup630
  - show config files630
- Configuration restore without reboot632
- Show commands to show the SHA of a configuration646
  - show hash646
- Scenarios that block the configuration restoration process647
- Limitations647
  - Blocking of configuration from other sessions647
- Troubleshooting and support648
  - debug cfg-restore648
19 Virtual Switching Framework (VSF)649
- Overview of VSF649
- Benefits of VSF650
- Member roles650
  - Commander650
  - Standby650
- Management module650
- VSF member ID651
- VSF link651
  - vsf member link651
    - Validation rules for VSF member652
- Physical VSF ports653
- VSF domain ID653
- VSF split654
- VSF merge654
- Member priority654
- Interface naming conventions654
- Running-configuration synchronization655
- VSF deployment methods655
  - Discovered configuration mode procedure655
  - Provisioned configuration mode procedure655
- Configuration commands656
  - copy core-dump656
  - copy crash-data656
  - copy crash-files656
  - copy crash-log vsf-member657
  - copy fdr-log657
  - erase fdr-log vsf658
  - power-over-ethernet vsf-member658
  - redundancy switchover659
  - snmp-server enable traps vsf659
    - Validation rules659
  - vsf domain659
    - Validation rules659
  - vsf enable659
    - vsf disable660
    - Validation rules660
  - vsf member reboot660
  - vsf member remove661
    - Validation rules661
  - vsf member shutdown662
    - Validation rules662
  - vsf member priority663
  - vsf member type663
    - Validation rules664
- Show commands664
  - show vsf664
    - Validation rules665
  - show vsf link665
  - show vsf member666
  - show system information vsf member667
  - show system chassislocate668
  - show boot-history669
  - show system temperature669
  - show system fans670
  - show CPU671
  - show CPU process slot672
  - show modules673
  - show power-over-ethernet675
  - show system power-supply676
- OOBM-MAD commands680
  - vsf oobm-mad680
    - Validation rules680
  - oobm vsf member680
  - oobm vsf member interface speed-duplex681
  - show oobm vsf member682
  - show oobm ip682
  - show oobm discovery683
  - show running-config oobm684
    - show vsf trunk-designated-forwarder684
    - Validation rules685
- LLDP-MAD685
  - VSF split and MAD operation685
  - MAD readiness check686
  - vsf lldp-mad ipv4686
    - Validation rules687
  - show vsf lldp-mad687
  - VSF re-join after a split688
  - Mad assist device requirements688
  - Limitations of MAD688
- VSF restrictions688
- Updates for a VSF virtual chassis688
- VSF Fast Software Upgrade688
  - Upgrading the VSF stack software689
    - vsf sequenced-reboot689
20 Simplifying Wireless and IoT Deployments691
- Overview691
- Auto configuring Aruba APs691
  - Associating a device with a profile691
  - show device-profile694
- Auto configuring IoT Devices698
- Isolating Rogue APs702
- Requirements706
- Limitations706
- Feature Interactions707
- Troubleshooting708
21 IP Service Level Agreement710
- Overview710
- How IP SLA works712
- Configuration commands712
- Show commands717
- clear ip-sla responder statistics724
- Validation rules724
- Event log messages727
- Interoperability728
- IP SLA UDP Jitter and Jitter for VoIP728
22 Dynamic Segmentation732
- Definition of Terms732
- Overview732
- Benefits of Dynamic Segmentation733
- Use Cases733
- Users/Devices and Policy Enforcement Recommendations735
- Colorless Ports736
- Port-Based Tunneling736
- User-Based Tunneling744
- PAPI security762
- Frequently Asked Questions764
23 Cable Diagnostics767
- Virtual cable testing767
- Cable Diagnostics767
- show cable-diagnostics770
- clear cable-diagnostics770
- Limitations770
24 Monitoring Static IP Devices772
- ip client-tracker772
- ip client-tracker probe-delay774
25 Network Out-of-Band Management (OOBM)775
- OOBM concepts775
  - OOBM and switch applications776
  - Example776
- OOBM Configuration777
- OOBM show commands782
- Application server commands786
- Application client commands786
26 Websites789
27 Support and other resources790
- Accessing Hewlett Packard Enterprise Support790
- Accessing updates790
- Customer self repair791
- Remote support791
- Warranty information791
- Regulatory information792
- Documentation feedback792
A Chassis Redundancy (5400R Switches)793
- Overview of chassis management redundancy793
  - Nonstop switching with redundant management modules793
  - How the management modules interact793
- About using redundant management793
  - Transition from no redundancy to nonstop switching794
  - About setting the rapid switchover stale timer794
  - About directing the standby module to become active794
- Preferred management module794
  - redundancy active-management795
  - redundancy preferred-active-management796
  - show redunancy797
- Determining active module798
  - Diagram of the decision process799
- Hotswapping management modules799
  - Hotswapping out the active management module800
  - Management module switchover800
  - Software version mismatch between active and hotswapped module802
  - Other software version mismatch conditions802
- About turning off redundant management803
  - Disable management module redundancy with two modules present803
  - Disable management module redundancy with only one module present804
- Active management module commands804
  - Viewing modules804
  - Syncing commands804
- Using the WebAgent for redundant management805
- Enabling or disabling redundant management806
- Transitioning from no redundancy to nonstop switching809
  - Setting the Rapid Switchover Stale Timer809
- Directing the standby module to become active810
  - Directing the standby module to become active811
- Setting the active management module for next boot812
- Resetting the management module814
- Viewing management information815
  - Viewing information about the management and fabric modules816
  - Viewing information about the redundancy role of each management module816
  - Viewing which software version is in each flash image817
  - Viewing system software image information for both management modules817
  - Viewing the status of the switch and its management modules818
- Standby management module commands818
  - Viewing redundancy status on the standby module818
  - Viewing the flash information on the standby module819
  - Viewing the version information on the standby module819
- Setting the default flash for boot820
  - Booting the active management module from the current default flash820
  - boot command821
  - Boot and reload commands with OSPFv2 or OSPFv3 enabled823
    - Modules operating in nonstop mode823
    - Additional commands affected by redundant management823
- Displaying module events825
  - Viewing log events825
  - Copying crash file information to another file826
  - Viewing saved crash information827
- Enabling and disabling fabric modules827
- Nonstop switching features828
  - Nonstop switching with VRRP828
  - Example nonstop routing configuration829
  - Nonstop forwarding with RIP830
  - Nonstop forwarding with OSPFv2 and OSPFv3830
- About downloading a new software version833
  - File synchronization after downloading833
  - Potential software version mismatches after downloading834
  - Downloading a software version serially if the management module is corrupted835
- Unsupported zl modules835
  - Hot swapping of management modules836
  - Rapid routing switchover and stale timer836
- Task Usage Reporting836
  - Help text836
  - Command tab837
    - process-tracking837
    - show cpu process837
  - Command ouput838
    - show cpu process838
    - show cpu process slot <SLOT-LIST>838
B LACP-MAD Passthrough840
- Overview840
- LACP-MAD Passthrough Configuration840
C Smart Rate Technology842
- Show Smart Rate port842
  - Rate-Limiting — GMB features when Fast-Connect SmartRate ports are configured843
  - Error messages844
- Speed-duplex844
  - Limitations on 5Gbps ports844
  - Error messages845
- 100 Mbps Support on Smart Rate ports845
D Networking 6th Generation Switch ASIC849
- Introduction849
- Commands849
- Version 2 — version 3 blade compatibility on the 5400R switch853
  - Allow V2 command853
    - Validation rules853
    - Show commands853
E MAC Address Management855
- Overview855
- Determining MAC addresses855
- Viewing the MAC addresses of connected devices855
- Viewing the switch's MAC address assignments for VLANs configured on the switch856
  - Viewing the port and VLAN MAC addresses857
F Configuration backup and restore without reboot860

Brand	Hewlett Packard Enterprise
Model	Aruba 3810
Category	Switch
Language	English

Hewlett Packard Enterprise Aruba 3810 - User Manual

Table of Contents

Hewlett Packard Enterprise Aruba 3810 Specifications

Related product manuals