HP Aruba JL253A - Page 372

To Next Page

To Previous Page

If the switch detects an illegal (non-ACL) command in the file, it bypasses the illegal command, displays a notice,

and continues to implement the remaining ACL commands in the file.

372 Aruba 2930F / 2930M Management and Configuration Guide

for ArubaOS-Switch 16.08

Main Page

Default Chapter3
- Table of Contents3
Chapter 1 About this Guide26
- Applicable Products26
- Switch Prompts Used in this Guide26
Chapter 2 Time Protocols27
- General Steps for Running a Time Protocol on the Switch27
- Selecting a Time Synchronization Protocol28
- Disabling Time Synchronization29
- Timep: Selecting and Configuring29
  - Viewing the Current Timep Configuration (CLI)29
    - Configuring (Enabling or Disabling) the Timep Mode31
- SNTP: Selecting and Configuring34
  - Viewing and Configuring SNTP (CLI)35
    - Configuring (Enabling or Disabling) the SNTP Mode36
  - SNTP Client Authentication42
- SNTP Unicast Time Polling with Multiple SNTP Servers48
  - Displaying All SNTP Server Addresses Configured on the Switch (CLI)48
  - Adding and Deleting SNTP Server Addresses49
    - Adding Addresses49
    - Deleting Addresses49
- SNTP Messages in the Event Log49
- Network Time Protocol (NTP)49
  - Commands50
    - Timesync Ntp50
- Ntp50
- [No] Ntp50
Chapter 3 Port Status and Configuration69
- Viewing Port Status and Configuring Port Parameters69
- Using Friendly (Optional) Port Names90
- Uni-Directional Link Detection (UDLD)95
  - Configuring UDLD96
  - Viewing UDLD Information (CLI)98
- Uplink Failure Detection99
- Basic USB Port Commands104
  - Usb-Port104
  - Show Usb-Port104
Chapter 4 Power over Ethernet (Poe/Poe+) Operation106
- Introduction to Poe106
  - Poe Terminology106
- Planning and Implementing a Poe Configuration106
- Poe Operation107
- Configuring Poe Operation109
- Poe/Poe+ Allocation Using LLDP Information114
  - LLDP with Poe114
    - Enabling or Disabling Ports for Allocating Power Using LLDP115
    - Enabling Poe Detection Via LLDP TLV Advertisement115
  - LLDP with Poe115
- Viewing the Global Poe Power Status of the Switch118
  - Viewing Poe Status on All Ports119
  - Viewing the Poe Status on Specific Ports121
- 802.3Bt Support122
- Poe Event Log Messages127
Chapter 5 Port Trunking129
- Overview of Port Trunking129
  - Port Connections and Configuration129
- Port Trunk Features and Operation130
  - Fault Tolerance130
- Trunk Configuration Methods130
  - Dynamic LACP Trunk130
    - Using Keys to Control Dynamic LACP Trunk Configuration130
  - Static Trunk131
- Viewing and Configuring Port Trunk Groups (CLI)135
- Viewing Existing Port Trunk Groups (Webagent)142
- Trunk Group Operation Using LACP142
  - Default Port Operation145
  - LACP Notes and Restrictions147
- Trunk Group Operation Using the "Trunk" Option149
- How the Switch Lists Trunk Data149
- Outbound Traffic Distribution Across Trunked Links150
- Trunk Load Balancing Using Port Layers151
  - Enabling Trunk Load Balancing151
Chapter 6 Port Traffic Controls153
- Rate-Limiting153
  - All Traffic Rate-Limiting153
- ICMP Rate-Limiting157
- Guaranteed Minimum Bandwidth (GMB)165
  - GMB Operation165
  - GMB Operating Notes170
    - Impact of Qos Queue Configuration on GMB Commands170
- Rate-Limiting Unknown Unicast Traffic170
- Jumbo Frames173
- Fault Finder178
  - Fault Finder Thresholds179
  - Enabling Fault Finder179
Chapter 7 Configuring for Network Management Applications184
- Using SNMP Tools to Manage the Switch184
- SNMP Notifications194
- Hardware Events and Traps207
- Configuring the MAC Address Count Option211
  - Displaying Information about the Mac-Count-Notify Option212
- Advanced Management: RMON213
- CLI-Configured Sflow with Multiple Instances213
  - Configuring Sflow (CLI)213
  - Viewing Sflow Configuration and Status (CLI)214
- Configuring UDLD Verify before Forwarding215
- Lldp218
Chapter 8 Dhcpv4 Server257
- Overview257
- IP Pools257
- DHCP Options257
- Bootp Support257
- Authoritative Server and Support for DHCP Inform Packets257
- Authoritative Pools258
- Authoritative Dummy Pools258
- Change in Server Behavior258
- Dhcpv4 Configuration Commands259
- Show Commands269
  - Show Dhcp-Server269
- Event Log270
  - Event Log Messages270
Chapter 9 Dhcpv6 Server273
- Dhcpv6 Hardware Address273
- Dhcpv6 Snooping and Relay273
- Show Commands for Dhcpv6-Snooping282
- Dhcpv6 Event Log287
- Dhcpv6 Event Messages291
Chapter 10 Zero Touch Provisioning with Airwave and Central293
- ZTP with Airwave293
- Ipsec for Airwave Connectivity314
- ZTP with Aruba Central324
- HTTP Proxy Support with ZTP Overview336
Chapter 11 File Transfers344
- Overview344
- Downloading Switch Software344
- Copying Software Images356
  - TFTP: Copying a Software Image to a Remote Host (CLI)356
  - Xmodem: Copying a Software Image from the Switch to a Serially Connected PC or UNIX Workstation (CLI)357
- Copying Diagnostic Data357
  - Copy Command-Log357
  - Copy Event-Log357
- Transferring Switch Configurations358
- Transferring ACL Command Files362
  - TFTP: Uploading an ACL Command File from a TFTP Server (CLI)362
  - Xmodem: Uploading an ACL Command File from a Serially Connected PC or UNIX Workstation (CLI)363
- Single Copy Command363
- Flight Data Recorder (FDR)368
- Usb369
Chapter 12 Monitoring and Analyzing Switch Operation373
- Overview373
- Switch and Network Operations373
- Status and Counters Data374
  - Show System374
    - Chassislocate375
    - Chassislocate at Startup376
  - General System Information377
    - Accessing System Information (CLI)377
  - Collecting Processor Data with the Task Monitor (CLI)378
    - Task-Monitor Cpu378
  - Switch Management Address Information Access379
    - Show Management379
  - Component Information Views379
    - Show Modules379
  - Task Usage Reporting380
  - Switch Management Address Information383
    - Accessing Switch Management Address Information (CLI)383
    - Overview of MAC Address Management383
  - Port Status385
    - Viewing Port and Trunk Group Statistics (Webagent)385
    - Viewing Port Status (CLI)385
  - Port and Trunk Group Statistics and Flow Control Status386
  - Accessing Port and Trunk Group Statistics (CLI)386
  - Displaying Trunk Load Balancing Statistics386
  - Clearing Trunk Load Balancing Statistics387
  - Resetting the Port Counters387
- Viewing the Switch's MAC Address Tables387
  - Accessing MAC Address Views and Searches (CLI)388
- Accessing MSTP Data (CLI)388
- Viewing Internet IGMP Status (CLI)389
- Viewing VLAN Information (CLI)390
- Webagent Status Information392
- Compatibility Mode for V2 Zl and Zl Modules392
  - Allow-V1-Modules392
- Port Status393
  - Show Interfaces Brief393
- Accessing Port and Trunk Group Statistics393
  - Trunk Bandwidth Utilization393
  - Reset Port Counters397
    - Clear Statistics397
- MAC Address Tables398
  - MAC Address Views and Searches398
  - Show Spanning-Tree401
- IP IGMP Status402
  - Show Ip Igmp402
- VLAN Information404
- Show Vlan404
- Configuring Local Mirroring405
  - Local Mirroring Sessions406
  - Traffic-Direction Criteria406
    - Interface Monitor All406
  - Mirror Policy for Inbound Traffic406
    - Class [Ipv4|Ipv6]407
    - Policy Mirror407
  - MAC-Based Criteria to Select Traffic407
    - Monitor Mac407
- Remote Mirroring Destination on a Remote Switch408
- Remote Mirroring Destination on a Local Switch408
  - Mirror Remote Ip408
- Local Mirroring Destination on the Local Switch408
  - Mirror Port408
- Monitored Traffic408
  - Interface408
  - Monitor All408
  - Service-Policy409
- Destination Mirror on a Remote Switch409
  - Mirror Endpoint409
- Source Mirror on the Local Switch409
  - Mirror Remote Ip409
- Traffic-Direction Criteria409
- Configure ACL Criteria to Select Inbound410
  - Interface Monitor Ip Access-Group410
- Configuring a Destination Switch in a Remote Mirroring Session410
- Configuring a Source Switch in a Local Mirroring Session411
- Configuring a Source Switch in a Remote Mirroring Session411
- Selecting All Traffic on a Port Interface for Mirroring According to Traffic Direction412
- Selecting All Traffic on a VLAN Interface for Mirroring According to Traffic Direction413
- Configuring a MAC Address to Filter Mirrored Traffic on an Interface414
- Configuring Classifier-Based Mirroring415
  - Applying a Mirroring Policy on a Port or VLAN Interface417
- Viewing a Classifier-Based Mirroring Configuration417
- Viewing All Mirroring Session Configured on the Switch418
- Viewing the Remote Endpoints Configured on the Switch418
- Viewing the Mirroring Configuration for a Specific Session419
- Viewing a Remote Mirroring Session420
- Viewing a MAC-Based Mirroring Session421
- Viewing a Local Mirroring Session421
- Viewing Information on a Classifier-Based Mirroring Session422
- Viewing Information about a Classifier-Based Mirroring Configuration422
- Viewing Information about a Classifier-Based Mirroring Configuration423
- Viewing Resource Usage for Mirroring Policies423
- Viewing the Mirroring Configurations in the Running Configuration File424
- Compatibility Mode424
- Traffic Mirroring Overview425
  - Mirroring Overview425
  - Mirroring Destinations426
  - Mirroring Sources and Sessions426
  - Mirroring Sessions426
    - Mirroring Session Limits427
    - Selecting Mirrored Traffic427
  - Mirrored Traffic Destinations427
    - Local Destinations428
    - Remote Destinations428
  - Monitored Traffic Sources428
  - Criteria for Selecting Mirrored Traffic428
  - Mirroring Configuration428
  - Remote Mirroring Endpoint and Intermediate Devices429
- Remote Mirroring Overview429
  - Quick Reference to Remote Mirroring Setup430
- High-Level Overview of the Mirror Configuration Process430
  - Determine the Mirroring Session and Destination430
    - For a Local Mirroring Session430
    - For a Remote Mirroring Session430
  - Configure a Mirroring Destination on a Remote Switch431
    - Configure a Destination Switch in a Remote Mirroring Session431
  - Configure a Mirroring Session on the Source Switch431
    - Configure a Source Switch in a Remote Mirroring Session431
  - Configure the Monitored Traffic in a Mirror Session432
    - Mirroring-Source Restrictions432
    - Traffic Selection Options432
- About Selecting All Inbound/Outbound Traffic to Mirror433
  - Untagged Mirrored Packets433
    - About Using SNMP to Configure No-Tag-Added433
    - Operating Notes434
  - About Selecting Inbound/Outbound Traffic Using a MAC Address434
    - About Selecting Inbound Traffic Using Advanced Classifier-Based Mirroring435
  - Classifier-Based Mirroring Configuration436
  - Maximum Supported Frame Size443
    - Enabling Jumbo Frames to Increase the Mirroring Path MTU444
  - Effect of Downstream VLAN Tagging on Untagged, Mirrored Traffic444
    - Operating Notes for Traffic Mirroring445
  - Troubleshooting Traffic Mirroring446
  - Interface Monitoring Features447
  - Fans449
Chapter 13 Troubleshooting458
- Overview458
- Troubleshooting Approaches458
- Browser or Telnet Access Problems459
  - Cannot Access the Webagent459
  - Cannot Telnet into the Switch Console from a Station on the Network459
- Unusual Network Activity460
  - General Problems460
  - 802.1Q Prioritization Problems461
    - Ports Configured for Non-Default Prioritization (Level 1 to 7) Are Not Performing the Specified Action461
  - Addressing ACL Problems461
  - IGMP-Related Problems464
    - IP Multicast (IGMP) Traffic that Is Directed by IGMP Does Not Reach IGMP Hosts or a Multicast Router Connected to a Port464
    - IP Multicast Traffic Floods out All Ports; IGMP Does Not Appear to Filter Traffic464
  - LACP-Related Problems464
    - Unable to Enable LACP on a Port with the Interface <Port-Number> Lacp Command465
  - Port-Based Access Control (802.1X)-Related Problems465
- The Switch Does Not Receive a Response to RADIUS Authentication Requests465
- The Switch Does Not Authenticate a Client Even Though the RADIUS Server Is Properly Configured and Providing a Response to the Authentication Request465
- During RADIUS-Authenticated Client Sessions, Access to a VLAN on the Port Used for the Client Sessions Is Lost465
- The Switch Appears to be Properly Configured as a Supplicant, but Cannot Gain Access to the Intended Authenticator Port on the Switch to Which It Is Connected466
- The Supplicant Statistics Listing Shows Multiple Ports with the same Authenticator MAC Address466
- The Show Port-Access Authenticator <Port-List> Command Shows One or more Ports Remain Open after They Have Been Configured with Control Unauthorized466
- RADIUS Server Fails to Respond to a Request for Service, Even Though the Server's IP Address Is Correctly Configured in the Switch466
- Authenticator <Port-List> Initialize467
- A Trunked Port Configured for 802.1X Is Blocked467
- Qos-Related Problems467
  - Loss of Communication When Using VLAN-Tagged Traffic467
- Radius-Related Problems467
  - The Switch Does Not Receive a Response to RADIUS Authentication Requests467
  - RADIUS Server Fails to Respond to a Request for Service, Even Though the Server's IP Address Is Correctly Configured in the Switch468
- MSTP and Fast-Uplink Problems468
  - Broadcast Storms Appearing in the Network468
  - STP Blocks a Link in a VLAN Even Though There Are no Redundant Links in that VLAN468
  - Fast-Uplink Troubleshooting469
- SSH-Related Problems469
  - Switch Access Refused to a Client469
  - Executing IP SSH Does Not Enable SSH on the Switch469
  - Switch Does Not Detect a Client's Public Key that Does Appear in the Switch's Public Key File (Show Ip Client-Public-Key)469
  - An Attempt to Copy a Client Public-Key File into the Switch Has Failed and the Switch Lists One of the Following Messages469
  - Client Ceases to Respond ("Hangs") During Connection Phase470
- TACACS-Related Problems470
- Event Log470
  - All Users Are Locked out of Access to the Switch470
  - No Communication between the Switch and the TACACS+ Server Application470
  - Access Is Denied Even Though the Username/Password Pair Is Correct471
  - Unknown Users Allowed to Login to the Switch471
  - System Allows Fewer Login Attempts than Specified in the Switch Configuration471
- Timep, SNTP, or Gateway Problems471
  - The Switch Cannot Find the Time Server or the Configured Gateway471
- VLAN-Related Problems471
  - Monitor Port471
  - None of the Devices Assigned to One or more Vlans on an 802.1Q-Compliant Switch Are Being Recognized472
  - Link Configured for Multiple Vlans Does Not Support Traffic for One or more Vlans472
  - Duplicate MAC Addresses Across Vlans472
  - Disabled Overlapping Subnet Configuration473
- Fan Failure474
- Mitigating Flapping Transceivers474
  - Fault-Finder Link-Flap475
  - Show Fault-Finder Link-Flap477
  - Event Log478
    - Restrictions478
- Viewing Transceiver Information478
  - Viewing Information about Transceivers (CLI)480
  - MIB Support480
  - Viewing Transceiver Information480
    - Information Displayed with the Detail Parameter481
- Viewing Transceiver Information for Copper Transceivers with VCT Support485
  - Testing the Cable485
- Viewing Transceiver Information487
- Using the Event Log for Troubleshooting Switch Problems488
  - Event Log Entries489
  - Using the CLI500
  - Clearing Event Log Entries501
  - Turning Event Numbering on501
  - Using Log Throttling to Reduce Duplicate Event Log and SNMP Messages502
    - Log Throttle Periods502
    - Example: of Event Counter Operation503
  - Reporting Information about Changes to the Running Configuration504
- Debug/Syslog Operation504
  - Debug/Syslog Messaging504
  - Hostname in Syslog Messages505
  - Debug/Syslog Destination Devices509
  - Debug/Syslog Configuration Commands510
  - Configuring Debug/Syslog Operation513
    - Viewing a Debug/Syslog Configuration515
  - Debug Command517
    - Debug Messages517
    - Debug Destinations519
  - Logging Command520
    - Configuring a Syslog Server521
  - Adding a Description for a Syslog Server523
  - Adding a Priority Description524
  - Configuring the Severity Level for Event Log Messages Sent to a Syslog Server524
    - Configuring the System Module Used to Select the Event Log Messages Sent to a Syslog Server525
  - Enabling Local Command Logging525
  - Operating Notes for Debug and Syslog526
- Diagnostic Tools527
  - Port Auto-Negotiation527
  - Ping and Link Tests527
  - Ping Test527
  - Link Test527
  - Tracing the Route from the Switch to a Host Address530
- Viewing Switch Configuration and Operation533
  - Viewing the Startup or Running Configuration File533
  - Viewing the Configuration File (Webagent)534
  - Viewing a Summary of Switch Operational Data534
  - Restoring the Factory-Default Configuration541
  - Restoring a Flash Image542
    - Recovering from an Empty or Corrupted Flash State542
  - DNS Resolver544
  - Locating a Switch (Locator LED)550
Chapter 14 Job Scheduler551
- Job Scheduler551
- Commands551
Chapter 15 Configuration Backup and Restore Without Reboot554
- Overview554
  - Benefits of Configuration Restore Without Reboot554
- Recommended Scenarios554
- Use Cases554
  - Switching to a New Configuration555
  - Rolling Back to a Stable Configuration Using Job Scheduler556
- Commands Used in Switch Configuration Restore Without Reboot557
- Configuration Backup557
  - Cfg-Backup558
  - Show Config Files558
- Configuration Restore Without Reboot560
- Show Commands to Show the SHA of a Configuration574
  - Show Hash574
- Scenarios that Block the Configuration Restoration Process575
- Troubleshooting and Support575
  - Debug Cfg-Restore575
Chapter 16 Virtual Technician577
- Cisco Discovery Protocol (CDP)577
- Enable/Disable Debug Tracing for MOCANA Code578
  - Debug Security578
- User Diagnostic Crash Via Front Panel Security (FPS) Button579
- User Initiated Diagnostic Crash Via the Serial Console584
Chapter 17 IP Service Level Agreement586
- Overview586
- How IP SLA Works588
- Configuration Commands588
- Show Commands593
- Clear Ip-Sla Responder Statistics600
- Validation Rules601
- Event Log Messages603
- Interoperability604
- IP SLA UDP Jitter and Jitter for Voip604
Chapter 18 Dynamic Segmentation608
- Definition of Terms608
- Overview608
- Benefits of Dynamic Segmentation609
- Use Cases609
- Users/Devices and Policy Enforcement Recommendations611
- Colorless Ports612
- Port-Based Tunneling612
- User-Based Tunneling620
- PAPI Security638
- Frequently Asked Questions640
Chapter 19 Cable Diagnostics643
- Virtual Cable Testing643
- Cable Diagnostics643
- Show Cable-Diagnostics646
- Clear Cable-Diagnostics646
- Limitations646
Chapter 20 Virtual Switching Framework (VSF)648
- List of Abbreviated Terms648
- Overview of VSF648
- Benefits of VSF650
- VSF Domain ID651
- VSF Link651
- Physical VSF Ports651
- VSF Member ID651
- Interface Naming Conventions652
- VSF Member Roles652
- Member Priority652
- Supported Topologies653
- Running-Configuration Synchronization654
- VSF Split655
- VSF Merge655
- VSF Commands655
Chapter 21 Simplifying Wireless and Iot Deployments713
- Overview713
- Auto Configuring Aruba Aps713
  - Associating a Device with a Profile713
  - Show Device-Profile716
- Auto Configuring Iot Devices720
- Isolating Rogue Aps724
- Requirements728
- Limitations728
- Feature Interactions729
- Troubleshooting730
- Dynamic Configuration Not Displayed When Using "Show Running-Config730
  - The Show Run Command Displays Non-Numerical Value for Untagged-Vlan730
  - Show Commands731
Chapter 22 Network Out-Of-Band Management (OOBM)732
- OOBM Concepts732
  - OOBM and Switch Applications733
  - Example733
- OOBM Configuration734
- OOBM Show Commands739
- Application Server Commands743
- Application Client Commands743
Chapter 23 Websites746
Chapter 24 Support and Other Resources747
- Accessing Hewlett Packard Enterprise Support747
- Accessing Updates747
- Customer Self Repair748
- Remote Support748
- Warranty Information748
- Regulatory Information749
- Documentation Feedback749
LACP-MAD Passthrough750
- Aruba 2930F / 2930M Management and Configuration Guide750
- Overview750
- LACP-MAD Passthrough Commands750
Remote Device Deployment (TR-069)752
- Introduction752
- CLI Commands756
- Event Logging761
  - System Logging761
  - Status/Control Commands762
Configuration Backup and Restore Without Reboot764
- Limitations766
  - Blocking of Configuration from Other Sessions766
Smart Rate Technology767
- Show Smart Rate Port767
  - Rate-Limiting - GMB Features When Fast-Connect Smartrate Ports Are Configured768
  - Error Messages769
- Speed-Duplex769
  - Limitations on 5Gbps Ports769
  - Error Messages770
- 100 Mbps Support on Smart Rate Ports770
Glossary774

HP Aruba JL253A - Page 372

Table of Contents

Related product manuals