Antonio Perez

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Factory default ======


  erase startup-config
  Erase startup-config [y/n]? y
  reload
  
**SSH**
  *   crypto key zeroize ssh
  *   crypto key generate ssh
  *   ip ssh
  *   no telnet-server  
  *   spanning-tree priority 2
  *   ip access-list standard MGMT_ONLY
  *   logging <syslog>
  *   sntp server <ntp>

----
----

EXAMPLE CODE 2030F SWITCH======How to configure LACP on Aruba 2930F 24G 4SFP Switch (JL259A) Connect HP A5500 HI======

Aruba 2930F LACP and trunk allow vlan 10,20,30,50 native vlan 1

   #Trunk 1-2 Trk1 lacp
  
   #int trk1
  
   #untagg vlan 1
  
   #tagg vlan 10,20,30,50


======HP A5500 HI LACP and trunk allow vlan 10,20,30,50 native vlan 1======

  #interface Bridge-Aggregation 1
  #link-aggregation mode dynamic
  #quite
  #interface g1/0/1
  #port link-aggregation group 1
  #interface g1/0/2
  #port link-aggregation group 1
  #quite
  #interface Bridge-Aggregation 1
  #port link-type trunk
  #port trunk permit vlan 10,20,30,50

----
----
====== Aruba 2930F Switch Series Installation and Getting Started Guide ======


{{ :aruba_networks:switch:2930f:configuration:aruba_2930_igsg.pdf |}}

{{pdfjs 46em >:aruba_networks:switch:2930f:configuration:aruba_2930_igsg.pdf }}

----
----
====== Access Security guide ======

  password all
  aaa authentication local-user "admin" group "Level-15"
  aaa authentication local-user "admin" group "Level-15" password plaintext
  New password for admin: **********
  Please retype new password for admin: **********
  
  no aaa authentication local-user localuser
  no password operator
  password manager

{{ :aruba_networks:switch:2930f:configuration:access_security_guide_2930f.pdf |Access Security Guide 2930F}}
{{pdfjs 46em >:aruba_networks:switch:2930f:configuration:access_security_guide_2930f.pdf }}

----
----

{{ :aruba_networks:switch:2930f:configuration:aruba_2930_m_f_multicasting_and_routing_guide_for_aos-s_16.11.pdf |Aruba 2930 M&F Multicasting and Routing Guide for AOS-S 16.11}}

{{pdfjs 46em >:aruba_networks:switch:2930f:configuration:aruba_2930_m_f_multicasting_and_routing_guide_for_aos-s_16.11.pdf }}


  show ip igmp vlan 518
  show ip igmp
  show ip igmp vlan 518 | include Querier
  show ip igmp vlan 518 | include Filter
  show run | include ip igmp
  show vlan 518
  show vlan 518 | include Tagged
  show mac-address vlan 518 | include 01-00-5E
  show interfaces 1/20 counters
  show interfaces 1/39 counters
  show trunks
  show spanning-tree
  show lldp info remote-device
  debug ip igmp
  show debug
  no debug ip igmp


  interface 2/47
  qos trust dscp
  exit

----
----


====== Backplane Stacking and VSF - Best practices on AOS-Switch version 16.08 ======


{{ :aruba_networks:switch:2930m:e9ade814-b71c-41b3-a0cb-7673b9f1fafb-7-backplane_stacking_and_vsf_best_practices.pdf |Backplane Stacking and VSF - Best practices on AOS-Switch version 16.08}}

{{pdfjs 46em >:aruba_networks:switch:2930m:e9ade814-b71c-41b3-a0cb-7673b9f1fafb-7-backplane_stacking_and_vsf_best_practices.pdf}}

----
----

====== VSF CODE 2030F SWITCH ======

**Environment:** 


  * HPE Virtual Switching Framework (VSF) technology virtualizes two physical devices in the same layer into one Virtual Fabric which provides high availability and scalability. A Virtual Fabric is therefore two physical devices in the same layer that utilize VSF technology.
  * VSF allows supported switches connected to each other through normal ethernet connections (copper or fiber) to behave like a single switch.
  * VSF uses two member roles: Commander and Standby.

**Commander:**

This is the Commander for the VSF. Control and management plane protocols run on the Commander, which is responsible for managing the forwarding databases, synchronizing them with the Standby and controlling all line cards including that of the Standby.

**Standby:**

Standby is a stateful backup device for the Commander and is ready to take control of the VSF virtual chassis if the Commander device crashes. This enables the VSF virtual chassis to continue its operations seamlessly in the event of a failure.

**Configuraiton example:**

  Switch 1:
  
  vsf member 1 link 1 25
  vsf member 1 link 1 26
  vsf member 1 priority 160
  vsf enable domain 5
  
  Switch 2: 
  
  vsf member 2 link 1 25
  vsf member 2 link 1 26
  vsf member 2 priority 150
  vsf enable domain 5
  
  Verification:
  Aruba-VSF-2930F# sh vsf
  
  VSF Domain ID    : 5
  MAC Address      : xxxxx-xxxxxx
  VSF Topology     : Chain
  VSF Status       : Active
  Uptime           : 1d 10h 13m
  VSF MAD          : None
  VSF Port Speed   : 10G
  Software Version : WC.16.03.0004
  
  Mbr
  ID  MAC Address   Model                             Pri     Status
  --- ------------- -------------------------------------- --- ---------------
   1 xxxxx-xxxxxx Aruba JL255A 2930F-24G-PoE+-4SFP+ S..160 Commander
  *2 xxxxx-xxxxxx Aruba JL255A 2930F-24G-PoE+-4SFP+ S..150 Standby
  
  For detailed information 
  Aruba-VSF-2930F# sh vsf link details


----
----

====== VSF CODE 2030F SWITCH ======


  SW-2PMDF-C414CB# show running-config
  Running configuration:
  ; hpStack_WC Configuration Editor; Created on release #WC.16.11.0014
  ; Ver #14:67.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:44
  hostname "SW-2PMDF-C414CB"
  vsf
     enable domain 1
     member 1
        type "JL558A" mac-address 3821c7-c414c0
        priority 255
        link 1 1/50
        link 1 name "I-Link1_1"
        link 2 1/49
        link 2 name "I-Link1_2"
        exit
     member 2
        type "JL558A" mac-address 3821c7-c60b80
        priority 254
        link 1 2/49
        link 1 name "I-Link2_1"
        link 2 2/50
        link 2 name "I-Link2_2"
        exit
     member 3
        type "JL558A" mac-address 3821c7-c45940
        priority 128
        link 1 3/50
        link 1 name "I-Link3_1"
        link 2 3/49
        link 2 name "I-Link3_2"
        exit
     member 4
        type "JL558A" mac-address 3821c7-c42800
        priority 128
        link 1 4/49
        link 1 name "I-Link4_1"
        link 2 4/50
        link 2 name "I-Link4_2"
        exit
     member 5
        type "JL558A" mac-address 104f58-4deac0
        priority 128
        link 1 5/50
        link 1 name "I-Link5_1"
        link 2 5/49
        link 2 name "I-Link5_2"
        exit
     port-speed 10g
     exit
  include-credentials
  password manager user-name "admin" sha1
   "b5a7e9d83a0df7944419c1441e21ed15d0d3e33a"
  password minimum-length 6
  timesync ntp
  no telnet-server
  ip default-gateway 172.16.0.1
  snmp-server community "public"
  snmp-server enable traps mac-count-notify
  snmpv3 engineid "00:00:00:0b:00:00:38:21:c7:c4:14:cb"
  snmpv3 only
  vlan 1
     name "DEFAULT_VLAN"
     no untagged 1/1-1/17,1/48,2/4,2/9-2/10,2/20,2/22,2/43,3/4,3/8,3/25,3/39,5/25
     untagged
   1/18-1/47,1/51-1/52,2/1-2/3,2/5-2/8,2/11-2/19,2/21,2/23-2/42,2/44-2/48,2/51-2/5
   2,3/1-3/3,3/5-3/7,3/9-3/24,3/26-3/38,3/40-3/48,3/51-3/52,4/1-4/48,4/51-4/52,5/1-
   5/24,5/26-5/48,5/51-5/52
     ip address dhcp-bootp
     exit
  vlan 850
    name "VLAN850"
     untagged 1/1-1/2,1/4-1/15,1/48,2/22,5/25
     tagged 1/18,1/20-1/22,1/34,1/42-1/44,1/52,2/7,2/34,2/40,2/48,3/48
     no ip address
     exit
  vlan 2810
     name "XPC-NET"
     untagged 1/3,1/16-1/17,2/4,2/9-2/10,2/20,2/43,3/4,3/8,3/25,3/39
     tagged 1/52
     ip address dhcp-bootp
     ipv6 enable
     ipv6 address autoconfig
     exit
  allow-unsupported-transceiver
  no tftp server
  no autorun
  no dhcp config-file-update
  no dhcp image-file-update
  no dhcp tr69-acs-url
  
  SW-2PMDF-C414CB#


----
----

====== Other commands ======

  hostname "Aruba-Stack-2930F"

  banner motd !
  
  This computing system is a St. Francis School owned asset and provided for the exclusive use of authorized 
  personnel for technical purposes.
  All information and data created, accessed, processed, or stored using this system (including personal 
  information) are subject to monitoring, auditing, or review to the extent permitted by applicable law.
  
  Unauthorized use or abuse of this system may lead to corrective action including termination of employment, civil 
  and/or criminal penalties.
  
  !
  banner exec !
  This computing system is a St. Francis School owned asset and provided for the exclusive use of authorized 
  personnel for technical purposes.
  All information and data created, accessed, processed, or stored using this system (including personal 
  information) are subject to monitoring, auditing, or review to the extent permitted by applicable law.
  
  Unauthorized use or abuse of this system may lead to corrective action including termination of employment, civil 
  and/or criminal penalties.
  
  !


  Aruba-Stack-2930F(config)# trunk 1/52 trk1 lacp
  Aruba-Stack-2930F(config)# trunk 2/52 trk1 lacp
  Aruba-Stack-2930F(config)# interface trk1
  Aruba-Stack-2930F(eth-Trk1)# tag vlan 500-525
  Aruba-Stack-2930F(eth-Trk1)# untagged vlan 1
  Aruba-Stack-2930F(eth-1/52)# inte 2/52
  Aruba-Stack-2930F(eth-1/52)# inte 1/52
  Aruba-Stack-2930F(eth-2/52)#  name Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1
  Aruba-Stack-2930F(eth-1/52)#  name Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1

  igmp reload
  igmp fastlearn 1/1-1/48,1/51,2/1-2/48,2/51,Trk1
  jumbo ip-mtu 9180
  jumbo max-frame-size 9198
  lldp run
  lldp enable-notification 1/1-1/24,1/27-1/28,2/1-2/24,2/27-2/28
  
  spanning-tree disable
  no spanning-tree
  spanning-tree mode rapid-pvst
  spanning-tree config-name "sfeds-STP"
  spanning-tree priority 5
  spanning-tree vlan 1 e
  spanning-tree vlan 500-525 e
  spanning-tree vlan  1 priority 5
  spanning-tree vlan  500 priority 5
  spanning-tree vlan  501 priority 5
  spanning-tree vlan  502 priority 5
  spanning-tree vlan  503 priority 5
  spanning-tree vlan  504 priority 5
  spanning-tree vlan  505 priority 5
  spanning-tree vlan  506 priority 5
  spanning-tree vlan  507 priority 5
  spanning-tree vlan  508 priority 5
  spanning-tree vlan  509 priority 5
  spanning-tree vlan  510 priority 5
  spanning-tree vlan  511 priority 5
  spanning-tree vlan  512 priority 5
  spanning-tree vlan  513 priority 5
  spanning-tree vlan  514 priority 5
  spanning-tree vlan  515 priority 5
  spanning-tree vlan  516 priority 5
  spanning-tree vlan  517 priority 5
  spanning-tree vlan  518 priority 5
  spanning-tree vlan  519 priority 5
  spanning-tree vlan  520 priority 5
  spanning-tree vlan  521 priority 5
  spanning-tree vlan  522 priority 5
  spanning-tree vlan  523 priority 5
  spanning-tree vlan  524 priority 5
  spanning-tree vlan  525 priority 5
  show spanning-tree detail
  
  vlan 1
  ip igmp 
  vlan 500
  ip igmp 
  vlan 501
  ip igmp 
  vlan 502
  ip igmp 
  vlan 503
  ip igmp 
  vlan 504
  ip igmp 
  vlan 505
  ip igmp 
  vlan 506
  ip igmp 
  vlan 507
  ip igmp 
  vlan 508
  ip igmp 
  vlan 509
  ip igmp 
  vlan 510
  ip igmp 
  vlan 511
  ip igmp 
  vlan 512
  ip igmp 
  vlan 513
  ip igmp 
  vlan 514
  ip igmp 
  vlan 515
  ip igmp 
  vlan 516
  ip igmp 
  vlan 517
  ip igmp 
  vlan 518
  ip igmp 
  vlan 519
  ip igmp 
  vlan 520
  ip igmp 
  vlan 521
  ip igmp 
  vlan 522
  ip igmp 
  vlan 523
  ip igmp 
  vlan 524
  ip igmp 
  vlan 525
  ip igmp 
  
  
  vlan 1
  no ip igmp querier
  vlan 500
  no ip igmp querier
  vlan 501
  no ip igmp querier
  vlan 502
  no ip igmp querier
  vlan 503
  no ip igmp querier
  vlan 504
  no ip igmp querier
  vlan 505
  no ip igmp querier
  vlan 506
  no ip igmp querier
  vlan 507
  no ip igmp querier
  vlan 508
  no ip igmp querier
  vlan 509
  no ip igmp querier
  vlan 510
  no ip igmp querier
  vlan 511
  no ip igmp querier
  vlan 512
  no ip igmp querier
  vlan 513
  no ip igmp querier
  vlan 514
  no ip igmp querier
  vlan 515
  no ip igmp querier
  vlan 516
  no ip igmp querier
  vlan 517
  no ip igmp querier
  vlan 518
  no ip igmp querier
  vlan 519
  no ip igmp querier
  vlan 520
  no ip igmp querier
  vlan 521
  no ip igmp querier
  vlan 522
  no ip igmp querier
  vlan 523
  no ip igmp querier
  vlan 524
  no ip igmp querier
  vlan 525
  no ip igmp querier
  
  
  allow-unsupported-transceiver
  clock timezone us central
  timesync ntp
  ntp unicast
  ntp server 69.89.207.199
  ntp server 216.239.35.0
  ntp enable
  clock summer-time
  loop-protect trap loop-detected
  time daylight-time-rule continental-us-and-canada
  time timezone -360
  ip dns server-address priority 1 8.8.8.8
  ip dns server-address priority 2 8.8.4.4

  Aruba-Stack-2930F(config)# vsf member 3 remove
  Aruba-Stack-2930F(config)# vsf disable

----
----

====== Jumbo frame enable ======

  jumbo ip-mtu 9180
  jumbo max-frame-size 9198
  vlan 1
     jumbo
  vlan 500
     jumbo
  vlan 501
     jumbo
  vlan 502
     jumbo
  vlan 503
     jumbo
  vlan 504
     jumbo
  vlan 505
     jumbo
  vlan 506
     jumbo
  vlan 507
     jumbo
  vlan 508
     jumbo
  vlan 509
     jumbo
  vlan 510
     jumbo
  vlan 511
     jumbo
  vlan 512
     jumbo
  vlan 513
     jumbo
  vlan 514
     jumbo
  vlan 515
     jumbo
  vlan 516
     jumbo
  vlan 517
     jumbo
  vlan 518
     jumbo
  vlan 519
     jumbo
  vlan 520
     jumbo
  vlan 521
     jumbo
  vlan 522
     jumbo
  vlan 523
     jumbo
  vlan 524
     jumbo
  vlan 525
     jumbo

----
----

====== EXAMPLE CODE 2030F SWITCH ======


  Aruba-Stack-2930F(config)# show run
  
  Running configuration:
  
  ; hpStack_WC Configuration Editor; Created on release #WC.16.11.0015
  ; Ver #14:67.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:44
  hostname "Aruba-Stack-2930F"

----
----

  Note: No Connect the cables for the VSF.

----
----

**Switch 1:**

  vsf
     enable domain 1
     member 1
        type "JL558A" mac-address 3821c7-c42800
        priority 128
        link 1 1/49-1/50
        link 1 name "I-Link1_1"
        link 2 name "I-Link1_2"
        exit
     member 2
        type "JL558A" mac-address 3821c7-c45940
        priority 128
        link 1 2/49-2/50
        link 1 name "I-Link1_1"
        link 2 name "I-Link2_2"
        exit

----
----

**Switch 2:**

  vsf
     enable domain 1
     member 1
        type "JL558A" mac-address 3821c7-c45940
        priority 128
        link 1 1/49-1/50
        link 1 name "I-Link1_1"
        link 2 name "I-Link1_2"
        exit

----
----

  Note: Connect the cables for the VSF, only after making the previous configurations.  For this example 1/49 and 
  1/50 of each Switch.

----
----

     port-speed 10g
     exit
   trunk 1/52,2/52 trk1 lacp
   banner motd "\nThis computing system is a St. Francis School owned asset and
   provided for the exclusive use of authorized personnel for technical
   purposes.\nAll information and data created, accessed, processed, or stored
   using this system (including personal information) are subject to monitoring,
   auditing, or review to the extent permitted by applicable law.\n\nUnauthorized
   use or abuse of this system may lead to corrective action including
   termination of employment, civil and/or criminal penalties.\n\n"
   banner exec "This computing system is a St. Francis School owned asset and
   provided for the exclusive use of authorized personnel for technical
   purposes.\nAll information and data created, accessed, processed, or stored
   using this system (including personal information) are subject to monitoring,
   auditing, or review to the extent permitted by applicable law.\n\nUnauthorized
   use or abuse of this system may lead to corrective action including
   termination of employment, civil and/or criminal penalties.\n\n"
  
  igmp reload
  igmp fastlearn 1/1-1/48,1/51,2/1-2/48,2/51,Trk1
  jumbo ip-mtu 9180
  jumbo max-frame-size 9198
  password minimum-length 6
  timesync ntp
  ntp unicast
  ntp server 69.89.207.199
  ntp server 216.239.35.0
  ntp enable
  time daylight-time-rule continental-us-and-canada
  time timezone -360
  ip default-gateway 172.16.28.1
  ip dns server-address priority 1 8.8.8.8
  ip dns server-address priority 2 8.8.4.4
  ip route 0.0.0.0 0.0.0.0 172.16.28.1
  interface 1/52
     name "Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1"
     exit
  interface 2/52
     name "Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1"
     exit
  snmp-server community "public" unrestricted
  snmp-server enable traps snmp-authentication standard
  no snmp-server enable traps snmp-authentication extended
  no snmp-server enable traps macsec failures
  vlan 1
     name "Default"
     untagged 1/1-1/48,1/51,2/1-2/48,2/51,Trk1
     ip address 172.16.28.27 255.255.254.0
     ip igmp
     exit
  vlan 500
     name "ServerVM"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 501
     name "ServerStack"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 502
     name "ISP1"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 503
     name "ISP2"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 504
     name "ISP3"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 505
     name "LAN-UTM"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 506
     name "WIFI-AP"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 507
     name "VIP"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 508
     name "ST"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 509
     name "Staff"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 510
     name "Teacher"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 511
     name "Students"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 512
     name "Accounting"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 513
     name "Printer"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 514
     name "AC"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 515
     name "iDRAC"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 516
     name "KVM"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 517
     name "Guest"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 518
     name "VoIP"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 519
     name "IoT"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 520
     name "Cameras"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 521
     name "VC"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 522
     name "VPN"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 523
     name "VLAN523"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 524
     name "VLAN524"
     tagged Trk1
     no ip address
     ip igmp
     exit
  vlan 525
     name "VLAN525"
     tagged Trk1
     no ip address
     ip igmp
     exit

  igmp reload
  igmp fastlearn 1/1-1/48,1/51,2/1-2/48,2/51,Trk1
  jumbo ip-mtu 9180
  jumbo max-frame-size 9198
  lldp run
  lldp enable-notification 1/1-1/24,1/27-1/28,2/1-2/24,2/27-2/28

  spanning-tree Trk1 priority 4
  spanning-tree config-name "sfeds-STP"
  spanning-tree config-revision 1
  spanning-tree mode rapid-pvst
  spanning-tree vlan 1 priority 5
  spanning-tree vlan 500 priority 5
  spanning-tree vlan 501 priority 5
  spanning-tree vlan 502 priority 5
  spanning-tree vlan 503 priority 5
  spanning-tree vlan 504 priority 5
  spanning-tree vlan 505 priority 5
  spanning-tree vlan 506 priority 5
  spanning-tree vlan 507 priority 5
  spanning-tree vlan 508 priority 5
  spanning-tree vlan 509 priority 5
  spanning-tree vlan 510 priority 5
  spanning-tree vlan 511 priority 5
  spanning-tree vlan 512 priority 5
  spanning-tree vlan 513 priority 5
  spanning-tree vlan 514 priority 5
  spanning-tree vlan 515 priority 5
  spanning-tree vlan 516 priority 5
  spanning-tree vlan 517 priority 5
  spanning-tree vlan 518 priority 5
  spanning-tree vlan 519 priority 5
  spanning-tree vlan 520 priority 5
  spanning-tree vlan 521 priority 5
  spanning-tree vlan 522 priority 5
  spanning-tree vlan 523 priority 5
  spanning-tree vlan 524 priority 5
  spanning-tree vlan 525 priority 5
  spanning-tree priority 5
  
  vlan 1
  ip igmp 
  vlan 500
  ip igmp 
  vlan 501
  ip igmp 
  vlan 502
  ip igmp 
  vlan 503
  ip igmp 
  vlan 504
  ip igmp 
  vlan 505
  ip igmp 
  vlan 506
  ip igmp 
  vlan 507
  ip igmp 
  vlan 508
  ip igmp 
  vlan 509
  ip igmp 
  vlan 510
  ip igmp 
  vlan 511
  ip igmp 
  vlan 512
  ip igmp 
  vlan 513
  ip igmp 
  vlan 514
  ip igmp 
  vlan 515
  ip igmp 
  vlan 516
  ip igmp 
  vlan 517
  ip igmp 
  vlan 518
  ip igmp 
  vlan 519
  ip igmp 
  vlan 520
  ip igmp 
  vlan 521
  ip igmp 
  vlan 522
  ip igmp 
  vlan 523
  ip igmp 
  vlan 524
  ip igmp 
  vlan 525
  ip igmp 
  allow-unsupported-transceiver
  no tftp server
  loop-protect trap loop-detected
  no autorun
  no dhcp config-file-update
  no dhcp image-file-update
  password manager
  
  Aruba-Stack-2930F(config)#

----
----
How do I disable VSF?

  vsf disable
  vsf member <MEMBER-ID> remove

----
----
====== Poe Dw UP ======

**2930F**

Aruba-Stack-2930F(config)# **power-over-ethernet poe-reset port 2/33**


SW-2PIDF-EE(config)# **int 25**

SW-2PIDF-EE(eth-25)# **no power-over-ethernet**
----
----

===== PoE Configuration and Behavior in Aruba =====

The switch is operating at its best effort under the **802.3af** PoE standard (~11 W).

The AP-515 Access Point requires **PoE+ (802.3at)** to operate both radios, as its consumption is ~18–22 W.

> **Note:** The default switch configuration only provides 15 W, which is insufficient for the AP-515. The solution is to force the delivery of a higher power value.

==== Configuration Procedure ====

<code bash>
Aruba-Stack-2930F(config)# int 1/41     # <-- PUERTO 1/41
Aruba-Stack-2930F(eth-1/41)# poe-lldp-detect enable
Aruba-Stack-2930F(eth-1/41)# poe-allocate-by value
Aruba-Stack-2930F(eth-1/41)# poe-value 30  # <-- APLICAR 30 W EN EL PUERTO 1/41
</code>

> **Warning:** Using ''poe-allocate-by value'' may result in undesired PoE behavior. Prefer ''class'' or ''usage'' when possible.

==== Verifying PoE Status ====

^ PoE Port ^ Pwr Enab ^ Pwr Priority ^ Pre-std Detect ^ Alloc Cfg ^ Alloc Actual ^ PSE Pwr Rsrvd ^ PD Pwr Draw ^ PoE Port Status ^ PLC Cls ^ PLC Type ^
| 1/38 | Yes | low | off | usage | usage | 0.0 W | 0.0 W | Searching | 0 | - |
| 1/39 | Yes | low | off | usage | lldp  | 11.0 W | 10.1 W | Delivering | 4 | 2 |
| 1/40 | Yes | low | off | usage | usage | 0.0 W | 0.0 W | Searching | 0 | - |
| **1/41** | **Yes** | **low** | **off** | **usage** | **lldp** | **30.0 W** | **(~18–22 W esperado)** | **Delivering** | **4** | **2** |
| 1/42 | Yes | low | off | usage | usage | 0.0 W | 0.0 W | Searching | 0 | - |
| 1/43 | Yes | low | off | usage | lldp  | 11.0 W | 10.0 W | Delivering | 4 | 2 |


----
----

====== Manual de Actualización de Firmware Aruba 2930F vía TFTP ======

Este documento resume el proceso seguro para actualizar firmware en switches Aruba 2930F/2930M utilizando Windows Server 2025 como servidor TFTP, con firewall correctamente configurado.

----

===== 1. Configuración en Windows Server 2025 =====

==== 1.1 Limpiar reglas TFTP antiguas ====
<code powershell>
Get-NetFirewallRule | where DisplayName -like "*TFTP*" | Remove-NetFirewallRule
</code>

----

==== 1.2 Permitir TFTP solo para las subredes: 172.16.28.0/23 y 172.20.28.0/23 ====

**INBOUND:**
<code powershell>
New-NetFirewallRule -DisplayName "Allow TFTP IN Subnets" `
-Direction Inbound -Protocol UDP -LocalPort 69 `
-RemoteAddress 172.16.28.0/23,172.20.28.0/23 `
-Profile Domain,Private -Action Allow
</code>

**OUTBOUND:**
<code powershell>
New-NetFirewallRule -DisplayName "Allow TFTP OUT Subnets" `
-Direction Outbound -Protocol UDP -LocalPort 69 `
-RemoteAddress 172.16.28.0/23,172.20.28.0/23 `
-Profile Domain,Private -Action Allow
</code>

----
**Firewall Disable:**

<code powershell>
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False
</code>
----

==== 1.3 Bloquear TFTP en perfil Público ====
<code powershell>
New-NetFirewallRule -DisplayName "Block TFTP Public" `
-Direction Inbound -Protocol UDP -LocalPort 69 `
-Profile Public -Action Block
</code>

----

==== 1.4 Asegurar que el firewall está activado ====
<code powershell>
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled True
</code>

----

==== 1.5 Ver reglas activas ====
<code powershell>
Get-NetFirewallRule | findstr TFTP
</code>

----

==== 1.6 Verificar que el servidor escucha en UDP/69 ====
<code powershell>
netstat -an | findstr ":69"
</code>

Salida esperada:
<code>
UDP    0.0.0.0:69     *:*
</code>

----

===== 2. Operaciones en el Switch Aruba 2930F =====

==== 2.1 Comprobar conectividad ====
<code>
ping 10.28.64.30
</code>

----

==== 2.2 Copiar firmware desde TFTP al switch ====
<code>
copy tftp flash 10.28.64.30 WB.16.11.0001.swi
copy tftp flash 10.56.64.22 WC.16.11.0015.swi

</code>

Para partición específica:
<code>
copy tftp flash primary 10.28.64.30 WB.16.11.0001.swi
copy tftp flash secondary 10.28.64.30 WB.16.11.0001.swi
</code>

----

==== 2.3 Verificar contenido de la flash ====
<code>
show flash
</code>

----

==== 2.4 Seleccionar partición de arranque ====
Si el firmware quedó en primary:
<code>
boot system flash primary
</code>

Si quedó en secondary:
<code>
boot system flash secondary
</code>

----

==== 2.5 Guardar configuración ====
<code>
write memory
</code>

----

==== 2.6 Reiniciar el switch ====
<code>
reload
</code>

----

==== 2.7 Confirmar versión final ====
<code>
show version
</code>

Debe mostrar la imagen recién instalada.

----

===== 3. Resumen General =====

==== Windows Server =====
<code powershell>
Get-NetFirewallRule | where DisplayName -like "*TFTP*" | Remove-NetFirewallRule

New-NetFirewallRule -DisplayName "Allow TFTP IN Subnets" -Direction Inbound -Protocol UDP -LocalPort 69 -RemoteAddress 172.16.28.0/23,172.20.28.0/23 -Profile Domain,Private -Action Allow

New-NetFirewallRule -DisplayName "Allow TFTP OUT Subnets" -Direction Outbound -Protocol UDP -LocalPort 69 -RemoteAddress 172.16.28.0/23,172.20.28.0/23 -Profile Domain,Private -Action Allow

New-NetFirewallRule -DisplayName "Block TFTP Public" -Direction Inbound -Protocol UDP -LocalPort 69 -Profile Public -Action Block

Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled True
</code>

==== Switch Aruba 2930F =====
<code>
ping 10.28.64.30
copy tftp flash 10.28.64.30 WB.16.11.0001.swi
show flash
boot system flash primary
write memory
reload
show version
</code>

----
----
{{ :aruba_networks:switch:2930f:configuration:wb.16.11.0001.zip |}}

{{ :aruba_networks:switch:2930f:configuration:wc.16.11.0015.zip |}}
----
----
 --- //[[gm@itclatam.com|Antonio Perez]] 2025/12/07 22:16//