Aruba 2930F LACP and trunk allow vlan 10,20,30,50 native vlan 1

 #Trunk 1-2 Trk1 lacp

 #int trk1

 #untagg vlan 1

 #tagg vlan 10,20,30,50

#interface Bridge-Aggregation 1
#link-aggregation mode dynamic
#quite
#interface g1/0/1
#port link-aggregation group 1
#interface g1/0/2
#port link-aggregation group 1
#quite
#interface Bridge-Aggregation 1
#port link-type trunk
#port trunk permit vlan 10,20,30,50

aruba_2930_igsg.pdf

Backplane Stacking and VSF - Best practices on AOS-Switch version 16.08

Environment:

• HPE Virtual Switching Framework (VSF) technology virtualizes two physical devices in the same layer into one Virtual Fabric which provides high availability and scalability. A Virtual Fabric is therefore two physical devices in the same layer that utilize VSF technology.
• VSF allows supported switches connected to each other through normal ethernet connections (copper or fiber) to behave like a single switch.
• VSF uses two member roles: Commander and Standby.

Commander:

This is the Commander for the VSF. Control and management plane protocols run on the Commander, which is responsible for managing the forwarding databases, synchronizing them with the Standby and controlling all line cards including that of the Standby.

Standby:

Standby is a stateful backup device for the Commander and is ready to take control of the VSF virtual chassis if the Commander device crashes. This enables the VSF virtual chassis to continue its operations seamlessly in the event of a failure.

Configuraiton example:

Switch 1:

vsf member 1 link 1 25
vsf member 1 link 1 26
vsf member 1 priority 160
vsf enable domain 5

Switch 2: 

vsf member 2 link 1 25
vsf member 2 link 1 26
vsf member 2 priority 150
vsf enable domain 5

Verification:
Aruba-VSF-2930F# sh vsf

VSF Domain ID    : 5
MAC Address      : xxxxx-xxxxxx
VSF Topology     : Chain
VSF Status       : Active
Uptime           : 1d 10h 13m
VSF MAD          : None
VSF Port Speed   : 10G
Software Version : WC.16.03.0004

Mbr
ID  MAC Address   Model                             Pri     Status
--- ------------- -------------------------------------- --- ---------------
 1 xxxxx-xxxxxx Aruba JL255A 2930F-24G-PoE+-4SFP+ S..160 Commander
*2 xxxxx-xxxxxx Aruba JL255A 2930F-24G-PoE+-4SFP+ S..150 Standby

For detailed information 
Aruba-VSF-2930F# sh vsf link details

SW-2PMDF-C414CB# show running-config
Running configuration:
; hpStack_WC Configuration Editor; Created on release #WC.16.11.0014
; Ver #14:67.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:44
hostname "SW-2PMDF-C414CB"
vsf
   enable domain 1
   member 1
      type "JL558A" mac-address 3821c7-c414c0
      priority 255
      link 1 1/50
      link 1 name "I-Link1_1"
      link 2 1/49
      link 2 name "I-Link1_2"
      exit
   member 2
      type "JL558A" mac-address 3821c7-c60b80
      priority 254
      link 1 2/49
      link 1 name "I-Link2_1"
      link 2 2/50
      link 2 name "I-Link2_2"
      exit
   member 3
      type "JL558A" mac-address 3821c7-c45940
      priority 128
      link 1 3/50
      link 1 name "I-Link3_1"
      link 2 3/49
      link 2 name "I-Link3_2"
      exit
   member 4
      type "JL558A" mac-address 3821c7-c42800
      priority 128
      link 1 4/49
      link 1 name "I-Link4_1"
      link 2 4/50
      link 2 name "I-Link4_2"
      exit
   member 5
      type "JL558A" mac-address 104f58-4deac0
      priority 128
      link 1 5/50
      link 1 name "I-Link5_1"
      link 2 5/49
      link 2 name "I-Link5_2"
      exit
   port-speed 10g
   exit
include-credentials
password manager user-name "admin" sha1
 "b5a7e9d83a0df7944419c1441e21ed15d0d3e33a"
password minimum-length 6
timesync ntp
no telnet-server
ip default-gateway 172.16.0.1
snmp-server community "public"
snmp-server enable traps mac-count-notify
snmpv3 engineid "00:00:00:0b:00:00:38:21:c7:c4:14:cb"
snmpv3 only
vlan 1
   name "DEFAULT_VLAN"
   no untagged 1/1-1/17,1/48,2/4,2/9-2/10,2/20,2/22,2/43,3/4,3/8,3/25,3/39,5/25
   untagged
 1/18-1/47,1/51-1/52,2/1-2/3,2/5-2/8,2/11-2/19,2/21,2/23-2/42,2/44-2/48,2/51-2/5
 2,3/1-3/3,3/5-3/7,3/9-3/24,3/26-3/38,3/40-3/48,3/51-3/52,4/1-4/48,4/51-4/52,5/1-
 5/24,5/26-5/48,5/51-5/52
   ip address dhcp-bootp
   exit
vlan 850
  name "VLAN850"
   untagged 1/1-1/2,1/4-1/15,1/48,2/22,5/25
   tagged 1/18,1/20-1/22,1/34,1/42-1/44,1/52,2/7,2/34,2/40,2/48,3/48
   no ip address
   exit
vlan 2810
   name "XPC-NET"
   untagged 1/3,1/16-1/17,2/4,2/9-2/10,2/20,2/43,3/4,3/8,3/25,3/39
   tagged 1/52
   ip address dhcp-bootp
   ipv6 enable
   ipv6 address autoconfig
   exit
allow-unsupported-transceiver
no tftp server
no autorun
no dhcp config-file-update
no dhcp image-file-update
no dhcp tr69-acs-url

SW-2PMDF-C414CB#

hostname "Aruba-Stack-2930F"

banner motd !

This computing system is a St. Francis School owned asset and provided for the exclusive use of authorized 
personnel for technical purposes.
All information and data created, accessed, processed, or stored using this system (including personal 
information) are subject to monitoring, auditing, or review to the extent permitted by applicable law.

Unauthorized use or abuse of this system may lead to corrective action including termination of employment, civil 
and/or criminal penalties.

!
banner exec !
This computing system is a St. Francis School owned asset and provided for the exclusive use of authorized 
personnel for technical purposes.
All information and data created, accessed, processed, or stored using this system (including personal 
information) are subject to monitoring, auditing, or review to the extent permitted by applicable law.

Unauthorized use or abuse of this system may lead to corrective action including termination of employment, civil 
and/or criminal penalties.

!

Aruba-Stack-2930F(config)# trunk 1/52 trk1 lacp
Aruba-Stack-2930F(config)# trunk 2/52 trk1 lacp
Aruba-Stack-2930F(config)# interface trk1
Aruba-Stack-2930F(eth-Trk1)# tag vlan 500-525
Aruba-Stack-2930F(eth-Trk1)# untagged vlan 1
Aruba-Stack-2930F(eth-1/52)# inte 2/52
Aruba-Stack-2930F(eth-1/52)# inte 1/52
Aruba-Stack-2930F(eth-2/52)#  name Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1
Aruba-Stack-2930F(eth-1/52)#  name Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1

spanning-tree disable
no spanning-tree
spanning-tree mode rapid-pvst
spanning-tree config-name "sfeds-STP"
spanning-tree priority 5
spanning-tree vlan 1 e
spanning-tree vlan 500-525 e
spanning-tree vlan  1 priority 5
spanning-tree vlan  500 priority 5
spanning-tree vlan  501 priority 5
spanning-tree vlan  502 priority 5
spanning-tree vlan  503 priority 5
spanning-tree vlan  504 priority 5
spanning-tree vlan  505 priority 5
spanning-tree vlan  506 priority 5
spanning-tree vlan  507 priority 5
spanning-tree vlan  508 priority 5
spanning-tree vlan  509 priority 5
spanning-tree vlan  510 priority 5
spanning-tree vlan  511 priority 5
spanning-tree vlan  512 priority 5
spanning-tree vlan  513 priority 5
spanning-tree vlan  514 priority 5
spanning-tree vlan  515 priority 5
spanning-tree vlan  516 priority 5
spanning-tree vlan  517 priority 5
spanning-tree vlan  518 priority 5
spanning-tree vlan  519 priority 5
spanning-tree vlan  520 priority 5
spanning-tree vlan  521 priority 5
spanning-tree vlan  522 priority 5
spanning-tree vlan  523 priority 5
spanning-tree vlan  524 priority 5
spanning-tree vlan  525 priority 5
show spanning-tree detail

allow-unsupported-transceiver
clock timezone us central
timesync ntp
ntp unicast
ntp server 69.89.207.199
ntp server 216.239.35.0
ntp enable
clock summer-time
loop-protect trap loop-detected
time daylight-time-rule continental-us-and-canada
time timezone -360
ip dns server-address priority 1 8.8.8.8
ip dns server-address priority 2 8.8.4.4

Aruba-Stack-2930F(config)# vsf member 3 remove
Aruba-Stack-2930F(config)# vsf disable

Aruba-Stack-2930F(config)# show run

Running configuration:

; hpStack_WC Configuration Editor; Created on release #WC.16.11.0015
; Ver #14:67.6f.f8.1d.9b.3f.bf.bb.ef.7c.59.fc.6b.fb.9f.fc.ff.ff.37.ef:44
hostname "Aruba-Stack-2930F"

Note: No Connect the cables for the VSF.

Switch 1:

vsf
   enable domain 1
   member 1
      type "JL558A" mac-address 3821c7-c42800
      priority 128
      link 1 1/49-1/50
      link 1 name "I-Link1_1"
      link 2 name "I-Link1_2"
      exit
   member 2
      type "JL558A" mac-address 3821c7-c45940
      priority 128
      link 1 2/49-2/50
      link 1 name "I-Link1_1"
      link 2 name "I-Link2_2"
      exit

Switch 2:

vsf
   enable domain 1
   member 1
      type "JL558A" mac-address 3821c7-c45940
      priority 128
      link 1 1/49-1/50
      link 1 name "I-Link1_1"
      link 2 name "I-Link1_2"
      exit

Note: Connect the cables for the VSF, only after making the previous configurations.  For this example 1/49 and 
1/50 of each Switch.

   port-speed 10g
   exit
 trunk 1/52,2/52 trk1 lacp
 banner motd "\nThis computing system is a St. Francis School owned asset and
 provided for the exclusive use of authorized personnel for technical
 purposes.\nAll information and data created, accessed, processed, or stored
 using this system (including personal information) are subject to monitoring,
 auditing, or review to the extent permitted by applicable law.\n\nUnauthorized
 use or abuse of this system may lead to corrective action including
 termination of employment, civil and/or criminal penalties.\n\n"
 banner exec "This computing system is a St. Francis School owned asset and
 provided for the exclusive use of authorized personnel for technical
 purposes.\nAll information and data created, accessed, processed, or stored
 using this system (including personal information) are subject to monitoring,
 auditing, or review to the extent permitted by applicable law.\n\nUnauthorized
 use or abuse of this system may lead to corrective action including
 termination of employment, civil and/or criminal penalties.\n\n"
password minimum-length 6
timesync ntp
ntp unicast
ntp server 69.89.207.199
ntp server 216.239.35.0
ntp enable
time daylight-time-rule continental-us-and-canada
time timezone -360
ip default-gateway 172.16.28.1
ip dns server-address priority 1 8.8.8.8
ip dns server-address priority 2 8.8.4.4
ip route 0.0.0.0 0.0.0.0 172.16.28.1
interface 1/52
   name "Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1"
   exit
interface 2/52
   name "Access_LAG_1_to_MDF_1_6400_IP_172.16.28.1"
   exit
snmp-server community "public" unrestricted
snmp-server enable traps snmp-authentication standard
no snmp-server enable traps snmp-authentication extended
no snmp-server enable traps macsec failures
vlan 1
   name "Default"
   untagged 1/1-1/48,1/51,2/1-2/48,2/51,Trk1
   ip address 172.16.28.27 255.255.254.0
   ip igmp
   exit
vlan 500
   name "ServerVM"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 501
   name "ServerStack"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 502
   name "ISP1"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 503
   name "ISP2"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 504
   name "ISP3"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 505
   name "LAN-UTM"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 506
   name "WIFI-AP"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 507
   name "VIP"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 508
   name "ST"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 509
   name "Staff"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 510
   name "Teacher"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 511
   name "Students"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 512
   name "Accounting"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 513
   name "Printer"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 514
   name "AC"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 515
   name "iDRAC"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 516
   name "KVM"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 517
   name "Guest"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 518
   name "VoIP"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 519
   name "IoT"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 520
   name "Cameras"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 521
   name "VC"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 522
   name "VPN"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 523
   name "VLAN523"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 524
   name "VLAN524"
   tagged Trk1
   no ip address
   ip igmp
   exit
vlan 525
   name "VLAN525"
   tagged Trk1
   no ip address
   ip igmp
   exit
spanning-tree Trk1 priority 4
spanning-tree config-name "sfeds-STP"
spanning-tree config-revision 1
spanning-tree mode rapid-pvst
spanning-tree vlan 1 priority 5
spanning-tree vlan 500 priority 5
spanning-tree vlan 501 priority 5
spanning-tree vlan 502 priority 5
spanning-tree vlan 503 priority 5
spanning-tree vlan 504 priority 5
spanning-tree vlan 505 priority 5
spanning-tree vlan 506 priority 5
spanning-tree vlan 507 priority 5
spanning-tree vlan 508 priority 5
spanning-tree vlan 509 priority 5
spanning-tree vlan 510 priority 5
spanning-tree vlan 511 priority 5
spanning-tree vlan 512 priority 5
spanning-tree vlan 513 priority 5
spanning-tree vlan 514 priority 5
spanning-tree vlan 515 priority 5
spanning-tree vlan 516 priority 5
spanning-tree vlan 517 priority 5
spanning-tree vlan 518 priority 5
spanning-tree vlan 519 priority 5
spanning-tree vlan 520 priority 5
spanning-tree vlan 521 priority 5
spanning-tree vlan 522 priority 5
spanning-tree vlan 523 priority 5
spanning-tree vlan 524 priority 5
spanning-tree vlan 525 priority 5
spanning-tree priority 5
allow-unsupported-transceiver
no tftp server
loop-protect trap loop-detected
no autorun
no dhcp config-file-update
no dhcp image-file-update
password manager

Aruba-Stack-2930F(config)#

— Antonio Perez 2024/07/23 22:16