ARUBA R0M67A User Guide

QuickSpecs

Aruba 2930M Switch Series

Overview

1

Aruba 2930M Switch Series

Product overview

The Aruba 2930M Switch Series is designed for customers creating digital workplaces that are optimized for mobile users with an
integrated wired and wireless approach. These

advanced security and
network management tools like Aruba
Central, you can quickly set up
and value with support
modular stacking
10GbE and
RIP, Access OSPF routing, Tunnel Node, PIM, VRRP and IPv6

The Aruba 2930M Switch Series provides a convenient and
Zero Touch Deployment. The switches include a limited lifetime warranty.

Key Features

•

Features and Benefits

Layer 3 access switches are easy to deploy and manage with

ClearPass Policy Manager and Aruba AirWave. With support from cloud-based Aruba

remote offices with little or no IT support. A powerful Aruba ProVision ASIC delivers performance

of the latest SDN apps with future proof programmability for tomorrow’s applications. High performance

for up to 10 switches provides simplicity, scalability with a pay as you grow approach. The 2930M supports

40GbE uplinks, Dual Modular Power Supplies, up to 1440 Watts of PoE+, HPE Smart Rate (IEEE 802.3bz), robust QoS,

with no software licensing required.

cost-effective access switch solution that can be quickly set up with

Aruba Layer 3 Switch with 10 chassis backplane stacking, static, RIP and access OSPF routing, ACLs, and robust QoS

• Advanced security and network management tools like Aruba ClearPass Policy Manager, Aruba AirWave and Aruba

Central

• Modular 10GbE or 40GbE uplinks and HPE Smart Rate (IEEE 802.3bz), up to 1440W PoE+

• Ready for innovative SDN applications with OpenFlow support

• Simple deployment with Zero Touch Provisioning

Page

QuickSpecs

Aruba 2930M Switch Series

Overview

2

Software-defined networking

Unified Wired and Wireless

Quality of Service (QoS)

Connectivity

compliant end device;

Performance

• HPE/Aruba ASIC architecture is designed with the latest HPE/Aruba ASIC, providing very low latency, increased packet

• OpenFlow supports OpenFlow 1.3 specifications to enable SDN by allowing separation of the data (packet forwarding)

and control (routing decision) paths

• ClearPass Policy Manager supports unified wired and wireless policies using Aruba ClearPass Policy Manager

• Switch auto-configuration automatically configures switch for different settings such as VLAN, CoS, PoE max power, and

PoE priority when an Aruba access point is detected.

• User role defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be

assigned to a group of users or devices, using switch configuration or ClearPass.

• Tunneled node provides a secured tunnel to transport network traffic on a per-port or per-user basis to an Aruba

Controller. Authentication and network policies will be applied and enforced at the Controller.

• HTTP redirect function supports HPE Intelligent Management Center (IMC) bring your own device (BYOD) solution

• Traffic prioritization (IEEE 802.1p) allows real-time traffic classification into eight priority levels mapped to eight queues

• Layer 4 prioritization enables prioritization based on TCP/ UDP port numbers

• Class of Service (CoS) sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol,

TCP/UDP port number, source port, and DiffServ

• Rate limiting sets per-port ingress enforced maximums and per-port, per-queue minimums

• Large buffers Provide graceful congestion management

• HPE Smart Rate (IEEE 802.3bz) connectivity 4 port HPE Smart Rate Port module available to connect to 802.11ac

• Flexible 10 Gb/s Ethernet connectivity Modular 4 port 10 Gigabit (SFP+) available

• 40Gbps Uplink port connectivity Modular 40Gbps QSFP+ port available

• Auto-MDIX provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000

• IEEE 802.3at Power over Ethernet (PoE+) provides up to 30 W per port that allows support of the latest PoE+-capable

• Pre-standard PoE support detects and provides power to pre-standard PoE devices

• IPv6

• Energy-efficient design

wireless access points

ports

devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af­eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN
deployments

- IPv6 host enables switches to be managed in an IPv6 network

- Dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6, supporting connectivity for both protocols

- MLD snooping forwards IPv6 multicast traffic to the appropriate interface

- IPv6 ACL/QoS supports ACL and QoS for IPv6 network traffic

- IPv6 routing supports static and RIPng protocols

- Security provides RA guard, DHCPv6 protection, dynamic IPv6 lockdown, and ND snooping

- 80 PLUS Gold and Platinum Certified power supplies increase power efficiency and savings

- Energy-efficient Ethernet (EEE) support reduces power consumption in accordance with IEEE 802.3az

Page

QuickSpecs

Aruba 2930M Switch Series

Overview

3

buffering, and adaptive power consumption

Convergence

Resiliency and high availability

Management

Manageability

• Multiple configuration files allow multiple configuration files to be stored to a flash image

• Selectable queue configurations allows for increased performance by selecting the number of queues and associated

memory buffering that best meet the requirements of the network applications

• Stacking Topology

- Ring Stacking Topology High Performance stacking—up to 100 Gbps of stacking throughput per switch. Each 2-

port stacking module can support up to 25Gbps in each direction per port.

- Ring topology—Supports up to 10 member stack

- Virtualized Switching Provides simplified management as the switches act as a single chassis when stacked

• IP multicast snooping and data-driven IGMP automatically prevent flooding of IP multicast traffic

• LLDP-MED (Media Endpoint Discovery) defines a standard extension of LLDP that stores values for parameters such as

QoS and VLAN to configure automatically network devices such as IP phones

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates easy mapping using network management applications

with LLDP automated device discovery protocol

• PoE and PoE+ allocations support multiple methods (automatic, IEEE 802.3at dynamic, LLDP-MED fine grain, IEEE

802.3af device class, or user-specified) to allocate and manage PoE/PoE+ power for more efficient energy savings

• Local MAC Authentication assigns attributes such as VLAN and QoS using locally configured profile that can be a list of

MAC prefixes

• IP multicast routing includes PIM sparse and dense modes to route IP multicast traffic

• Virtual Router Redundancy Protocol (VRRP) allows groups of two routers to back each other up dynamically to create

highly available routed environments in IPV4 and IPV6 networks

• IEEE 802.1s Multiple Spanning Tree provides high link availability in multiple VLAN environments by allowing multiple

spanning trees; provides legacy support for IEEE 802.1d and IEEE 802.1w

• IEEE 802.3ad link-aggregation-control protocol (LACP) and port trunking Support up to 26 static, dynamic, or distributed

trunks with each trunk having up to eight links (ports) per static trunk

• SmartLink provides easy-to-configure link redundancy of active and standby links

• Dual Hot Swappable Power Supplies

- Increased Resiliency provides secondary power supply to enable complete switch power redundancy in case or

power line or supply failure

- Increased PoE+ Power provides secondary power supply to increase the total available PoE+ power

• Aruba Central support Cloud based management platform offers simple, secure and cost effective way to manage

switches

• Zero-Touch-Provisioning (ZTP) simplifies installation of the switch infrastructure using Aruba Activate-based or DHCP-

based process with AirWave Network Management

• Out-of-band Ethernet management port enables management a separate physical management network, and keeps

management traffic segmented from network data traffic

• SNMPv1, v2, and v3 provide complete support of SNMP; provide full support of industry-standard Management

Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption

• Dual flash images provides independent primary and secondary operating system files for backup while upgrading

• Friendly port names allow assignment of descriptive names to ports

• Find-Fix-Inform finds and fixes common network problems automatically, then informs administrator

Page

QuickSpecs

Aruba 2930M Switch Series

Overview

4

•

ds of the link

Layer 2 switch

each VLAN to build a separate spanning tree to improve link bandwidth

Layer 3 services

Layer 3 routing

Security

t in conjunction with a RADIUS server to authenticate in

based environment, similar to IEEE 802.1X, to authenticate clients

• Source-port filtering allows only specified ports to communicate with each other

Software updates free downloads from the Web

• RMON, XRMON, and sFlow provide advanced monitoring and reporting capabilities for statistics, history, alarms, and

events

• Troubleshooting ingress and egress port monitoring enable network problem solving

• Unidirectional link detection (UDLD) monitors the link between two switches and blocks the ports on both en

if the link goes down at any point between the two devices

• Power down mode allows power savings while the switch is not in use by powering down most of the switch, except for a

clock which will boot up the switch on a schedule

ing

• IEEE802.1ad QinQ Increases the scalability of an Ethernet network by providing a hierarchical structure; conets multiple

• VLAN Support and Tagging supports IEEE 802.1Q (4094 VLAN IDs) and 2K VLANs simultaneously

• Jumbo packet support improves the performance of large data transfers; supports frame size of up to 9220 bytes

• IEEE 802.1v protocol VLANs isolate select non-IPv4 protocols automatically into their own VLANs

• Rapid Per-VLAN Spanning Tree (RPVST+) allows

• GVRP and MVRP allows automatic learning and dynamic assignment of VLANs

• VxLAN encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment

• IEEE 1588v2 Transparent Clock Mode1-step and end to end delay mode support critical timing Applications

• DHCP server centralizes and reduces the cost of IPv4 address management

• Static IP routing provides manually configured routing; includes ECMP capability

• 256 static and 10,000 RIP routes facilitate segregation of user data, without adding external hardware

• Routing Information Protocol (RIP) provides RIPv1, RIPv2, and RIPng routing

• Access OSPF provides OSPFv2 and OSPFv3 protocols for routing between access and the next layer on the LAN. One

LANs on a high-speed campus or metro network

usage; is compatible with PVST+

OSPF area and up to eight interfaces are supported.

• Multiple user authentication methods

- IEEE 802.1X uses an IEEE 802.1X supplicant on the clien

accordance with industry standards

- Web-based authentication provides a browser-

that do not support the IEEE 802.1X supplicant

- MAC-based authentication authenticates the client with the RADIUS server based on the client’s MAC address

• TPM-based Security

- Includes a Trusted Platform Module (TPM) for secure hardware-based generation and storage of cryptographic

keys that can be used for a variety of authentication purposes

• Authentication flexibility

- Multiple IEEE 802.1X users per port provides authentication of multiple IEEE 802.1X users per port; prevents a

user from “piggybacking” on another user’s IEEE 802.1X authentication

- Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port switch port will accept up to 32

sessions of IEEE 802.1X, Web, and MAC authentications

• Access control lists (ACLs) provide IP Layer 3 filtering based on source/destination IP address/subnet and

source/destination TCP/UDP port number

Page

QuickSpecs

Aruba 2930M Switch Series

Overview

5

•

Monitor and diagnostics

Warranty

; for details on the

RADIUS/TACACS+ eases switch management security administration by using a password authentication server

• Secure shell encrypts all transmitted data for secure remote CLI access over IP networks

• Secure Sockets Layer (SSL) encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in

the switch

• Port security allows access only to specified MAC addresses, which can be learned or specified by the administrator

• MAC address lockout prevents particular configured MAC addresses from connecting to the network

• Secure FTP allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized

copying of a switch configuration file

• Switch management logon security helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+

authentication

• Custom banner displays security policy when users log in to the switch

• STP BPDU port protection blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing

forged BPDU attacks

• DHCP protection blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks

• Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network

data

• STP root guard protects the root bridge from malicious attacks or configuration mistakes

• Identity-driven ACL enables implementation of a highly granular and flexible access security policy and VLAN assignment

specific to each authenticated network user

• Per-port broadcast throttling Configures broadcast control selectively on heavy traffic port uplinks

• Private VLAN provides network security by restricting peer-to-peer communication to prevent a variety of malicious

attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port,
regardless of VLAN ID or destination MAC address

• Digital optical monitoring of SFP+ and 1000BASE-T transceivers allows detailed monitoring of the transceiver settings

and parameters

• Limited Lifetime Warranty

See http://www.hpe.com/networking/warrantysummary
product purchase.

• Software releases to find software for your product, refer to http://www.hpe.com/networking/support

software releases available with your product purchase, refer to http://www.hpe.com/networking/warrantysummary

for warranty and support information included with your

Page

QuickSpecs

Aruba 2930M Switch Series

Configuration

6

Build To Order:

BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack-Shippable solution.

Aruba 2930M 24G 1-slot Switch

JL319A

•

• 1U - Height

See Configuration

Aruba 2930M 24G PoE+ 1-slot Switch

JL320A

•

• 1U - Heigh

See Configuration

Aruba 2930M 48G 1-slot Switch

JL321A

•

• 1U - Height

See Configuration

Aruba 2930M 48G PoE+ 1-slot Switch

JL322A

•

• 1U - Heigh

See Configuration

Configuration Rules:

NOTE 1

The following Transceivers install into this Module: (Use #0D1 or #B01 if switch is CTO) - if applicable

HPE X121 1G SFP LC LH Transceiver

J4860C

HPE X121 1G SFP LC LX Transceiver

J4859C

HPE X121 1G SFP LC SX Transceiver

J4858C

HP X122 1G SFP LC BX-D Transceiver

J9142B

HP X122 1G SFP LC BX-U Transceiver

J9143B

HPE X121 1G SFP RJ45 T Transceiver

J8177C

HPE X111 100M SFP LC FX Transceiver

J9054C

Rack Level Integration CTO Models

4 Combo Ports 10/100/1000BaseT or 100M/1G SFP Ports

• 20 10/100/1000BaseT

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

4 Combo Ports 10/100/1000BaseT PoE+ or 100M/1G SFP Ports

• 20 10/100/1000BaseT PoE+

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

NOTE: 1

NOTE: 1

4 Combo Ports 10/100/1000BaseT or 100M/1G SFP Ports

• 44 10/100/1000BaseT

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

4 Combo Ports 10/100/1000BaseT PoE+ or 100M/1G SFP Ports

• 44 10/100/1000BaseT PoE+

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

NOTE: 1

NOTE: 1

Page

QuickSpecs

Aruba 2930M Switch Series

Configuration

7

Aruba 2930M 24G 1-slot Switch

JL319A

•

• 1U - Height

See Configuration

Aruba 2930M 24G PoE+ 1-slot Switch

JL320A

•

• 1U - Height

See Configuration

Aruba 2930M 48G 1-slot Switch

JL321A

•

• 1U - Height

See Configuration

Aruba 2930M 48G PoE+ 1-slot Switch

JL322A

•

• 1U - Height

See Configuration

Configuration Rules:

NOTE 1

The following Transceivers install into this Module: (Use #0D1 or #B01 if switch is CTO) - if applicable

HPE X121 1G SFP LC LH Transceiver

J4860C

HPE X121 1G SFP LC LX Transceiver

J4859C

HPE X121 1G SFP LC SX Transceiver

J4858C

HP X122 1G SFP LC BX-D Transceiver

J9142B

HP X122 1G SFP LC BX-U Transceiver

J9143B

HPE X121 1G SFP RJ45 T Transceiver

J8177C

HPE X111 100M SFP LC FX Transceiver

J9054C

NOTE 2

If this switch is factory installed in HPE Racks, Then the J9583A#0D1 is required.

NOTE 3

If HPE CTO Switch Chassis is selected to for Rack Level Integration, Then the CTO Switch Chassis needs to
integrate (with #0D1) to the HPE Rack.

Enter the following menu selections as integrated to the CTO Model X server above if order is factory built.

4 Combo Ports 10/100/1000BaseT or 100M/1G SFP Ports

• 20 10/100/1000BaseT

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

4 Combo Ports 10/100/1000BaseT PoE+ or 100M/1G SFP Ports

• 20 10/100/1000BaseT PoE+

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

4 Combo Ports 10/100/1000BaseT or 100M/1G SFP Ports

• 44 10/100/1000BaseT

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

NOTE: 1, 2, 3

NOTE: 1, 2, 3

NOTE: 1, 2, 3

• 44 10/100/1000BaseT PoE+

• min=0 \\ max=4 SFP Transceivers

• 1 Uplink Module Slot

• 1 Stacking Module Slot

4 Combo Ports 10/100/1000BaseT PoE+ or 100M/1G SFP Ports

NOTE: 1, 2, 3

Page

QuickSpecs

Aruba 2930M Switch Series

Configuration

8

Networking

Uplink Modules

System (std 0 // max 1) User Selection (min 0 // max 1) per enclosure

Aruba 3810M/2930M 1-port QSFP+ 40GbE Module

JL078A

•

See Configuration

NOTE: 3

Aruba 3810M/2930M 4 HPE Smart Rate PoE+ Module

JL081A

•

Aruba 3810M/2930M 4-port 100M/1G/10G SFP+ MACsec Module

JL083A

•

See Configuration

NOTE: 1, 2

Configuration Rules:

NOTE 1

The following 1G Transceivers install into this Module (Use #0D1 or #B01 quoted to switch if switch is CTO) ­if applicable

HPE X121 1G SFP LC LH Transceiver

J4860C

HPE X121 1G SFP LC LX Transceiver

J4859C

HPE X121 1G SFP LC SX Transceiver

J4858C

HP X122 1G SFP LC BX-D Transceiver

J9142B

HP X122 1G SFP LC BX-U Transceiver

J9143B

HPE X121 1G SFP RJ45 T Transceiver

J8177C

HPE X111 100M SFP LC FX Transceiver

J9054C

NOTE 2

The following 10G Transceivers install into this Module (Use #0D1 or #B01 quoted to switch if switch is CTO)

- if applicable

HPE X132 10G SFP+ LC ER Transceiver

J9153A

HPE X132 10G SFP+ LC SR Transceiver

J9150A

HPE X132 10G SFP+ LC LR Transceiver

J9151A

HPE X132 10G SFP+ LC LRM Transceiver

J9152A

HPE X242 10G SFP+ to SFP+ 1m Direct Attach Copper Cable

J9281B

HPE X242 10G SFP+ to SFP+ 3m Direct Attach Copper Cable

J9283B

HPE X242 10G SFP+ to SFP+ 7m Direct Attach Copper Cable

J9285B

NOTE 3

The following 40G Transceivers install into this Module (Use #0D1 or #B01 quoted to switch if switch is CTO)

- if applicable

HPE X142 40G QSFP+ MPO SR4 Transceiver

JH231A

HPE X142 40G QSFP+ LC LR4 SM Transceiver

JH232A

HPE X142 40G QSFP+ MPO eSR4 300M Transceiver

JH233A

HPE X242 40G QSFP+ to QSFP+ 1m Direct Attach Copper Cable

JH234A

HPE X242 40G QSFP+ to QSFP+ 3m Direct Attach Copper Cable

JH235A

HPE X242 40G QSFP+ to QSFP+ 5m Direct Attach Copper Cable

JH236A

Remarks:

Watson Only Blue Note - Although all 3810M/2930M Switches are compatible with the 4 Port HPE Smart
Rate module, non PoE switches do not provide PoE power to the HPE Smart Rate Module.

1 x QSFP+ Ports

4 x HPE Smart Rate Ports

4 x 10GbE SFP+ Ports

Page