DATA SHEET
ARUBA 2540
SWITCH SERIES
PRODUCT OVERVIEW
Designed for the digital workplace, the Aruba 2540 Switch
Series is optimized for today’s mobile and IoT needs. The
switches are easy to deploy, use and manage using Aruba
AirWave or Aruba Central. Aruba ClearPass oers centralized
security and external captive portal support.
The Aruba 2540 Switch Series provides a convenient and
cost-eective wired access solution that can be quickly set
up with Zero Touch Provisioning. PoE+ models deliver power
across all access ports for wireless APs, security cameras, and
other IoT devices.
The 2540 has wire-speed backhaul bandwidth capacity with
built-in 10 GbE uplinks, robust QoS, static and RIP routing,
IPv6 and includes a limited lifetime warranty with no sof tware
licensing required.
ENHANCED FEATURES
Software-dened networks
• Supports REST APIs to enable automation of network
operations, monitoring, and troubleshooting
Unied Wired and Wireless
• Supports unied wired and wireless policies using Aruba
ClearPass Policy Manager
• Switch auto-conguration automatically congures
switches for dierent settings such as VLAN, CoS, PoE
max power, and PoE priority when an Aruba access point
is detected
• User Role denes a set of switch-based policies in areas
such as security, authentication, and QoS. A user role can
be assigned to a group of users or devices, using switch-
based local user role or download from ClearPass
• Static IP Visibility allows ClearPass to do accounting for
clients with static IP address
KEY FEATURES
• Aruba Layer 2 switch series with static and RIP
routing, ACLs, and robust QoS
• Security and network management via Aruba
ClearPass Policy Manager, Aruba AirWave and
Aruba Central
• Simple deployment with Zero Touch Provisioning
• Convenient 10 GbE uplinks and up to 370 W PoE+
• Software dened ready with REST APIs
Quality of Service (QoS)
• Trac prioritization (IEEE 802.1p) allows real-time
trac classication into eight priority levels mapped to
eight queues
• Layer 4 prioritization based on TCP/UDP port numbers
• Class of service (CoS) sets the IEEE 802.1p priority tag
based on IP address, IP Type of Service (ToS), Layer 3
protocol, TCP/UDP port number, source port, and DiServ
• Rate limiting sets per-port ingress enforced maximums
and per-port, per-queue minimums
• Large buers provide graceful congestion management
Connectivity
• Flexible 10 Gbps Ethernet with four built-in 10 Gigabit
ports (SFP+)
• Auto-MDIX provides automatic adjustments for
straight-through or crossover cables on all 10/100 and
10/100/1000 ports
• IEEE 802.3at Power over Ethernet (PoE+) provides up to
30 W per port that allows support of the latest PoE+-
capable devices such as IP phones, wireless access
points, and security cameras, as well as any IEEE 802.3af-
compliant end device; eliminates the cost of additional
electrical cabling and circuits that would otherwise be
necessary in IP phone and WLAN deployments
DATA SHEET
ARUBA 2540 SWITCH SERIES
• Pre-standard PoE support detects and provides power to
pre-standard PoE devices
• IPv6
- IPv6 host Enables switches to be managed in an
IPv6 network
- Dual stack (IPv4 and IPv6) Transitions from IPv4 to IPv6,
supporting connectivity for both protocols
- MLD snooping Forwards IPv6 multicast trac to the
appropriate interface
- IPv6 ACL/QoS Supports ACL and QoS for IPv6
network trac
- IPv6 routing Supports static and RIPng protocols
- Security Provides RA guard, DHCPv6 protection,
dynamic IPv6 lockdown, and ND snooping
Performance and Eciency
• Energy-ecient design delivers power savings
- 80 PLUS Silver Certied power supply increases
eciency and savings
- Energy-ecient Ethernet (EEE) support reduces power
consumption in accordance with IEEE 802.3az
• Designed with the latest ProVision ASIC, providing very low
latency, increased packet buering, and adaptive power
consumption
• Selectable queue congurations allow for increased
performance by selecting the number of queues
and associated memory buering that best meet the
requirements of the network applications
Convergence
• IP multicast snooping and IGMP automatically prevent
ooding of IP multicast trac
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates
easy mapping using network management applications with
LLDP automated device discovery protocol
• LLDP-MED (Media Endpoint Discovery) denes a standard
extension of LLDP that stores values for parameters such
as QoS and VLAN to congure automatically network
devices such as IP phones
• PoE and PoE+ allocations support multiple methods
(automatic, IEEE 802.3at dynamic, LLDP-MED ne grain,
IEEE 802.3af device class, or user-specied) to allocate
and manage PoE and PoE+ power for more ecient
energy savings
• Local MAC Authentication assigns attributes such as VLAN
and QoS using locally congured prole that can be a list
of MAC prexes
Resiliency and high availability
• IEEE 802.1s Multiple Spanning Tree provides high link
availability by allowing multiple spanning trees; provides
legacy support for IEEE 802.1d and IEEE 802.1w
• IEEE 802.3ad link-aggregation-control protocol (LACP)
and port trunking support up to 26 static, dynamic, or
distributed trunks with each trunk having up to eight links
(ports) per static trunk
• SmartLink provides easy-to-congure link redundancy of
active and standby links
Simplied Conguration and Management
• SNMPv1, v2, and v3 provide complete support of SNMP;
support of industry-standard Management Information
Base (MIB) plus private extensions; SNMPv3 supports
increased security using encryption
• Zero-Touch Provisioning (ZTP) simplies installation of the
switch using Aruba Activate or a DHCP-based process with
AirWave Network Management
• Flexible management with same hardware – Supports
both cloud-based Central and on-premise AirWave without
ripping and replacing switching infrastructure
• Aruba Central cloud-based management platform oers a
simple, secure, and cost-eective way to manage switches
Manageability
• Dual ash images provide independent primary
and secondary operating system les for backup
while upgrading
• Friendly port names allow assignment of descriptive
names to ports
• Find-Fix-Inform nds and xes common network
problems automatically, then informs administrator
• Multiple conguration les allow multiple conguration
les to be stored to a ash image
• Software updates free downloads from the Web
• RMON, XRMON, and sFlow® provide advanced monitoring
and reporting capabilities for statistics, history, alarms,
and events
• Troubleshooting ingress and egress port monitoring
enable more ecient problem solving
• Unidirectional link detection (UDLD) monitors the link
between two switches and blocks the ports on both ends
of the link if the link goes down at any point between the
two devices
DATA SHEET
ARUBA 2540 SWITCH SERIES
Layer 2 switching
• VLAN support and tagging supports IEEE 802.1Q (4,094
VLAN IDs) and 512 VLANs simultaneously
• Jumbo packet support improves the performance of large
data transfers; supports frame size of up to 9,220 bytes
• IEEE 802.1v protocol VLANs isolate select non-IPv4
protocols automatically into their own VLANs
• Rapid per-VLAN spanning tree (RPVST+) allows each
VLAN to build a separate spanning tree to improve link
bandwidth usage; is compatible with PVST+
• GVRP and MVRP allow automatic learning and dynamic
assignment of VLANs
Layer 3 services
• DHCP server centralizes and reduces the cost of IPv4
address management
Layer 3 routing
• Static IP routing provides manually congured routing;
includes ECMP capability
• 256 static and 2,000 RIP routes facilitate segregation of
user data, without adding external hardware
• Routing Information Protocol (RIP) provides RIPv1, RIPv2,
and RIPng routing
Security
• Multiple user authentication methods
- Uses an IEEE 802.1X supplicant on the client in
conjunction with a RADIUS server to authenticate in
accordance with industry standards
- Supports web-based authentication
- Supports MAC-based authentication
• Authentication exibility
- Multiple IEEE 802.1X users per port provides
authentication of multiple devices on a single port;
prevents a user from piggybacking on another user’s
IEEE 802.1X authentication
- Concurrent IEEE 802.1X, Web, and MAC authentication
schemes per port switch port will accept up to 32
sessions of IEEE 802.1X, Web, and MAC authentications
• Access control lists (ACLs) provide IP Layer 3 ltering
based on source and destination IP address or subnet and
source and destination TCP/UDP port number
• Source-port ltering allows only specied ports to
communicate with each other
• RADIUS/TACACS+ eases switch management security
administration by using a password authentication server
• Secure shell encrypts all transmitted data for secure
remote CLI access over IP networks
• Secure Sockets Layer (SSL) encrypts all HTTP trac,
allowing secure access to the browser-based management
GUI in the switch
• Port security allows access only to specied MAC
addresses, which can be learned or specied by
the administrator
• MAC address lockout prevents particular congured MAC
addresses from connecting to the network
• Secure FTP allows secure le transfer to and from the
switch; protects against unwanted le downloads or
unauthorized copying of a switch conguration le
• Switch management logon security helps secure switch
CLI logon by optionally requiring either RADIUS or
TACACS+ authentication
• Custom banner displays security policy when users log in
to the switch
• STP BPDU port protection blocks Bridge Protocol Data
Units (BPDUs) on ports that do not require BPDUs,
preventing forged BPDU attacks
• DHCP protection blocks DHCP packets from unauthorized
DHCP servers, preventing denial-of-service attacks
• Dynamic ARP protection blocks ARP broadcasts from
unauthorized hosts, preventing eavesdropping or theft of
network data
• Dynamic IP lockdown works with DHCP protection to block
trac from unauthorized hosts, preventing IP source
address spoong
• STP root guard protects the root bridge from malicious
attacks or conguration mistakes
• Identity-driven ACL enables implementation of a highly
granular and exible access security policy and VLAN
assignment specic to each authenticated network user
• Per-port broadcast throttling congures broadcast control
selectively on heavy trac port uplinks
• Monitor and diagnostics digital optical monitoring of SFP+
and 1000BASE-T transceivers allow detailed monitoring of
the transceiver settings and parameters
Warranty and support
• Limited Lifetime Warranty
See www.hpe.com/networking/warrantysummary for
warranty and support information included with your
product purchase
• Software releases to nd software for your product, refer
to www.hpe.com/networking/support ; for details on the
software releases available with your product purchase,
refer to www.hpe.com/networking/warrantysummary
SPECIFICATIONS
DATA SHEET
ARUBA 2540 SWITCH SERIES
Aruba 2540 24G 4SFP+ Switch
(JL354A)
I/O ports and slots
24 RJ-45 autosensing 10/100/1000 ports
(IEEE 802.3 Type 10BASE-T, IEEE 802.3u Type
100BASE-TX, IEEE 802.3ab Type 1000BASE-T); Duplex:
10BASE-T/100BASE-TX: half or full; 4 SFP+ 1/10GbE
ports; PHY-less
Additional ports and slots
1 dual-personality (RJ-45 or USB micro-B) serial
console port
Physical characteristics
Dimensions 17.42(w) x 7.88(d) x 1.73(h) in. (44.25 x 20.02 x 4.39 cm)
(1U height)
Weight 5.31 lb (2.41 kg) 6.83 lb (3.10 kg)
Memory and processor Dual Core ARM® Coretex A9 @ 1016 MHz, 1 GB
DDR3 SDRAM; Packet buer size: 12.38 MB
4.5 MB Ingress/7.875 MB Egress, 4 GB eMMC
Performance
1,000 MB Latency < 3.8 µs (64-byte packets) < 3.8 µs (64-byte packets)
10 Gbps Latency < 1.6 µs (64-byte packets) < 1.6 µs (64-byte packets)
Throughput up to 95.2 Mpps up to 112.0 Mpps
Switching capacity 128 Gbps 176 Gbps
Routing table size 2,000 entries (IPv4), 1,000 entries (IPv6) 2,000 entries (IPv4), 1,000 entries (IPv6)
MAC address table size 16,384 entries 16,384 entries
Environment
Operating temperature 32°F to 113°F (0°C to 45°C); up to 5,000 Feet,
-0°C to 40°C (32°F to 104°F) up to 10,000 Feet
Operating relative humidity 15% to 95% @ 104°F (40°C), noncondensing 15% to 95% @ 104°F (40°C), noncondensing
Nonoperating/Storage
temperature
Nonoperating/Storage
relative humidity
Acoustic Power: 49.7 dB, Pressure: 37.1 dB Power: 54.1 dB, Pressure: 40.2 dB
Airow direction Side-to-side Side-to-side
Electrical characteristics
Frequency 50/60 Hz 50/60 Hz
Maximum heat dissipation 100 BTU/hr (105.5 kJ/hr) 159 BTU/hr (167.74 kJ/hr)
Voltage 100–127/200–240 VAC, rated 100–127/200–240 VAC, rated
Current 0.6/0.4 A 0.9/0.6 A
Maximum power rating 29.3 W 46.6 W
Idle power 19.5 W 32.7 W
Notes Idle power is the actual power consumption of the device
-40°F to 158°F (-40°C to 70°C); up to 15,000 Feet -40°F to 158°F (-40°C to 70°C); up to 15,000 Feet
15% to 95% @ 149°F (65°C), noncondensing 15% to 95% @ 149°F (65°C), noncondensing
with no ports connected. Maximum power rating and
maximum heat dissipation are the worst-case theoretical maximum numbers provided for planning the
infrastructure with fully loaded PoE (if equipped), 100%
trac, all ports plugged in, and all modules populated.
Aruba 2540 48G 4SFP+ Switch
(JL355A)
48 RJ-45 autosensing 10/100/1000 ports
(IEEE 802.3 Type 10BASE-T, IEEE 802.3u Type
100BASE-TX, IEEE 802.3ab Type 1000BASE-T); Duplex:
10BASE-T/100BASE-TX: half or full; 1000BASE-T: full
only 4 SFP+ 1/10GbE ports; PHY-less
1 dual-personality (RJ-45 or USB micro-B) serial
console port
17.42(w) x 9.7(d) x 1.73(h) in. (44.25 x 24.63 x 4.39 cm)
(1U height)
Dual Core ARM Coretex A9 @ 1016 MHz, 1 GB
DDR3 SDRAM; Packet buer size: 12.38 MB
4.5 MB Ingress/7.875 MB Egress, 4 GB eMMC
32°F to 113°F (0°C to 45°C); up to 5,000 Feet,
-0°C to 40°C (32°F to 104°F) up to 10,000 Feet
Idle power is the actual power consumption of the device
with no ports connected. Maximum power rating and
maximum heat dissipation are the worst-case theoretical maximum numbers provided for planning the
infrastructure with fully loaded PoE (if equipped), 100%
trac, all ports plugged in, and all modules populated.