HEWLETT PACKARD ENTERPRISE HP 2930M-40G Datasheet

DATA SHEET

ARUBA 2930M SWITCH SERIES

PRODUCT OVERVIEW

The Aruba 2930M Switch Series is designed for customers

creating smart digital workplaces that are optimized for

mobile users with an integrated wired and wireless approach.

These Layer 3 network switches are easy to deploy and

manage with advanced security and network management

tools like Aruba ClearPass Policy Manager and Aruba AirWave

and cloud-based Aruba Central.

A powerful Aruba ProVision ASIC delivers performance, robust

feature support, and value with exible programmability for

the latest applications. High performance modular stacking

for up to 10 switches provides pay as you grow scalability and

simplicity. The exible 2930M supports wire speed 10GbE

and 40GbE uplinks, redundant dual modular power supplies

for up to 1440 Watts of PoE, and new models with industry

standard IEEE 802.3bt Class 6 that provide up to 60W of PoE

per port. HPE Smart Rate multi-gigabit Ethernet models paves

the way for high speed APs and IoT devices by delivering fast

connectivity and PoE power using existing campus cabling.

The feature rich 2930M supports a robust QoS, RIP, Access

OSPF routing, PIM, VRRP, IPv6 and Dynamic Segmentation for

unied and secure access.

The Aruba 2930M Switch Series provides a simple and

powerful access layer solution that can be quickly set up at

branch oces with little or no IT support using Zero Touch

Deployment. The switches include a Limited Lifetime Warranty.

KEY FEATURES

• Aruba Layer 3 Switch with 10 chassis backplane

stacking, static, RIP and access OSPF routing,

Dynamic Segmentation, ACLs, SDN, and robust QoS

• Advanced security and network management via

Aruba ClearPass Policy Manager, Aruba AirWave

and Aruba Central

• Modular 10GbE or 40GbE uplinks and HPE Smart

Rate (IEEE 802.3bz), with up to 1440W PoE

• Models with 24 ports of HPE Smart Rate with

IEEE 802.3bz

• Up to 60W PoE per port (IEEE 802.3bt Class 6) for

high power devices

• Software dened ready with REST APIs and

OpenFlow support

• Simple deployment with Zero Touch Provisioning

ENHANCED CAPABILITIES

Software-dened networks

• Supports multiple programmatic interfaces, including REST

APIs and Openow 1.0 and 1.3, to enable automation of

network operations, monitoring, and troubleshooting

Unied Wired and Wireless Support

• Supports unied wired and wireless policies using Aruba

ClearPass Policy Manager

• Switch auto-conguration automatically congures switch

settings such as VLAN, CoS, PoE max power, and PoE

priority when an Aruba access point is detected

• User role denes a set of switch-based policies in areas

such as security, authentication, and QoS. A user role can

be assigned to a group of users or devices, using switch-

based local user role or download from ClearPass

• For improved network simplicity and security, Aruba

Dynamic Segmentation automatically enforces user,

device and application-aware policies on Aruba wired

and wireless networks. Automated device proling, role-

based access control, and Layer 7 rewall features deliver

enhanced visibility and performance for a better overall

experience for both IT and end-users alike

DATA SHEET

ARUBA 2930M SWITCH SERIES

• Dynamic Segmentation provides a secure tunnel that

transports network trac on a per-port or per-user role

basis to an Aruba Controller. In a per-user role Tunnel

Node, users are authenticated by the ClearPass Policy

Manager which directs trac to be tunneled to an Aruba

controller or switch locally

Quality of Service (QoS)

• Trac prioritization (IEEE 802.1p) for real-time

classication into eight priority levels mapped to

eight queues

• Layer 4 prioritization based on TCP/UDP port numbers

• Class of Service (CoS) sets the IEEE 802.1p priority tag

based on IP address, IP Type of Service (ToS), Layer 3

protocol, TCP/UDP port number, source port, and DiServ

• Rate limiting sets per-port ingress enforced maximums

and per-port, per-queue minimums

• Large buers provide graceful congestion management

• Unknown Unicast Rate Limiting throttles unicast packets

with unknown destination addresses and limits ooding

on the VLAN

Connectivity

• HPE Smart Rate multi-gigabit (IEEE 802.3bz) Ethernet

supports high speed wireless access points. Flexible

congurations include:

 - Switch with 24 Smart Rate ports supporting high power

IEEE 802.3bt Class 6 (60W)

 - Switch with 40 gigabit ports and 8 Smart Rate ports

supporting high power IEEE 802.3bt Class 6 (60W)

 - All 2930M switches support optional 4 port Smart

Rate module

• Flexible 10 Gbps Ethernet connectivity—Modular 4 port

10 Gigabit (SFP+) available

• Models with IEEE 802.3bt Class 6 PoE provides up to 60 W

per port for IEEE 802.3bt compatible devices

• 40 Gbps Uplink port connectivity—Modular 40 Gbps

QSFP+ port available

• Auto-MDIX provides automatic adjustments for

straight-through or crossover cables on all 10/100 and

10/100/1000 ports

• IEEE 802.3at Power over Ethernet (PoE+) provides up

to 30 W per port that allows support of the latest

PoE+-capable devices such as IP phones, wireless

access points, and security cameras, as well as any

IEEE 802.3af-compliant end device; eliminates the

cost of additional electrical cabling and circuits that

would otherwise be necessary in IP phone and WLAN

deployments

• Support for pre-standard PoE detects and provides power

to pre-standard PoE devices

• IPv6

 - IPv6 host enables switches to be managed in an

IPv6 network

 - Dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6,

supporting connectivity for both protocols

 - MLD snooping forwards IPv6 multicast trac to the

appropriate interface

 - IPv6 ACL/QoS supports ACL and QoS for IPv6

network trac

 - IPV6 Routing supports Static, RIPng and OSPFv3

protocols

 - Security provides RA guard, DHCPv6 protection,

dynamic IPv6 lockdown, and ND snooping

Performance and Eciency

• Energy-ecient design

 - 80 PLUS Gold and Platinum Certied power supplies

increase power eciency and savings

 - Energy-ecient Ethernet (EEE) support reduces power

consumption in accordance with IEEE 802.3az

• Designed with the latest Aruba Provision ASIC, providing

very low latency, increased packet buering, and adaptive

power consumption

• Selectable queue congurations allows for increased

performance by selecting the number of queues

and associated memory buering that best meet the

requirements of the network applications

• Stacking Topology

 - High Performance stacking—up to 100 Gbps of stacking

throughput per switch. Each 2-port stacking module can

support up to 25 Gbps in each direction per port.

 - Ring topology—Supports up to 10 member stack

 - Virtualized Switching Provides simplied management as

the switches act as a single chassis when stacked

Convergence

• IP multicast snooping and data-driven IGMP automatically

prevent ooding of IP multicast trac

• LLDP-MED (Media Endpoint Discovery) denes a standard

extension of LLDP that stores values for parameters such

as QoS and VLAN to congure automatically network

devices such as IP phones

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

facilitates easy mapping using network management

applications with LLDP automated device discovery

protocol

2

DATA SHEET

ARUBA 2930M SWITCH SERIES

• PoE and PoE+ allocations support multiple methods

(automatic, IEEE 802.3 at dynamic, LLDP-MED ne grain,

IEEE 802.3af device class, or user-specied) to allocate

and manage PoE/PoE+ power for more ecient

energy savings

• PoE Class 6 allocations support increased dynamic power

up to 60W with new IEEE 802.3bt LLDP type, length, and

value (TLV) information extended to 29 octets

• Local MAC Authentication assigns attributes such as VLAN

and QoS using locally congured prole that can be a list

of MAC prexes

• IP multicast routing includes PIM sparse and dense modes

to route IP multicast trac

• Protocol Independent Multicast for IPv6 supports one-to-

many and many-to-many media casting use cases such as

IPTV over IPv6 networks

Resiliency and high availability

• Virtual Router Redundancy Protocol (VRRP) allows groups

of two routers to back each other up dynamically to

create highly available routed environments in IPV4 and

IPV6 networks

• IEEE 802.1s Multiple Spanning Tree provides high link

availability in multiple VLAN environments by allowing

multiple spanning trees; provides legacy support for IEEE

802.1d and IEEE 802.1w

• IEEE 802.3ad link-aggregation-control protocol (LACP)

and port trunking supports up to 60 static and dynamic

trunks with each trunk having up to eight links (ports) per

static trunk

• SmartLink provides easy-to-congure link redundancy of

active and standby links

• Dual Hot Swappable Power Supplies

 - Increased Resiliency provides secondary power supply

to enable complete switch power redundancy in case or

power line or supply failure

 - Increased PoE Power provides secondary power supply

to increase the total available PoE power

Simplied Conguration and Management

• Aruba Central cloud-based management platform oers

simple, secure and cost eective way to manage switches

• Zero-Touch-Provisioning (ZTP) simplies installation of

the switch infrastructure using Aruba Activate or

DHCP-based process with AirWave and Central

Network Management

• Flexible management with same hardware – Supports

both cloud-based Central and on-premise AirWave

with the same hardware ensuring change management

platform without ripping and replacing switching

infrastructure

• Built-in programmable and easy to use REST API interface

provides conguration automation for campus networks

• Out-of-band Ethernet management port enables

management on a separate physical management

network, and keeps management trac segmented from

network data trac

• SNMPv1, v2, and v3 provide complete support of SNMP;

provide full support of industry-standard Management

Information Base (MIB) plus private extensions; SNMPv3

supports increased security using encryption

Manageability

• Dual ash images provides independent primary

and secondary operating system les for backup

while upgrading

• Friendly port names allow assignment of descriptive

names to ports

• Find-Fix-Inform feature nds and xes common network

problems automatically, then informs administrator

• Supports multiple conguration les to be stored to a

ash image

• RMON, XRMON, and sFlow provide advanced monitoring

and reporting capabilities for statistics, history, alarms,

and events

• Troubleshooting ingress and egress port monitoring

enable more ecient network problem solving

• Unidirectional link detection (UDLD) monitors the link

between two switches and blocks the ports on both ends

of the link if the link goes down at any point between the

two devices

• Power down mode delivers power savings by allowing the

switch to power down most of the switch, except a clock

which will boot up the switch when scheduled.

Layer 2 switching

• IEEE802.1ad QinQ—Increases the scalability of an

Ethernet network by providing a hierarchical structure;

connects multiple LANs on a high-speed campus or

metro network

• VLAN Support and Tagging supports IEEE 802.1Q (4094

VLAN IDs) and 2K VLANs simultaneously

• Jumbo packet support improves the performance of large

data transfers; supports frame size of up to 9220 bytes

• IEEE 802.1v protocol VLANs isolate select non-IPv4

protocols automatically into their own VLANs

3

DATA SHEET

ARUBA 2930M SWITCH SERIES

• Rapid Per-VLAN Spanning Tree (RPVST+) allows each

VLAN to build a separate spanning tree to improve link

bandwidth usage; is compatible with PVST+

• GVRP and MVRP allows automatic learning and dynamic

assignment of VLANs

• VxLAN encapsulation (tunneling) protocol for overlay

network that enables a more scalable virtual

network deployment

• IEEE 1588v2 Transparent Clock Mode1-step and end to

end delay mode support critical timing Applications

Layer 3 services

• DHCP server centralizes and reduces the cost of IPv4

address management

Layer 3 routing

• Static IP routing provides manually congured routing;

includes ECMP capability

• Routing Information Protocol (RIP) provides RIPv1, RIPv2,

and RIPng routing

• Access OSPF provides OSPFv2 and OSPFv3 protocols for

routing between access and the next layer on the LAN.

One OSPF area and up to eight interfaces are supported.

• Policy-based routing uses a classier to select trac that

can be forwarded based on policy set by the network

administrator (limited to 16 next-hop routes)

Security

• Multiple user authentication methods

 - Uses an IEEE 802.1X supplicant on the client in

conjunction with a RADIUS server to authenticate in

accordance with industry standards

 - Supports web-based authentication

 - Supports MAC-based client authentication

• TPM-based Security

 - Includes a Trusted Platform Module (TPM) for

secure hardware-based generation and storage of

cryptographic keys that can be used for a variety of

authentication purposes

• Authentication exibility

 - Multiple IEEE 802.1X users per port provides

authentication of multiple devices on a single port;

prevents a user from “piggybacking” on another user’s

IEEE 802.1X authentication

 - Concurrent IEEE 802.1X, Web, and MAC authentication

schemes per port switch port will accept up to 32

sessions of IEEE 802.1X, Web, and MAC authentications

• Open Authentication Role simplies rst-time deployment

of AAA in browneld deployments by allowing full network

access for failed clients and provides instant connectivity

as soon as a client is plugged-in

• Critical Authentication Role ensures that important

infrastructure devices such as IP phones are allowed

network access even in the absence of a RADIUS server

• MAC Pinning allows non-chatty legacy devices to stay

authenticated by pinning client MAC addresses to the port

1

until the clients logo or get disconnected

• Access control lists (ACLs) provide IP Layer 3 ltering

based on source/destination IP address/subnet and

source/destination TCP/UDP port number

• Source-port ltering allows only specied ports to

communicate with each other

• Control Plane Policing: Set rate limit on control protocols

to protect CPU overload

• RADIUS/TACACS+ eases switch management security

administration by using a password authentication server

• Secure shell encrypts all transmitted data for secure

remote CLI access over IP networks

• Secure Sockets Layer (SSL) encrypts all HTTP trac,

allowing secure access to the browser-based

management GUI in the switch

• Port security allows access only to specied MAC

addresses, which can be learned or specied by

the administrator

• Radius over TLS (RadSec) allows users to use a more

secure and reliable mode of communications between

switch and radius servers over unsecure networks

• MAC address lockout prevents particular congured MAC

addresses from connecting to the network

• Secure FTP allows secure le transfer to and from the

switch; protects against unwanted le downloads or

unauthorized copying of a switch conguration le

• Switch management logon security helps secure switch

CLI logon by optionally requiring either RADIUS or

TACACS+ authentication

• Custom banner displays security policy when users log in

to the switch

• STP BPDU port protection blocks Bridge Protocol Data

Units (BPDUs) on ports that do not require BPDUs,

preventing forged BPDU attacks

• DHCP protection blocks DHCP packets from unauthorized

DHCP servers, preventing denial-of-service attacks

¹ IEEE 1588v2 (PTP) is not supported on the following 2930M models: JL323A, JL324A, R0M67A, R0M68A or 2930M modules: JL325A, JL078A, JL081A, JL083A

4

DATA SHEET

ARUBA 2930M SWITCH SERIES

• Dynamic ARP protection blocks ARP broadcasts from

unauthorized hosts, preventing eavesdropping or theft of

network data

• STP root guard protects the root bridge from malicious

attacks or conguration mistakes

• Identity-driven ACL enables implementation of a highly

granular and exible access security policy and VLAN

assignment specic to each authenticated network user

• Per-port broadcast throttling Congures broadcast

control selectively on heavy trac port uplinks

• Private VLAN provides network security by restricting

peer-to-peer communication to prevent a variety

of malicious attacks; typically a switch port can only

communicate with other ports in the same community

and/or an uplink port, regardless of VLAN ID or

destination MAC address

• IEEE 802.1AE MACsec provides security on a link between

two switch ports (1Gbps or 10Gbps or HPE Smart Rate)

using standard encryption and authentication

• Enrollment over Secure Transport (EST) enhances the

switch PKI infrastructure with a simpler, scalable and more

secure method of certicate provisioning, re-enrollment

and renewal

Monitor and diagnostics

• Digital optical monitoring of SFP+ and 1000BASE-T

transceivers allows detailed monitoring of the transceiver

settings and parameters

Warranty, services and support

• Limited Lifetime Warranty, see

https://www.arubanetworks.com/support-services/

product-warranties/ for warranty and support

information included with your product purchase

• For Software Releases and Documentation, refer to

https://asp.arubanetworks.com/downloads

• For support and services information, visit

https://www.arubanetworks.com/support-services/

arubacare/

5

SPECIFICATIONS

DATA SHEET

ARUBA 2930M SWITCH SERIES

JL319A Aruba 2930M 24G
1-slot Switch

I/O ports and slots

20 Autosensing 10/100/1000 ports
(IEEE 802.3 Type 10BASE-T, IEEE

802.3u Type 100BASETX, IEEE

802.3ab Type 1000Base-T); Duplex:
10BASE-T/100BASE-TX:half or
full;1000BASE-T:full only

4 Combo 10/100/1000BASE-T or
100/1000Mbps SFP Ports

Additional ports and slots

1 Dual Personality (RJ-45 or USB

Micro-B) serial consoleport

1 USB A port for uploading/

downloading les

1 100BASE-T Out of Band
Management Port

1 Uplink Slot 1 Uplink Slot 1 Uplink Slot

1 Stacking Module Slot 1 Stacking Module Slot 1 Stacking Module Slot

2 Power Supply Slots (power supplies
not included)

Physical characteristics

Dimensions 1.73" (Height) x 17.42" (Width) x

12.77" (Depth)

(4.39cm x 44.25cm x 32.43cm)

Weight 9.81 lbs 4.45 kg 9.92 lbs 4.50 kg 10.14 lbs 4.60 kg

Memory and Processor

Dual Core ARM Cortex A9 @
1016 MHz

1 GB DDR3 SDRAM 1 GB DDR3 SDRAM 1 GB DDR3 SDRAM

Packet Buer Size: 12.38MB and

4.5MB Ingress/7.875MB Egress

4GB eMMC 4GB eMMC 4GB eMMC

JL320A Aruba 2930M 24G PoE+
1-slot Switch

20 Autosensing 10/100/1000
ports (IEEE 802.3 Type 10BASE-T,
IEEE 802.3u Type 100BASETX,
IEEE 802.3ab Type 1000Base-T

IEEE 802.3at PoE+); Duplex:
10BASE-T/100BASE-TX:half or
full;1000BASE-T:full only

4 Combo 10/100/1000BASE-T PoE+ or

100/1000Mbps SFP Ports

1 Dual Personality (RJ-45 or USB

Micro-B) serial consoleport

1 USB A port for uploading/

downloading les

1 100BASE-T Out of Band
Management Port

2 Power Supply Slots (power supplies
not included)

1.73" (Height) x 17.42" (Width) x

12.77" (Depth)

(4.39cm x 44.25cm x 32.43cm)

Dual Core ARM Cortex A9 @

1016 MHz

Packet Buer Size: 12.38MB and

4.5MB Ingress/7.875MB Egress

JL321A Aruba 2930M 48G
1-slot Switch

44 Autosensing 10/100/1000 ports
(IEEE 802.3 Type 10BASE-T, IEEE

802.3u Type 100BASETX, IEEE

802.3ab Type 1000Base-T); Duplex:
10BASE-T/100BASE-TX:half or
full;1000BASE-T:full only

4 Combo 10/100/1000BASE-T or
100/1000Mbps SFP Ports

1 Dual Personality (RJ-45 or USB

Micro-B) serial consoleport

1 USB A port for uploading/

downloading les

1 100BASE-T Out of Band
Management Port

2 Power Supply Slots (power supplies
not included)

1.73" (Height) x 17.42" (Width) x

12.77" (Depth)

(4.39cm x 44.25cm x 32.43cm)

Dual Core ARM Cortex A9 @

1016 MHz

Packet Buer Size: 12.38MB and

4.5MB Ingress/7.875MB Egress

6