![](/html/94/94c0/94c0cb98b7739e9548e4c4e54b1c04e44c3d47929f293baf384034dc67ef9d32/bg1.png)
DATA SHEET
ARUBA 3810 SWITCH SERIES
PRODUCT OVERVIEW
The Aruba 3810 Switch Series is an industr y-leading mobile
campus access solution for enterprises, SMBs, and branch
oce networks. With HPE Smart Rate multi-gigabit ports for
high-speed IEEE 802.11ac devices, the Aruba 3810 will prepare
your network for tomorrow. Right-size deployment and back
haul capacity with modular 10GbE and 40GbE uplinks.
Full PoE+ provisioning available on 48-ports. Dual, redundant,
hot-swappable power supplies and innovative backplane
stacking technology delivers resiliency and scalability in a
convenient 1U form factor. Advanced Layer 2 and 3 feature
set with OSPF, IPv6, IPv4 BGP, Tunneled node, robust QoS, and
policy-based routing are included with no software licensing.
With support for OpenFlow, the Aruba 3810 is ready to
take advantage of SDN applications such as HPE Network
Visualizer, HPE Network Optimizer, and HPE Network
Protector applications. Easy to deploy and manage with
advanced security and network management tools like Aruba
ClearPass Policy Manager and Aruba AirWave. With support
from Aruba Central, you can quickly set up remote branch
sites with little or no IT support.
FEATURES AND BENEFITS
Software-dened networking
• OpenFlow is a key technology that enables SDN by
allowing separation of the data (packet forwarding) and
control (routing decision) paths
Unied wired and wireless
• Aruba ClearPass Policy Manager provides proling,
authentication, and policy management across multi-
vendor wired and wireless networks
• HTTP redirect function supports HPE Intelligent Management
Center (IMC) bring your own device (BYOD) solution
• Switch auto-conguration automatically congures switch
for dierent settings such as VLAN, CoS, PoE max power,
and PoE priority when Aruba AP is detected
• User Role a set of switch-based policies in areas such
as security, authentication, and QoS. A User Role can
be assigned to a group of users or devices, using switch
conguration or ClearPass
KEY FEATURES
• Advanced Layer 3 switch series with backplane
stacking, low latency and resiliency
• Security and network management tools with
ClearPass Policy Manager, AirWave and
Central support
• Modular line rate 10GbE and 40GbE ports for
wireless aggregation
• HPE Smart Rate for high-speed multi-gigabit
capacity and PoE+ power
• Optimized for innovative SDN applications with
OpenFlow support
• Per-port Tunneled Node provide secured tunnel to
transport network trac on a per-port basis to Aruba
Controller. Authentication and network policies will be
applied and enforced at the Controller
• NEW Static IP Visibility allows ClearPass to do accounting
for clients with static IP address
Quality of Service (QoS)
• Advanced classier-based QoS classies trac using multiple
match criteria based on Layer 2, 3, and 4 information; applies
QoS policies such as setting priority level and rate limit to
selected trac on a per-port or per-VLAN basis
• Layer 4 prioritization enables prioritization based on
TCP/UDP port numbers
• Class of Service (CoS) sets the IEEE 802.1p priority tag
based on IP address, IP Type of Service (ToS), Layer 3
protocol, TCP/UDP port number, source port, and DiServ
• Bandwidth shaping
- Port-based rate limiting provides per-port ingress-/
egress-enforced increased bandwidth
![](/html/94/94c0/94c0cb98b7739e9548e4c4e54b1c04e44c3d47929f293baf384034dc67ef9d32/bg2.png)
DATA SHEET
ARUBA 3810 SWITCH SERIES
- Classier-based rate limiting uses an access control list
(ACL) to enforce increased bandwidth for ingress trac
on each port
- Reduced bandwidth provides per-port, per-queue
egress-based reduced bandwidth
• Remote intelligent mirroring mirrors selected ingress/egress
trac based on an ACL, port, MAC address, or VLAN to a
local or remote HPE 8200 zl, 6600, 6200 yl, 5400 zl, 5400R,
or 3500 Switch anywhere on the network
• Remote monitoring (RMON), Extended RMON (XRMON),
®
and sFlow
v5 provide advanced monitoring and reporting
capabilities for statistics, history, alarms, and events
• Trac prioritization allows real-time trac classication
into eight priority levels that are mapped to eight queues
Management
• NEW Aruba Central support Cloud based management
platform oers simple, secure, and cost eective way to
manage switches
• Friendly port names allows assignment of descriptive
names to ports
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
advertises and receives management information from
adjacent devices on a network, facilitating easy mapping
by network management applications
• Command authorization leverages RADIUS to link a
custom list of CLI commands to an individual network
administrator’s login; an audit trail documents activity
• Multiple conguration les stores easily to the ash image
• Dual ash images provides independent primary and
secondary operating system les for backup while upgrading
• Out-of-band Ethernet management port enables
management over a separate physical management
network; and keeps management trac segmented from
network data trac
• Comware CLI
- Comware-compatible CLI bridges the experience of
Hewlett Packard Enterprise (HPE) Comware CLI users
who are using the ArubaOS-Switch CLI
- Display and fundamental Comware CLI commands are
natively embedded in the switch CLI; display output is
formatted as on Comware-based switches; fundamental
commands provide Comware-familiar initial switch setup
- Conguration Comware CLI commands when Comware
commands are entered, CLI help is elicited to formulate
the correct ArubaOS-Switch software CLI command
• Zero-Touch Provisioning (ZTP) simplied installation of the
switch infrastructure using Aruba Activate-based or DHCP-
based process with AirWave Network Management
• Unidirectional Link Detection (UDLD) supports HPE UDLD
and DLDP protocols to monitor a cable between two
switches and shut down the ports on both ends if a broken
link is detected, preventing network problems such as loops
• NEW IP SLA for Voice Monitor quality of voice trac with
UDP Jitter and UDP Jitter for VoIP tests
Connectivity
• Jumbo frames on Gigabit Ethernet and 10-Gigabit Ethernet
ports, jumbo frames allow high-performance remote
backup and disaster-recovery services
• IEEE 802.3at PoE+ provides up to 30 W per port to IEEE
802.3at-complaint PoE/PoE+-powered devices such as
video IP phones, IEEE 802.11n wireless access points, and
advanced pan/zoom/tilt security cameras
• Pre-standard PoE support detects and provides power to
pre-standard PoE devices (refer to the list of supported
devices in the product FAQs, which can be accessed at
www.hpe.com/networking)
• Choice of uplinks
- SFP+ uplink models provide ber-optic (up to 70 km) or
direct-attach-cable (DAC) connectivity
- 10GBASE-T uplink models oer 10GbE speeds, using
standard RJ-45 connectors and standard twisted-pair
cabling up to 100 m
• Auto-MDIX provides automatic adjustments for straight-
through or crossover cables on all RJ-45 ports
• IPv6
- IPv6 host enables switch management in an IPv6 network
- Dual stack (IPv4 and IPv6) transitions IPv4 to IPv6,
supporting connectivity for both protocols
- MLD snooping forwards IPv6 multicast trac to the
appropriate interface
- IPv6 ACL/QoS supports ACL and QoS for IPv6 trac
- IPv6 routing supports static, RIPng, OSPFv3 routing
protocols
- 6in4 tunneling supports encapsulation of IPv6 trac in
IPv4 packets
- Security provides RA guard, DHCPv6 protection, dynamic
IPv6 lockdown, and ND snooping
![](/html/94/94c0/94c0cb98b7739e9548e4c4e54b1c04e44c3d47929f293baf384034dc67ef9d32/bg3.png)
DATA SHEET
ARUBA 3810 SWITCH SERIES
Performance
• Selectable queue congurations allows for increased
performance by selecting the number of queues
and associated memory buering that best meet the
requirements of the network applications
• Energy-ecient design
- 80 PLUS Silver Certied Power Supply increases power
eciency and savings
- Energy-ecient Ethernet (EEE) support reduces power
consumption in accordance with IEEE 802.3az
• Meshed stacking technology
- High-performance stacking provides up to 336 Gbps of
stacking throughput; each 4-port stacking module can
support up to 42 Gbps in each direction per stacking port
- Ring, chain, and mesh topologies support up to a
10-member ring or chain and 5-member fully meshed
stacks; meshed topologies oer increased resiliency vs. a
standard ring
- Virtualized switching provides simplied management as
the switches appear as a single chassis when stacked
• Aruba Provision ASIC architecture is designed with the
latest ProVision ASIC, providing very low latency, increased
packet buering, and adaptive power consumption
Resiliency and high availability
• Virtual Router Redundancy Protocol (VRRP) allows groups of
two routers to back each other up dynamically to create highly
available routed environments in IPv4 and IPv6 networks
• Nonstop switching and routing improves network
availability to better support critical applications, such as
unied communication and mobility; trac will continue to
be forwarded during failovers, when the backup member
of the stack becomes the commander
• IEEE 802.3ad Link Aggregation Protocol (LACP) and Hewlett
Packard Enterprise port trunking support up to 144 trunks,
each with up to 8 links (ports) per trunk
• IEEE 802.1s Multiple Spanning Tree provides high link
availability in multiple VLAN environments by allowing
multiple spanning trees; provides legacy support for IEEE
802.1d and IEEE 802.1w
• Dual hot-swappable power supplies
- Increased resiliency provides secondary power supply
to enable complete switch power redundancy in case of
power line or supply failure
- Increased PoE+ power provides the secondary power
supply to increase the total available PoE+ power
• Distributed trunking enables loop-free and redundant
network topology without using Spanning Tree Protocol;
allows a server or switch to connect to two switches using
one logical trunk for redundancy and load sharing
• SmartLink provides easy-to-congure link redundancy of
active and standby links
Layer 2 switching
• IEEE 802.1ad QinQ increases the scalability of an Ethernet
network by providing a hierarchical structure; connects
multiple LANs on a high-speed campus or metro network
• VLAN support and tagging supports the IEEE 802.1Q
standard and 4096 VLANs simultaneously
• IEEE 802.1v protocol VLANs isolate select non-IPv4
protocols automatically into their own VLANs
• MAC-based VLAN provides granular control and security;
uses RADIUS to map a MAC address/user to specic VLANs
• Rapid Per-VLAN Spanning Tree (RPVST+) allows each
VLAN to build a separate spanning tree to improve link
bandwidth usage; is compatible with PVST+
• HPE switch meshing dynamically load balances across
multiple active redundant links to increase available
aggregate bandwidth; allows concurrent Layer 3 routing
• GVRP and MVRP allows automatic learning and dynamic
assignment of VLANs
Layer 3 services
• Loopback interface address denes an address in Routing
Information Protocol (RIP) and Open Shortest Path First
(OSPF), improving diagnostic capability
• Route maps provide more control during route
redistribution; allow ltering and altering of route metrics
• User datagram protocol (UDP) helper function allows
UDP broadcasts to be directed across router interfaces to
specic IP unicast or subnet broadcast addresses; and helps
prevent server spoong for UDP services such as DHCP
• DHCP server centralizes and reduces the cost of IPv4
address management
• Bidirectional Forwarding Detection (BFD) enables link
connectivity monitoring and reduces network convergence
time for OSPFv2, and VRRP
Layer 3 routing
• Static IP routing provides manually congured routing for
both IPv4 and IPv6 networks
• OSPF provides OSPFv2 for IPv4 routing and OSPFv3 for
IPv6 routing
• Policy-based routing makes routing decisions based on
policies set by the network administrator
![](/html/94/94c0/94c0cb98b7739e9548e4c4e54b1c04e44c3d47929f293baf384034dc67ef9d32/bg4.png)
DATA SHEET
ARUBA 3810 SWITCH SERIES
• Border Gateway Protocol (BGP) provides IPv4 Border Gateway
Protocol routing, which is scalable, robust, and exible
• Routing Information Protocol (RIP) provides RIPv1, RIPv2,
and RIPng
Security
• Source-port ltering allows only specied ports to
communicate with each other
• RADIUS/TACACS+ eases switch management security
administration by using a password authentication server
• Secure shell encrypts all transmitted data for secure
remote CLI access over IP networks
• Secure Sockets Layer (SSL) encrypts all HTTP trac,
allowing secure access to the browser-based management
GUI in the switch
• Port security allows access only to specied MAC addresses,
which can be learned or specied by the administrator
• MAC address lockout prevents particular congured MAC
addresses from connecting to the network
• Detection of malicious attacks monitors 10 types of
network trac and sends a warning when an anomaly that
potentially can be caused by malicious attacks is detected
• Secure FTP allows secure le transfer to and from the
switch; protects against unwanted le downloads or
unauthorized copying of a switch conguration le
• Switch management logon security helps secure switch CLI
logon by optionally requiring either RADIUS or TACACS+
authentication
• Secure management access delivers secure encryption of
all access methods (CLI, GUI, or MIB) through SSHv2, SSL,
and/or SNMPv3
• ICMP throttling defeats ICMP denial-of-service attacks
by enabling any switch port to automatically throttle
ICMP trac automatically
• Identity-driven ACL enables implementation of a highly
granular and exible access security policy and VLAN
assignment specic to each authenticated network user
• STP BPDU port protection blocks Bridge Protocol Data
Units (BPDUs) on ports that do not require BPDUs,
preventing forged BPDU attacks
• Dynamic IP lockdown works with DHCP protection to block
trac from unauthorized hosts, preventing IP source
address spoong
• DHCP protection blocks DHCP packets from unauthorized
DHCP servers, preventing denial-of-service attacks
• Dynamic ARP protection blocks ARP broadcasts from
unauthorized hosts, preventing eavesdropping or theft of
network data
• STP root guard protects the root bridge from malicious
attacks or conguration mistakes
• Management Interface Wizard helps secure management
interfaces such as SNMP, telnet, SSH, SSL, Web, and USB at
the desired level
• Security banner displays a customized security policy when
users log in to the switch
• Switch CPU protection provides automatic protection
against malicious network trac trying to shut down
the switch
• ACLs provide ltering based on the IP eld, source/
destination IP address/subnet and source/destination
TCP/UDP port number on a per-VLAN or per-port basis
• Multiple authentication methods
- IEEE 802.1X authenticates multiple IEEE 802.1X users per
port; prevents a user from “piggybacking” on another
user’s authentication
- Web-based authentication authenticates from Web
browser for clients that do not support 802.1X supplicant
- MAC-based authentication authenticates client with the
RADIUS server based on client’s MAC address
- Concurrent authentication modes enables a switch port
to accept up to 32 sessions of 802.1X, Web, and MAC
authentication
• Private VLAN provides network security by restricting peer-
to-peer communication to prevent a variety of malicious
attacks; typically a switch port can only communicate with
other ports in the same community and/or an uplink port,
regardless of VLAN ID or destination MAC address
Convergence
• IP multicast snooping (data-driven IGMP) prevents ooding
of IP multicast trac
• LLDP-MED (Media Endpoint Discovery) denes a standard
extension of LLDP that stores values for parameters such
as QoS and VLAN to congure network devices such as IP
phones automatically
• PoE allocations supports multiple methods (automatic,
IEEE 802.3af class, LLDP-MED, or user-specied) to allocate
PoE power for more ecient energy savings
• IP multicast routing includes PIM sparse and dense modes
to route IP multicast trac
![](/html/94/94c0/94c0cb98b7739e9548e4c4e54b1c04e44c3d47929f293baf384034dc67ef9d32/bg5.png)
DATA SHEET
ARUBA 3810 SWITCH SERIES
• Auto VLAN conguration for voice
- RADIUS VLAN uses a standard RADIUS attribute
and LLDP-MED to congure a VLAN automatically for
IP phones
- CDPv2 uses CDPv2 to congure legacy IP phones
• Local MAC Authentication assigns attributes such as VLAN
and QoS using locally congured prole that can be a list
of MAC prexes
SPECIFICATIONS
Aruba 3810M 24G 1-slot Switch
(JL071A)
Included accessories
1 Aruba 3810 Switch Fan Tray
(JL088A)
I/O ports and slots
24 RJ-45 autosensing 10/100/1000
ports (IEEE 802.3 Type 10BASE-T,
IEEE 802.3u Type 100BASE-TX, IEEE
802.3ab Type 1000BASE-T); Duplex:
10BASE-T/100BASE-TX: half or full;
1000BASE-T: full only; Ports 1 – 24
support MACSec
1 open module slot
Supports a maximum of 4 SFP+
ports or 1 40GbE ports, with
optional module
Additional ports and slots
1 stacking module slot
1 RJ-45 serial console port
1 RJ-45 out-of-band management
port
1 dual-personality (RJ-45 or USB
micro-B)
Power supplies
2 power supply slots
1 minimum power supply
required (ordered separately)
Fan tray
Includes:
1 x JL088A
1 fan tray slot
Switch ships with 1 JL088A fan tray
installed. Spares ordered separately.
Warranty and support
• Limited Lifetime Warranty
See www.hpe.com/networking/warrantysummary for
warranty and support information included with your
product purchase.
• Software releases to nd software for your product, refer
to www.hpe.com/networking/support; for details on the
software releases available with your product purchase,
refer to www.hpe.com/networking/warrantysummary
Aruba 3810M 48G 1-slot Switch
(JL072A)
1 Aruba 3810 Switch Fan Tray
(JL088A)
48 RJ-45 autosensing 10/100/1000
ports (IEEE 802.3 Type 10BASE-T,
IEEE 802.3u Type 100BASE-TX, IEEE
802.3ab Type 1000BASE-T); Duplex:
10BASE-T/100BASE-TX: half or full;
1000BASE-T: full only; Ports 1 – 48
support MACSec
1 open module slot
Supports a maximum of 4 SFP+
ports or 2 40GbE ports, with
optional module
1 stacking module slot
1 RJ-45 serial console port
1 RJ-45 out-of-band management
port
1 dual-personality (RJ-45 or USB
micro-B)
2 power supply slots
1 minimum power supply
required (ordered separately)
Includes:
1 x JL088A
1 fan tray slot
Switch ships with 1 JL088A fan tray
installed. Spares ordered separately.
Aruba 3810M 24G PoE+ 1-slot
Switch (JL073A)
1 Aruba 3810 Switch Fan Tray
(JL088A)
24 RJ-45 autosensing 10/100/1000
PoE+ ports (IEEE 802.3 Type
10BASE-T, IEEE 802.3u Type
100BASE-TX, IEEE 802.3ab Type
1000BASE-T, IEEE 802.3at PoE+);
Duplex: 10BASE-T/100BASE-TX: half
or full; 1000BASE-T: full only; Ports
1 – 24 support MACSec
1 open module slot
Supports a maximum of 4 SFP+
ports or 1 40GbE ports, with
optional module
1 stacking module slot
1 RJ-45 serial console port
1 RJ-45 out-of-band management
port
1 dual-personality (RJ-45 or USB
micro-B)
2 power supply slots
1 minimum power supply
required (ordered separately)
Includes:
1 x JL088A
1 fan tray slot
Switch ships with 1 JL088A fan tray
installed. Spares ordered separately.