DATA SHEET
ARUBA 2930F SWITCH SERIES
PRODUCT OVERVIEW
The Aruba 2930F Switch Series is designed for customers
creating digital workplaces that are optimized for mobile
users with an integrated wired and wireless approach. These
Layer 3 access switches are easy to deploy and manage with
advanced security and network management tools like Aruba
ClearPass Policy Manager and Aruba AirWave. With support
from Aruba Central, you can quickly set up remote branch
sites with little or no IT support. A powerful Aruba ProVision
ASIC delivers performance and exibility to meet the needs
of today and tomorrow’s network programmability and
automation requirements. Stacking with Virtual Switching
Framework (VSF) provides simplicity and scalability. The
2930F supports built-in 1GbE or 10GbE uplinks, PoE+, Access
OSPF routing, Tunnel Node, robust QoS, RIP routing, and IPv6
with no software licensing required.
The Aruba 2930F Switch Series provides a convenient and cost-
eective access switch solution that can be quickly set up with
Zero Touch Provisioning and built-in 10GbE uplinks. The robust
Layer 3 feature set includes a limited lifetime warranty.
KEY FEATURES
• Aruba Layer 3 switch series with VSF stacking, static,
Rip and Access OSPF Routing, Tunnel Node, ACLs,
and robust QoS
• Consistent wired/wireless experience with Aruba
AirWave and Aruba ClearPass Policy Manager
• Convenient built-in 1GbE or 10GbE uplinks and up
to 740 W PoE+
• Ready for the software dened network with REST
APIs and OpenFlow support
• Simple deployment with Zero Touch Provisioning
and cloud-based Aruba Central support
FEATURES AND BENEFITS
Unied Wired and Wireless
• Aruba ClearPass Policy Manager supports unied wired and
wireless policies using Aruba ClearPass Policy Manager
• Switch auto-conguration automatically congures switch for
dierent settings such as VLAN, CoS, PoE max. power, and
PoE priority when an Aruba access point is detected
• User Role denes a set of switch-based policies in areas
such as security, authentication, and QoS. A user role can be
assigned to a group of users or devices, using switch-based
local user role or download from ClearPass
• Tunnel Node provides a secure tunnel that transports
network trac on a per-port or per-user role basis to an
Aruba Controller. In a per-user role Tunnel Node, users are
authenticated by the ClearPass Policy Manager which directs
trac to be tunneled to an Aruba controller or switch locally
• HTTP redirect function supports HPE Intelligent Management
Center (IMC) bring your own device (BYOD) solution
• Static IP visibility allows ClearPass to do accounting for clients
with static IP address
Software-dened networks
• Supports multiple programmatic interfaces, including REST
APIs and Openow 1.0 and 1.3, to enable automation of
network operations, monitoring, and troubleshooting
Quality of Service (QoS)
• Trac prioritization (IEEE 802.1p) Allows real-time trac
classication into eight priority levels mapped to eight queues
• Layer 4 prioritization enables prioritization based on TCP/
UDP port numbers
• Class of Service (CoS) sets the IEEE 802.1p priority tag based
on IP address, IP Type of Service (ToS), Layer 3 protocol,
TCP/UDP port number, source port, and DiServ
• Rate limiting sets per-port ingress enforced maximums and
per-port, per-queue minimums
• Large buers provide graceful congestion management
• Unknown Unicast Rate Limiting throttles unicast packets
with unknown destination addresses and limits ooding on
the VLAN
DATA SHEET
ARUBA 2930F SWITCH SERIES
Connectivity
• Flexible 10 Gb/s Ethernet connectivity four xed 10 Gigabit
ports (SFP+) available
• Auto-MDIX provides automatic adjustments for
straight-through or crossover cables on all 10/100 and
10/100/1000 ports
• IEEE 802.3at Power over Ethernet (PoE+) provides up to 30
W per port that allows support of the latest PoE+-capable
devices such as IP phones, wireless access points, and
security cameras, as well as any IEEE 802.3af-compliant
end device; eliminates the cost of additional electrical
cabling and circuits that would otherwise be necessary in
IP phone and WLAN deployments
• Pre-standard PoE support detects and provides power to
pre-standard PoE devices
• IPv6
- IPv6 host enables switches to be managed in an
IPv6 network
- Dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6,
supporting connectivity for both protocols
- MLD snooping forwards IPv6 multicast trac to the
appropriate interface
- IPv6 ACL/QoS supports ACL and QoS for IPv6 network trac
- IPv6 routing supports static and RIPng protocols
- Security provides RA guard, DHCPv6 protection,
dynamic IPv6 lockdown, and ND snooping
Performance
• Energy-ecient design
- 80 PLUS Silver Certied power supply increases power
eciency and savings
- Energy-ecient Ethernet (EEE) support reduces power
consumption in accordance with IEEE 802.3az
• Aruba Provision ASIC architecture is designed with the
latest ProVision ASIC, providing very low latency, increased
packet buering, and adaptive power consumption
• Selectable queue congurations allows for increased
performance by selecting the number of queues
and associated memory buering that best meet the
requirements of the network applications
Convergence
• IP multicast snooping and data-driven IGMP automatically
prevents ooding of IP multicast trac
• LLDP-MED (Media Endpoint Discovery) denes a standard
extension of LLDP that stores values for parameters such
as QoS and VLAN to automatically congure network
devices such as IP phones
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates
easy mapping using network management applications with
LLDP automated device discovery protocol
• PoE and PoE+ allocations support multiple methods
(automatic, IEEE 802.3at dynamic, LLDP-MED ne grain,
IEEE 802.3af device class, or user-specied) to allocate and
manage PoE/PoE+ power for more ecient energy savings
• Local MAC Authentication assigns attributes such as VLAN
and QoS using locally congured prole that can be a list
of MAC prexes
• IP multicast routing includes PIM Sparse and Dense modes
to route IP multicast trac (limited to 16 interfaces)
• Protocol Independent Multicast for IPv6 supports one-to-
many and many-to-many media casting use cases such as
IPTV over IPv6 networks
Resiliency and high availability
• Virtual Switching Framework (VSF) creates one virtual resilient
switch from up to four switches; servers or switches can be
attached using standard LACP for automatic load balancing
and high availability; simplify network operation by reduce the
need for complex protocols like Spanning Tree Protocol (STP),
Equal-Cost Multipath (ECMP), and VRRP
• IEEE 802.1s Multiple Spanning Tree provides high link
availability in multiple VLAN environments by allowing Multiple
Spanning Trees; provides legacy support for IEEE 802.1d and
IEEE 802.1w
• Virtual Router Redundancy Protocol (VRRP) allows groups of
two routers to dynamically back each other up to create highly
available routed environments for IPv4 and IPv6 networks
(limited to 128 VRs)
• IEEE 802.3ad link aggregation control protocol (LACP) and
port trunking support up to 128 static, dynamic, or distributed
trunks active across a stack, with each trunk having up to eight
links (ports) per static trunk; and oer support for trunking
across stack members
• SmartLink provides easy-to-congure link redundancy of
active and standby links
Management
• SNMPv1, v2, and v3 provide complete support of SNMP;
provide full support of industry-standard Management
Information Base (MIB) plus private extensions; SNMPv3
supports increased security using encryption
• Aruba Central cloud-based management platform oers a
simple, secure and cost-eective way to manage switches
DATA SHEET
ARUBA 2930F SWITCH SERIES
• Zero Touch Provisioning (ZTP) simplies installation of the
switch infrastructure using the Aruba Activate-based or a
DHCP-based process with AirWave Network Management
• Supports multiple programmatic interfaces, including REST
APIs and Openow 1.0 and 1.3, to enable automation of
network operations, monitoring, and troubleshooting.
Manageability
• Dual ash images provide independent primary and
secondary operating system les for backup while upgrading
• Friendly port names allow assignment of descriptive
names to ports
• Find-Fix-Inform nds and xes common network problems
automatically, then informs administrator
• Multiple conguration les allow multiple conguration
les to be stored to a ash image
• Software updates free downloads from the Web
®
• RMON, XRMON, and sFlow
provide advanced monitoring
and reporting capabilities for statistics, history, alarms,
and events
• Troubleshooting ingress and egress port monitoring
enable network problem solving
• Unidirectional link detection (UDLD) monitors the link
between two switches and blocks the ports on both ends
of the link if the link goes down at any point between the
two devices
• IP SLA for Voice monitors quality of voice trac using the
UDP Jitter and UDP Jitter for VoIP tests
Layer 2 switching
• VLAN support and tagging support IEEE 802.1Q (4,094
VLAN IDs) and 2K VLANs simultaneously
• Jumbo packet support improves the performance of large
data transfers; supports frame size of up to 9,220 bytes
• IEEE 802.1v protocol VLANs isolate select non-IPv4
protocols automatically into their own VLANs
• Rapid Per-VLAN Spanning Tree (RPVST+) allows each
VLAN to build a separate spanning tree to improve link
bandwidth usage; is compatible with PVST+
• GVRP and MVRP allows automatic learning and dynamic
assignment of VLANs
• VxLAN encapsulation (tunneling) protocol for overlay network
that enables a more scalable virtual network deployment
Layer 3 services
• DHCP server centralizes and reduces the cost of IPv4
address management
Layer 3 routing
• Static IP routing provides manually congured routing;
includes ECMP capability
• 256 static and 10,000 RIP routes facilitate segregation of
user data, without adding external hardware
• Routing Information Protocol (RIP) provides RIPv1, RIPv2,
and RIPng routing
• Access OSPF
- Provide OSPFv2 and OSPFv3 protocols for routing
between access and the next layer on the LAN. Only one
OSPF area and up to 8 interfaces are supported.
• Policy-based routing uses a classier to select trac that
can be forwarded based on policy set by the network
administrator (limited to 16 next hop routes)
Security
• Control Plane Policing sets rate limit on control protocols
to protect CPU overload from DOS attacks
• Multiple user authentication methods
- IEEE 802.1X uses an IEEE 802.1X supplicant on the client
in conjunction with a RADIUS server to authenticate in
accordance with industry standards
- Web-based authentication provides a browser-based
environment, similar to IEEE 802.1X, to authenticate
clients that do not support the IEEE 802.1X supplicant
- MAC-based authentication authenticates the client with
the RADIUS server based on the client’s MAC address
• Authentication exibility
- Multiple IEEE 802.1X users per port provides
authentication of multiple IEEE 802.1X users per port;
prevents a user from “piggybacking” on another user’s
IEEE 802.1X authentication
- Concurrent IEEE 802.1X, Web, and MAC authentication
schemes per port switch port will accept up to 32
sessions of IEEE 802.1X, Web, and MAC authentications
• Access control lists (ACLs) provide IP Layer 3 ltering based
on source/destination IP address/subnet and source/
destination TCP/UDP port number
• Source-port ltering allows only specied ports to
communicate with each other
• RADIUS/TACACS+ eases switch management security
administration by using a password authentication server
• Secure shell encrypts all transmitted data for secure
remote CLI access over IP networks
• Secure Sockets Layer (SSL) encrypts all HTTP trac,
allowing secure access to the browser-based management
GUI in the switch
DATA SHEET
ARUBA 2930F SWITCH SERIES
• Port security allows access only to specied MAC addresses,
which can be learned or specied by the administrator
• MAC address lockout prevents particular congured MAC
addresses from connecting to the network
• Secure FTP allows secure le transfer to and from the
switch; protects against unwanted le downloads or
unauthorized copying of a switch conguration le
• Switch management logon security helps secure switch
CLI logon by optionally requiring either RADIUS or
TACACS+ authentication
• Custom banner displays security policy when users log in
to the switch
• STP BPDU port protection blocks Bridge Protocol Data
Units (BPDUs) on ports that do not require BPDUs,
preventing forged BPDU attacks
• DHCP protection blocks DHCP packets from unauthorized
DHCP servers, preventing denial-of-service attacks
• Dynamic ARP protection blocks ARP broadcasts from
unauthorized hosts, preventing eavesdropping or theft of
network data
• STP root guard protects the root bridge from malicious
attacks or conguration mistakes
• Identity-driven ACL enables implementation of a highly
granular and exible access security policy and VLAN
assignment specic to each authenticated network user
• Per-port broadcast throttling congures broadcast control
selectively on heavy trac port uplinks
• Private VLAN provides network security by restricting peer-
to-peer communication to prevent a variety of malicious
attacks; typically a switch port can only communicate with
other ports in the same community and/or an uplink port,
regardless of VLAN ID or destination MAC address
• Open Authentication Role simplies rst-time deployment
of AAA in browneld deployments by allowing full network
access for failed clients and provides instant connectivity
as soon as a client is plugged-in
• Critical Authentication Role ensures that important
infrastructure devices such as IP phones are allowed
network access even in the absence of a RADIUS server
• MAC Pinning allows non-chatty legacy devices to stay
authenticated by pinning client MAC addresses to the port
until the clients logo or get disconnected
Monitor and diagnostics
• Digital optical monitoring of SFP+ and 1000BASE-T
transceivers allows detailed monitoring of the transceiver
settings and parameters
Warranty and support
• Limited Lifetime Warranty: See www.hpe.com/
networking/warrantysummary for warranty and support
information included with your product purchase.
• Software releases: To nd software for your product, refer
to www.hpe.com/networking/support; for details on the
software releases available with your product purchase,
refer to www.hpe.com/networking/warrantysummary
SPECIFICATIONS
DATA SHEET
ARUBA 2930F SWITCH SERIES
Aruba 2930F 24G 4SFP+ Switch
(JL253A)
Aruba 2930F 48G 4SFP+ Switch
(JL254A)
Aruba 2930F 24G PoE+ 4SFP+
Switch (JL255A)
I/O ports and slots
24 RJ-45 autosensing 10/100/1000
ports (IEEE 802.3 Type 10BASE-T,
IEEE 802.3u Type 100BASE-TX, IEEE
802.3ab Type 1000BASE-T); Duplex:
10BASE-T/100BASE-TX: half or full;
1000BASE-T:full only
4 SFP+ 1/10GbE ports; PHY-less
48 RJ-45 autosensing 10/100/1000
ports (IEEE 802.3 Type 10BASE-T,
IEEE 802.3u Type 100BASE-TX, IEEE
802.3ab Type 1000BASE-T); Duplex:
10BASE-T/100BASE-TX: half or full;
1000BASE-T: full only
4 SFP+ 1/10GbE ports; PHY-less
24 RJ-45 autosensing 10/100/1000
PoE+ ports (IEEE 802.3 Type
10BASE-T, IEEE 802.3u Type
100BASE-TX, IEEE 802.3ab Type
1000BASE-T, IEEE 802.3at PoE+);
Duplex: 10BASE-T/100BASE-TX: half
or full; 1000BASE-T: full only
4 SFP+ 1/10GbE ports; PHY-less
Additional ports and slots
1 dual-personality (RJ-45 or USB
micro-B) serial console port
1 dual-personality (RJ-45 or USB
micro-B) serial console port
1 dual-personality (RJ-45 or USB
micro-B) serial console port
Physical characteristics
Dimensions 17.42 (w) x 7.88 (d) x 1.73 (h) in
(44.25 x 20.02 x 4.39 cm)
(1U height)
17.42 (w) x 9.7 (d) x 1.73 (h) in
(44.25 x 24.63 x 4.39 cm)
(1U height)
17.42 (w) x 11.98 (d) x 1.73 (h) in
(44.25 x 30.42 x 4.39 cm)
(1U height)
Weight 5.31 lb (2.41 kg) 6.83 lb (3.10 kg) 8.6 lb (3.9 kg)
Memory and processor
Dual Core ARM
MHz, 1 GB DDR3 SDRAM; Packet
buer size: 12.38 MB 4.5MB
Ingress/7.875MB Egress, 4 GB eMMC
®
Coretex A9 @ 1016
Dual Core ARM Coretex @ 1016
MHz, 1 GB DDR3 SDRAM; Packet
buer size: 12.38 MB 4.5MB
Ingress/7.875MB Egress,4 GB eMMC
Dual Core ARM Coretex A9 @ 1016
MHz, 1 GB DDR3 SDRAM; Packet
buer size: 12.38 MB 4.5MB
Ingress/7.785 Egress,4 GB eMMC
Performance
IPv6 Ready Certied IPv6 Ready Certied IPv6 Ready Certied
1,000 Mb Latency < 3.8 μs (64-byte packets) < 3.8 μs (64-byte packets) < 3.8 μs (64-byte packets)
10 Gbps Latency < 1.6 μs (64-byte packets) < 1.6 μs (64-byte packets) < 1.6 μs (64-byte packets)
Throughput up to 95.2 Mpps up to 112.0 Mpps up to 95.2 Mpps
Switching capacity 128 Gbps 176 Gbps 128 Gbps
Routing table size 2,000 IPv4, 1,000 IPv6 in hardware,
200 OSPF, 256 Static, 10,000 RIP
2,000 IPv4, 1,000 IPv6 in hardware,
200 OSPF, 256 Static, 10,000 RIP
2,000 IPv4, 1,000 IPv6 in hardware,
200 OSPF, 256 Static, 10,000 RIP
MAC address table size 32,768 entries 32,768 entries 32,768 entries
Environment
Operating temperature 32°F to 113°F (0°C to 45°C); up
to 5,000 Feet, 0°C to 40°C (32°F to
104°F) up to 10,000 Feet
Operating relative
humidity
Non-operating/Storage
temperature
Non-operating/Storage
relative humidity
15% to 95% @ 104°F (40°C),
noncondensing
-40°F to 158°F (-40°C to 70°C);
up to 15,000 Feet
15% to 95% @ 149°F (65°C),
noncondensing
32°F to 113°F (0°C to 45°C); up to
5,000 Feet, 0°C to 40°C (32°F to
104°F) up to 10,000 Feet
15% to 95% @ 104°F (40°C),
noncondensing
-40°F to 158°F (-40°C to 70°C);
up to 15,000 Feet
15% to 95% @ 149°F (65°C),
noncondensing
32°F to 113°F (0°C to 45°C); up to
5,000 Feet, 0°C to 40°C (32°F to
104°F) up to 10,000 Feet
15% to 95% @ 104°F (40°C),
noncondensing
-40°F to 158°F (-40°C to 70°C);
up to 15,000 Feet
15% to 95% @ 149°F (65°C)
Acoustic Power: 49.7 dB, Pressure: 37.1 dB Power: 54.1 dB, Pressure: 40.2 dB Power: 54.1 dB, Pressure: 40.6 dB
Airow direction Side-to-side Side-to-side Side-to-side
SPECIFICATIONS
DATA SHEET
ARUBA 2930F SWITCH SERIES
Aruba 2930F 24G 4SFP+ Switch
(JL253A)
Electrical characteristics
Frequency 50/60 Hz 50/60 Hz 50/60 Hz
80plus.org Certication Silver
Maximum heat dissipation 100 BTU/hr (105.5 kj/hr) 157.2 BTU/hr (165.8 kj/hr) 258.0 BTU/hr (272.2 kj/hr)
Voltage 100 - 127 / 200 - 240 VAC, rated 100 - 127 / 200 - 240 VAC, rated 100 - 127 / 200 - 240 VAC, rated
Current 0.6/0.4 A 0.9/0.6 A 4.9/2.4 A
Maximum power rating 29.3 W 46.6 W 445 W
Idle power 19.5 W 32.7 W 36.8 W
PoE power 370 W PoE+
Notes Idle power is the actual power
consumption of the device with no
ports connected. Maximum power
rating and maximum heat dissipa-
tion are the worst-case theoretical
maximum numbers provided for
planning the infrastructure with
fully loaded PoE (if equipped), 100%
trac, all ports plugged in, and all
modules populated.
Safety
UL 69050-1: 2nd Edition;
EN 60950-1:2006 +A11:2009
+A1:2010 +A12:2011+A2:2013;
IEC 60950-1:2005 +A1:2009
+A2:2013; CSA 22.2 No. 60950-1-07
2nd; EN 60825-1:2014 / IEC 60825-
1:2014 Class 1
Emissions
EN 55032:2012/CISPR 32 Class A;
FCC CFR 47 Part 15 Class A;
VCCI Class A; ICES-003 Class A;
CNS 13438
Immunity
Generic EN 55024:2010/CISPR 24 EN 55024:2010/CISPR 24 EN 55024:2010/CISPR 24
ESD IEC 61000-4-2 IEC 61000-4-2 IEC 61000-4-2
Radiated IEC 61000-4-3 IEC 61000-4-3 IEC 61000-4-3
EFT/Burst IEC 61000-4-4 IEC 61000-4-4 IEC 61000-4-4
Surge IEC 61000-4-5 IEC 61000-4-5 IEC 61000-4-5
Conducted IEC 61000-4-6 IEC 61000-4-6 IEC 61000-4-6
Power frequency
magnetic eld
Voltage dips and
Interruptions
Harmonics IEC/EN 61000-3-2 IEC/EN 61000-3-2 IEC/EN 61000-3-2
Flicker IEC/EN 61000-3-3 IEC/EN 61000-3-3 IEC/EN 61000-3-3
IEC 61000-4-8 IEC 61000-4-8 IEC 61000-4-8
IEC 61000-4-11 IEC 61000-4-11 IEC 61000-4-11
Aruba 2930F 48G 4SFP+ Switch
(JL254A)
Idle power is the actual power
consumption of the device with no
ports connected. Maximum power
rating and maximum heat dissipa-
tion are the worst-case theoretical
maximum numbers provided for
planning the infrastructure with
fully loaded PoE (if equipped), 100%
trac, all ports plugged in, and all
modules populated.
UL 69050-1: 2nd Edition;
EN 60950-1:2006 +A11:2009
+A1:2010 +A12:2011+A2:2013;
IEC 60950-1:2005 +A1:2009
+A2:2013; CSA 22.2 No. 60950-1-07
2nd; EN 60825-1:2014 / IEC 60825-
1:2014 Class 1
EN 55032:2012/CISPR 32 Class A;
FCC CFR 47 Part 15 Class A;
VCCI Class A; ICES-003 Class A;
CNS 13438
Aruba 2930F 24G PoE+ 4SFP+
Switch (JL255A)
Idle power is the actual power
consumption of the device with no
ports connected. Maximum power
rating and maximum heat dissipa-
tion are the worst-case theoretical
maximum numbers provided for
planning the infrastructure with
fully loaded PoE (if equipped), 100%
trac, all ports plugged in, and all
modules populated.
UL 69050-1: 2nd Edition;
EN 60950-1:2006 +A11:2009
+A1:2010 +A12:2011+A2:2013;
IEC 60950-1:2005 +A1:2009
+A2:2013; CSA 22.2 No. 60950-1-07
2nd; EN 60825-1:2014 / IEC 60825-
1:2014 Class 1
EN 55032:2012/CISPR 32 Class A;
FCC CFR 47 Part 15 Class A;
VCCI Class A; ICES-003 Class A;
CNS 13438