DATA SHEET
ARUBA 2930F SWITCH SERIES
PRODUCT OVERVIEW
The Aruba 2930F Switch Series is designed for customers creating digital workplaces that are optimized for mobile users with an integrated wired and wireless approach. These Layer 3 access switches are easy to deploy and manage with advanced security and network management tools like Aruba ClearPass Policy Manager and Aruba AirWave. With support from Aruba Central, you can quickly set up remote branch sites with little or no IT support. A powerful Aruba ProVision
ASIC delivers performance and flexibility to meet the needs of today and tomorrow’s network programmability and automation requirements. Stacking with Virtual Switching Framework (VSF) provides simplicity and scalability. The 2930F supports built-in 1GbE or 10GbE uplinks, PoE+, Access OSPF routing, Tunnel Node, robust QoS, RIP routing, and IPv6 with no software licensing required.
The Aruba 2930F Switch Series provides a convenient and costeffective access switch solution that can be quickly set up with
Zero Touch Provisioning and built-in 10GbE uplinks. The robust Layer 3 feature set includes a limited lifetime warranty.
FEATURES AND BENEFITS
Unified Wired and Wireless
• Aruba ClearPass Policy Manager supports unified wired and wireless policies using Aruba ClearPass Policy Manager
• Switch auto-configuration automatically configures switch for different settings such as VLAN, CoS, PoE max. power, and
PoE priority when an Aruba access point is detected
• User Role defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be assigned to a group of users or devices, using switch-based local user role or download from ClearPass
• Tunnel Node provides a secure tunnel that transports network traffic on a per-port or per-user role basis to an
Aruba Controller. In a per-user role Tunnel Node, users are authenticated by the ClearPass Policy Manager which directs traffic to be tunneled to an Aruba controller or switch locally • HTTP redirect function supports HPE Intelligent Management
Center (IMC) bring your own device (BYOD) solution
• Static IP visibility allows ClearPass to do accounting for clients with static IP address
KEY FEATURES
• Aruba Layer 3 switch series with VSF stacking, static, Rip and Access OSPF Routing, Tunnel Node, ACLs, and robust QoS
• Consistent wired/wireless experience with Aruba
AirWave and Aruba ClearPass Policy Manager • Convenient built-in 1GbE or 10GbE uplinks and up
to 740 W PoE+
• Ready for the software defined network with REST
APIs and OpenFlow support
• Simple deployment with Zero Touch Provisioning and cloud-based Aruba Central support
Software-defined networks
• Supports multiple programmatic interfaces, including REST
APIs and Openflow 1.0 and 1.3, to enable automation of network operations, monitoring, and troubleshooting
Quality of Service (QoS)
• Traffic prioritization (IEEE 802.1p) Allows real-time traffic classification into eight priority levels mapped to eight queues • Layer 4 prioritization enables prioritization based on TCP/
UDP port numbers
• Class of Service (CoS) sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol,
TCP/UDP port number, source port, and DiffServ
• Rate limiting sets per-port ingress enforced maximums and per-port, per-queue minimums
• Large buffers provide graceful congestion management • Unknown Unicast Rate Limiting throttles unicast packets
with unknown destination addresses and limits flooding on the VLAN
DATA SHEET
ARUBA 2930F SWITCH SERIES
Connectivity
• Flexible 10 Gb/s Ethernet connectivity four fixed 10 Gigabit ports (SFP+) available
• Auto-MDIX provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
• IEEE 802.3at Power over Ethernet (PoE+) provides up to 30
W per port that allows support of the latest PoE+-capable devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments
• Pre-standard PoE support detects and provides power to pre-standard PoE devices
• IPv6
--IPv6 host enables switches to be managed in an IPv6 network
--Dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6, supporting connectivity for both protocols
--MLD snooping forwards IPv6 multicast traffic to the appropriate interface
--IPv6 ACL/QoS supports ACL and QoS for IPv6 network traffic
--IPv6 routing supports static and RIPng protocols --Security provides RA guard, DHCPv6 protection,
dynamic IPv6 lockdown, and ND snooping
Performance
• Energy-efficient design
--80 PLUS Silver Certified power supply increases power efficiency and savings
--Energy-efficient Ethernet (EEE) support reduces power consumption in accordance with IEEE 802.3az
• Aruba Provision ASIC architecture is designed with the latest ProVision ASIC, providing very low latency, increased packet buffering, and adaptive power consumption • Selectable queue configurations allows for increased performance by selecting the number of queues
and associated memory buffering that best meet the requirements of the network applications
Convergence
• IP multicast snooping and data-driven IGMP automatically prevents flooding of IP multicast traffic
• LLDP-MED (Media Endpoint Discovery) defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates easy mapping using network management applications with LLDP automated device discovery protocol
• PoE and PoE+ allocations support multiple methods
(automatic, IEEE 802.3at dynamic, LLDP-MED fine grain, IEEE 802.3af device class, or user-specified) to allocate and manage PoE/PoE+ power for more efficient energy savings • Local MAC Authentication assigns attributes such as VLAN and QoS using locally configured profile that can be a list
of MAC prefixes
• IP multicast routing includes PIM Sparse and Dense modes to route IP multicast traffic (limited to 16 interfaces) • Protocol Independent Multicast for IPv6 supports one-to-
many and many-to-many media casting use cases such as IPTV over IPv6 networks
Resiliency and high availability
• Virtual Switching Framework (VSF) creates one virtual resilient switch from up to four switches; servers or switches can be attached using standard LACP for automatic load balancing and high availability; simplify network operation by reduce the need for complex protocols like Spanning Tree Protocol (STP),
Equal-Cost Multipath (ECMP), and VRRP
• IEEE 802.1s Multiple Spanning Tree provides high link availability in multiple VLAN environments by allowing Multiple
Spanning Trees; provides legacy support for IEEE 802.1d and IEEE 802.1w
• Virtual Router Redundancy Protocol (VRRP) allows groups of two routers to dynamically back each other up to create highly available routed environments for IPv4 and IPv6 networks
(limited to 128 VRs)
• IEEE 802.3ad link aggregation control protocol (LACP) and port trunking support up to 128 static, dynamic, or distributed trunks active across a stack, with each trunk having up to eight links (ports) per static trunk; and offer support for trunking across stack members
• SmartLink provides easy-to-configure link redundancy of active and standby links
Management
• SNMPv1, v2, and v3 provide complete support of SNMP; provide full support of industry-standard Management
Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption
• Aruba Central cloud-based management platform offers a simple, secure and cost-effective way to manage switches
DATA SHEET
ARUBA 2930F SWITCH SERIES
• Zero Touch Provisioning (ZTP) simplifies installation of the switch infrastructure using the Aruba Activate-based or a DHCP-based process with AirWave Network Management • Supports multiple programmatic interfaces, including REST
APIs and Openflow 1.0 and 1.3, to enable automation of network operations, monitoring, and troubleshooting.
Manageability
• Dual flash images provide independent primary and secondary operating system files for backup while upgrading • Friendly port names allow assignment of descriptive
names to ports
• Find-Fix-Inform finds and fixes common network problems automatically, then informs administrator
• Multiple configuration files allow multiple configuration files to be stored to a flash image
• Software updates free downloads from the Web • RMON, XRMON, and sFlow® provide advanced monitoring
and reporting capabilities for statistics, history, alarms, and events
• Troubleshooting ingress and egress port monitoring enable network problem solving
• Unidirectional link detection (UDLD) monitors the link between two switches and blocks the ports on both ends of the link if the link goes down at any point between the two devices
• IP SLA for Voice monitors quality of voice traffic using the
UDP Jitter and UDP Jitter for VoIP tests
Layer 2 switching
• VLAN support and tagging support IEEE 802.1Q (4,094
VLAN IDs) and 2K VLANs simultaneously
• Jumbo packet support improves the performance of large data transfers; supports frame size of up to 9,220 bytes
• IEEE 802.1v protocol VLANs isolate select non-IPv4 protocols automatically into their own VLANs
• Rapid Per-VLAN Spanning Tree (RPVST+) allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+
• GVRP and MVRP allows automatic learning and dynamic assignment of VLANs
• VxLAN encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment
Layer 3 services
• DHCP server centralizes and reduces the cost of IPv4 address management
Layer 3 routing
• Static IP routing provides manually configured routing; includes ECMP capability
• 256 static and 10,000 RIP routes facilitate segregation of user data, without adding external hardware
• Routing Information Protocol (RIP) provides RIPv1, RIPv2, and RIPng routing
• Access OSPF
--Provide OSPFv2 and OSPFv3 protocols for routing between access and the next layer on the LAN. Only one OSPF area and up to 8 interfaces are supported.
• Policy-based routing uses a classifier to select traffic that can be forwarded based on policy set by the network administrator (limited to 16 next hop routes)
Security
• Control Plane Policing sets rate limit on control protocols to protect CPU overload from DOS attacks
• Multiple user authentication methods
--IEEE 802.1X uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards
--Web-based authentication provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X supplicant
--MAC-based authentication authenticates the client with the RADIUS server based on the client’s MAC address
• Authentication flexibility
--Multiple IEEE 802.1X users per port provides authentication of multiple IEEE 802.1X users per port; prevents a user from “piggybacking” on another user’s
IEEE 802.1X authentication
--Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port switch port will accept up to 32 sessions of IEEE 802.1X, Web, and MAC authentications
• Access control lists (ACLs) provide IP Layer 3 filtering based on source/destination IP address/subnet and source/ destination TCP/UDP port number
• Source-port filtering allows only specified ports to communicate with each other
• RADIUS/TACACS+ eases switch management security administration by using a password authentication server
• Secure shell encrypts all transmitted data for secure remote CLI access over IP networks
• Secure Sockets Layer (SSL) encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
DATA SHEET
ARUBA 2930F SWITCH SERIES
• Port security allows access only to specified MAC addresses, which can be learned or specified by the administrator • MAC address lockout prevents particular configured MAC addresses from connecting to the network
• Secure FTP allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file • Switch management logon security helps secure switch
CLI logon by optionally requiring either RADIUS or TACACS+ authentication
• Custom banner displays security policy when users log in to the switch
• STP BPDU port protection blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
• DHCP protection blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
• STP root guard protects the root bridge from malicious attacks or configuration mistakes
• Identity-driven ACL enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each authenticated network user • Per-port broadcast throttling configures broadcast control selectively on heavy traffic port uplinks
• Private VLAN provides network security by restricting peer- to-peer communication to prevent a variety of malicious attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID or destination MAC address
• Open Authentication Role simplifies first-time deployment of AAA in brownfield deployments by allowing full network access for failed clients and provides instant connectivity as soon as a client is plugged-in
• Critical Authentication Role ensures that important infrastructure devices such as IP phones are allowed network access even in the absence of a RADIUS server
• MAC Pinning allows non-chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients logoff or get disconnected
Monitor and diagnostics
• Digital optical monitoring of SFP+ and 1000BASE-T transceivers allows detailed monitoring of the transceiver settings and parameters
Warranty and support
• Limited Lifetime Warranty: See www.hpe.com/ networking/warrantysummary for warranty and support information included with your product purchase.
• Software releases: To find software for your product, refer to www.hpe.com/networking/support; for details on the software releases available with your product purchase, refer to www.hpe.com/networking/warrantysummary
DATA SHEET
ARUBA 2930F SWITCH SERIES
SPECIFICATIONS
|
|
|
|
|
Aruba 2930F 24G 4SFP+ Switch |
Aruba 2930F 48G 4SFP+ Switch |
Aruba 2930F 24G PoE+ 4SFP+ |
|
(JL253A) |
(JL254A) |
Switch (JL255A) |
|
|
|
|
I/O ports and slots |
|
|
|
|
|
|
|
|
24 RJ-45 autosensing 10/100/1000 |
48 RJ-45 autosensing 10/100/1000 |
24 RJ-45 autosensing 10/100/1000 |
|
ports (IEEE 802.3 Type 10BASE-T, |
ports (IEEE 802.3 Type 10BASE-T, |
PoE+ ports (IEEE 802.3 Type |
|
IEEE 802.3u Type 100BASE-TX, IEEE |
IEEE 802.3u Type 100BASE-TX, IEEE |
10BASE-T, IEEE 802.3u Type |
|
802.3ab Type 1000BASE-T); Duplex: |
802.3ab Type 1000BASE-T); Duplex: |
100BASE-TX, IEEE 802.3ab Type |
|
10BASE-T/100BASE-TX: half or full; |
10BASE-T/100BASE-TX: half or full; |
1000BASE-T, IEEE 802.3at PoE+); |
|
1000BASE-T:full only |
1000BASE-T: full only |
Duplex: 10BASE-T/100BASE-TX: half |
|
4 SFP+ 1/10GbE ports; PHY-less |
4 SFP+ 1/10GbE ports; PHY-less |
or full; 1000BASE-T: full only |
|
|
|
4 SFP+ 1/10GbE ports; PHY-less |
|
|
|
|
Additional ports and slots |
|
|
1 dual-personality (RJ-45 or USB micro-B) serial console port
1 dual-personality (RJ-45 or USB micro-B) serial console port
1 dual-personality (RJ-45 or USB micro-B) serial console port
Physical characteristics
Dimensions |
17.42 (w) x 7.88 (d) x 1.73 (h) in |
17.42 (w) x 9.7 (d) x 1.73 (h) in |
17.42 (w) x 11.98 (d) x 1.73 (h) in |
|
(44.25 x 20.02 x 4.39 cm) |
(44.25 x 24.63 x 4.39 cm) |
(44.25 x 30.42 x 4.39 cm) |
|
(1U height) |
(1U height) |
(1U height) |
|
|
|
|
Weight |
5.31 lb (2.41 kg) |
6.83 lb (3.10 kg) |
8.6 lb (3.9 kg) |
|
|
|
|
Memory and processor |
|
|
|
|
|
|
|
|
Dual Core ARM® Coretex A9 @ 1016 |
Dual Core ARM Coretex @ 1016 |
Dual Core ARM Coretex A9 @ 1016 |
|
MHz, 1 GB DDR3 SDRAM; Packet |
MHz, 1 GB DDR3 SDRAM; Packet |
MHz, 1 GB DDR3 SDRAM; Packet |
|
buffer size: 12.38 MB 4.5MB |
buffer size: 12.38 MB 4.5MB |
buffer size: 12.38 MB 4.5MB |
|
Ingress/7.875MB Egress, 4 GB eMMC |
Ingress/7.875MB Egress,4 GB eMMC |
Ingress/7.785 Egress,4 GB eMMC |
|
|
|
|
Performance |
|
|
|
|
|
|
|
|
IPv6 Ready Certified |
IPv6 Ready Certified |
IPv6 Ready Certified |
|
|
|
|
1,000 Mb Latency |
< 3.8 μs (64-byte packets) |
< 3.8 μs (64-byte packets) |
< 3.8 μs (64-byte packets) |
|
|
|
|
10 Gbps Latency |
< 1.6 μs (64-byte packets) |
< 1.6 μs (64-byte packets) |
< 1.6 μs (64-byte packets) |
|
|
|
|
Throughput |
up to 95.2 Mpps |
up to 112.0 Mpps |
up to 95.2 Mpps |
|
|
|
|
Switching capacity |
128 Gbps |
176 Gbps |
128 Gbps |
|
|
|
|
Routing table size |
2,000 IPv4, 1,000 IPv6 in hardware, |
2,000 IPv4, 1,000 IPv6 in hardware, |
2,000 IPv4, 1,000 IPv6 in hardware, |
|
200 OSPF, 256 Static, 10,000 RIP |
200 OSPF, 256 Static, 10,000 RIP |
200 OSPF, 256 Static, 10,000 RIP |
|
|
|
|
MAC address table size |
32,768 entries |
32,768 entries |
32,768 entries |
|
|
|
|
Environment |
|
|
|
|
|
|
|
Operating temperature |
32°F to 113°F (0°C to 45°C); up |
32°F to 113°F (0°C to 45°C); up to |
32°F to 113°F (0°C to 45°C); up to |
|
to 5,000 Feet, 0°C to 40°C (32°F to |
5,000 Feet, 0°C to 40°C (32°F to |
5,000 Feet, 0°C to 40°C (32°F to |
|
104°F) up to 10,000 Feet |
104°F) up to 10,000 Feet |
104°F) up to 10,000 Feet |
|
|
|
|
Operating relative |
15% to 95% @ 104°F (40°C), |
15% to 95% @ 104°F (40°C), |
15% to 95% @ 104°F (40°C), |
humidity |
noncondensing |
noncondensing |
noncondensing |
|
|
|
|
Non-operating/Storage |
-40°F to 158°F (-40°C to 70°C); |
-40°F to 158°F (-40°C to 70°C); |
-40°F to 158°F (-40°C to 70°C); |
temperature |
up to 15,000 Feet |
up to 15,000 Feet |
up to 15,000 Feet |
|
|
|
|
Non-operating/Storage |
15% to 95% @ 149°F (65°C), |
15% to 95% @ 149°F (65°C), |
15% to 95% @ 149°F (65°C) |
relative humidity |
noncondensing |
noncondensing |
|
|
|
|
|
Acoustic |
Power: 49.7 dB, Pressure: 37.1 dB |
Power: 54.1 dB, Pressure: 40.2 dB |
Power: 54.1 dB, Pressure: 40.6 dB |
|
|
|
|
Airflow direction |
Side-to-side |
Side-to-side |
Side-to-side |
|
|
|
|
DATA SHEET
ARUBA 2930F SWITCH SERIES
SPECIFICATIONS
|
|
|
|
|
Aruba 2930F 24G 4SFP+ Switch |
Aruba 2930F 48G 4SFP+ Switch |
Aruba 2930F 24G PoE+ 4SFP+ |
|
(JL253A) |
(JL254A) |
Switch (JL255A) |
|
|
|
|
Electrical characteristics |
|
|
|
|
|
|
|
Frequency |
50/60 Hz |
50/60 Hz |
50/60 Hz |
|
|
|
|
80plus.org Certification |
|
|
Silver |
|
|
|
|
Maximum heat dissipation |
100 BTU/hr (105.5 kj/hr) |
157.2 BTU/hr (165.8 kj/hr) |
258.0 BTU/hr (272.2 kj/hr) |
|
|
|
|
Voltage |
100 - 127 / 200 - 240 VAC, rated |
100 - 127 / 200 - 240 VAC, rated |
100 - 127 / 200 - 240 VAC, rated |
|
|
|
|
Current |
0.6/0.4 A |
0.9/0.6 A |
4.9/2.4 A |
|
|
|
|
Maximum power rating |
29.3 W |
46.6 W |
445 W |
|
|
|
|
Idle power |
19.5 W |
32.7 W |
36.8 W |
|
|
|
|
PoE power |
|
|
370 W PoE+ |
|
|
|
|
Notes |
Idle power is the actual power |
Idle power is the actual power |
Idle power is the actual power |
|
consumption of the device with no |
consumption of the device with no |
consumption of the device with no |
|
ports connected. Maximum power |
ports connected. Maximum power |
ports connected. Maximum power |
|
rating and maximum heat dissipa- |
rating and maximum heat dissipa- |
rating and maximum heat dissipa- |
|
tion are the worst-case theoretical |
tion are the worst-case theoretical |
tion are the worst-case theoretical |
|
maximum numbers provided for |
maximum numbers provided for |
maximum numbers provided for |
|
planning the infrastructure with |
planning the infrastructure with |
planning the infrastructure with |
|
fully loaded PoE (if equipped), 100% |
fully loaded PoE (if equipped), 100% |
fully loaded PoE (if equipped), 100% |
|
traffic, all ports plugged in, and all |
traffic, all ports plugged in, and all |
traffic, all ports plugged in, and all |
|
modules populated. |
modules populated. |
modules populated. |
|
|
|
|
Safety |
|
|
|
|
|
|
|
|
UL 69050-1: 2nd Edition; |
UL 69050-1: 2nd Edition; |
UL 69050-1: 2nd Edition; |
|
EN 60950-1:2006 +A11:2009 |
EN 60950-1:2006 +A11:2009 |
EN 60950-1:2006 +A11:2009 |
|
+A1:2010 +A12:2011+A2:2013; |
+A1:2010 +A12:2011+A2:2013; |
+A1:2010 +A12:2011+A2:2013; |
|
IEC 60950-1:2005 +A1:2009 |
IEC 60950-1:2005 +A1:2009 |
IEC 60950-1:2005 +A1:2009 |
|
+A2:2013; CSA 22.2 No. 60950-1-07 |
+A2:2013; CSA 22.2 No. 60950-1-07 |
+A2:2013; CSA 22.2 No. 60950-1-07 |
|
2nd; EN 60825-1:2014 / IEC 60825- |
2nd; EN 60825-1:2014 / IEC 60825- |
2nd; EN 60825-1:2014 / IEC 60825- |
|
1:2014 Class 1 |
1:2014 Class 1 |
1:2014 Class 1 |
|
|
|
|
Emissions |
|
|
|
|
|
|
|
|
EN 55032:2012/CISPR 32 Class A; |
EN 55032:2012/CISPR 32 Class A; |
EN 55032:2012/CISPR 32 Class A; |
|
FCC CFR 47 Part 15 Class A; |
FCC CFR 47 Part 15 Class A; |
FCC CFR 47 Part 15 Class A; |
|
VCCI Class A; ICES-003 Class A; |
VCCI Class A; ICES-003 Class A; |
VCCI Class A; ICES-003 Class A; |
|
CNS 13438 |
CNS 13438 |
CNS 13438 |
|
|
|
|
Immunity |
|
|
|
|
|
|
|
Generic |
EN 55024:2010/CISPR 24 |
EN 55024:2010/CISPR 24 |
EN 55024:2010/CISPR 24 |
|
|
|
|
ESD |
IEC 61000-4-2 |
IEC 61000-4-2 |
IEC 61000-4-2 |
|
|
|
|
Radiated |
IEC 61000-4-3 |
IEC 61000-4-3 |
IEC 61000-4-3 |
|
|
|
|
EFT/Burst |
IEC 61000-4-4 |
IEC 61000-4-4 |
IEC 61000-4-4 |
|
|
|
|
Surge |
IEC 61000-4-5 |
IEC 61000-4-5 |
IEC 61000-4-5 |
|
|
|
|
Conducted |
IEC 61000-4-6 |
IEC 61000-4-6 |
IEC 61000-4-6 |
|
|
|
|
Power frequency |
IEC 61000-4-8 |
IEC 61000-4-8 |
IEC 61000-4-8 |
magnetic field |
|
|
|
|
|
|
|
Voltage dips and |
IEC 61000-4-11 |
IEC 61000-4-11 |
IEC 61000-4-11 |
Interruptions |
|
|
|
|
|
|
|
Harmonics |
IEC/EN 61000-3-2 |
IEC/EN 61000-3-2 |
IEC/EN 61000-3-2 |
|
|
|
|
Flicker |
IEC/EN 61000-3-3 |
IEC/EN 61000-3-3 |
IEC/EN 61000-3-3 |
|
|
|
|