The Aruba 3810 Switch Series provides performance and resiliency for enterprises, SMBs, and branch office networks. With HPE
Smart Rate multi
better application experience with low latency, virtualization with resilient stacking technology, and line rate 40GbE for pl
back haul capacity.
A powerf
latest applications. The 3810 delivers resiliency and scalability via innovative backplane stacking technology and redundant
swappab
IPv4 BGP, Dynamic Segmentation, robust QoS, and policy
The 3810M is easy to de
and external captive portal support. The switches offer a limited lifetime warranty.
-gigabit ports for high speed access points and IoT devices, this advanced Layer 3 network switch delivers a
enty of
ul Aruba ProVision ASIC delivers performance, robust feature support, and value with flexible programmability for the
, hot-
le power supplies all in a convenient 1U form factor. It supports an advanced Layer 2 and 3 feature set with OSPF, IPv6,
-based routing are included with no software licensing.
ploy, use and manage using Aruba AirWave or Aruba Central. Aruba ClearPass offers centralized security
Page
QuickSpecs
Aruba 3810M Switch Series
Overview
2
Key features
• Software-defined ready with REST APIs and OpenFlow support
• Advanced Layer 3 switch series with backplane stacking, dynamic segmentation, low latency and resiliency
• Advanced security and network management via Aruba ClearPass Policy Manager, Aruba AirWave and Aruba Central
• Modular 10GbE and 40GbE uplinks for wireless aggregation
• HPE Smart Rate for high-speed multi-gigabit capacity and PoE+ power
Page
QuickSpecs
Aruba 3810M Switch Series
Standard Features
3
Enhanced Capabilities and benefits
Software-defined networks
Unified Wired and Wireless
uba
Quality of Service
sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number,
throttles unicast packets with unknown destination addresses and limits flooding on the VLAN
•Supports multiple programmatic interfaces
Including REST APIs and Openflow 1.0 and 1.3, to enable automation of network operations, monitoring, and
troubleshooting.
•ClearPass Policy Manager support
unified wired and wireless policies using Aruba ClearPass Policy Manager
•Switch auto-configuration
Automatically configures switch for different settings such as VLAN, CoS, PoE max power, and PoE priority when an Ar
access point is detected.
•User role
Defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be assigned to a
group of users or devices, using switch-based local user role or download from ClearPass
•Improved network simplicity and security
Aruba Dynamic Segmentation automatically enforces user, device and application-aware policies on Aruba wired and
wireless networks. Automated device profiling, role-based access control, and Layer 7 firewall features deliver enhanced
visibility and performance for a better overall experience for both IT and end-users alike.
•Dynamic segmentation
Provides a secured tunnel to transport network traffic on a per-port or per-user-role basis to an Aruba Controller. In peruser-role Tunneled Node, users are authenticated with ClearPass Policy Manager which can direct the traffic to be
tunneled to Aruba controller or switch locally.
•Static IP visibility
provides a way for ClearPass to do accounting for clients with static IP addresses
(QoS)
•Advanced classifier-based QoS
classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; applies QoS policies such as setting
priority level and rate limit to selected traffic on a per-port or per-VLAN basis
• Layer 4 prioritization
based on TCP/UDP port numbers
• Class of Service (CoS)
Support
• Bandwidth shaping:
– Port-based rate limiting: provides per-port ingress-/egress-enforced increased bandwidth
– Classifier-based rate limiting: uses an access control list (ACL) to enforce increased bandwidth for ingress traffic
mirrors selected ingress/egress traffic based on an ACL, port, MAC address, or VLAN to a local or remote HPE 8200 zl,
6600, 6200 yl, 5400 zl, or 3500 switch anywhere on the network
• Remote monitoring (RMON), Extended RMON (XRMON), and sFlow v5
provide advanced monitoring and reporting capabilities for statistics, history, alarms, and events
• Traffic prioritization
allows real-time traffic classification into eight priority levels that are mapped to eight queues
• Unknown Unicast Rate Limiting
Page
QuickSpecs
Aruba 3810M Switch Series
Standard Features
4
Simplified management and configuration
monitor quality of voice traffic using the UDP jitter and UDP jitter for VoIP tests
Connectivity
– 6in4 tunneling
• Flexible management
supports both cloud-based Central and on-premise AirWave without ripping and replacing switching infrastructure
• Aruba Central cloud-based management platform
offers simple, secure, and cost effective way to manage switches
•Built-in programmable and easy to use REST API interface
provides configuration automation for campus networks
• Friendly port names
allows assignment of descriptive names to ports
• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
advertises and receives management information from adjacent devices on a network, facilitating easy mapping by
network management applications
• Command authorization
leverages RADIUS to link a custom list of CLI commands to an individual network administrator's login; an audit trail
documents activity
• Multiple configuration files
stores easily to the flash image
• Dual flash images
provides independent primary and secondary operating system files for backup while upgrading
• Out-of-band Ethernet management port
enables management over a separate physical management network; and keeps management traffic segmented from
network data traffic
• Zero Touch ProVisioning (ZTP)
simplifies installation of the switch infrastructure using the Aruba Activate-based or a DHCP-based process with AirWave
and Central Network Management
• Unidirectional Link Detection (UDLD)
monitors the link between two switches and blocks the ports on both ends of the link if the link goes down at any point
between the two devices
• IP service level agreements (SLA) for voice
• Jumbo frames on Gigabit Ethernet and 10-Gigabit Ethernet ports
allow high-performance remote backup and disaster-recovery services
•IEEE 802.3at Power over Ethernet (PoE+)
provides up to 30 W per port that allows support of the latest PoE+ capable devices such as IP phones, wireless access
points, and security cameras, as well as any IEEE 802.3af compliant end device; eliminates the cost of additional electrical
cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments
•Support for pre-standard PoE
detects and provides power to pre-standard PoE devices
• Choice of uplinks:
– SFP+ uplink models: provide fiber-optic (up to 70 km) or direct-attach-cable (DAC) connectivity
– 10GBASE-T uplink models: offer 10GbE speeds, using standard RJ-45 connectors and standard twisted-pair
•Auto-MDIX
provides automatic adjustments for straight-through or crossover cables on all RJ-45 ports
• IPv6:
– IPv6 host: enables switch management in an IPv6 network
– Dual stack (IPv4 and IPv6): transitions IPv4 to IPv6, supporting connectivity for both protocols
– MLD snooping: forwards IPv6 multicast traffic to the appropriate interface
– IPv6 ACL/QoS: supports ACL and QoS for IPv6 traffic
– IPv6 routing: supports static, RIPng, OSPFv3 routing protocols
cabling up to 100 m
: supports encapsulation of IPv6 traffic in IPv4 packets
Page
QuickSpecs
Aruba 3810M Switch Series
Standard Features
5
– Security: provides RA guard, DHCPv6 protection, dynamic IPv6 lockdown, and ND snooping
Resiliency and high availability
allows groups of two routers to dynamically back each other up to create highly available routed environments in IPv4 and
h as unified communication and mobility; traffic will
provides high link availability in multiple VLAN environments by allowing multiple spanning trees; provides legacy support
Increased resiliency: with secondary power supply to enable complete switch power redundancy in case of power
provides easy-to-configure link redundancy of active and standby links
Layer 2 switching
allows automatic learning and dynamic assignment of VLANs
Layer 3 routing
provides RIPv1, RIPv2, and RIPng routing
• Virtual Router Redundancy Protocol (VRRP)
IPv6 networks
• Nonstop switching and routing
improves network availability to better support critical applications, suc
continue to be forwarded during failovers, when the backup member of the stack becomes the commander
• IEEE 802.3ad Link Aggregation Protocol (LACP) and Hewlett Packard Enterprise port trunking
support up to 144 trunks, each with up to 8 links (ports) per trunk
• IEEE 802.1s Multiple Spanning Tree
for IEEE 802.1d and IEEE 802.1w
•Dual hot-swappable power supplies
–
line or supply failure
– Secondary power supply increases available PoE+ power
• Distributed trunking
enables loop-free and redundant network topology without using Spanning Tree Protocol; allows a server or switch to
connect to two switches using one logical trunk for redundancy and load sharing
• SmartLink
• IEEE 802.1ad QinQ
increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a highspeed campus or metro network
• VLAN support and tagging
supports the IEEE 802.1Q standard and 4096 VLANs simultaneously
• IEEE 802.1v protocol VLANs
isolate select non-IPv4 protocols automatically into their own VLANs
•MAC-based VLAN
provides granular control and security; uses RADIUS to map a MAC address/user to specific VLANs
•Rapid Per-VLAN Spanning Tree (RPVST+)
allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+
•Aruba 3810M switch meshing
dynamically load balances across multiple active redundant links to increase available aggregate bandwidth; allows
concurrent Layer 3 routing
• GVRP and MVRP
• Static IP routing
provides manually configured routing for both IPv4 and IPv6 networks
• OSPF
provides OSPFv2 for IPv4 routing and OSPFv3 for IPv6 routing
•Policy-based routing
makes routing decisions based on policies set by the network administrator
• Border Gateway Protocol(BGP)
provides IPv4 Border Gateway Protocol routing, which is scalable, robust, and flexible
•Routing Information Protocol (RIP)
Page
QuickSpecs
Aruba 3810M Switch Series
Standard Features
6
Layer 3 services
enables link connectivity monitoring and reduces network convergence time for static routing, OSPFv2, and VRRP
Convergence
configure automatically
assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes
Warranty, Services and Support
For support and services information, visit https://www.arubanetworks.com/support-services/arubacare/
• Loopback interface address
defines an address in Routing Information Protocol (RIP) and Open Standard Path First (OSPF), improving diagnostic
capability
• Route maps
provide more control during route redistribution; allow filtering and altering of route metrics
• User datagram protocol (UDP) helper function
allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses; and
helps prevent server spoofing for UDP services such as DHCP
• DHCP server
centralizes and reduces the cost of IPv4 address management
• Bidirectional Forwarding Detection (BFD)
• IP multicast snooping (data-driven IGMP)
prevents flooding of IP multicast traffic
•LLDP-MED (Media Endpoint Discovery)
defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to
network devices such as IP phones
• PoE allocations
supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power for more
efficient energy savings
• Protocol Independent Multicast for IPv6
supports one-to-many and many-to-many media casting use cases such as IPTV over IPv6 networks
• IP multicast routing
includes PIM sparse and dense modes to route IP multicast traffic
• Auto VLAN configuration for voice
– RADIUS VLAN
uses a standard RADIUS attribute and LLDP-MED to automatically configure a VLAN for IP phones
– CDPv2
uses CDPv2 to configure legacy IP phones
• Local MAC Authentication
• Limited Lifetime Warranty
See https://www.arubanetworks.com/support-services/ product-warranties/
information included with your product purchase
• For Software Releases and Documentation, refer to https://asp.arubanetworks.com/downloads
for warranty and support
Page
QuickSpecs
Aruba 3810M Switch Series
Standard Features
7
Security
allows users to use a more secure and reliable mode of communications between switch and radius servers over unsecure
number on a per-VLAN or per-port basis
• Control plane policing
sets rate limit on control protocols to protect CPU overload from DOS attacks
•Source-port filtering
allows only specified ports to communicate with each other
• RADIUS/TACACS+
eases switch management security administration by using a password authentication server
• Secure shell
encrypts all transmitted data for secure remote CLI access over IP networks
•Secure Sockets Layer (SSL)
encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
• Radius over TLS (RadSec)
•
networks
• Port security
allows access only to specified MAC addresses, which can be learned or specified by the administrator
• MAC address lockout
prevents particular configured MAC addresses from connecting to the network
• Detection of malicious attacks
monitors 10 types of network traffic and sends a warning when an anomaly that potentially can be caused by malicious
attacks is detected
• Secure FTP
allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a
switch configuration file
• Switch management logon security
helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
• Secure management access
delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
• ICMP throttling
defeats ICMP denial-of-service attacks by enabling any switch port to automatically throttle ICMP traffic
•Identity-driven ACL
enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each
authenticated network user
• STP BPDU port protection
blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
• Dynamic IP lockdown
works with DHCP protection to block traffic from unauthorized hosts, preventing IP source address spoofing
• DHCP protection
blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
• Dynamic ARP protection
blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
• STP root guard
protects the root bridge from malicious attacks or configuration mistakes
• Management Interface Wizard
helps secure management interfaces such as SNMP, Telnet, SSH, SSL, Web, and USB at the desired level
• Security banner
displays a customized security policy when users log in to the switch
•Switch CPU protection
provides automatic protection against malicious network traffic trying to shut down the switch
• ACLs
provide filtering based on the IP field, source/destination IP address/subnet and source/destination TCP/UDP port
Page
QuickSpecs
Aruba 3810M Switch Series
Standard Features
8
• Multiple authentication methods
chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients logoff
– IEEE 802.1X
authenticates multiple IEEE 802.1X users per port; prevents a user from "piggybacking" on another user's
authentication
enables a switch port to accept up to 32 sessions of 802.1X, Web, and MAC authentication
• Private VLAN
provides network security by restricting peer-to-peer communication to prevent a variety of malicious attacks; typically a
switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID
or destination MAC address
•IEEE 802.1AE MACsec
provides security on a link between two switch ports (1Gbps or 10Gbps) using standard encryption and authentication
• Open authentication role
simplifies first-time deployment of AAA in brownfield deployments by allowing full network access for failed clients and
provides instant connectivity as soon as a client is plugged-in
• Critical authentication role
ensures that important infrastructure devices such as IP phones are allowed network access even in the absence of a
RADIUS server
•MAC pinning
allows nonor get disconnected
• Enrollment over Secure Transport (EST)
enhances the switch PKI infrastructure with a simpler, scalable and more secure method of certificate provisioning, reenrollment and renewal
Page
QuickSpecs
Aruba 3810M Switch Series
Configuration
Information
9
Build To Order:
BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or Rack-Shippable solution.
The following Transceivers install into this Switch (For the 1000/10000 SFP+ Ports):
Aruba 1G SFP LC SX 500m OM2 MMF Transceiver
J4858D
Aruba 1G SFP LC LX 10km SMF Transceiver
J4859D
Aruba 1G SFP LC LH 70km SMF Transceiver
J4860D
Aruba 1G SFP RJ45 T 100m Cat5e Transceiver
J8177D
Aruba 100M SFP LC FX 2km MMF Transceiver
J9054D
Aruba 10G SFP+ LC SR 300m OM3 MMF Transceiver
J9150D
Aruba 10G SFP+ LC LR 10km SMF Transceiver
J9151E
Aruba 10G SFP+ LC LRM 220m OM2 MMF Transceiver
J9152D
Aruba 10G SFP+ LC ER 40km SMF Transceiver
J9153D
Aruba 10G SFP+ to SFP+ 1m Direct Attach Copper Cable
J9281D
Aruba 10G SFP+ to SFP+ 3m Direct Attach Copper Cable
J9283D
Aruba 10G SFP+ to SFP+ 7m Direct Attach Copper Cable
J9285D
2
The following Transceivers install into this Switch : (For the 1000/10000 SFP+ Ports)
Aruba 1G SFP LC SX 500m MMF TAA Transceiver
JL745A
Aruba 1G SFP LC LX 10km SMF TAA Transceiver
JL746A
Aruba 1G SFP RJ45 T 100m Cat5e TAA Transceiver
JL747A
Aruba 10G SFP+ LC SR 300m MMF TAA Transceiver
JL748A
Aruba 10G SFP+ LC LR 10km SMF TAA Transceiver
JL749A
3
Localization required on orders without #B2B, #B2C, #B2E options.
4
When Switches are Factory Racked with this power supply, Then #B2B, or #B2C should be
the
Power Supplies” section.)
10
If switch is 0D1 to Racks, then the J9583A#0D1 is also required.
11
If the CTO Switch Chassis needs to be racked, Then the CTO Base Model needs to integrate
(with #0D1) to the HPE Network Rack.
NOTE:
Drop down under power supply should offer the following options and results:
Switch/Router/Power Supply to PDU Power Cord
and Japan or #B2C ROW.
Switch/Router/Power Supply to Wall Power Cord - Localized Option (Watson Default for BTO
and Box Level CTO)
High Volt Switch/Router/Power Supply to Wall Power Cord
North Ameri
Watson Blue
It is recommended that both power supplies match for full redundancy in
the case of a fully populated switch, but not required.
Clic UNB - If an option is ordered with #0D1/#B01, then the switch must have #0D1 option.
NEMA L6-20P Cord (NA/MEX/JP/TW)
Defaulted Power Cable option on the Power Supplies. (See Drop down remark in “Internal
- #B2B in North America, Mexico, Taiwan,
(Watson Default B2B or B2C for Rack Level CTO)
- #B2E Option. (Offered only in
ca, Mexico, Taiwan, and Japan)
NOTE:
Page
Loading...
+ 32 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.