Aruba 2930F 48G PoE+ 4SFP Switch (JL262A, JL262ACM) ¹

I/O ports and slots

48 RJ-45 autosensing 10/100/1000 PoE+ ports (IEEE 802.3 Type 10BASE-T, IEEE 802.3u Type 100BASE-TX, IEEE 802.3ab Type 1000BASE-T, IEEE 802.3at PoE+); Duplex: 10BASE-T/100BASE-TX: half or full; 1000BASE-T: full only

4 SFP

Additional ports and slots

1 dual-personality (RJ-45 or USB micro-B) serial console port

Physical characteristics

Dimensions

17.42(w) x 11.98(d) x 1.73(h) in (44.25 x 30.42 x 4.39 cm) (1U height)

Weight

9.83 lb (4.46 kg)

Memory and processor

Dual Core ARM Cortex @ 1016 MHz, 1 GB DDR3 SDRAM; Packet buffer size: 12.38 MB 4.5MB Ingress/7.875MB Egress, 4 GB eMMC

Performance

1000 Mb Latency

< 3.8 µs (64-byte packets)

Throughput

up to 77.4 Mpps

Switching capacity

104 Gbps

Routing table size

2,000 IPv4, 1,000 IPv6 in hardware, 200 OSPF, 256 Static, 10,000 RIP

MAC address table size

32768 entries

Environment

Operating temperature

32°F to 113°F (0°C to 45°C); up to 5000 Feet, - 0C to 40C (32F to 104F) up to 10000 Feet

Operating relative humidity

15% to 95% @ 104°F (40°C), noncondensing

Non-operating/Storage temperature

-40°F to 158°F (-40°C to 70°C); up to 15000 Feet

Non-operating/Storage temperature

15% to 95% @ 149°F (65°C)

Acoustic

Power: 55.7 dB, Pressure: 41.7 dB

Airflow direction

Side-to-side

Electrical characteristics

Power efficiency certifications

80plus.org certification: Silver

Maximum heat dissipation

293.0 BTU/hr (309.1 kJ/hr)

Voltage

100 - 127 / 200 - 240 VAC, rated

Current

5.1/2.5 A

Maximum power rating

459 W

Idle power

48.6 W

PoE power

370 W PoE+

Frequency

50/60 Hz

Notes:

­ Idle power is the actual power consumption of the device with no ports connected.

­ Maximum power rating and maximum heat dissipation are the worst-case theoretical maximum numbers provided for planning the infrastructure with fully loaded PoE (if equipped), 100% traffic, all ports plugged in, and all modules populated.

Safety

UL 60950-1, 2nd Edition; UL 62368-1: 2nd Edition; EN 60950-1:2006 +A11:2009 +A1:2010 +A12:2011+A2:2013; IEC 60950-1:2005 +A1:2009 +A2:2013; EN 62368-1: 2nd Edition; CSA 22.2 No. 60950-1-07 2nd; IEC-62368-1: 2nd Edition; EN 60825-1:2014 / IEC 60825-1:2014 Class 1

Emissions

EN 55032:2012/CISPR 32 Class A; FCC CFR 47 Part 15 Class A; VCCI Class A; ICES-003 Class A; CNS 13438

Immunity

Generic

EN 55024:2010/CISPR 24

ESD

IEC 61000-4-2

Radiated

IEC 61000-4-3

EFT/Burst

IEC 61000-4-4

Surge

IEC 61000-4-5

Conducted

IEC 61000-4-6

Power frequency magnetic field

IEC 61000-4-8

Immunity

Voltage dips and interruptions

IEC 61000-4-11

Harmonics

IEC/EN 61000-3-2

Flicker

IEC/EN 61000-3-3

Management

Aruba Central; Aruba AirWave Network Management; IMC - Intelligent Management Center; Command-line interface; Web browser; Configuration menu; SNMP manager; Telnet; RMON1; FTP

Services

Refer to the Hewlett Packard Enterprise website at http://www.hpe.com/networking/services for details on the service-level descriptions and product numbers. For details about services and response times in your area, please contact your local Hewlett Packard Enterprise sales office.

Enhanced Capabilities

Unified Wired and Wireless Support

• Supports unified wired and wireless policies

Aruba ClearPass Policy Manager

• Switch auto-configuration

automatically configures switch for different settings such as VLAN, CoS, PoE max power, and PoE priority when an Aruba access point is detected.

• User role

defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be assigned to a group of users or devices, using switch-based local user role or download from ClearPass

• Aruba Dynamic Segmentation

automatically enforces user, device and application-aware policies on Aruba wired and wireless networks. Automated device profiling, role-based access control, and Layer 7 firewall features deliver enhanced visibility and performance for a better overall experience for both IT and end users alike.

• Dynamic segmentation

provides a secured tunnel to transport network traffic on a per-port or per-user-role basis to an Aruba Controller. In per-user-role Tunneled Node, users are authenticated with ClearPass Policy Manager which can direct the traffic to be tunneled to Aruba controller or switch locally

• Static IP visibility

allows ClearPass to do accounting for clients with static IP address

Software-defined networks

• REST APIs and OpenFlow

Supports multiple programmatic interfaces, including REST APIs and Openflow 1.0 and 1.3, to enable automation of network operations, monitoring, and troubleshooting.

Quality of Service (QoS)

• Traffic prioritization (IEEE 802.1p)

for classification into eight priority levels mapped to eight queues

• Layer 4 prioritization

based on TCP/UDP port numbers

• Class of Service (CoS)

sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ

• Rate limiting

sets per-port ingress enforced maximums and per-port, per-queue minimums

• Large buffers

provide graceful congestion management

• Unknown Unicast Rate Limiting

throttles unicast packets with unknown destination addresses and limits flooding on the VLAN

Connectivity

• Convenient built-in 10 Gbps Ethernet (4 x SFP+) uplinks

available on select models

• Auto-MDIX

provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports

• 12-port fanless model available

12x 1Gbps Ethernet PoE+ ports and four built-in uplinks (2x SFP+ and 2x 1GBASE-T). Built-in power supply.

• IEEE 802.3at Power over Ethernet (PoE+)

provides up to 30 W per port that allows support of the latest PoE+-capable devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments

• Support for pre-standard PoE detects and provides power to pre-standard PoE devices

IPv6

• IPv6 host enables switches to be managed in an IPv6 network
• Dual stack (IPv4 and IPv6)
• transitions from IPv4 to IPv6, supporting connectivity for both protocols
• MLD snooping
• forwards IPv6 multicast traffic to the appropriate interface
• IPv6 ACL/QoS
• supports ACL and QoS for IPv6 network traffic
• IPv6 routing
• supports static and RIPng protocols
• Security
• provides RA guard, DHCPv6 protection, dynamic IPv6 lockdown, and ND snooping

Performance and efficiency

• Energy-efficient design

- 80 PLUS Silver Certified power supply

increases power efficiency and savings

- Energy-efficient Ethernet (EEE) support

reduces power consumption in accordance with IEEE 802.3az

• Designed with the latest Aruba Provision ASIC

providing very low latency, increased packet buffering, and adaptive power consumption

• Selectable queue configurations

allows for increased performance by selecting the number of queues and associated memory buffering that best meet the requirements of the network applications

• -Stacking topology

- Virtual Switching Framework (VSF) front plane stacking creates one virtual resilient switch from up to eight switches.

Notes: Requires ArubaOS-Switch 16.06 software.

- Ring topology supports up to an 8-member stack

- Virtualized switching provides simplified management as the switches act as a single chassis when stacked

Convergence

• IP multicast snooping and data-driven IGMP

automatically prevent flooding of IP multicast traffic

• LLDP-MED (Media Endpoint Discovery)

defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to configure automatically network devices such as IP phones

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

facilitates easy mapping using network management applications with LLDP automated device discovery protocol

• PoE and PoE+ allocations

support multiple methods (automatic, IEEE 802.3at dynamic, LLDP-MED fine grain, IEEE 802.3af device class, or user-specified) to allocate and manage PoE/PoE+ power for more efficient energy savings

• Local MAC Authentication

assigns attributes such as VLAN and QoS using a locally configured profile that can be a list of MAC prefixes

• IP multicast routing

includes PIM Sparse and Dense modes to route IP multicast traffic (limited to 16 interfaces)

• Protocol Independent Multicast for IPv6

supports one-to-many and many-to-many media casting use cases such as IPTV over IPv6 networks

Monitor and diagnostics

• Digital optical monitoring of SFP+ and 1000BASE-T transceivers

allows detailed monitoring of the transceiver settings and parameters

Resiliency and high availability

• IEEE 802.1s Multiple Spanning Tree

provides high link availability by allowing multiple spanning trees; provides legacy support for IEEE 802.1d and IEEE 802.1w

• Virtual Router Redundancy Protocol (VRRP)

allows groups of two routers to dynamically back each other up to create highly available routed environments for IPv4 and IPv6 networks (limited to 128 VRs)

• IEEE 802.3ad link-aggregation-control protocol (LACP) and port trunking

support up to 60 static or dynamic trunks with each trunk having up to eight links (ports) per static trunk

• SmartLink

provides easy-to-configure link redundancy of active and standby links

• SNMPv1, v2, and v3

provide complete support of SNMP; provide full support of industry-standard Management Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption

Simplified configuration and management

• Aruba Central support

cloud based management platform offers simple, secure, and cost effective way to manage switches

• Zero-Touch Provisioning (ZTP)

simplifies installation of the switch infrastructure using Aruba Activate or a DHCP-based process with AirWave and Central Network Management

• Built-in programmable and easy-to-use REST API interface

provides configuration automation for campus networks

• Flexible management with same hardware

supports both cloud-based Central and on-premises AirWave with the same hardware, ensuring management platform changes without ripping and replacing switching infrastructure

Manageability

• Dual flash images

provides independent primary and secondary operating system files for backup while upgrading

• Friendly port names

allow assignment of descriptive names to ports

• Find-Fix-Inform feature

finds and fixes common network problems automatically, then informs administrator

• Supports multiple configuration files

stored to a flash image

• RMON, XRMON, and sFlow

provide advanced monitoring and reporting capabilities for statistics, history, alarms, and events

• Troubleshooting

ingress and egress port monitoring enable more efficient network problem solving

• Unidirectional link detection (UDLD)

monitors the link between two switches and blocks the ports on both ends of the link if the link goes down at any point between the two devices

• IP service level agreements (SLA) for voice

monitor quality of voice traffic using the UDP jitter and UDP jitter for VoIP tests

Software releases

• to find software for your product, refer to http://www.hpe.com/networking/support; for details on the software releases available with your product purchase, refer to http://www.hpe.com/networking/warrantysummary

Layer 3 services

• DHCP server

centralizes and reduces the cost of IPv4 address management

Layer 2 switching

• IEEE 802.1ad Q-in-Q

increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a high-speed campus or metro network

• VLAN Support and Tagging

supports IEEE 802.1Q (4094 VLAN IDs) and 2K VLANs simultaneously

• Jumbo packet support

improves the performance of large data transfers; supports frame size of up to 9220 bytes

• IEEE 802.1v protocol VLANs

isolate select non-IPv4 protocols automatically into their own VLANs

• Rapid Per-VLAN Spanning Tree (RPVST+)

allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+

• GVRP and MVRP

allows automatic learning and dynamic assignment of VLANs

• VxLAN

encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment

Layer 3 routing

• Static IP routing

provides manually configured routing; includes ECMP capability

• 256 static and 10,000 RIP routes

facilitate segregation of user data, without adding external hardware

• Routing Information Protocol (RIP)

provides RIPv1, RIPv2, and RIPng routing

• Access OSPF

provides OSPFv2 and OSPFv3 protocols for routing between access and the next layer on the LAN. Only one OSPF area and up to 8 interfaces are supported

• Policy-based routing

uses a classifier to select traffic that can be forwarded based on policy set by the network administrator (limited to 16 next-hop routes)

Customer first, customer last support

When your network is important to your business, then your business needs the backing of Aruba Support Services. Partner with Aruba product experts to increase your team productivity, keep pace with technology advances, software releases, and obtain break-fix support.

• Foundation Care for Aruba support services include priority access to Aruba Technical Assistance Center(TAC) engineers 24x7x365, flexible hardware and onsite support options, and total coverage for Aruba products. Aruba switches with assigned Aruba Central subscriptions benefit with option for additional hardware support only.
• Aruba Pro Care adds fast access to senior Aruba TAC engineers, who are assigned as a single point of contact for case management, reducing the time spent addressing and resolving issues.

For complete details on Foundation Care and Aruba Pro Care, please visit: https://www.arubanetworks.com/supportservices/

Warranty and support

• Limited Lifetime Warranty

see http://www.hpe.com/networking/warrantysummary for warranty and support information included with your product purchase.

Security

• Control Plane Policing set rate limit on control protocols to protect CPU overload from DOS attacks
• Multiple user authentication methods

- uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards

- supports Web-based authentication

- supports MAC-based authentication

• Authentication flexibility

- Multiple IEEE 802.1X users per port

provides authentication of multiple devices on a single port; prevents a user from "piggybacking" on another user's IEEE 802.1X authentication

- Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port

switch port will accept up to 32 sessions of IEEE 802.1X, Web, and MAC authentications

• TPM-based Security

includes a Trusted Platform Module (TPM) for secure hardware-based generation and storage of cryptographic keys that can be used for a variety of authentication purposes

• Access control lists (ACLs)

provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number

• Source-port filtering

allows only specified ports to communicate with each other

• RADIUS/TACACS+

eases switch management security administration by using a password authentication server

• Secure shell

encrypts all transmitted data for secure remote CLI access over IP networks

• Secure Sockets Layer (SSL)

encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch

• Port security

allows access only to specified MAC addresses, which can be learned or specified by the administrator

• Radius over TLS (RadSec)

allows users to use a more secure and reliable mode of communications between switch and radius servers over unsecure networks

• MAC address lockout

prevents particular configured MAC addresses from connecting to the network

• Secure FTP

allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file

• Switch management logon security

helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication

• Custom banner

displays security policy when users log in to the switch

• STP BPDU port protection

blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks

• DHCP protection

blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks

• Dynamic ARP protection

blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data

• STP root guard

protects the root bridge from malicious attacks or configuration mistakes

• Identity-driven ACL

enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each authenticated network user

• Per-port broadcast throttling

Configures broadcast control selectively on heavy traffic port uplinks

• Private VLAN

provides network security by restricting peer-to-peer communication to prevent a variety of malicious attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID or destination MAC address

• Open authentication role

simplifies first-time deployment of AAA in brownfield deployments by allowing full network access for failed clients and provides instant connectivity as soon as a client is plugged-in

• Critical authentication role

ensures that important infrastructure devices such as IP phones are allowed network access even in the absence of a RADIUS server

• MAC pinning

allows non-chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients logoff or get disconnected

• Enrollment over Secure Transport (EST)

enhances the switch PKI infrastructure with a simpler, scalable and more secure method of certificate provisioning, re-enrollment and renewal