Name: HP Aruba 2930F 48-Port Gigabit Ethernet PoE+ Switch with Four 1 Gb/s SFP Ports
Brand: HP
SKU: HEJL262A
Price: 3050.00 USD

Ideal for administrators looking to quickly deploy, manage, and maintain networks geared toward both wired and wireless users, the Aruba 2930F 48-Port Gigabit Ethernet PoE+ Switch with 1 Gb/s SFP Ports from HP is an easy-to-install Layer-3 access switch equipped with 48 Gigabit Ethernet ports, four 1 Gb/s SFP uplink ports, and up to 77.4 Mpps total throughput.

Boasting OpenFlow 1.0 and 1.3 functionality, which allows for intelligent traffic routing by enabling network controllers to remotely manage the path of data packets, the Aruba 2930F supports RIP (Routing Information Protocol) and Access OSPF (Open Shortest Path First) Routing, access control lists (ACLs), and Quality of Service (QoS) features such as IEEE 802.1p traffic prioritization and ingress rate limiting.

Installation is simple thanks to the 2930F's Zero Touch Provisioning support, while the Aruba ClearPass Policy Manager allows for unified wired and wireless policies.

Software-Defined Networking

Supports OpenFlow 1.0 and 1.3 specifications to enable SDN (Software-Defined Networking) by allowing separation of the data (packet forwarding) and control (routing decision) paths.

Unified Wired and Wireless

Supports unified wired and wireless policies using Aruba ClearPass Policy Manager.

Switch auto-configuration automatically configures switch for different settings such as VLAN, CoS (Class of Service), and PoE (for switches with PoE support) when an Aruba access point is detected.

Local user role defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be assigned to a group of users or devices, using switch configuration or ClearPass.

Per-port tunneled node provides a secured tunnel to transport network traffic on a per-port basis to an Aruba Controller. Authentication and network policies can be applied and enforced at the controller.

HTTP redirect function supports HPE Intelligent Management Center (IMC) "bring your own device" (BYOD) solution.

Quality of Service (QoS)

Traffic prioritization (IEEE 802.1p) allows real-time traffic classification into eight priority levels mapped to eight queues.

Layer 4 prioritization enables prioritization based on TCP/UDP port numbers.

Class of Service (CoS) sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ.

Rate limiting sets per-port ingress-enforced maximums and per-port, per-queue minimums

Large buffers provide smooth congestion management.

Connectivity

Auto-MDIX provides automatic adjustments for straight-through or crossover cables on all 10/100/1000 Mb/s ports.

IEEE 802.3at Power over Ethernet (PoE+) provides up to 30 W per port that allows support of PoE-enabled devices such as IP phones, wireless access points, and security cameras, as well as any IEEE 802.3af-compliant end device; eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments.

IPv6 Support

IPv6 host enables switches to be managed in an IPv6 network.

Dual-stack (IPv4 and IPv6) transitions from IPv4 to IPv6, supporting connectivity for both protocols.

MLD (Multicast Listener Discovery) snooping forwards IPv6 multicast traffic to the appropriate interface.

IPv6 ACL/QoS supports ACL (Access Control List) and QoS (Quality of Service) for IPv6 network traffic.

IPv6 routing supports static and RIPng (Router Information Protocol next generation) protocols.

Security provides RA (Router Advertisement) guard, DHCPv6 protection, dynamic IPv6 lockdown, and ND (Neighbor Discovery) snooping.

Performance

Energy-efficient Ethernet (EEE) support reduces power consumption in accordance with IEEE 802.3az.

HPE/Aruba ASIC (Application-Specific Integrated Circuit) architecture is designed with HPE/Aruba ASIC for low latency, increased packet buffering, and adaptive power consumption.

Selectable queue configurations allows for increased performance by selecting the number of queues and associated memory buffering that best meet the requirements of the network applications.

Convergence

IP multicast snooping and data-driven IGMP (Internet Group Management Protocol) automatically prevents flooding of IP multicast traffic.

LLDP-MED (Media Endpoint Discovery) defines a standard extension of LLDP (Link Layer Discovery Protocol) that stores values for parameters such as QoS and VLAN to automatically configure network devices such as IP phones.

IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates easy mapping using network management applications with LLDP automated device discovery protocol.

For 2930F switches with PoE functionality, PoE and PoE+ allocations support multiple methods (automatic, IEEE 802.3at dynamic, LLDP-MED fine grain, IEEE 802.3af device class, or user-specified) to allocate and manage PoE/PoE+ power for more efficient energy savings.

Local MAC Authentication assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes.

Resiliency and High Availability

IEEE 802.1s Multiple Spanning Tree provides high link availability in multiple VLAN environments by allowing Multiple Spanning Trees; provides legacy support for IEEE 802.1d and IEEE 802.1w.

IEEE 802.3ad link aggregation control protocol (LACP) and port trunking support up to 128 static, dynamic, or distributed trunks active across a stack, with each trunk having up to eight links (ports) per static trunk, while also offering support for trunking across stack members.

SmartLink provides easy-to-configure link redundancy of active and standby links.

Management

SNMPv1, v2, and v3 provide complete support of SNMP; provide full support of industry-standard Management Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption.

Zero Touch Provisioning (ZTP) simplifies installation of the switch infrastructure using the Aruba Activate-based or a DHCP-based process with AirWave Network Management.

Manageability

Dual flash images provide independent primary and secondary operating system files for backup while upgrading.

Friendly port names allow assignment of descriptive names to ports.

Find-Fix-Inform finds and fixes common network problems automatically, then informs administrator

Multiple configuration files allow multiple configuration files to be stored to a flash image.

Free downloadable software updates from the Web.

RMON (Remote Network Monitoring), XRMON (Extended RMON), and sFlow provide advanced monitoring and reporting capabilities for statistics, history, alarms, and events.

Troubleshooting ingress and egress port monitoring enable network problem solving.

Unidirectional link detection (UDLD) monitors the link between two switches and blocks the ports on both ends of the link if the link goes down at any point between the two devices.

Layer 2 Switching

VLAN support and tagging support IEEE 802.1Q (4,094 VLAN IDs) and 2K VLANs simultaneously.

Jumbo packet support improves the performance of large data transfers; supports frame size of up to 9,220 bytes.

IEEE 802.1v protocol VLANs isolate select non-IPv4 protocols automatically into their own VLANs.

Rapid Per-VLAN Spanning Tree (RPVST+) allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+.

GVRP (GARP VLAN Registration Protocol) and MVRP (the successor to GVRP) allow for automatic learning and dynamic assignment of VLANs.

VxLAN encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment.

Layer 3 Services and Routing

DHCP (Dynamic Host Configuration Protocol) server designed to centralize and reduce the cost of IPv4 address management.

Static IP routing provides manually configured routing; includes ECMP (Equal-Cost Multi-Path Routing) capability.

Routing Information Protocol (RIP) provides RIPv1, RIPv2, and RIPng routing.

256 static and 10,000 RIP routes facilitate segregation of user data, without adding external hardware.

OSPF (Open Shortest Path First) access provides OSPFv2 and OSPFv3 protocols for routing between access and the next layer on the LAN. Only one OSPF area and up to 8 interfaces are supported.

Policy-based routing uses a classifier to select traffic that can be forwarded based on policy set by the network administrator (limited to 16 next hop routes).

Security Features

Control Plane Policing sets rate limit on control protocols to protect CPU overload from DOS attacks.

IEEE 802.1X uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards.

Web-based authentication provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X supplicant.

MAC-based authentication authenticates the client with the RADIUS server based on the client's MAC address.

Multiple IEEE 802.1X users per port provides authentication of multiple IEEE 802.1X users per port; prevents a user from piggybacking on another user's IEEE 802.1X authentication.

Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port switch port will accept up to 32 sessions of IEEE 802.1X, Web, and MAC authentications.

Access control lists (ACLs) provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number.

Source-port filtering allows only specified ports to communicate with each other.

RADIUS/TACACS+ eases switch management security administration by using a password authentication server.

Secure shell encrypts all transmitted data for secure remote command-line access over IP networks.

Secure Sockets Layer (SSL) encrypts all HTTP traffic, allowing secure access to the browser-based management graphical interface in the switch.

Port security allows access only to specified MAC addresses, which can be learned or specified by the administrator.

MAC address lockout prevents particular configured MAC addresses from connecting to the network.

Secure FTP allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file.

Switch management logon security helps secure switch command-line logon by optionally requiring either RADIUS or TACACS+ authentication.

Custom banner displays security policy when users log in to the switch.

STP BPDU port protection blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks.

DHCP protection blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks.

Dynamic ARP protection blocks ARP (Address Resolution Protocol) broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data.

STP (Spanning Tree Protocol) root guard protects the root bridge from malicious attacks or configuration mistakes.

Identity-driven ACL enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each authenticated network user.

Per-port broadcast throttling configures broadcast control selectively on heavy traffic port uplinks.

Private VLAN provides network security by restricting peer-to-peer communication to prevent a variety of malicious attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID or destination MAC address.

Open Authentication Role simplifies first-time deployment of AAA (network Authentication, Authorization, and Accounting) in brownfield deployments by allowing full network access for failed clients and provides instant connectivity as soon as a client is plugged in.

Critical Authentication Role ensures that important infrastructure devices such as IP phones are allowed network access even in the absence of a RADIUS server.

MAC Pinning allows non-chatty legacy devices to stay authenticated by pinning client MAC addresses to the port until the clients log off or get disconnected.

Monitor and Diagnostics

Digital optical monitoring of SFP+ and 1000BASE-T transceivers allows detailed monitoring of the transceiver settings and parameters.

UPC: 190017005751

Layer Services Supported	Layer 2 Support, Layer 3 Support
Supported Protocols	Auto-MDIX/MDI IGMP Snooping IPv4 IPv6 Link Aggregation SNMPv1 SNMPv2c SNMPv3
Transmission Method	Store-and-Forward
Jumbo Frames Support	9220 Bytes
VLAN Groups	2000
VLAN IDs	4094

Security Features	DoS Attack Prevention RADIUS Authentication
SNMP Support	1, 2, 3

Latency	3.8 µs
Forwarding Rate	77.4 Mpps
Switching Bandwidth	104 Gb/s
Priority Queues	8
Packet Buffer	12.38 MB

Flash Memory	4 GB
Processor	1016 MHz ARM Coretex Dual-Core
Memory	1 GB DDR3

Power Draw	459.00 W (Active) 48.6 W (Idle)
AC Input Power	100 to 240 VAC, 50 / 60 Hz at 2.5 to 5.1 A
PoE Power Budget	370 W

HP Aruba 2930F 48-Port Gigabit Ethernet PoE+ Switch with Four 1 Gb/s SFP Ports

True Know-How

Ask Our Experts

HP 2930F Overview