Residing on Layer 3 of the network, the 2930M JL322A 48-Port Gigabit PoE+ Compliant Managed Switch from Aruba supports 10 chassis backplane stacking along with static, RIP, and access OSFP routing. Network administrators can also utilize networking features including Tunnel Node, ACLs, SDN, and enhanced QoS functionality to manage various aspects of the network including the ability to allocate bandwidth to connected clients.
This switch also supports both Aruba ClearPass and Aruba AirWave giving network administrators a means to manage both security and how Wi-Fi connected devices interact with the network. With Aruba ClearPass security it is possible to detect threats from within the network as well as threats posed by the ever-growing number of IoT (Internet of Things) devices now connected to many networks. Additional security features include automated fingerprinting, profiling of endpoints, and more. Aruba ClearPass even offers ways to connect BYOD (Bring Your Own Device) and corporate devices to the network without compromising security.
With Aruba AirWave, network administrators have the ability to look into how mobile apps interact with their network. This makes it possible to resolve connectivity issues by detecting the time it takes for mobile devices to associate with a Wi-Fi radio, authenticate to a RADIUS server, gather an IP address through DHCP, or resolve names for DNS services. Network administrators can even watch Wi-Fi coverage on-demand to ensure wirelessly connected clients always have sufficient bandwidth.
The backbone of this Aruba 48-Port Gigabit Switch are the 48 Gigabit Ethernet ports each offering enhanced data transfer rates along with PoE power to compatible PoE network devices. In addition to the Gigabit Ethernet ports, this switch comes equipped with a single dual-personality serial console port, one USB Type-B port, one 100BASE-T out-of-band management port, one uplink port, one stacking module slot, and dual power supply slots (power supplies not included). Once configured, this switch features a 176 Gb/s switching capacity, 276 Gb/s switching capacity (including stacking), 112 Mpps throughput, and a 32K MAC address table size all designed to ensure connected devices receive enhanced network performance and increased network reliability.
Software-Defined Networking
OpenFlow supports OpenFlow 1.3 specifications to enable SDN by allowing separation of the data (packet forwarding) and control (routing decision) paths
Unified Wired and Wireless
ClearPass Policy Manager supports unified wired and wireless policies using Aruba ClearPass Policy Manager
Switch auto-configuration automatically configures switch for different settings such as VLAN, CoS, PoE max power, and PoE priority when an Aruba access point is detected
User role defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be assigned to a group of users or devices, using switch-based local user role or download from ClearPass
Tunnel Node provides a secure tunnel that transports network traffic on a per-port or per-user role basis to an Aruba Controller. In a per-user role Tunnel Node, users are authenticated by the ClearPass Policy Manager which directs traffic to be tunneled to an Aruba controller or switch locally
HTTP redirect function supports Intelligent Management Center (IMC) bring your own device (BYOD) solution
Switch auto-configuration automatically configures switch for different settings such as VLAN, CoS, PoE max power, and PoE priority when an Aruba access point is detected
User role defines a set of switch-based policies in areas such as security, authentication, and QoS. A user role can be assigned to a group of users or devices, using switch-based local user role or download from ClearPass
Tunnel Node provides a secure tunnel that transports network traffic on a per-port or per-user role basis to an Aruba Controller. In a per-user role Tunnel Node, users are authenticated by the ClearPass Policy Manager which directs traffic to be tunneled to an Aruba controller or switch locally
HTTP redirect function supports Intelligent Management Center (IMC) bring your own device (BYOD) solution
Quality of Service (QoS)
Traffic prioritization (IEEE 802.1p) allows real-time traffic classification into eight priority levels mapped to eight queues
Layer 4 prioritization enables prioritization based on TCP/UDP port numbers
Class of Service (CoS) sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ
Rate limiting sets per-port ingress enforced maximums and per-port, per-queue minimums
Large buffers Provide graceful congestion management
Layer 4 prioritization enables prioritization based on TCP/UDP port numbers
Class of Service (CoS) sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ
Rate limiting sets per-port ingress enforced maximums and per-port, per-queue minimums
Large buffers Provide graceful congestion management
Connectivity
Flexible 10 Gb/s Ethernet connectivity-Modular 4 port 10 Gigabit (SFP+) available
40 Gb/s Uplink port connectivity-Modular 40 Gb/s QSFP+ port available
Auto-MDIX provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
IEEE 802.3at Power over Ethernet (PoE+) provides up to 30W per port to support the latest PoE+ capable devices such as IP phones, wireless access points, security cameras, and IEEE 802.3af-compliant end devices. It also eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments
Pre-standard PoE support detects and provides power to pre-standard PoE devices
IPv6
- IPv6 host enables switches to be managed in an IPv6 network
- Dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6, supporting connectivity for both protocols
- MLD snooping forwards IPv6 multicast traffic to the appropriate interface
- IPv6 ACL/QoS supports ACL and QoS for IPv6 network traffic
- IPV6 Routing supports Static, RIPng and OSPFv3 protocols
- Security provides RA guard, DHCPv6 protection, dynamic IPv6 lockdown, and ND snooping
40 Gb/s Uplink port connectivity-Modular 40 Gb/s QSFP+ port available
Auto-MDIX provides automatic adjustments for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
IEEE 802.3at Power over Ethernet (PoE+) provides up to 30W per port to support the latest PoE+ capable devices such as IP phones, wireless access points, security cameras, and IEEE 802.3af-compliant end devices. It also eliminates the cost of additional electrical cabling and circuits that would otherwise be necessary in IP phone and WLAN deployments
Pre-standard PoE support detects and provides power to pre-standard PoE devices
IPv6
- IPv6 host enables switches to be managed in an IPv6 network
- Dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6, supporting connectivity for both protocols
- MLD snooping forwards IPv6 multicast traffic to the appropriate interface
- IPv6 ACL/QoS supports ACL and QoS for IPv6 network traffic
- IPV6 Routing supports Static, RIPng and OSPFv3 protocols
- Security provides RA guard, DHCPv6 protection, dynamic IPv6 lockdown, and ND snooping
Performance
Energy-efficient design
- 80 PLUS Gold and Platinum Certified power supplies increase power efficiency and savings
- Energy-efficient Ethernet (EEE) support reduces power consumption in accordance with IEEE 802.3az
Aruba Provision ASIC in all locations. Architecture is designed with the latest Aruba Provision ASIC in all locations, providing very low latency, increased packet buffering, and adaptive power consumption
Selectable queue configurations allows for increased performance by selecting the number of queues and associated memory buffering that best meet the requirements of the network applications
Stacking Topology
- High Performance Stacking: up to 100 Gb/s of stacking throughput per switch. Each 2-port stacking module can support up to 25 Gb/s in each direction per port
- Ring topology: Supports up to 10-member stack
- Virtualized Switching: The switches act as a single chassis when stacked for simplified management
- 80 PLUS Gold and Platinum Certified power supplies increase power efficiency and savings
- Energy-efficient Ethernet (EEE) support reduces power consumption in accordance with IEEE 802.3az
Aruba Provision ASIC in all locations. Architecture is designed with the latest Aruba Provision ASIC in all locations, providing very low latency, increased packet buffering, and adaptive power consumption
Selectable queue configurations allows for increased performance by selecting the number of queues and associated memory buffering that best meet the requirements of the network applications
Stacking Topology
- High Performance Stacking: up to 100 Gb/s of stacking throughput per switch. Each 2-port stacking module can support up to 25 Gb/s in each direction per port
- Ring topology: Supports up to 10-member stack
- Virtualized Switching: The switches act as a single chassis when stacked for simplified management
Convergence
IP multicast snooping and data-driven IGMP automatically prevent flooding of IP multicast traffic
LLDP-MED (Media Endpoint Discovery) defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to configure automatically network devices such as IP phones
IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates easy mapping using network management applications with LLDP automated device discovery protocol
PoE and PoE+ allocations support multiple methods (automatic, IEEE 802.3 at dynamic, LLDP-MED fine grain, IEEE 802.3af device class, or user-specified) to allocate and manage PoE/PoE+ power for more efficient energy savings
Local MAC Authentication assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes
IP multicast routing includes PIM sparse and dense modes to route IP multicast traffic
LLDP-MED (Media Endpoint Discovery) defines a standard extension of LLDP that stores values for parameters such as QoS and VLAN to configure automatically network devices such as IP phones
IEEE 802.1AB Link Layer Discovery Protocol (LLDP) facilitates easy mapping using network management applications with LLDP automated device discovery protocol
PoE and PoE+ allocations support multiple methods (automatic, IEEE 802.3 at dynamic, LLDP-MED fine grain, IEEE 802.3af device class, or user-specified) to allocate and manage PoE/PoE+ power for more efficient energy savings
Local MAC Authentication assigns attributes such as VLAN and QoS using locally configured profile that can be a list of MAC prefixes
IP multicast routing includes PIM sparse and dense modes to route IP multicast traffic
Resiliency and High Availability
Virtual Router Redundancy Protocol (VRRP) allows groups of two routers to back each other up dynamically to create highly available routed environments in IPV4 and IPV6 networks
IEEE 802.1s Multiple Spanning Tree provides high link availability in multiple VLAN environments by allowing multiple spanning trees; provides legacy support for IEEE 802.1d and IEEE 802.1w
IEEE 802.3ad link-aggregation-control protocol (LACP) and port trunking Support up to 26 static, dynamic, or distributed trunks with each trunk having up to eight links (ports) per static trunk
SmartLink provides easy-to-configure link redundancy of active and standby links
Dual Hot Swappable Power Supplies
- Increased Resiliency provides secondary power supply to enable complete switch power redundancy in case or power line or supply failure
- Increased PoE+ Power provides secondary power supply to increase the total available PoE+ power
IEEE 802.1s Multiple Spanning Tree provides high link availability in multiple VLAN environments by allowing multiple spanning trees; provides legacy support for IEEE 802.1d and IEEE 802.1w
IEEE 802.3ad link-aggregation-control protocol (LACP) and port trunking Support up to 26 static, dynamic, or distributed trunks with each trunk having up to eight links (ports) per static trunk
SmartLink provides easy-to-configure link redundancy of active and standby links
Dual Hot Swappable Power Supplies
- Increased Resiliency provides secondary power supply to enable complete switch power redundancy in case or power line or supply failure
- Increased PoE+ Power provides secondary power supply to increase the total available PoE+ power
Management
Aruba Central cloud-based management platform offers simple, secure and cost effective way to manage switches
Zero-Touch-Provisioning (ZTP) simplifies installation of the switch infrastructure using Aruba Activate-based or DHCP-based process with AirWave Network Management
Built-in programmable and easy to use REST API interface provides configuration automation for Mobile-first campus networks
Out-of-band Ethernet management port enables management a separate physical management network, and keeps management traffic segmented from network data traffic
SNMPv1, v2, and v3 provide complete support of SNMP; provide full support of industry-standard Management Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption
Zero-Touch-Provisioning (ZTP) simplifies installation of the switch infrastructure using Aruba Activate-based or DHCP-based process with AirWave Network Management
Built-in programmable and easy to use REST API interface provides configuration automation for Mobile-first campus networks
Out-of-band Ethernet management port enables management a separate physical management network, and keeps management traffic segmented from network data traffic
SNMPv1, v2, and v3 provide complete support of SNMP; provide full support of industry-standard Management Information Base (MIB) plus private extensions; SNMPv3 supports increased security using encryption
Manageability
Dual flash images provides independent primary and secondary operating system files for backup
while upgrading
Friendly port names allow assignment of descriptive names to ports
Find-Fix-Inform finds and fixes common network problems automatically, then informs administrator
Multiple configuration files allow multiple configuration files to be stored to a flash image
Software updates free downloads from the Web
RMON, XRMON, and sFlow provide advanced monitoring and reporting capabilities for statistics, history, alarms, and events
Troubleshooting ingress and egress port monitoring enable network problem solving
Unidirectional link detection (UDLD) monitors the link between two switches and blocks the ports on both ends of the link if the link goes down at any point between the two devices
Power down mode allows power savings while the switch is not in use by powering down most of the switch, except for a clock which will boot up the switch on a schedule
Friendly port names allow assignment of descriptive names to ports
Find-Fix-Inform finds and fixes common network problems automatically, then informs administrator
Multiple configuration files allow multiple configuration files to be stored to a flash image
Software updates free downloads from the Web
RMON, XRMON, and sFlow provide advanced monitoring and reporting capabilities for statistics, history, alarms, and events
Troubleshooting ingress and egress port monitoring enable network problem solving
Unidirectional link detection (UDLD) monitors the link between two switches and blocks the ports on both ends of the link if the link goes down at any point between the two devices
Power down mode allows power savings while the switch is not in use by powering down most of the switch, except for a clock which will boot up the switch on a schedule
Layer 2 Switching
IEEE802.1ad QinQ increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a high-speed campus or metro network
VLAN Support and Tagging supports IEEE 802.1Q (4094 VLAN IDs) and 2K VLANs simultaneously
Jumbo packet support improves the performance of large data transfers; supports frame size of up to 9220 bytes
IEEE 802.1v protocol VLANs isolate select non-IPv4 protocols automatically into their own VLANs
Rapid Per-VLAN Spanning Tree (RPVST+) allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+
GVRP and MVRP allows automatic learning and dynamic assignment of VLANs
VxLAN encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment
IEEE 1588v2 Transparent Clock Mode1-step and end to end delay mode support critical timing Applications
VLAN Support and Tagging supports IEEE 802.1Q (4094 VLAN IDs) and 2K VLANs simultaneously
Jumbo packet support improves the performance of large data transfers; supports frame size of up to 9220 bytes
IEEE 802.1v protocol VLANs isolate select non-IPv4 protocols automatically into their own VLANs
Rapid Per-VLAN Spanning Tree (RPVST+) allows each VLAN to build a separate spanning tree to improve link bandwidth usage; is compatible with PVST+
GVRP and MVRP allows automatic learning and dynamic assignment of VLANs
VxLAN encapsulation (tunneling) protocol for overlay network that enables a more scalable virtual network deployment
IEEE 1588v2 Transparent Clock Mode1-step and end to end delay mode support critical timing Applications
Layer 3 Services
DHCP server centralizes and reduces the cost of IPv4 address management
Layer 3 Routing
Static IP routing provides manually configured routing; includes ECMP capability
Routing Information Protocol (RIP) provides RIPv1, RIPv2, and RIPng routing
Access OSPF provides OSPFv2 and OSPFv3 protocols for routing between access and the next layer on the LAN. One OSPF area and up to eight interfaces are supported.
Policy-based routing uses a classifier to select traffic that can be forwarded based on policy set by the network administrator (limited to 16 next-hop routes)
Routing Information Protocol (RIP) provides RIPv1, RIPv2, and RIPng routing
Access OSPF provides OSPFv2 and OSPFv3 protocols for routing between access and the next layer on the LAN. One OSPF area and up to eight interfaces are supported.
Policy-based routing uses a classifier to select traffic that can be forwarded based on policy set by the network administrator (limited to 16 next-hop routes)
Security
Multiple user authentication methods
- IEEE 802.1X uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards
- Web-based authentication provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X supplicant
- MAC-based authentication authenticates the client with the RADIUS server based on the client's MAC address
TPM-based Security
- Includes a Trusted Platform Module (TPM) for secure hardware-based generation and storage of cryptographic keys that can be used for a variety of authentication purposes
Authentication flexibility
- Multiple IEEE 802.1X users per port provides authentication of multiple IEEE 802.1X users per port; prevents a user from "piggybacking" on another user's IEEE 802.1X authentication
- Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port switch port will accept up to 32 sessions of IEEE 802.1X, Web, and MAC authentications
Access control lists (ACLs) provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number
Source-port filtering allows only specified ports to communicate with each other
Control Plane Policing: Set rate limit on control protocols to protect CPU overload
RADIUS/TACACS+ eases switch management security administration by using a password authentication server
Secure shell encrypts all transmitted data for secure remote CLI access over IP networks
Secure Sockets Layer (SSL) encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
Port security allows access only to specified MAC addresses, which can be learned or specified by the administrator
MAC address lockout prevents particular configured MAC addresses from connecting to the network
Secure FTP allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file
Switch management logon security helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
Custom banner displays security policy when users log in to the switch
STP BPDU port protection blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
DHCP protection blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
STP root guard protects the root bridge from malicious attacks or configuration mistakes
Identity-driven ACL enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each authenticated network user
Per-port broadcast throttling Configures broadcast control selectively on heavy traffic port uplinks
Private VLAN provides network security by restricting peer-to-peer communication to prevent a variety of malicious attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID or destination MAC address
IEEE 802.1AE MACsec provides security on a link between two switch ports (1Gbps or 10Gbps) using standard encryption and authentication
- IEEE 802.1X uses an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server to authenticate in accordance with industry standards
- Web-based authentication provides a browser-based environment, similar to IEEE 802.1X, to authenticate clients that do not support the IEEE 802.1X supplicant
- MAC-based authentication authenticates the client with the RADIUS server based on the client's MAC address
TPM-based Security
- Includes a Trusted Platform Module (TPM) for secure hardware-based generation and storage of cryptographic keys that can be used for a variety of authentication purposes
Authentication flexibility
- Multiple IEEE 802.1X users per port provides authentication of multiple IEEE 802.1X users per port; prevents a user from "piggybacking" on another user's IEEE 802.1X authentication
- Concurrent IEEE 802.1X, Web, and MAC authentication schemes per port switch port will accept up to 32 sessions of IEEE 802.1X, Web, and MAC authentications
Access control lists (ACLs) provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number
Source-port filtering allows only specified ports to communicate with each other
Control Plane Policing: Set rate limit on control protocols to protect CPU overload
RADIUS/TACACS+ eases switch management security administration by using a password authentication server
Secure shell encrypts all transmitted data for secure remote CLI access over IP networks
Secure Sockets Layer (SSL) encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
Port security allows access only to specified MAC addresses, which can be learned or specified by the administrator
MAC address lockout prevents particular configured MAC addresses from connecting to the network
Secure FTP allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file
Switch management logon security helps secure switch CLI logon by optionally requiring either RADIUS or TACACS+ authentication
Custom banner displays security policy when users log in to the switch
STP BPDU port protection blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks
DHCP protection blocks DHCP packets from unauthorized DHCP servers, preventing denial-of-service attacks
Dynamic ARP protection blocks ARP broadcasts from unauthorized hosts, preventing eavesdropping or theft of network data
STP root guard protects the root bridge from malicious attacks or configuration mistakes
Identity-driven ACL enables implementation of a highly granular and flexible access security policy and VLAN assignment specific to each authenticated network user
Per-port broadcast throttling Configures broadcast control selectively on heavy traffic port uplinks
Private VLAN provides network security by restricting peer-to-peer communication to prevent a variety of malicious attacks; typically a switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID or destination MAC address
IEEE 802.1AE MACsec provides security on a link between two switch ports (1Gbps or 10Gbps) using standard encryption and authentication
Monitor and Diagnostics
Digital optical monitoring of SFP+ and 1000BASE-T transceivers allows detailed monitoring of the transceiver settings and parameters
UPC: 190017071251