In 2015, Hewlett Packard Enterprise acquired Aruba Networks and expanded its portfolio of wireless solutions with best-in-class Wi-Fi equipment. Over the past time, one of the lines of campus switches has been rebranded, the ProVision operating system has become ArubaOS (version 16.03 is currently available for customers). With the name change, new functionality was added. In this article, we will go through the latest in the lineup of HPE Aruba switches, consider the new features of the ArubaOS operating system and their application scenarios.



Hewlett Packard Enterprise Networking provides customers with a complete line of campus networking products using the ArubaOS operating system:

• The core or distribution of a campus network, with high performance, fault tolerance, a wide range of supported network protocols and the ability to install service modules. Presented by models of the 5400R and 3810M series;
  
  
• Campus network distribution or access, with high performance, a wide range of supported network protocols, support for 1-, 10- and 40-gigabit Ethernet ports, stacking. Represented by models of the 3810M, 2930F, 2920 and 2540 series.

ArubaOS switches are easy to deploy and operate, with a lifetime warranty. It is possible to integrate with modern management and security tools Aruba ClearPass Policy Manager, Aruba AirWave and the cloud service Aruba Central, optimized for software-defined networks (SDN) with support for OpenFlow technology.



The key features of the new operating system include:

• Work in tunneling mode;
• Device profiling;
• SmartRate support;
• ZTP (Zero Touch Provisioning) and support for new control systems (Aruba Activate, Central and AirWave);
• Differentiation of user access by roles using Aruba CPPM (ClearPass Policy Manager);
• Access OSPF for access switches;
• New GUI.

1. Work in tunneling mode

In traditional campus networks, access switches direct user traffic to distribution switches or the core (in the case of a two-tier architecture). In tunneling mode, switches running the ArubaOS operating system can forward incoming traffic from ports to Aruba Mobility controllers through L2-GRE tunnels, depending on the hardware platform, the throughput can reach 40 Gb / s, and load balancing across several controllers is possible.

Tunneling Benefits:

• Authentication by the controller of wired devices through a Web portal or MAC address;
• Profiling wired devices;
• Functionality NGFW, DPI, traffic filtering, restrictions based on application classes.

Setup Example

As an example, consider a network consisting of a 2920 switch with ArubaOS 16.03 installed and two 7240 controllers with AOS 6.5.0.4 (the diagram is shown in the figure).



Settings on the switch side:




Setting on the controller side:

Monitoring and Troubleshoot

Application methods

1. Guest access for wired clients - it becomes possible to terminate traffic in the DMZ, there is the possibility of authorization through a web portal, by MAC address;
2. Connection of cash desks, payment terminals - we terminate client traffic on the controller, no need to stretch the VLAN;
3. Secure connection of “stupid” wired devices without 802.1x support - sensors, base stations, consoles. Especially relevant for IoT.

2. Device Profiling

Profiling allows you to automatically change settings on the switch port when connecting a specific type of device. For example, a new access point connects to the switch, the correct VLAN, maximum PoE budget, CoS, etc. are automatically assigned to the port.

LLDP is used to determine the type of devices:



After the switch determines that the connected device is an access point, the port settings are changed in accordance with the desired profile:

3. Support SmartRate

Ports with support for HPE Smart Rate technology can operate at speeds of 1, 2, 5 or 10 GbE, provide PoE + technology and are ideal for connecting high-speed 802.11ac devices.

This technology is supported on the following equipment:

• Aruba 3810M 40G 8 HPE Smart Rate PoE + 1-slot Switch - JL076A;
• Aruba 5400R 20-port GbE PoE + / 4-port Smart Rate PoE + MACsec v3 zl2 Module - J9991A;
• Aruba 5400R 8-port Smart Rate PoE + MACsec v3 zl2 Module - J9995A.

One of the main advantages of this technology is the ability to use the existing SCS, network updates are possible without replacing cables:

findings

The new version of the operating system allows for tighter integration of LAN and WLAN, while ease of operation is ensured by a single control system. It is possible to automatically configure new equipment.

We will talk more about the new functionality in the upcoming webinars (the next one will be held on March 22, the recording will be available upon completion).

Some useful links:

1) HPE Networking Online Configurator (it is better to use IE, prices in the GPL);
2) Networking support search tool (search for information on products, on the same portal you can find manuals for setting up equipment);
3) HPE Networking warranty(warranty);
4) 3D models of equipment .