In 2015, Hewlett Packard Enterprise acquired Aruba Networks and supplemented its portfolio of wireless solutions with best-in-class Wi-Fi equipment. Since then, the rebranding of one of the campus switch lines has occurred, the ProVision operating system has become ArubaOS (currently version 16.03 is available for customers). With the change of name added new functionality. In this article, we will go through the new products in the HPE Aruba switch model range, consider the new features of the ArubaOS operating system and their application scenarios.



Hewlett Packard Enterprise Networking provides customers with a complete product line for campus networks on the ArubaOS operating system:

• Kernels or campus distribution networks, with high performance, fault tolerance, a wide range of supported network protocols and the ability to install service modules. Available in the 5400R and 3810M series;
  ')
  
• Distribution or access to the campus network, with high performance, a wide range of supported network protocols, support for 1-, 10-, and 40-gigabit Ethernet ports, stacking. Available in the 3810M, 2930F, 2920 and 2540 series.

Switches on ArubaOS OS are easy to deploy and operate, and have a lifetime warranty. Aruba ClearPass Policy Manager, Aruba AirWave, and Aruba Central's cloud-based service are integrated with modern management and security tools, optimized for software-defined networks (SDN) with support for OpenFlow technology.



The key features of the new operating system include:

• Work in tunneling mode;
• Device profiling;
• SmartRate support;
• ZTP (Zero Touch Provisioning) and support for new control systems (Aruba Activate, Central and AirWave);
• Differentiation of user access by roles using Aruba CPPM (ClearPass Policy Manager);
• Access OSPF for access switches;
• New graphical interface.

1. Work in tunneling mode

In traditional campus networks, access switches direct user traffic to distribution switches or the core (in the case of a two-tier architecture). In the tunneling mode, switches running the ArubaOS operating system can forward incoming traffic from ports to Aruba Mobility controllers via L2-GRE tunnels, depending on the hardware platform, the bandwidth can reach 40 Gbit / s, it is possible to distribute the load across several controllers.

The advantages of tunneling:

• Controller authentication of wired devices through the Web-portal or by MAC address;
• Profiling wired devices;
• Functional NGFW, DPI, traffic filtering, restrictions based on application classes.

Setup example

As an example, consider a network consisting of a 2920 switch with ArubaOS 16.03 installed and two 7240 controllers with AOS 6.5.0.4 (the diagram is shown in the figure).



Switch side settings:




Controller-side configuration:

Monitoring and troubleshooting

Application Methods

1. Guest access for wired clients - it is possible to terminate traffic in the DMZ, it is possible to authorize through the web-portal, by MAC address;
2. Connection of cash registers, payment terminals - we terminate client traffic on the controller, no need to stretch the VLAN;
3. Securely connecting “silly” wired devices without 802.1x support — sensors, base stations, consoles. Especially true for IoT.

2. Device profiling

Profiling allows you to automatically change the settings on the switch port when a specific type of device is connected. For example, a new access point connects to the switch, the correct VLAN is automatically assigned to the port, the maximum PoE budget, CoS, etc.

To determine the type of devices used LLDP:



After the switch determines that the connected device is an access point, the port settings change according to the desired profile:

3. SmartRate support

Ports supporting HPE Smart Rate technology can operate at speeds of 1, 2, 5 or 10 GbE, provide PoE + power and are ideal for connecting high-speed 802.11ac devices.

This technology is supported on the following equipment:

• Aruba 3810M 40G 8 HPE Smart Rate PoE + 1-slot Switch - JL076A;
• Aruba 5400R 20-port GbE PoE + / 4-port Smart Rate PoE + MACsec v3 zl2 Module - J9991A;
• Aruba 5400R 8-port Smart Rate PoE + MACsec v3 zl2 Module - J9995A.

One of the main advantages of this technology is the possibility of using the existing SCS, network updating is possible without replacing cables:

findings

The new version of the operating system allows for a tighter integration of LAN and WLAN, while the simplicity of operation is provided by a unified management system. It is possible to automatically configure the new equipment.

In more detail on the new functionality we will talk in the upcoming webinars (the next one will take place on March 22, the recording will be available upon completion).

Some useful links:

1) HPE Networking Online Configurator (better to use IE, prices in the GPL);
2) Networking support search tool (search for information on products, on the same portal you can find manuals on setting up the equipment);
3) HPE Networking warranty ;
4) 3D equipment models .