SlideShare a Scribd company logo
2
Most read
4
Most read
6
Most read
Aruba Mobility Access Switch Useful Commands – version 1
S3500 – release 7.2.1.0
Contents
Basic VLAN Configuration .......................................................................................................................................................1
Basic Route Commands...........................................................................................................................................................4
Useful Display Commands ......................................................................................................................................................6
ARUBA
R
POWER
STATUS
STACK
MENU
ENTER
0 1 2 3
2 4 6 8 10
3 5 7 9 111
14 16 18 20 22
15 17 19 21 2313
0 12
S2500-24T 4X10G PoE
n e t w o r k s
VLAN 1 (native)
VLAN 2
VLAN 4
VLAN 10
VLAN 100
172.16.0.3
192.168.2.3
192.168.4.3
192.168.10.3
192.168.100.5
VLAN Description Ports
---- ----------- -----
1 VLAN0001 GE0/0/10-11 GE0/0/16-19
2 vlan2 GE0/0/10 GE0/0/12-15
4 vlan4 GE0/0/10
10 vlan10 GE0/0/10 GE0/0/20-23
100 vlan100 GE0/0/0-10
1 VLAN0001 172.16.0.254
2 vlan2 192.168.2.4
4 vlan4 192.168.4.4
10 vlan10 192.168.10.4
100 vlan100 192.168.100.4
POWER
STATUS
3200
0
1000ACT
LNK
ACT
LNK
1
1000ACT
LNK
ACT
LNK
2
1000ACT
LNK
ACT
LNK
3
LNK
ACT
LNK
SERIAL
1000ACT
n e t w o r k s

Example Network
Basic VLAN Configuration
This will get you started, refer to the User Guide for a complete description of the below and the full list of commands in
the Aruba MAS switch platforms.
Create a VLAN
(ArubaS3500-24P) (config) #vlan 4
(ArubaS3500-24P) (VLAN "4") #description vlan4
(ArubaS3500-24P) (VLAN "4") #exit
(ArubaS3500-24P) (config) #
Apply an IP address to the VLAN
(The name of the interface-group profile is in BOLD)
(ArubaS3500-24P) (config) #interface vlan 4
(ArubaS3500-24P) (vlan "4") #ip address 192.168.4.10 255.255.255.0
(ArubaS3500-24P) (vlan "4") #mtu 1500
(ArubaS3500-24P) (vlan "4") #exit
(ArubaS3500-24P) (config) #
Create a switching-profile for the VLAN
(The name of the profile is in BOLD)
(ArubaS3500-24P) (config) #interface-profile switching-profile vlan4-sw
(ArubaS3500-24P) (switching profile "vlan4") #switchport-mode access
(ArubaS3500-24P) (switching profile "vlan4") #access-vlan 4
(ArubaS3500-24P) (switching profile "vlan4") #native-vlan 4
(ArubaS3500-24P) (switching profile "vlan4") #exit
(ArubaS3500-24P) (config) #
Only One of the next steps necessary
Apply the VLAN and switch-profile to a single interface or multiple interfaces
Add switch–profile to ONE gig interface (for adding to a single interface)
(ArubaS3500-24P) (config) #interface gigabitethernet 0/0/0
(ArubaS3500-24P) (gigabitethernet "0/0/8") #switching-profile vlan4-sw
(ArubaS3500-24P) (gigabitethernet "0/0/8") #exit
(ArubaS3500-24P) (config) #
Create interface-group to additional multiple gig interfaces (for adding to multiple interfaces)
(The name of the interface-group profile is in BOLD)
(ArubaS3500-24P) (config) #interface-group gigabitethernet vlan4-grp
(ArubaS3500-24P) (gigabitethernet "vlan4") #apply-to 0/0/0-0/0/3
(ArubaS3500-24P) (gigabitethernet "vlan4") #trusted port
(ArubaS3500-24P) (gigabitethernet "vlan4") #no shutdown
(ArubaS3500-24P) (gigabitethernet "vlan4") #switching-profile vlan4
(ArubaS3500-24P) (gigabitethernet "vlan4") #exit
(ArubaS3500-24P) (config) #exit
(ArubaS3500-24P) #write memory
Adding / Removing a port to an interface-group
(ArubaS3500-24P) (gigabitethernet "vlan4") #apply-to [add | remove] <interface-list>
Create a Trunk port for VLAN’s
(The name of the interface-group profile is in BOLD)
Adjust as necessary for native vlan, ports, etc.
(ArubaS3500-24P) (config) #interface-profile switching-profile TRUNK
(ArubaS3500-24P) (switching profile "TRUNK") #switchport-mode trunk
(ArubaS3500-24P) (switching profile "TRUNK") #native-vlan 2
(ArubaS3500-24P) (switching profile "TRUNK") #trunk allowed vlan all
(ArubaS3500-24P) (switching profile "TRUNK") #!
(ArubaS3500-24P) (config) #interface gigabitethernet 0/0/10
(ArubaS3500-24P) (gigabitethernet "0/0/10") #switching-profile TRUNK
(ArubaS3500-24P) (gigabitethernet "0/0/10") #!
(ArubaS3500-24P) (config) #
(ArubaS3500-24P) (config) #write memory
DHCP
(ArubaS3500-24P) (config) #ip dhcp pool vlan20-pool
(ArubaS3500-24P) (dhcp server profile "vlan20-pool") #?
clone Copy data from another dhcp server profile
default-router DHCP default router in A.B.C.D format
dns-server DNS servers in A.B.C.D format
domain-name Specify domain name
exclude-address Configure exclude address
lease DHCP server pool lease time (Default: 12 hours)
netbios-name-server Configure netbios name servers in A.B.C.D format
network DHCP server network pool
no Delete Command
option Configure server option
vendor-class-identifi.. Configure vendor-class-identifier (Default: ArubaAP)
Basic Route Commands
Accessing the IP route commands are available through the “ip-profile” in the Configuration mode
Create a Default Route
(ArubaS3500-24P) (config) #ip-profile
(ArubaS3500-24P) (ip-profile) #?
controller-ip Configure controller IP
default-gateway Specify default gateway
no Delete Command
prefix-list Configure prefix list
route Configure static route A.B.C.D
(ArubaS3500-24P) (ip-profile) #default-gateway 192.168.2.3
Create / Add a Static Route
While in the “ip-profile”
Network, Netmask, Next Hop IP
(ArubaS3500-24P) (ip-profile) #route 192.168.1.0 255.255.255.0 192.168.100.3
(ArubaS3500-24P) (ip-profile) #
show ip route
Display the connected and know IP routes
(ArubaS3500-24P) #show ip route
Codes: C - connected
O - OSPF, O(IA) - OSPF inter area
O(E1) - OSPF external type 1, O(E2) - OSPF external type 2
O(N1) - OSPF NSSA type 1, O(N2) - OSPF NSSA type 2
M - mgmt, S - static, * - candidate default
D - DHCP
Gateway of last resort is 192.168.2.3 to network 0.0.0.0 at cost 0
S * 0.0.0.0 /0 [0] via 192.168.2.3
S 192.168.1.0/24 [0] via 192.168.100.3
C 192.168.2.0/24 is directly connected: vlan2
C 192.168.2.4/32 is directly connected: vlan2
C 192.168.4.0/24 is directly connected: vlan4
C 192.168.4.4/32 is directly connected: vlan4
C 192.168.10.0/24 is directly connected: vlan10
C 192.168.10.4/32 is directly connected: vlan10
C 192.168.100.0/24 is directly connected: vlan100
C 192.168.100.4/32 is directly connected: vlan100
show ip interface brief
Display a quick review of the IP addresses assigned to VLAN’s and the status
(ArubaS3500-24P) #show ip interface brief
Interface IP Address / IP Netmask Admin Protocol
vlan 1 unassigned / unassigned Up Up
vlan 10 192.168.10.4 / 255.255.255.0 Up Up
vlan 100 192.168.100.4 / 255.255.255.0 Up Up
vlan 2 192.168.2.4 / 255.255.255.0 Up Up
vlan 4 192.168.4.4 / 255.255.255.0 Up Up
mgmt 172.16.0.254 / 255.255.255.0 Up Down
Useful Display Commands
Note the similarity to other switch CLI commands you may already be familiar with
show vlan
Show the vlan’s defined and ports assigned
(ArubaS3500-24P) #show vlan
VLAN CONFIGURATION
------------------
VLAN Description Ports
---- ----------- -----
1 VLAN0001 GE0/0/10-11 GE0/0/16-19
2 vlan2 GE0/0/10 GE0/0/12-15
4 vlan4 GE0/0/10
10 vlan10 GE0/0/10 GE0/0/20-23
100 vlan100 GE0/0/0-10
show vlan detail
Show vlan active ports, access/ trunk ports
(ArubaS3500-24P) #show vlan detail
U - Untagged member, T - Tagged member
* - Active interface
Dot1q tag: 100, Description: vlan100
Number of interfaces: 11, Active: 2, Non-Blocking: 2
VLAN membership:
Access:
GE0/0/0(U) GE0/0/1(U) GE0/0/2*(U) GE0/0/3(U)
GE0/0/4(U) GE0/0/5(U) GE0/0/6(U) GE0/0/7(U)
GE0/0/8(U) GE0/0/9(U)
Trunk:
GE0/0/10*(T)
show vlan extensive
Show tagged/untagged, trusted, access/trunk, IGMP, MAC aging
(ArubaS3500-24P) #show vlan extensive
Dot1q tag: 1, Description: VLAN0001
IGMP-snooping profile name: igmp-snooping-factory-initial
IGMP-snooping: Enabled
IGMP-snooping proxy: Disabled
MSTP instance: 0
MAC aging time: 5 minutes
Number of interfaces: 6, Active: 1, Non-Blocking: 1
VLAN membership:
GE0/0/10* Trunk Trusted Untagged
GE0/0/10* Trunk Trusted Tagged
GE0/0/11 Access Trusted Untagged
GE0/0/16 Access Trusted Untagged
GE0/0/17 Access Trusted Untagged
GE0/0/18 Access Trusted Untagged
GE0/0/19 Access Trusted Untagged
show interface vlan xxx
Display administrative status, Line protocol, IP address, encapsulation and MTU size
(ArubaS3500-24P) #show interface vlan 100
VLAN100 is administratively Up, Line protocol is Up
Hardware is CPU Interface, Address is 00:0b:86:6b:3d:80
Description: 802.1Q VLAN
Internet address is 192.168.100.4, Netmask is 255.255.255.0
IPV6 link-local address is fe80::b:8600:646b:3d80
Global Unicast address(es):
Routing interface is enabled, Forwarding mode is enabled
Directed broadcast is disabled, BCMC Optimization disabled
Encapsulation 802, Loopback not set
Interface index: 50331748
MTU 1500 bytes
show vlan-profile
Display additional profiles assigned to a VLAN
(ArubaS3500-24P) #show vlan-profile ?
igmp-snooping-profile Show an igmp-snooping-profile
mld-snooping-profile Show a mld-snooping-profile
pvst-profile Show a pvst-profile
show interface gigabitethernet X/X/X
Display a specific port configuration, input/output counters, frame stats
(ArubaS3500-24P) #show interface gigabitethernet 0/0/10
GE0/0/10 is administratively Up, Link is Up, Line protocol is Up
Hardware is Gigabit Ethernet, Interface is GE0/0/10, Address is 00:0b:86:6b:3d:8c
Encapsulation ARPA, Loopback not set
Configured: duplex (Auto), Speed (Auto), FC (Off), Autoneg (On)
Negotiated: duplex (Full), Speed (1 Gbps)
Interface index: 11
MTU 1514 bytes
Link flaps: 1
Flags: Trunk, Trusted
Link status last changed: 0d 01:37:04 ago
Last update of counters: 0d 00:00:06 ago
Last clearing of counters: 0d 01:38:25 ago
Statistics:
Received 6334 frames, 835698 octets
0 pps, 0 bps
3804 unicast, 10 multicast, 2520 broadcast
0 runts, 0 giants, 0 throttles
0 error octets, 0 CRC frames
Transmitted 9653 frames, 1868419 octets
0 pps, 489 bps
5321 unicast, 3276 multicast, 1056 broadcast
0 throttles, 0 errors octets, 0 deferred
0 collisions, 0 late collisions
PoE Information:
Administratively Enable, Port status: Off, Power consumption: 0 mW
PSE port status: Off, non-standard PD
When necessary you can clear the interface counters
(ArubaS3500-24P) #clear counters gigabitethernet 0/0/10
Port Mirroring
Create a mirroring-profile, READ the DOC, there are caveats related to enabling mirroring
(The name of the profile is in BOLD)
(ArubaS3500-24P) (config) #interface-profile mirroring-profile VOIP
(ArubaS3500-24P) (Mirroring profile "VOIP") #destination gigabitethernet 0/0/16 (has packet capture)
(ArubaS3500-24P) (Mirroring profile "VOIP") #ratio 1 (ratio 1:1 = mirror all packets)
(ArubaS3500-24P) (Mirroring profile "VOIP") #exit
(ArubaS3500-24P) (config) #
(ArubaS3500-24P) (config) #interface gigabitethernet 0/0/20 (port traffic to be mirrored)
(ArubaS3500-24P) (gigabitethernet "0/0/20") #mirroring-in-profile VOIP
(ArubaS3500-24P) (gigabitethernet "0/0/20") #mirroring-out-profile VOIP
(ArubaS3500-24P) (gigabitethernet "0/0/20") #exit
(ArubaS3500-24P) (config) #exit
(ArubaS3500-24P) #write memory
Saving Configuration...

More Related Content

PPTX
Roaming behavior and Client Troubleshooting
PDF
EMEA Airheads- Troubleshooting 802.1x issues
PDF
PPTX
EMEA Airheads- Layer-3 Redundancy for Mobility Master - ArubaOS 8.x
PDF
PDF
Advanced rf troubleshooting_peter lane
PPTX
Adapting to evolving user, security, and business needs with aruba clear pass
Roaming behavior and Client Troubleshooting
EMEA Airheads- Troubleshooting 802.1x issues
EMEA Airheads- Layer-3 Redundancy for Mobility Master - ArubaOS 8.x
Advanced rf troubleshooting_peter lane
Adapting to evolving user, security, and business needs with aruba clear pass

What's hot (20)

PPTX
EMEA Airheads - AP Discovery Logic and AP Deployment
PDF
6 understanding aruba rf issues
PPTX
EMEA Airheads- ArubaOS - Cluster Manager
PDF
Base Designs Lab Setup for Validated Reference Design
PPTX
EMEA Airheads - Aruba Remote Access Point (RAP) Troubleshooting
PDF
20 palo alto site to site
PPTX
EMEA Airheads- ArubaOS - Rogue AP troubleshooting
PDF
Managing and Optimizing RF Spectrum for Aruba WLANs
PPTX
Access Management with Aruba ClearPass
PPTX
EMEA Airheads- ArubaOS - High availability with AP Fast Failover
PDF
VXLAN BGP EVPN: Technology Building Blocks
PDF
ClearPass Policy Model - An Introduction
PDF
VXLAN and FRRouting
PDF
EMEA Airheads- Aruba Instant AP- VPN Troubleshooting
PPTX
Real-world 802.1X Deployment Challenges
PPTX
Airheads Tech Talks: Advanced Clustering in AOS 8.x
PPTX
EMEA Airheads- Aruba Central with Instant AP
PDF
Aruba Instant 6.4.0.2-4.1 Command Line Interface Reference Guide
PDF
EMEA Airheads- ArubaOS - Understanding Control-Plane-Security
PPTX
OSPF Basics
EMEA Airheads - AP Discovery Logic and AP Deployment
6 understanding aruba rf issues
EMEA Airheads- ArubaOS - Cluster Manager
Base Designs Lab Setup for Validated Reference Design
EMEA Airheads - Aruba Remote Access Point (RAP) Troubleshooting
20 palo alto site to site
EMEA Airheads- ArubaOS - Rogue AP troubleshooting
Managing and Optimizing RF Spectrum for Aruba WLANs
Access Management with Aruba ClearPass
EMEA Airheads- ArubaOS - High availability with AP Fast Failover
VXLAN BGP EVPN: Technology Building Blocks
ClearPass Policy Model - An Introduction
VXLAN and FRRouting
EMEA Airheads- Aruba Instant AP- VPN Troubleshooting
Real-world 802.1X Deployment Challenges
Airheads Tech Talks: Advanced Clustering in AOS 8.x
EMEA Airheads- Aruba Central with Instant AP
Aruba Instant 6.4.0.2-4.1 Command Line Interface Reference Guide
EMEA Airheads- ArubaOS - Understanding Control-Plane-Security
OSPF Basics
Ad

Viewers also liked (20)

PDF
Air group configuration howto with clearpass 6 v1.2(1)
PDF
Create a spectrum analysis ap group
PDF
Aruba wireless and clear pass 6 integration guide v1.3
PDF
Aruba instant iap setup rev3
PDF
Cisco switch setup with cppm v1.2
PDF
Aruba clearpass ebook_chpt1_final
PDF
Case study migrating 1800 a ps to 7240 mobility controllers_douglas burke_ste...
PDF
Aruba instant the easy button for wireless gokul rajagopalan
PDF
2012 ah emea advanced mobility design
PDF
2012 ah vegas top10 tips from aruba tac
PDF
Do d directives regarding wireless lan
PDF
Byod and guest access workshop enabling byod carlos gomez gallego_network ser...
PDF
2012 ah vegas remote networking fundamentals
PDF
2012 ah vegas guest access fundamentals
PDF
Security intermediate practical cryptography_certs_and 802.1_x_rich langston...
PDF
Airheads vail 2011 pci 2.0 compliance
Air group configuration howto with clearpass 6 v1.2(1)
Create a spectrum analysis ap group
Aruba wireless and clear pass 6 integration guide v1.3
Aruba instant iap setup rev3
Cisco switch setup with cppm v1.2
Aruba clearpass ebook_chpt1_final
Case study migrating 1800 a ps to 7240 mobility controllers_douglas burke_ste...
Aruba instant the easy button for wireless gokul rajagopalan
2012 ah emea advanced mobility design
2012 ah vegas top10 tips from aruba tac
Do d directives regarding wireless lan
Byod and guest access workshop enabling byod carlos gomez gallego_network ser...
2012 ah vegas remote networking fundamentals
2012 ah vegas guest access fundamentals
Security intermediate practical cryptography_certs_and 802.1_x_rich langston...
Airheads vail 2011 pci 2.0 compliance
Ad

Similar to Aruba mobility access switch useful commands v2 (20)

DOC
PROYECTO VLANS
DOCX
Cisco asa active,active failover configuration
PDF
cisco-sf350-24mp-datasheet.pdf
PPT
Day 13.1..1 catalyst switch
PDF
CCN3Switching_lab_5_5_2
DOC
Lab 6.4.1 InterVLAN routing
DOCX
Configuracion EIGRP
DOCX
Ccna 4 final lab switchi
PDF
cisco-sg350-28p-datasheet.pdf
PPT
Deploying Carrier Ethernet features on ASR 9000
PPT
Deploying Carrier Ethernet Features on Cisco ASR 9000
PPT
Day 14.2 configuringvla ns
DOCX
portfolio2
DOCX
Lab 9 instructions
PDF
Hướng dẫn cài đặt switch planet layer 3
PDF
1-300-206 (SENSS)=Firewall (642-618)
PDF
Ccnp3 lab 3_4_en
PDF
Ccnp3 lab 3_4_en
DOC
Ccna lab manual 640 802
PROYECTO VLANS
Cisco asa active,active failover configuration
cisco-sf350-24mp-datasheet.pdf
Day 13.1..1 catalyst switch
CCN3Switching_lab_5_5_2
Lab 6.4.1 InterVLAN routing
Configuracion EIGRP
Ccna 4 final lab switchi
cisco-sg350-28p-datasheet.pdf
Deploying Carrier Ethernet features on ASR 9000
Deploying Carrier Ethernet Features on Cisco ASR 9000
Day 14.2 configuringvla ns
portfolio2
Lab 9 instructions
Hướng dẫn cài đặt switch planet layer 3
1-300-206 (SENSS)=Firewall (642-618)
Ccnp3 lab 3_4_en
Ccnp3 lab 3_4_en
Ccna lab manual 640 802

More from Aruba, a Hewlett Packard Enterprise company (20)

PPTX
Airheads Tech Talks: Cloud Guest SSID on Aruba Central
PPTX
Airheads Tech Talks: Understanding ClearPass OnGuard Agents
PPTX
EMEA Airheads_ Advance Aruba Central
PPTX
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
PPTX
EMEA Airheads- Switch stacking_ ArubaOS Switch
PPTX
EMEA Airheads- LACP and distributed LACP – ArubaOS Switch
PPTX
PPTX
EMEA Airheads- Virtual Switching Framework- Aruba OS Switch
PPTX
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
PPTX
EMEA Airheads- Getting Started with the ClearPass REST API – CPPM
PPTX
EMEA Airheads- Manage Devices at Branch Office (BOC)
PPTX
EMEA Airheads - What does AirMatch do differently?v2
PPTX
Airheads Meetups: 8400 Presentation
PPTX
Airheads Meetups: Ekahau Presentation
PPTX
Airheads Meetups- High density WLAN
PPTX
Airheads Meetups- Avans Hogeschool goes Aruba
PPTX
EMEA Airheads - Configuring different APIs in Aruba 8.x
PPTX
EMEA Airheads - Multi zone ap and centralized image upgrade
PPT
Bringing up Aruba Mobility Master, Managed Device & Access Point
PPTX
EMEA Airheads How licensing works in Aruba OS 8.x
Airheads Tech Talks: Cloud Guest SSID on Aruba Central
Airheads Tech Talks: Understanding ClearPass OnGuard Agents
EMEA Airheads_ Advance Aruba Central
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
EMEA Airheads- Switch stacking_ ArubaOS Switch
EMEA Airheads- LACP and distributed LACP – ArubaOS Switch
EMEA Airheads- Virtual Switching Framework- Aruba OS Switch
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
EMEA Airheads- Getting Started with the ClearPass REST API – CPPM
EMEA Airheads- Manage Devices at Branch Office (BOC)
EMEA Airheads - What does AirMatch do differently?v2
Airheads Meetups: 8400 Presentation
Airheads Meetups: Ekahau Presentation
Airheads Meetups- High density WLAN
Airheads Meetups- Avans Hogeschool goes Aruba
EMEA Airheads - Configuring different APIs in Aruba 8.x
EMEA Airheads - Multi zone ap and centralized image upgrade
Bringing up Aruba Mobility Master, Managed Device & Access Point
EMEA Airheads How licensing works in Aruba OS 8.x

Recently uploaded (20)

PDF
Unlocking AI with Model Context Protocol (MCP)
PPTX
MYSQL Presentation for SQL database connectivity
PDF
Approach and Philosophy of On baking technology
PPTX
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PDF
Spectral efficient network and resource selection model in 5G networks
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PPTX
Big Data Technologies - Introduction.pptx
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
Encapsulation theory and applications.pdf
PDF
Diabetes mellitus diagnosis method based random forest with bat algorithm
PDF
Electronic commerce courselecture one. Pdf
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
PDF
cuic standard and advanced reporting.pdf
Unlocking AI with Model Context Protocol (MCP)
MYSQL Presentation for SQL database connectivity
Approach and Philosophy of On baking technology
KOM of Painting work and Equipment Insulation REV00 update 25-dec.pptx
Encapsulation_ Review paper, used for researhc scholars
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
Spectral efficient network and resource selection model in 5G networks
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
Big Data Technologies - Introduction.pptx
Mobile App Security Testing_ A Comprehensive Guide.pdf
Advanced methodologies resolving dimensionality complications for autism neur...
Encapsulation theory and applications.pdf
Diabetes mellitus diagnosis method based random forest with bat algorithm
Electronic commerce courselecture one. Pdf
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
cuic standard and advanced reporting.pdf

Aruba mobility access switch useful commands v2

  • 1. Aruba Mobility Access Switch Useful Commands – version 1 S3500 – release 7.2.1.0 Contents Basic VLAN Configuration .......................................................................................................................................................1 Basic Route Commands...........................................................................................................................................................4 Useful Display Commands ......................................................................................................................................................6 ARUBA R POWER STATUS STACK MENU ENTER 0 1 2 3 2 4 6 8 10 3 5 7 9 111 14 16 18 20 22 15 17 19 21 2313 0 12 S2500-24T 4X10G PoE n e t w o r k s VLAN 1 (native) VLAN 2 VLAN 4 VLAN 10 VLAN 100 172.16.0.3 192.168.2.3 192.168.4.3 192.168.10.3 192.168.100.5 VLAN Description Ports ---- ----------- ----- 1 VLAN0001 GE0/0/10-11 GE0/0/16-19 2 vlan2 GE0/0/10 GE0/0/12-15 4 vlan4 GE0/0/10 10 vlan10 GE0/0/10 GE0/0/20-23 100 vlan100 GE0/0/0-10 1 VLAN0001 172.16.0.254 2 vlan2 192.168.2.4 4 vlan4 192.168.4.4 10 vlan10 192.168.10.4 100 vlan100 192.168.100.4 POWER STATUS 3200 0 1000ACT LNK ACT LNK 1 1000ACT LNK ACT LNK 2 1000ACT LNK ACT LNK 3 LNK ACT LNK SERIAL 1000ACT n e t w o r k s  Example Network Basic VLAN Configuration This will get you started, refer to the User Guide for a complete description of the below and the full list of commands in the Aruba MAS switch platforms. Create a VLAN (ArubaS3500-24P) (config) #vlan 4 (ArubaS3500-24P) (VLAN "4") #description vlan4 (ArubaS3500-24P) (VLAN "4") #exit (ArubaS3500-24P) (config) # Apply an IP address to the VLAN (The name of the interface-group profile is in BOLD) (ArubaS3500-24P) (config) #interface vlan 4 (ArubaS3500-24P) (vlan "4") #ip address 192.168.4.10 255.255.255.0 (ArubaS3500-24P) (vlan "4") #mtu 1500 (ArubaS3500-24P) (vlan "4") #exit (ArubaS3500-24P) (config) #
  • 2. Create a switching-profile for the VLAN (The name of the profile is in BOLD) (ArubaS3500-24P) (config) #interface-profile switching-profile vlan4-sw (ArubaS3500-24P) (switching profile "vlan4") #switchport-mode access (ArubaS3500-24P) (switching profile "vlan4") #access-vlan 4 (ArubaS3500-24P) (switching profile "vlan4") #native-vlan 4 (ArubaS3500-24P) (switching profile "vlan4") #exit (ArubaS3500-24P) (config) # Only One of the next steps necessary Apply the VLAN and switch-profile to a single interface or multiple interfaces Add switch–profile to ONE gig interface (for adding to a single interface) (ArubaS3500-24P) (config) #interface gigabitethernet 0/0/0 (ArubaS3500-24P) (gigabitethernet "0/0/8") #switching-profile vlan4-sw (ArubaS3500-24P) (gigabitethernet "0/0/8") #exit (ArubaS3500-24P) (config) # Create interface-group to additional multiple gig interfaces (for adding to multiple interfaces) (The name of the interface-group profile is in BOLD) (ArubaS3500-24P) (config) #interface-group gigabitethernet vlan4-grp (ArubaS3500-24P) (gigabitethernet "vlan4") #apply-to 0/0/0-0/0/3 (ArubaS3500-24P) (gigabitethernet "vlan4") #trusted port (ArubaS3500-24P) (gigabitethernet "vlan4") #no shutdown (ArubaS3500-24P) (gigabitethernet "vlan4") #switching-profile vlan4 (ArubaS3500-24P) (gigabitethernet "vlan4") #exit (ArubaS3500-24P) (config) #exit (ArubaS3500-24P) #write memory Adding / Removing a port to an interface-group (ArubaS3500-24P) (gigabitethernet "vlan4") #apply-to [add | remove] <interface-list>
  • 3. Create a Trunk port for VLAN’s (The name of the interface-group profile is in BOLD) Adjust as necessary for native vlan, ports, etc. (ArubaS3500-24P) (config) #interface-profile switching-profile TRUNK (ArubaS3500-24P) (switching profile "TRUNK") #switchport-mode trunk (ArubaS3500-24P) (switching profile "TRUNK") #native-vlan 2 (ArubaS3500-24P) (switching profile "TRUNK") #trunk allowed vlan all (ArubaS3500-24P) (switching profile "TRUNK") #! (ArubaS3500-24P) (config) #interface gigabitethernet 0/0/10 (ArubaS3500-24P) (gigabitethernet "0/0/10") #switching-profile TRUNK (ArubaS3500-24P) (gigabitethernet "0/0/10") #! (ArubaS3500-24P) (config) # (ArubaS3500-24P) (config) #write memory DHCP (ArubaS3500-24P) (config) #ip dhcp pool vlan20-pool (ArubaS3500-24P) (dhcp server profile "vlan20-pool") #? clone Copy data from another dhcp server profile default-router DHCP default router in A.B.C.D format dns-server DNS servers in A.B.C.D format domain-name Specify domain name exclude-address Configure exclude address lease DHCP server pool lease time (Default: 12 hours) netbios-name-server Configure netbios name servers in A.B.C.D format network DHCP server network pool no Delete Command option Configure server option vendor-class-identifi.. Configure vendor-class-identifier (Default: ArubaAP)
  • 4. Basic Route Commands Accessing the IP route commands are available through the “ip-profile” in the Configuration mode Create a Default Route (ArubaS3500-24P) (config) #ip-profile (ArubaS3500-24P) (ip-profile) #? controller-ip Configure controller IP default-gateway Specify default gateway no Delete Command prefix-list Configure prefix list route Configure static route A.B.C.D (ArubaS3500-24P) (ip-profile) #default-gateway 192.168.2.3 Create / Add a Static Route While in the “ip-profile” Network, Netmask, Next Hop IP (ArubaS3500-24P) (ip-profile) #route 192.168.1.0 255.255.255.0 192.168.100.3 (ArubaS3500-24P) (ip-profile) # show ip route Display the connected and know IP routes (ArubaS3500-24P) #show ip route Codes: C - connected O - OSPF, O(IA) - OSPF inter area O(E1) - OSPF external type 1, O(E2) - OSPF external type 2 O(N1) - OSPF NSSA type 1, O(N2) - OSPF NSSA type 2 M - mgmt, S - static, * - candidate default D - DHCP Gateway of last resort is 192.168.2.3 to network 0.0.0.0 at cost 0 S * 0.0.0.0 /0 [0] via 192.168.2.3 S 192.168.1.0/24 [0] via 192.168.100.3 C 192.168.2.0/24 is directly connected: vlan2 C 192.168.2.4/32 is directly connected: vlan2 C 192.168.4.0/24 is directly connected: vlan4 C 192.168.4.4/32 is directly connected: vlan4 C 192.168.10.0/24 is directly connected: vlan10 C 192.168.10.4/32 is directly connected: vlan10 C 192.168.100.0/24 is directly connected: vlan100 C 192.168.100.4/32 is directly connected: vlan100
  • 5. show ip interface brief Display a quick review of the IP addresses assigned to VLAN’s and the status (ArubaS3500-24P) #show ip interface brief Interface IP Address / IP Netmask Admin Protocol vlan 1 unassigned / unassigned Up Up vlan 10 192.168.10.4 / 255.255.255.0 Up Up vlan 100 192.168.100.4 / 255.255.255.0 Up Up vlan 2 192.168.2.4 / 255.255.255.0 Up Up vlan 4 192.168.4.4 / 255.255.255.0 Up Up mgmt 172.16.0.254 / 255.255.255.0 Up Down
  • 6. Useful Display Commands Note the similarity to other switch CLI commands you may already be familiar with show vlan Show the vlan’s defined and ports assigned (ArubaS3500-24P) #show vlan VLAN CONFIGURATION ------------------ VLAN Description Ports ---- ----------- ----- 1 VLAN0001 GE0/0/10-11 GE0/0/16-19 2 vlan2 GE0/0/10 GE0/0/12-15 4 vlan4 GE0/0/10 10 vlan10 GE0/0/10 GE0/0/20-23 100 vlan100 GE0/0/0-10 show vlan detail Show vlan active ports, access/ trunk ports (ArubaS3500-24P) #show vlan detail U - Untagged member, T - Tagged member * - Active interface Dot1q tag: 100, Description: vlan100 Number of interfaces: 11, Active: 2, Non-Blocking: 2 VLAN membership: Access: GE0/0/0(U) GE0/0/1(U) GE0/0/2*(U) GE0/0/3(U) GE0/0/4(U) GE0/0/5(U) GE0/0/6(U) GE0/0/7(U) GE0/0/8(U) GE0/0/9(U) Trunk: GE0/0/10*(T) show vlan extensive Show tagged/untagged, trusted, access/trunk, IGMP, MAC aging (ArubaS3500-24P) #show vlan extensive Dot1q tag: 1, Description: VLAN0001 IGMP-snooping profile name: igmp-snooping-factory-initial IGMP-snooping: Enabled IGMP-snooping proxy: Disabled MSTP instance: 0 MAC aging time: 5 minutes Number of interfaces: 6, Active: 1, Non-Blocking: 1 VLAN membership: GE0/0/10* Trunk Trusted Untagged GE0/0/10* Trunk Trusted Tagged GE0/0/11 Access Trusted Untagged GE0/0/16 Access Trusted Untagged GE0/0/17 Access Trusted Untagged GE0/0/18 Access Trusted Untagged
  • 7. GE0/0/19 Access Trusted Untagged show interface vlan xxx Display administrative status, Line protocol, IP address, encapsulation and MTU size (ArubaS3500-24P) #show interface vlan 100 VLAN100 is administratively Up, Line protocol is Up Hardware is CPU Interface, Address is 00:0b:86:6b:3d:80 Description: 802.1Q VLAN Internet address is 192.168.100.4, Netmask is 255.255.255.0 IPV6 link-local address is fe80::b:8600:646b:3d80 Global Unicast address(es): Routing interface is enabled, Forwarding mode is enabled Directed broadcast is disabled, BCMC Optimization disabled Encapsulation 802, Loopback not set Interface index: 50331748 MTU 1500 bytes show vlan-profile Display additional profiles assigned to a VLAN (ArubaS3500-24P) #show vlan-profile ? igmp-snooping-profile Show an igmp-snooping-profile mld-snooping-profile Show a mld-snooping-profile pvst-profile Show a pvst-profile show interface gigabitethernet X/X/X Display a specific port configuration, input/output counters, frame stats (ArubaS3500-24P) #show interface gigabitethernet 0/0/10 GE0/0/10 is administratively Up, Link is Up, Line protocol is Up Hardware is Gigabit Ethernet, Interface is GE0/0/10, Address is 00:0b:86:6b:3d:8c Encapsulation ARPA, Loopback not set Configured: duplex (Auto), Speed (Auto), FC (Off), Autoneg (On) Negotiated: duplex (Full), Speed (1 Gbps) Interface index: 11 MTU 1514 bytes Link flaps: 1 Flags: Trunk, Trusted Link status last changed: 0d 01:37:04 ago Last update of counters: 0d 00:00:06 ago Last clearing of counters: 0d 01:38:25 ago Statistics: Received 6334 frames, 835698 octets 0 pps, 0 bps 3804 unicast, 10 multicast, 2520 broadcast
  • 8. 0 runts, 0 giants, 0 throttles 0 error octets, 0 CRC frames Transmitted 9653 frames, 1868419 octets 0 pps, 489 bps 5321 unicast, 3276 multicast, 1056 broadcast 0 throttles, 0 errors octets, 0 deferred 0 collisions, 0 late collisions PoE Information: Administratively Enable, Port status: Off, Power consumption: 0 mW PSE port status: Off, non-standard PD When necessary you can clear the interface counters (ArubaS3500-24P) #clear counters gigabitethernet 0/0/10 Port Mirroring Create a mirroring-profile, READ the DOC, there are caveats related to enabling mirroring (The name of the profile is in BOLD) (ArubaS3500-24P) (config) #interface-profile mirroring-profile VOIP (ArubaS3500-24P) (Mirroring profile "VOIP") #destination gigabitethernet 0/0/16 (has packet capture) (ArubaS3500-24P) (Mirroring profile "VOIP") #ratio 1 (ratio 1:1 = mirror all packets) (ArubaS3500-24P) (Mirroring profile "VOIP") #exit (ArubaS3500-24P) (config) # (ArubaS3500-24P) (config) #interface gigabitethernet 0/0/20 (port traffic to be mirrored) (ArubaS3500-24P) (gigabitethernet "0/0/20") #mirroring-in-profile VOIP (ArubaS3500-24P) (gigabitethernet "0/0/20") #mirroring-out-profile VOIP (ArubaS3500-24P) (gigabitethernet "0/0/20") #exit (ArubaS3500-24P) (config) #exit (ArubaS3500-24P) #write memory Saving Configuration...