HPE Network Switching Professional (HPE7-A08)Demo

A mirror session with the CPU as its destination lets Tshark capture the mirrored traffic into a PCAP file on the CX switch for transfer to a remote server. A destination interface or ERSPAN forwards traffic for external analysis, while real-time tcpdump output does not produce the required complete capture file. Aruba documents CPU-destined mirroring for Tshark captures and the copy tshark-pcap workflow for transferring capture data to a remote secure file-transfer server.

On an Aruba AOS-CX VSX LAG, lacp fallback lets member links operate as nonbonded interfaces when no LACP partner is detected. This feature is supported only when the downstream or peer device has a single link to each VSX node.

ARP protection validates ARP traffic on untrusted ports against the DHCP snooping binding table. Configuring DHCP snooping creates the required client IP/MAC/VLAN/interface bindings, allowing valid users’ ARP traffic to pass.

The vsx-peer parameter obtains the corresponding command output from the peer VSX switch. Comparing the local and peer running configurations for the same interface is used to identify configuration differences that can cause inconsistent VSX LAG behavior; this is the spot-the-difference methodology.

Advertising routes for owned public address space to multiple ISPs requires a globally unique public ASN. ASN 63473 is in the public 16-bit ASN range; 64813 and 65218 are within the private-use range 64512–65534, and 65535 is reserved.

On AOS-CX, BGP selects the path with the highest LOCAL_PREF before considering MED; a higher LOCAL_PREF is preferred, whereas a lower MED is preferred. An inbound route map that sets LOCAL_PREF to 200 for routes received from peer A therefore makes peer A's otherwise equivalent route the best path.

A Local User Role can assign a VLAN for client segmentation and apply ACL policy to control permitted traffic. ClearPass server selection and authentication-method configuration belong to authentication infrastructure rather than the role itself.

The local device is shown under Actor details with state PLFNCD. The P state abbreviation denotes Passive, so the local switch is configured for LACP passive mode. The partner state includes A, which denotes Active.

BFD echo failure detection uses the minimum echo receive interval multiplied by the detection multiplier. A 1000 ms interval with a multiplier of 5 produces a 5000 ms detection time, after which the BFD session and dependent OSPF adjacency are brought down.

An OSPF process configured for a VRF can form adjacencies only over Layer-3 interfaces associated with that same VRF. OSPF process IDs are locally significant, and an active interface address can supply a router ID when no loopback is configured.

Colorless ports rely on authentication-driven policy assignment rather than static, device-specific port configuration. ClearPass can deliver a downloadable user role to the access switch, which applies the appropriate role and policy to the authenticated device. Aruba’s AOS-CX documentation identifies downloadable user roles as one of the user-role forms returned for colorless-port deployments.

The CX switch Web UI includes an ASE download button in the Analytics Dashboard that opens Aruba Solutions Exchange and lets users view and download supported Aruba-certified NAE scripts. Finding NAE scripts on the ASE using the Web UI

User-Based Tunneling (UBT) on Aruba CX switches tunnels wired-client traffic to a gateway cluster, allowing the gateways to apply centralized policy and services.

HPE Aruba Networking active gateway provides active-active default-gateway forwarding across a VSX switch pair. Both switches can forward routed traffic locally for the shared virtual gateway, allowing sessions to be distributed over the pair and avoiding the active/standby traffic path associated with conventional first-hop redundancy protocols. Active gateway over VSX

Audit Trail records the username of the administrator who applied configuration changes, allowing the person responsible for a configuration push to be identified.

Wired Dynamic Segmentation relies on User-Based Tunneling (UBT), which is supported on the CX 6200 series but not on the CX 6100 series. UBT uses GRE to tunnel client ingress traffic to a mobility gateway; it is not enabled by a CX Premium license and does not use a VXLAN tunnel to the gateway.

On an AOS-CX switch managed by HPE Aruba Networking Central, CLI configuration commands are blocked because Central controls configuration changes. An attempt to run a blocked command displays an Invalid input error; interface 1/1/1 is otherwise a valid command from configuration context.

VRRP is a standards-based first-hop redundancy protocol supported by AOS-CX VSX and HPE Comware platforms, allowing a shared virtual default gateway during the migration. Active Gateway is a VSX feature, while HSRP is Cisco proprietary.

An sFlow sampling rate of 1024 represents a 1-in-1024 flow-sampling ratio on average, and a polling interval of 30 configures counter data collection every 30 seconds. The maximum datagram size of 1400 is unrelated to either sampling ratio or polling frequency.

Route aggregation enforced through routing policy can summarize multiple more-specific prefixes into a smaller number of BGP advertisements. This reduces the number of route entries received and stored by the other network while preserving reachability for the summarized address ranges. Juniper documents that aggregation consolidates selected multiple routes into one route advertisement and minimizes routing entries.

A 350 m OM4 multimode-fiber link exceeds the 300 m reach of the standard 10G SFP+ SR optic. The HPE Aruba Networking 10G SR SFP+ LC 400 m OM4 C-Class transceiver is designed for OM4 multimode fiber and supports a 400 m reach, so it accommodates the required span while retaining 10GbE operation.

BFD negotiates each control-packet transmit interval as the greater of the transmitting device's desired minimum transmit interval and the receiving peer's required minimum receive interval. Because switch B is configured with 2000 ms minimum transmit and receive intervals, switch A uses negotiated 2000 ms Tx/Rx intervals. A detection multiplier of 3 yields a 6000 ms detection time, rather than a 6000 ms transmit or receive interval.