Switch Details

The Switch Details page provides details of the selected switch. To view the Switch Details page, follow these steps:

1. Tap the Inventory() tile on the Aruba Instant On home page or click the Site Health() banner and then click on Show inventory.
2. Tap any of the switches listed in the Inventory list. The Switch Details page is displayed with details. View the switch details such as the switch name, IP address of the switch, MAC address, Serial number, SKU, switch model, and ports.

The Switch Details page has the following sections:

• Connectivity
• Power over Ethernet (PoE)
• Ports

Connectivity

This section displays details of the uplink connection and LAN IP information of the switch. You can either configure Instant Onswitches to automatically receive an IP address from an external DHCP server running on the LAN or manually configure a Static IP address.

1. Under the Connectivity section of the Switch Details screen, tap Advanced LAN parameters.
2. Choose one of the following:
   • Automatic (default): This is the default setting for all APs . The Instant On device will request an IP address from a DHCP service running on the LAN. This option is visible only in the mobile app.
   • Static: To specify a fixed IP address on the LAN for your Instant On device, select the Static radio button in the mobile app and configure the following parameters:
     • LAN IP—Enter a Static IP address.
     • Subnet mask—Enter the subnet mask.
     • Default gateway—Enter the IP address of the Default Gateway.
     • DNS server—Enter the IP address of the DNS server.
3. Tap DONE to save the settings.

Power over Ethernet (PoE)

The Power over Ethernet section in the switch details page provides the following information:

• Total budget—The total power in watts that can be provided by the switch.
• Power consumption—The amount of power in watts currently being consumed by the connected PoE devices.

Ports

The Ports section in the Switch Details page visually displays the physical ports for the switch and provides additional statistics and configuration specific to a port. The Instant On mobile app provides a segmented view of the following options, selecting each of which will change the view of the ports accordingly:

To view the Ports section of the Switch Details page, follow these steps:

1. Tap the Inventory() tile on the Aruba Instant On home page or tap the Site Health() banner and then tap on Show inventory.
2. Tap any of the switches listed in the Inventory. The Switch Details screen is displayed with details.
   

The Ports section of the Switch Details page provides the following options:

• Status
• Networks
• Link Aggregation
• Port Details
• Connected Clients and Devices

Status

The Status tab view under Ports is selected by default when you arrive on the Switch Details page. The ports are visually represented on the page in the same manner as the actual physical ports on the device. Each port is numbered according to the port number on the switch and displays its current status. Port 1 is always selected by default and acts as the default uplink port for the switch. Tap on any of the switch ports to view the following details:

• Port number—The physical port number of the switch.
• Port name—The port name is displayed when a custom name is provided.
• Port status—The speed of the trunk is displayed if the port is the member of a trunk.
• Upstream and Downstream throughput—The upstream and downstream throughput of the trunk is displayed when the port is the member of a trunk.
• Member of <port membership name>—The name of the trunk is displayed, if the port is the member of a trunk.
• Port details—A hyperlink that redirects you to the Port Details page for configuration options.

Networks

After creating your network, you have the option to map the network to a VLAN port which, either allows traffic from all networks or only for a specific network. Each port in the Instant On switch can be assigned a separate VLAN ID and configured to manage the network traffic. The following procedure describes how to map a network to a VLAN port:

1. Tap any of the switches listed in the Inventory. The Switch Details page is displayed.
2. Select the Networks tab, under Ports to view the ports on the switch.
3. From the Selected network drop-down list, choose the network you want to map to a specific port.
4. Tap the port to which you want to assign the selected network.
5. Tap the Port details link.
6. Select one of the following options, under Included networks:
   • Included networks—This section includes the following configuration settings:
     • Untagged—This is the default setting. The port will receive and send traffic from the default network without using a VLAN tag. To custom map the port to an untagged VLAN, tap the Untagged network drop-down list and select a network from the list. Only one untagged network can be assigned to a port at a given time.
     • Tagged—The port will receive and send traffic from the default network using the management VLAN tag. To custom map the port to a tagged VLAN, tap the checkboxes against the networks listed under Tagged networks. A maximum of 22 tagged networks can be mapped to a port at a given time.
   • Specific network only—On selecting this option, the port’s traffic will only be allowed from the default network excluding others. Selecting this option allows you to configure the port settings to Tagged or Untagged.
7. Tap Done to finish mapping the network to the port.

Link Aggregation

Link aggregation configuration depends on the number of ports available on the switch. Instant On currently supports switches with the following number of ports:

Table 1: Switch Ports Aggregation

Number of Ports per Switch	Number of LAG Supported	Number of LAG members supported
8 ports	4 trunks	4 trunk members
24 ports	8 trunks	4 trunk members
48 ports	16 trunks	8 trunk members

The following procedure describes how to add a link aggregation group on the switch:

1. Tap any of the switches listed in the Inventory. The Switch Details page is displayed.
2. Under the Ports section, select the Link Aggregation tab.
3. Tap the Add link aggregation link.
4. The Link Aggregation Details page provides the following configuration options:
   • Provide a custom name for the Link aggregation in the text box.
   • Active ()—This option is enabled by default. It indicates that the port members of the link aggregation are available for devices to connect. Slide the toggle switch to Inactive () if you choose to disable this setting.
   • Port membership—Tap on the respective ports you want to add as members for the link aggregation. The selected port members are displayed below separated by commas.
   • Aggregation mode—Select one of the following aggregation modes:
     • Static (default)—This option is selected by default. It indicates simple aggregation of ports with no active link detection or failover.
     • LACP—Selecting this option indicates dynamic detection and automatic failover when connected to other LACP (802.3ad) capable switches. This mode will allow only one user defined network through the aggregated link. This option will pass the management VLAN network as untagged and all other networks as tagged.
   • Included networks—This section includes the following configuration settings:

     • Untagged—This is the default setting. The port will receive and send traffic from the default network without using a VLAN tag. To custom map the port to an untagged VLAN, tap the Untagged network drop-down list and select a network from the list. Only one untagged network can be assigned to a port at a given time.

     • Tagged—The port will receive and send traffic from the default network using the management VLAN tag. To custom map the port to a tagged VLAN, tap the checkboxes against the networks listed under Tagged networks. A maximum of 22 tagged networks can be mapped to a port at a given time.
   • Specific network only—On selecting this option, the port’s traffic will only be allowed from the default network excluding others. Similar to the All networks (default) setting, selecting this option allows you to configure the port settings to Tagged or Untagged.
5. Click Done.

A Link aggregation details link is displayed in the Switch Details page which allows you to modify the settings for the recently added link aggregation.

To delete a link aggregation, tap the advanced menu () icon in the Link Aggregation Details page and tap Delete this link aggregation.

Transceiver Details

Instant On switches are capable of detecting an SFP transceiver. When a transceiver is connected to a switch, the details of the transceiver are displayed under the Ports section in the Switch Details page. The details of the transceiver may not always be displayed completely, if the transceiver used is unsupported or provided by a third-party. It is possible that the transceiver details are displayed even if the port state is up, down, loop detected, or link flapping.

Follow these steps to view the details of the transceiver connected to the Instant On switch:

1. Tap any of the switches listed in the Inventory. The Switch Details page is displayed.
2. Under the Ports section, tap the port to which the transceiver is connected. The transceiver details are displayed:

   Line No	Transceiver Details
   Line 1	Denotes the transceiver compatibility in the following categories: Supported transceiver—Official transceiver models recommended by Aruba and appearing on the switch datasheet. Unsupported transceiver—Third party transceiver models that are compatible with the switch. Incompatible or faulty—Third party transceiver models that are unsupported and incompatible with the switch. The transceiver information is unavailable in this case.
   Line 2	Name of the Vendor
   Line 3	Type of transceiver
   Line 4	Serial number of the transceiver.
   Line 5	Model number of the transceiver.

Port Details

The Port Details page consists of the following settings:

• Name of the port in read and write mode.
• A toggle switch that allows you to set the port status to Active () or Inactive (). This field is set to Active by default. Clients and devices are allowed to draw power and connect to the port when it is set to Active. This setting is available for PoE ports with or without connected site devices.

The following section describes the different behaviors of the switch ports.

Color of the Ports

The color of the port is based on the number of error packets seen on the port over the total number of packets that pass on the port

The color of the port will be:

• Green, if the error rate is less than 0.1% and the port is in full-duplex mode
• Yellow, if the error rate is greater than 0.1% and the port is in full-duplex mode
• Green, if the error rate is less than 2% and the port is in half-duplex mode
• Yellow, if the error rate is greater than 2% and the port is in half-duplex mode

Port Icons

The following table lists some of the key icons that are displayed on the switch ports.

Symbol	Definition
	Uplink
	PoE
	Auto configured port
	Auto configured PoE port.
	Device connected, but port or link is down.
	Powered by PoE.
	PoE denied, indicating that the port is disconnected.
	PoE fault
	Transceiver issue.
	Link flapping
	Loop detected

PoE Specification

The port details also displays the PoE specification, when the port is powered by PoE. The information is displayed as power supplied, power allocated, PoE class as highlighted in the screen capture below.

Authentication and Security

The Authentication section consists of the following options:

• No authentication (default)—Instant On devices and clients can connect to the port without authenticating. This is the default setting.
• Port-based—All Instant On devices and clients connected to the port are authorized after the initial 802.1x RADIUS authentication is successful.
• Client-based—Requires each Instant On device or client connecting to the port to separately authenticate to the 802.1x RADIUS server to gain access. You can also enable the 802.1X+MAC authentication checkbox to consider MAC authentication as the secondary option in case the RADIUS authentication is unsuccessful.

The Port-based and Client-based authentication methods, require configuration of RADIUS settings to determine how authentication behaves across all access controlled ports. The 802.1x RADIUS authentication parameters are listed in the table below with their descriptions:

Parameters	Description
Primary RADIUS Server	Configure the following parameters for the Primary RADIUS Server. If you are using the Instant On mobile app, tap More RADIUS parameters to view the below settings: Server IP address or domain name—Enter the IP address or fully qualified domain name of the RADIUS server. Shared secret—Enter a shared key for communicating with the external RADIUS server. Server timeout—Specify a timeout value in seconds. The value determines the timeout for a RADIUS request. The Instant On device attempts to send the request several times (as configured in the Retry count) before the user gets disconnected. For example, if the Timeout is 5 seconds, Retry counter is 3, user is disconnected after 20 seconds. The default value is 5 seconds. Retry count—Specify a number between 1 and 5. Retry count indicates the maximum number of authentication requests that are sent to the server group, and the default value is 3 requests. Authentication port—Enter the authentication port number of the external RADIUS server within the range of 1–65535. The default port number is 1812.
Secondary RADIUS Server	Serves as a backup server to the primary RADIUS server. To configure a Secondary RADIUS Server, slide the toggle switch to the right () and update the RADIUS server details. The available parameters are the same as that of the RADIUS server.
Send RADIUS Accounting	To Send RADIUS Accounting requests, slide the toggle switch to the right ().

• Security protections—Enable this setting when untrusted devices are connected to the port. This setting in combination with Network Security configuration is used to prevent DHCP and ARP attacks on the wired network. For more information, see Network Security.

Included networks

• Untagged—This is the default setting. The port will receive and send traffic from the default network without using a VLAN tag. To custom map the port to an untagged VLAN, tap the Untagged network drop-down list and select a network from the list. Only one untagged network can be assigned to a port at a given time.
• Tagged—The port will receive and send traffic from the default network using the management VLAN tag. To custom map the port to a tagged VLAN, tap the checkboxes against the networks listed under Tagged networks. A maximum of 22 tagged networks can be mapped to a port at a given time.

More Options

Tap More Options to view additional configuration options in the Port Details screen. This section currently consists of the power management configuration settings.

Power Management — Under More options, tap Power management to view the power management configuration settings for the switch. These options are unavailable for ports that are part of LACP. The following options allow you to configure POE power supply for the device connected to the port:

• Usage (default) — The power allocated to the port is based on usage and is unrestricted.
• Class — The power allocated to the port is based on the PoE standard of the device. The power class of devices are categorized as follows:

  Class	Maximum Power from PSE
  Class 0	15.4 Watts
  Class 1	4 Watts
  Class 2	7 Watts
  Class 3	15.4 Watts
  Class 4	30 Watts
  Class 5	45 Watts
  Class 6	60 Watts

• Port priority — Assigns a priority level to the ports. When there is a budget constraint for delivering PoE power at the switch, power is delivered to the connected devices based on the port priority. The power is delivered in the following order: Critical > High > Low. Under Port priority, assign any one of the following priority level to the port:
  • Low (default) — Configures the port as a low priority port.
  • High — Configures the port as a high priority port.
  • Critical — Configures the port as a critical priority port.

  • When two ports belonging to the same priority are demanding power, the port with the least port number is given priority. Example: When port 2 and 5 are assigned Critical class and the switch has a power budget constraint, device on port 2 will receive full power and the remaining power budget will be allocated to the device on port 5.

  • PoE priority cannot be configured for Instant On devices. By default, Instant On devices are configured with Usage mode and Critical for Port Priority.

Use site power schedule — Toggle this switch to either enable () or disable () power schedule on the port. If enabled, the PoE supply to the port will be determined by the power schedule defined. To change the power schedule, tap on Edit site power schedule. For more information on configuring Power Schedule, see Power Schedule.

Connected Clients and Devices

The Clients and devices connected on this port link displays the list of clients and infrastructure devices connected to the port. By default, the clients and devices for All Networks applicable to the port are displayed. To filter the clients and devices connected to a specific network, tap the drop-down arrow () and select one of the networks.

Clients and infrastructure devices directly connected to the port are displayed as a link to the client details page. For indirectly connected clients, only their MAC address is displayed.

Allowed Clients and Devices

This setting allows users to select clients from the connected clients list and add them to the Allowed clients and devices list. Only the clients that appear in the list will be able to access the network when connected through that port. Disabling this feature will allow any wired client to connect to the port.

The following procedure describes how to add clients and devices to the allowed list, for a specific port on an Instant On switch:

1. Tap the Inventory() tile on the Aruba Instant On home page or tap the Site Health() banner and then tap on Show inventory.
2. Tap any of the switches listed in the Inventory. The Switch Details screen is displayed with details.
3. Under Ports, tap the Clients and devices on this port link.
4. Tap the advanced menu () in the Clients and Devices page and tap Allowed clients and devices.
5. Set the Allowed selected clients and devices toggle switch to enabled ().
6. Tap Allowed clients and devices list.
7. Tap the add icon () at the bottom of the Allowed Clients and Devices screen.
8. Tap on the Search for new clients and devices button and connect new clients and devices to the port to be discovered.
9. Once the search is complete, select the checkbox next to the clients and devices you want to add to the Allowed list and tap the Add clients and devices button.
10. Tap < Back to return to the previous screen. The changes are automatically saved.
    

Advanced Menu

The advanced menu () in the Switch Details screen provides the following configuration options:

• Locate
• Connectivity Test
• Restart
• Routing
• Port Mirroring
• Jumbo Frames
• Switching to Local Management
• Replace Device
• Remove from Inventory

Locate

The Locate option helps you to locate your device when there are many devices in the site. The locator light will be active for 30 minutes after you turn on the toggle switch. The light is turned off by default.

To locate your Instant On switch, follow these steps:

1. Tap the advanced menu () icon in the title bar of the Switch Details screen.
2. Tap Locate.
3. Slide the Activate lights toggle switch to the right (). The locator light is activated on the switch.

Connectivity Test

The Test Connectivity option is used to test the reachability of an Instant On device. To perform a network test, you need to enter a Network Destination to be reached.

To run a network test on an Instant On switch, follow these steps:

1. Tap the advanced menu () icon in the title bar of the Switch Details screen.
2. Tap on Connectivity test from the drop-down menu. The Connectivity screen is displayed.
3. Under Source, select an Instant On device from the drop-down list.

   Only active devices of a site can be selected in this field. It could be a Switch or an AP.

4. Under Destination, enter the hostname or IP address of the device to which the source device should connect.
5. Tap Start connection test.

Restart

To restart the device:

1. Tap the advanced menu () icon in the title bar of the Switch Details screen.
2. Select Restart from the drop-down menu. The appropriate assistant page is displayed.
3. Click Restart.

Routing

Configure routing on the Instant On switch. Routing is disabled by default. To configure routing for the switch perform the following steps:

1. Tap the advanced menu () icon in the title bar of the Switch Details screen.
2. Select Routing from the drop-down list. The Routing page is displayed.
3. To enable routing on a switch, toggle the Allow routing between networks switch to enable.
4. When Allow routing between networks is selected, icon is displayed next to networks that can be routed. If the icon is not visible, it implies that routing is turned off for the network.
5. To configure routing for a network, select the network to view the routing options:
   1. Toggle the Allow routing switch to enable.
   2. Configure either of the following options to assign an IP for the network:
      • Automatic (default) — The network will receive IP address from a DHCP server.
      • Static — Define the IP address assignment for the network by entering the following network parameters:
        • Network IP address — Enter the IP address for the network.
        • Subnet mask — Enter the subnet mask for the network.
6. Tap on Done to apply configuration changes. The routing configuration is applied after the Instant On switch reboots.

Port Mirroring

The Instant On switches have the ability to trace the packets sent and received from a port, by mirroring the data and sending it to a destination port.  This feature is useful to troubleshoot network issues. Only one port mirroring session can be configured for each Instant On switch. If a site has multiple switches, there can be multiple port mirroring sessions active at the same time on different devices. When a port mirroring session is active, a destination port cannot be selected as a member of a Link aggregation group.

To configure a port mirroring session on a port, follow these steps:

1. Tap the advanced menu () icon in the title bar of the Switch Details screen.
2. Tap on Port mirroring from the drop-down list.
3. In the Port Mirroring screen, select a switch port from the drop-down list, to which the traffic should be mirrored. This setting is configured as the destination port. The destination can be any port on the switch, except for the following:
   • The uplink port
   • A port where the Instant On device is connected.
   • A port that is configured as part of a trunk.
   • A port that uses 802.1x
4. Under Source, select one of the following options:
   1. Network—Select one of the available networks from the drop-down list.
   2. Ports—Select the port(s) to be used as the source port(s).

   You can select up to eight ports as a source port.

5. Select one of the following as the Traffic direction:
   1. Transmit and receive
   2. Transmit
   3. Receive
6. Tap Start mirroring to initiate the mirroring of the packets sent from the source to the destination.

   To stop the mirroring, tap Stop mirroring at anytime.

Jumbo Frames

Jumbo frames improve data transmission efficiency by reducing the number of frames and overheads for switches to process. Configuring jumbo frames is supported on all Instant On switches and can be enabled on each switch individually.

The following procedure allows you to configure jumbo frames on an Instant On switch:

1. Tap the advanced menu () icon in the title bar of the Switch Details page.
2. Tap on Jumbo frames from the drop-down list. The Jumbo Frames screen is displayed.
3. Slide the toggle switch next to Jumbo frames to the right () to enable the setting and allow transmission of large data through the switch.
4. Tap Done.

   The Instant On switch reboots automatically to apply the changes.

Switching to Local Management

The Switch to local management option allows you to change the switch management from cloud to local mode. When this option is selected, the switch will be removed from the site and the existing configuration will be stored on the switch. For more information, see Local Management for Switches.

To change switch management to local mode, follow these steps:

1. Tap the advanced menu () icon in the title bar of the Switch Details page.
2. Tap Switch to local management. The appropriate assistant page is displayed to change the switch management to local mode.

Replace Device

Follow these steps to replace a failed Instant On switch with another Instant On switch, while maintaining the specific device configurations:

1. In the inventory, tap the failed Instant On switch. The Switch Details screen is displayed.
2. Tap the advanced menu () icon in the title bar of the Switch Details screen.
3. Tap Replace device.
4. In the Replace Device screen, tap Search when the device lights are alternating between green and amber.
5. Enter the Serial Number of the device which you choose to add to the inventory, or select one of the following options:
   • Search for devices—Initiates the LLDP automatic search. It usually takes around 4-5 minutes for the Instant On devices to be detected.
   • Scan barcode or QR code—Use the barcode or QR code scan method to add your devices. For more information, see Discovering Available Devices.
6. Tap the Instant On switch to replace with the failed switch in the inventory.
7. Tap Replace.
8. Tap Finish.

Remove from Inventory

To remove the switch when it is still online:

1. Tap the advanced menu () icon in the title bar of the Switch Details screen.
2. Select Remove from inventory from the drop-down menu. The appropriate assistant page is displayed.
3. Click Remove.

The Instant On switch can be removed from the inventory when it goes offline. On the Switch Details page, a rectangular bar appears below the device name when an alert is triggered. The color of the rectangular alert bar will appear according to the alert type.

1. Click the Alerts link. You will be directed to the Alert Details page which provides more information about the unusual activity.
2. To remove the switch from the inventory, follow these steps:
   1. If the Instant On switch is removed from the network, you can choose to remove the switch from the inventory by clicking Remove from inventory by tapping the advanced menu () icon in the Switch Details page.
   2. Click Remove to delete the switch from the inventory.