AOS-CX Switching
Fundamentals
LAB GUIDE
Version: 24.31
Switching Series
© Copyright 2024 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice.
The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accom-
panying such products and services. Nothing herein should be construed as constituting an additional warranty.
Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Open Source Code
This product includes code licensed under the GNU General Public License, the GNU Lesser General Public License, and/or certain other
open source licenses. A complete machine-readable copy of the source code corresponding to such code is available upon request. This
offer is valid to anyone in receipt of this information and shall expire three years following the date of the final distribution of this
product version by Hewlett Packard Enterprise Company. To obtain such source code, send a check or money order in the amount of US
$10.00 to:
Hewlett Packard Enterprise Company
1701 E Mossy Oaks Rd
Spring, TX 77389
USA
Notices
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and
services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be con-
strued as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions
contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with
FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items
are licensed to the U.S. Government under vendor's standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over
and is not responsible for information outside the Hewlett Packard Enterprise website.
Acknowledgments
All third-party marks are property of their respective owners.
Contents
Contents
Contents i
Lab 1: Testing lab connectivity 1
Task 1-1: Aruba Training Lab access 3
Task 1-2: Testing connectivity 4
Lab 2: Initial setup 7
Task 2-1: Reset switches to factory default 7
Task 2-2: Explore the AOS-CX switch CLI 11
Task 2-3: Configure initial settings 26
Task 2-4: Create and explore checkpoints 32
Lab 3.1: Configure a VLAN 35
Task 3.1-1: Assign PCs to VLAN 11 35
Task 3.1-2: Explore MAC address table 39
Task 3.1-3: Save your configurations 46
Lab 3.2: Add a second switch to the topology 49
Task 3.2-1: Configure initial settings on Access-2 49
Task 3.2-2: Enable link between access switches 54
Task 3.2-3: Assign PCs to VLAN 11 61
Task 3.2-4: Save your configurations 64
Lab 3.3: Add a core switch to the topology 67
Task 3.3-1: Add Core-1 to the topology 68
Task 3.3-2: Adding a second VLAN 74
Task 3.3-3: Save your configurations 82
Lab 4.1: Rapid Spanning Tree Protocol 83
Task 4.1-1: Add the redundant core switch and redundant links 84
Task 4.1-2: Verify the topology 89
Task 4.1-3: Test link failure 100
Contents i
Task 4.1-4: Save your configurations 103
Lab 4.2: Deploying MSTP 105
Task 4.2-1: Configure an MST region 106
Task 4.2-2: Load balancing 109
Task 4.2-3: Save your configurations 120
Lab 4.3: Explore broadcast storm effects (optional) 121
Task 4.3-1: Pre-lab setup 121
Task 4.3-2: Create Layer 2 loop 124
Task 4.3-3: Contain a broadcast storm 129
Task 4.3-4: Preventing loops 130
Task 4.3-5: Save your configurations 132
Task 4.3-6: Revert Access-1 and Access-2 configuration 133
Lab 5: Link aggregation between core switches 135
Task 5-1: Configure manual link aggregation 136
Task 5-2: Configure dynamic link aggregation 142
Task 5-3: Save your configurations 148
Lab 6.1: Create an HPE Aruba Networking Virtual Switching
Framework stack 151
Task 6.1-1: Deploy a VSF stack 152
Task 6.1-2: Configure distributed link aggregation 160
Task 6.1-3: Save your configurations 169
Lab 6.2: Configure an HPE Aruba Networking Virtual Switching
eXtension environment 171
Task 6.2-1: Configure VSX 172
Task 6.2-2: Distributed LAG 179
Task 6.2-3: Save your configurations 186
Lab 6.3: Maintaining the VSF stack 189
Task 6.3-1: Secondary member 189
Task 6.3-2: Split brain detection 193
Task 6.3-3: Save your configurations 202
ii Contents
Contents
Lab 7: Layer 3 services 203
Task 7-1: Inter-VLAN routing 204
Task 7-2: Explore end-to-end packet delivery 212
Task 7-3: Add redundancy to the core layer 227
Task 7-4: Save your configurations 235
Lab 8: Static routes 237
Task 8-1: Add links to ISPs 238
Task 8-2: Adding static routes 240
Task 8-3: Redundancy with floating routes 247
Task 8-4: Save your configurations 252
Lab 9.1: Open Shortest Path First 255
Task 9.1-1: OSPF single area between cores 256
Task 9.1-2: Add the server switch 262
Task 9.1-3: Advertise LAN segments 273
Task 9.1-4: Testing services 276
Task 9.1-5: Save your configurations 281
Lab 9.2: OSPF advanced settings (optional) 283
Task 9.2-1: Cost-based path manipulation (traffic engineering) 283
Task 9.2-2: Passive interfaces 291
Task 9.2-3: Define point-to-point networks 297
Task 9.2-4: Make router ID routable 301
Task 9.2-5: Default network injection 303
Task 9.2-6: Save your configurations 308
Lab 10: Quality of Service 309
Task 10-1: Default QoS switch configuration 309
Task 10-2: Explore QoS markings 314
Task 10-3: Save your configurations 319
Lab 11: Network access security 321
Task 11-1: Prepare the environment 322
Task 11-2: RADIUS server setup 328
Contents iii
Task 11-3: Basic 802.1X authentication with a single user 330
Task 11-4: MAC-based authentication 341
Task 11-5: Save your configurations 343
Lab 12: Secure management access 345
Task 12-1: Management port 346
Task 12-2: Role Based Access Control 349
Task 12-3: RADIUS-based management 353
Task 12-4: Explore the AOS-CX Web UI 357
Task 12-5: Save your configurations 366
iv Contents
