Aruba CX - Command Line advice

[petben]

Hello, we have a few new Aruba CX 6200 series switches and there is some confusion over the command to set IP/DG/DNS address on the switch and specify its 'management' VLAN.

 

Can someone please advise the commands?

 

Thanks

[synaesthesia]

Mgmt interface is called "mgmt" and can generally be left alone

Set IP addresses on the interface and not in the vlan - so unlike older HP/Aruba, you define the vlan in "vlan" context

i.e.

conf

vlan 5

description RANDOMSTUFF

 

and the IP in the interface, i.e.

conf

int vlan 5

ip address 192.168.0.10/24

 

Gateway would be done via routing, so this is generally

conf

ip route 0.0.0.0/24 192.168.0.1 (or whatever DG is)

Same context for DNS

ip dns server-address 8.8.8.8

ip dns server-address 8.8.4.4

[Davit2005]

You don't need to use the management interface if the scenario does not need it. Jus setup a different vlan jus for management.

 

I would however configure an ACL for management access. There is a guide for security on Aruba CX switches which is worth a read. I would also disable bluetooth and the dedicated management interface if not using it personally.

 

https://www.arubanetworks.com/techdocs/AOS-CX/10.12/PDF/security_6200-6300-6400.pdf

 

EDIT: There is also this one which goes over the ACL and other bits

 

https://www.arubanetworks.com/techdocs/AOS-CX/10.13/PDF/hardening.pdf

Edited June 4, 2024 by Davit2005

[petben]

Thanks for replies. The tag/untag commands have changed too?

[synaesthesia]

Yeah, again in the interface context you'll want to set a native vlan and tagged with

vlan trunk native 1 (default)

vlan trunk allowed 1,5,10 etc

 

Make sure to allow default vlan as well as have it native

 

If it's just an access port with no tagging needed, then vlan access 10 etc