Subject: How to Configure HPE Aruba 2530-24 Switch using Console (CLI Command Line) and Turning on Web GUI Interface

Author: Mr. Turritopsis Dohrnii Teo En Ming (TARGETED INDIVIDUAL)
Country: Singapore
Date: 20 Dec 2021 Monday Singapore Time

Type of Publication: Plain Text
Document Version: 20211220.01

Reference guide: Initial AOS Switch Configuration
Link: https://www.arubanetworks.com/techdocs/ClearPass/6.9/Aruba_DeployGd_HTML/Content/HP%20Switch%20Integration/Switch_configuration.htm

Switch Boot-up Messages

ROM information:
Build directory: /ws/swbuildm/pondsrom_qaoff/rom/build/pondsrom(swbuildm_pondsrom_qaoff_pondsrom)
Build date: Aug 27 2017
Build time: 22:03:59
Build version: YB.15.10
Build number: 10073

Boot Profiles:

  1. Monitor ROM Console
  2. Primary Software Image
  3. Secondary Software Image

Select profile (primary):

Booting Primary Software Image...

Decompressing...done.

Initializing...
Initialization done

Waiting for Speed Sense. Press <Enter> twice to continue.

This Aruba 2530-24 switch is the property of Teo En Ming Corporation.
Technical support email: [email protected]

Username:

Setting up admin user account for the first time

Connected at 9600 baud
HP J9782A 2530-24 Switch
Software revision YB.16.10.0009

(C) Copyright 2020 Hewlett Packard Enterprise Development LP

RESTRICTED RIGHTS LEGEND

Confidential computer software. Valid license from Hewlett Packard Enterprise
Development LP required for possession, use or copying. Consistent with FAR
12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the
U.S. Government under vendor's standard commercial license.

We'd like to keep you up to date about:

Configure the manager credentials : admin
Password:
Re-enter the new password:
You have never previously logged in.

Enter configuration mode

HP-2530-24# configure

Adding 2nd admin user account

HP-2530-24(config)# password manager user-name admin2
New password for manager: **
Re-enter the new password for manager: **

DHCP-based image file download from a TFTP server is disabled when an operator
or manager password is set.

DHCP-based ACS URL setting for TR-69 is disabled when an operator or manager
password is set.

DHCP-based config file download from a TFTP server is disabled when an operator
or manager password is set.

The TFTP Server is disabled when an operator or manager password is set.
HP-2530-24(config)#

Setting the hostname

HP-2530-24(config)# hostname SW3

Configuring the login banner

Reference guide: banner motd
Link: https://www.arubanetworks.com/techdocs/ArubaOS_60/CLI/banner.htm

SW3(config)# banner motd * Enter TEXT message. End with the character ''
This Aruba 2530-24 switch is the property of Teo En Ming Corporation.
Technical support email: [email protected]

SW3(config)#

SW3> enable
Username: admin2
Password:
Your previous successful login (as manager) was on 1990-01-01 00:36:46
from the console
SW3#

Configure time zone, date and time

SW3# configure

SW3(config)# clock timezone gmt +8

SW3(config)# clock set 12/20/2021

SW3(config)# clock set 12:39:00

Show date and time

SW3(config)# clock
12:39:22 GMT +08:00 Mon Dec 20 2021

Configure the default gateway

SW3(config)# ip default-gateway 192.168.1.1

Configure DNS Servers

Reference guide: Aruba Switch DNS Settings
Link: https://community.spiceworks.com/topic/2305810-aruba-switch-dns-settings

SW3(config)# ip dns server-address priority 1 8.8.8.8

SW3(config)# ip dns server-address priority 2 8.8.4.4

Enable SSH Server

SW3(config)# ip ssh port default

Configure IP address of HPE Aruba 2530-24 switch

SW3(config)# vlan 1 ip address 192.168.1.13/24

Configure the management VLAN

SW3(config)# management-vlan 1

Enable the Telnet Server

SW3(config)# telnet-server

Enable Web GUI Interface

Reference guide: Securing the Web management for the HP 2530 switch
Link: https://blog.wiztechtalk.com/2019/05/14/securing-the-web-management-for-the-hp-2530-switch/

SW3(config)# web-management interface improved

SW3(config)# web-management ssl
https cannot be enabled with no certificate present. To install a certificate,
use one of the following commands:

  • 'crypto pki enroll-self-signed...'
  • 'crypto pki create-csr ...'

SW3(config)# crypto pki enroll-self-signed certificate-name sw3 subject

SW3(config)# web-management ssl

Disable Plaintext HTTP Server

SW3(config)# no web-management plaintext

SW3> enable
Username: admin2
Password:
Your previous successful login (as manager) was on 1990-01-01 08:37:27
from the console
SW3# configure
SW3(config)#

Configure the admin user account again

SW3(config)# password manager user-name admin plaintext <password>

Save the running configuration

SW3(config)# save
SW3(config)# save
SW3(config)# save

Show the running configuration

SW3(config)# display saved-configuration
; J9782A Configuration Editor; Created on release #YB.16.10.0009
; Ver #14:41.44.00.04.19.02.13.98.82.34.61.18.28.c3.84.9c.63.ff.37.27:35
hostname "SW3"
banner motd "This Aruba 2530-24 switch is the property of Teo En Ming
Corporation.\nTechnical support email: [email protected]"
time timezone 480
no web-management
web-management ssl
ip default-gateway 192.168.1.1
ip dns server-address priority 1 8.8.8.8
ip dns server-address priority 2 8.8.4.4
snmp-server community "public"
vlan 1
name "DEFAULT_VLAN"
untagged 1-28
ip address 192.168.1.13 255.255.255.0
exit
management-vlan 1
no tftp server
no dhcp config-file-update
no dhcp image-file-update
no dhcp tr69-acs-url
password manager

Configure SNTP

Reference guide: How to: Setting up SNTP on HP Switches
Link: https://community.spiceworks.com/how_to/56790-setting-up-sntp-on-hp-switches

SW3(config)#

SW3(config)# timesync sntp

SW3(config)# sntp unicast

SW3(config)# sntp server priority 1 216.239.35.0
Invalid IP address : 216.239.35.0

Configure Loop Protection

Reference guide: Hpe Aruba and loop-protect
Link: https://marcoschiavon.net/hpe-aruba-and-loop-protect/

SW3(config)# show loop-protect

Status and Counters - Loop Protection Information

Transmit Interval (sec) : 5
Port Disable Timer (sec) : Disabled
Loop Detected Trap : Disabled
Loop Protect Mode : Port
Loop Protect Enabled VLANs :

Loop    Loop     Detected  Loop   Time Since  Rx            Port

Port Protect Detected on VLAN Count Last Loop Action Status


SW3(config)#

SW3(config)# loop-protect mode vlan

SW3(config)# loop-protect vlan 1

SW3(config)# show loop-protect

Status and Counters - Loop Protection Information

Transmit Interval (sec) : 5
Port Disable Timer (sec) : Disabled
Loop Detected Trap : Disabled
Loop Protect Mode : Vlan
Loop Protect Enabled VLANs : 1

Loop    Loop     Detected  Loop   Time Since  Rx            Port

Port Protect Detected on VLAN Count Last Loop Action Status


SW3(config)#

SW3(config)# loop-protect 1-24 receiver-action send-disable

Save running configuration

SW3# save
SW3# save
SW3# save

Show running configuration

SW3(config)# display saved-configuration
; J9782A Configuration Editor; Created on release #YB.16.10.0009
; Ver #14:41.44.00.04.19.02.13.98.82.34.61.18.28.c3.84.9c.63.ff.37.27:35
hostname "SW3"
banner motd "This Aruba 2530-24 switch is the property of Teo En Ming
Corporation.\nTechnical support email: [email protected]"
timesync sntp
sntp unicast
time timezone 480
no web-management
web-management ssl
ip default-gateway 192.168.1.1
ip dns server-address priority 1 8.8.8.8
ip dns server-address priority 2 8.8.4.4
snmp-server community "public"
vlan 1
name "DEFAULT_VLAN"
untagged 1-28
ip address 192.168.1.13 255.255.255.0
exit
management-vlan 1
no tftp server
loop-protect 1-24
loop-protect mode vlan
loop-protect vlan 1
no dhcp config-file-update
no dhcp image-file-update
no dhcp tr69-acs-url
password manager

SW3(config)#

Show Loop Protection Information

SW3(config)# show loop-protect

Status and Counters - Loop Protection Information

Transmit Interval (sec) : 5
Port Disable Timer (sec) : Disabled
Loop Detected Trap : Disabled
Loop Protect Mode : Vlan
Loop Protect Enabled VLANs : 1

Loop    Loop     Detected  Loop   Time Since  Rx            Port

Port Protect Detected on VLAN Count Last Loop Action Status


1 Yes No 0 0 send-disable Down
2 Yes No 0 0 send-disable Down
3 Yes No 0 0 send-disable Down
4 Yes No 0 0 send-disable Down
5 Yes No 0 0 send-disable Down
6 Yes No 0 0 send-disable Down
7 Yes No 0 0 send-disable Down
8 Yes No 0 0 send-disable Down
9 Yes No 0 0 send-disable Down
10 Yes No 0 0 send-disable Down
11 Yes No 0 0 send-disable Down
12 Yes No 0 0 send-disable Down
13 Yes No 0 0 send-disable Down
14 Yes No 0 0 send-disable Down
15 Yes No 0 0 send-disable Down
16 Yes No 0 0 send-disable Down
17 Yes No 0 0 send-disable Down
18 Yes No 0 0 send-disable Down
19 Yes No 0 0 send-disable Down
20 Yes No 0 0 send-disable Down
21 Yes No 0 0 send-disable Down
22 Yes No 0 0 send-disable Down
23 Yes No 0 0 send-disable Down
24 Yes No 0 0 send-disable Down
SW3(config)#

Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 20 Dec 2021, is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant with a Systems Integrator (SI)/computer firm in Singapore. He is an IT enthusiast.

REFERENCES

[1] https://pastebin.com/raw/s8BKWMDk

[2] https://controlc.com/f7ed0a07

Edit

Pub: 20 Dec 2021 14:55 UTC

Views: 82