Solutions Tech Lab

Total Posts

Aruba Central Template configuration for VSF and Core Switches

Published by

on

Here are the templates that I used for VSF and the core switches in my previous post.

Aruba Central VSF Template

Here is the full template for your reference. This template can be used for a single switch or VSF stack of up to 4x members.

hostname %_sys_hostname%
allow-unsupported-transceiver
user admin group administrators password plaintext aruba123
clock timezone australia/melbourne
ntp server 216.239.35.12 iburst
ntp server 216.239.35.4 iburst
ntp server 216.239.35.8 iburst
ntp enable
ntp vrf mgmt
ssh server vrf default
ssh server vrf mgmt
https-server rest access-mode read-write
https-server vrf default
https-server vrf mgmt

snmp-server vrf default
snmp-server vrf mgmt
snmp-server community Thisisgreat
ip dns server-address 192.168.1.1 vrf mgmt

%if vsf_mbr1_link_1%
interface %vsf_mbr1_link_1%
no shutdown
interface %vsf_mbr1_link_2%
no shutdown
%endif%
%if vsf_mbr2_link_1%
interface %vsf_mbr2_link_1%
no shutdown
interface %vsf_mbr2_link_2%
no shutdown
%endif%


%if vsf_mbr3_link_1%
interface %vsf_mbr3_link_1%
no shutdown
interface %vsf_mbr3_link_2%
no shutdown
%endif%

%if vsf_mbr4_link_1%
interface %vsf_mbr4_lnk_1%
no shutdown
interface %vsf_mbr4_link_2%
no shutdown
%endif%

vsf split-detect mgmt
%if vsf_sec_mbr%
vsf secondary-member vsf_sec_mbr%
%endif%

%if vsf_mbr_3_type%
vsf member 1
%if vsf_mbr1_link_1%
link 1 %vsf_mbr1_link_1%
%endif%
%if vsf_mbr1_link_2%
link 2 %vsf_mbr1_link_2%
%endif%
%else%
%if vsf_mbr_2_type%
vsf member 1
link 1 %vsf_mbr1_link_1%-%vsf_mbr1_link_2%
vsf member 2
link 1 %vsf_mbr2_link_1%-%vsf_mbr2_link_2%
%else%
%if vsf_mbr_2_type%
vsf member 2
%if vsf_mbr2_link_1%
link 1 %vsf_mbr2_link_1%
%endif%
%if vsf_mbr2_link_2%
link 2 %vsf_mbr2_link_2%
%endif%
%endif%
%endif%
%endif%

%if vsf_mbr_3_type%
vsf member 3
type vsf_mbr_3_type%
%if vsf_mbr3_link_1%
link 1 %vsf_mbr3_link_1%
%endif%
%if vsf_mbr3_link_2%
link 2 %vsf_mbr3_link_2%
%endif%
%endif%

%if vsf_mbr_4_type%
type vsf_mbr_4_type%
vsf member 4
%if vsf_mbr4_link_1%
link 1 %vsf_mbr4_link_1%
%endif%
%if vsf_mbr4_link_2%
link 2 %vsf_mbr4_link_2%
%endif%
%endif%

vlan 1
vlan 11
name Staff
vlan 12
name Student
vlan 13
name Restricted
vlan 14
name Voice
vlan 15
name IoT
vlan 16
name Guest

interface vlan 11
ip address %vlan11_ip_address%
interface vlan 12
ip address %vlan12_ip_address%
interface vlan 13
ip address %vlan13_ip_address%
interface vlan 14
ip address %vlan14_ip_address%
interface vlan 15
ip address %vlan15_ip_address%
interface vlan 16
ip address %vlan16_ip_address%

spanning-tree
interface vlan1

interface mgmt
no shutdown
ip static %_sys_ip_address%/24

Aruba Central VSF Template Variables

Here is the variables in JSON format that were used in the template for your reference

{
"addSerial": {
"_sys_hostname": "Comms1-6300M-Stack",
"_sys_ip_address": "192.168.1.21",
"_sys_lan_mac": "addMacAddr",
"_sys_serial": "addSerial ",
"_sys_stack_command": "",
"lag_id": "10",
"lag_interface_1": "1/1/25",
"lag_interface_2": "2/1/25",
"lag_interface_3": "",
"lag_interface_4": "",
"port_count_1": "24",
"port_count_2": "24",
"port_count_3": "",
"port_count_4": "",
"vsf_mbr1_link_1": "1/1/27",
"vsf_mbr1_link_2": "1/1/28",
"vsf_mbr2_link_1": "2/1/27",
"vsf_mbr2_link_2": "2/1/28",
"vsf_mbr3_link_1": "",
"vsf_mbr3_link_2": "",
"vsf_mbr4_link_1": "",
"vsf_mbr4_link_2": "",
"vsf_mbr_1_type": "jl666a",
"vsf_mbr_2_type": "jl666a",
"vsf_mbr_3_type": "",
"vsf_mbr_4_type": "",
"vsf_sec_mbr": "2",
"vlan11_ip_address": "10.10.11.9/24",
"vlan12_ip_address": "10.10.12.9/24",
"vlan13_ip_address": "10.10.13.9/24",
"vlan14_ip_address": "10.10.14.9/24",
"vlan15_ip_address": "10.10.15.9/24",
"vlan16_ip_address": "10.10.16.9/24"
}
}


Aruba Central 832X Template

Here is the full template for your reference.

hostname %_sys_hostname%
user admin group administrators password plaintext blahblah
allow-unsupported-transceiver
clock timezone australia/melbourne
ntp server 216.239.35.12 iburst
ntp server 216.239.35.4 iburst
ntp server 216.239.35.8 iburst
ntp enable
ntp vrf mgmt
ssh server vrf mgmt
https-server rest access-mode read-write
https-server vrf mgmt
snmp-server vrf default
snmp-server vrf mgmt
snmp-server community Thisisgreat
loop-protect re-enable-timer 60
ip dns server-address 192.168.1.1 vrf mgmt
ip route 0.0.0.0/0 10.10.21.250

interface mgmt
no shutdown
%if use_dhcp=1%
ip dhcp
%endif%
%if use_dhcp=0%
ip static %_sys_ip_address%/24
default-gateway 192.168.1.249
%endif%

vrf keepalive

interface lag 1
description Inter-Switch-Link
no shutdown
no routing
vlan trunk native 1 tag
vlan trunk allowed all
lacp mode active

interface %ISL_1_interface%
description VSX-ISL-mem-port-LAG-1
no shutdown
lag 1

interface %ISL_2_interface%
description VSX-ISL-mem-port-LAG-1
no shutdown
lag 1

vlan 11
name Staff
vsx-sync
vlan 12
name Student
vsx-sync
vlan 13
name Restricted
vsx-sync
vlan 14
name Voice
vsx-sync
vlan 15
name IoT
vsx-sync
vlan 16
name Guest
vsx-sync
vlan 21
name Server
vsx-sync

interface lag 50 multi-chassis
vsx-sync vlans
no routing
no shutdown
description Server-VSF
vlan trunk allow 1,21
vlan trunk native 1
loop-protect vlan 1
lacp mode active
lacp rate fast

interface lag 100 multi-chassis
vsx-sync vlans
no routing
no shutdown
description comms1-VSF
vlan trunk allow 11-16
vlan trunk native 1
loop-protect vlan 1
lacp mode active
lacp rate fast

interface lag 101 multi-chassis
vsx-sync vlans
no routing
no shutdown
description comms2-VSF
vlan trunk allow 11-16
vlan trunk native 1
loop-protect vlan 1
lacp mode active
lacp rate fast


interface 1/1/1
description %lag_intf_21_desc%
lag 50
no shutdown

interface 1/1/5
description %lag_intf_1_desc%
lag 100
no shutdown

interface 1/1/6
description %lag_intf_2_desc%
lag 101
no shutdown

%if vsx_primary=1%
interface %keepalive_interface%
vrf attach keepalive
description Keepalive-Link
no shutdown
ip address 1.1.1.1/30

vsx
system-mac 02:01:00:01:00:00
inter-switch-link lag 1
role primary
keepalive peer 1.1.1.2 source 1.1.1.1 vrf keepalive
linkup-delay-timer 60
vsx-sync aaa dns mclag-interfaces snmp ssh time vsx-global

interface vlan11
description Staff
ip address %vlan11_ip_addr%/24
active-gateway ip 10.10.11.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan12
description Student
ip address %vlan12_ip_addr%/24
active-gateway ip 10.10.12.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan13
description Restricted
ip address %vlan13_ip_addr%/24
active-gateway ip 10.10.13.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan14
description Voice
ip address %vlan14_ip_addr%/24
active-gateway ip 10.10.14.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan15
description IoT
ip address %vlan15_ip_addr%/24
active-gateway ip 10.10.15.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan16
description Guest
ip address %vlan16_ip_addr%/24
active-gateway ip 10.10.16.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan21
description Server
ip address %vlan21_ip_addr%/24
active-gateway ip 10.10.21.1 mac 00:00:00:00:02:01

%endif%
%if vsx_primary=0%

interface %keepalive_interface%
vrf attach keepalive
description Keepalive-Link
no shutdown
ip address 1.1.1.2/30

vsx
system-mac 02:01:00:01:00:00
inter-switch-link lag 1
role secondary
keepalive peer 1.1.1.1 source 1.1.1.2 vrf keepalive
linkup-delay-timer 60
vsx-sync aaa dns mclag-interfaces snmp ssh time vsx-global

interface vlan11
description Staff
ip address %vlan11_ip_addr%/24
active-gateway ip 10.10.11.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan12
description Student
ip address %vlan12_ip_addr%/24
active-gateway ip 10.10.12.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan13
description Retricted
ip address %vlan13_ip_addr%/24
active-gateway ip 10.10.13.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan14
description Voice
ip address %vlan14_ip_addr%/24
active-gateway ip 10.10.14.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan15
description IoT
ip address %vlan15_ip_addr%/24
active-gateway ip 10.10.15.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan16
description Guest
ip address %vlan16_ip_addr%/24
active-gateway ip 10.10.16.1 mac 00:00:00:00:02:01
ip helper-address 10.10.21.254
ip helper-address 10.10.21.253

interface vlan21
description Server
ip address %vlan21_ip_addr%/24
active-gateway ip 10.10.21.1 mac 00:00:00:00:02:01
%endif%

copp-policy moderate
class acl-logging priority 0 rate 468 burst 4
class arp-broadcast priority 4 rate 1406 burst 4
class arp-unicast priority 5 rate 937 burst 4
class hypertext priority 6 rate 17343 burst 16
class icmp-broadcast-ipv4 priority 4 rate 1406 burst 10
class icmp-multicast-ipv6 priority 4 rate 1406 burst 10
class icmp-unicast-ipv4 priority 5 rate 937 burst 10
class icmp-unicast-ipv6 priority 5 rate 937 burst 10
class igmp priority 7 rate 937 burst 4
class ip-exceptions priority 0 rate 468 burst 10
class ipv4-options priority 3 rate 468 burst 10
class mirror-to-cpu priority 1 rate 468 burst 2
class mld priority 7 rate 937 burst 4
class ntp priority 6 rate 468 burst 4
class sflow priority 2 rate 1406 burst 16
class ssh priority 6 rate 17343 burst 4
class unknown-multicast priority 3 rate 4218 burst 10
class unresolved-ip-unicast priority 3 rate 3281 burst 10
default-class priority 1 rate 17343 burst 16
apply copp-policy moderate

Aruba Central 832X Template Variables

Here is the variables in JSON format that were used in the template for your reference.

{
"SERIALcore1": {
"ISL_1_interface": "1/1/50",
"ISL_2_interface": "1/1/51",
"_sys_hostname": "Core-8320-2",
"_sys_ip_address": "192.168.1.19",
"_sys_lan_mac": "MAC-1",
"_sys_serial": "SERIALcore1",
"keepalive_interface": "1/1/48",
"lag_intf_1_desc": "comms1-VSF-2",
"lag_intf_21_desc": "server-VSF-2",
"lag_intf_2_desc": "comms2-VSF-2",
"use_dhcp": "0",
"vlan11_ip_addr": "10.10.11.3",
"vlan12_ip_addr": "10.10.12.3",
"vlan13_ip_addr": "10.10.13.3",
"vlan14_ip_addr": "10.10.14.3",
"vlan15_ip_addr": "10.10.15.3",
"vlan16_ip_addr": "10.10.16.3",
"vlan21_ip_addr": "10.10.21.3",
"vsx_primary": "0"
},
"SERIALcore2": {
"ISL_1_interface": "1/1/50",
"ISL_2_interface": "1/1/51",
"_sys_hostname": "Core-8320-1",
"_sys_ip_address": "192.168.1.18",
"_sys_lan_mac": "MAC-2",
"_sys_serial": "SERIALcore2",
"keepalive_interface": "1/1/48",
"lag_intf_1_desc": "comms1-VSF-1",
"lag_intf_21_desc": "server-VSF-1",
"lag_intf_2_desc": "comms2-VSF-1",
"use_dhcp": "0",
"vlan11_ip_addr": "10.10.11.2",
"vlan12_ip_addr": "10.10.12.2",
"vlan13_ip_addr": "10.10.13.2",
"vlan14_ip_addr": "10.10.14.2",
"vlan15_ip_addr": "10.10.15.2",
"vlan16_ip_addr": "10.10.16.2",
"vlan21_ip_addr": "10.10.21.2",
"vsx_primary": "1"
}
}

Discover more from Solutions Tech Lab

Subscribe to get the latest posts sent to your email.

Leave a comment