Aruba Fabric Composer 6.3.

0
User Guide
Copyright Information
© Copyright 2022 Hewlett Packard Enterprise Development LP.
Open Source Code
This product includes code licensed under the GNU General Public License, the GNU Lesser General
Public License, and/or certain other open source licenses. A complete machine-readable copy of the
source code corresponding to such code is available upon request. This offer is valid to anyone in
receipt of this information and shall expire three years following the date of the final distribution of
this product version by Hewlett Packard Enterprise Company. To obtain such source code, send a
check or money order in the amount of US $10.00 to:
Hewlett Packard Enterprise Company
6280 America Center Drive
San Jose, CA 95002
USA
 Contents

Contents

Contents 3
Revision History 11
Important Information 12
Notices 12
Acknowledgments 12
Safety 12
Regulatory Information 13
Additional Regulatory Information 13

About the Aruba Fabric Composer 14

Aruba Fabric Composer UI 14
Aruba Fabric Composer and Aruba AOS-CX switches 14

About the Leaf-Spine Fabric 15

New Features Overview 16
Logging into the Aruba Fabric Composer 17
First-Time Login as Admin 17

Using the Aruba Fabric Composer UI 18

Navigating the Aruba Fabric Composer UI 18
Menu Bar 18
Navigation Pane 21
Navigation Search 22
Using Wizards 22
Adding a Feature Configuration 22
Editing a Feature Configuration 22
Rule Enforcement and Validation 22
Conditional Tabs 22
Summary Tab 22
Exiting the Wizard 23
Tool Tips 23
Customizing Table Columns 24
Filtering Tables 24
Filtering Drop-Downs 24
Filtering Using Regular Expressions 24
Examples of regular expression filtering 25
Clicking Links to Launch Pages 26
Expanding and Minimizing the Left Menu Bar 26
The About Aruba Fabric Composer Window 26
End User License Agreement 26
Aruba Fabric Composer API Explorer 27

Guided Setup 28
Color Codes 29
Using Guided Setup 30

Aruba Fabric Composer 6.3.0 | User Guide 3

 Contents

Guided Setup Configuration Options 30

Dashboard 31
Selecting Panels in the Dashboard View 32
Fabric, Switch, and Switch Health Inventory 34
Fabric Inventory Panel 34
Fabrics Panel 35
Colors Indicate Switch Health 35
Hover over a Switch 35
Click on a Switch 36
Integrations Panel 36
Viewing Integration State 36
VMware Inventory Panel 38
HPE iLO Inventory Panel 38
HPE SimpliVity Inventory Panel 38
VMware NSX-T Inventory Panel 38
SmartNICs Inventory Panel 39
Nutanix Inventory Panel 39
Audits Panel 39

Configurations: Ports 41
Ports 41
Table View 41
Graphical View 41
Port Shading, Symbols, and LED Indications in Graphical View 42
Hovering Over a Port 43
Selecting a Port and Port Actions 43
Port Field Descriptions 43
Port Actions 45
Viewing the Link State of Ports 45
Editing the Configuration of a Switch Port 46
Enabling or Disabling Switch Ports 48
Adding VLANs to Switch Ports 48
Setting VLANs or VLAN Groups on Switch Ports 49
Removing VLANs from Switch Ports 50
Setting the QSFP Transform for QSFP Ports 51
Link Aggregation Groups 51
Link Aggregation 52
Link Aggregation Control Protocol 52
Viewing LAGs 52
Adding a LAG 53
Editing a LAG 56
Deleting a LAG 56
Adding VLANs to LAG(s) 56
Editing VLANs on LAG(s) 56
Removing VLANs from LAG(s) 57
Setting VLANs to LAG(s) 57
VLAN Groups 58
Manager Ownership 58
Adding a VLAN Group 59
Editing a VLAN Group 59
Deleting a VLAN Group 60

Contents | 4
 Contents

PVLANs 60
Adding a PVLAN 60
Editing a PVLAN. 61
Deleting a PVLAN 62
Transceivers 62

Configurations: Routing 64
VRF 64
Adding a VRF Configuration 64
Editing a VRF Configuration 65
Deleting a VRF Configuration 65
Re-applying a VRF Configuration 65
IP Interfaces 66
IP Static Routes 68
Networks 70
Adding an Underlay 72
Editing an Underlay 73
Deleting an Underlay 73
Re-applying an Underlay 73
Adding an Overlay 73
Editing an Overlay 74
Deleting an Overlay 74
Re-applying an Overlay 74
ARP Tables 76
IP Route Tables 76
BGP 77
BGP Routing Page 77
BGP Switch Configuration 77
BGP Neighbors Tab 78
Configuring BGP 80
Editing the BGP Global Configuration 80
Adding a BGP Switch Configuration 80
Editing a BGP Switch Configuration 81
Deleting a BGP Switch Configuration 82
Adding or Editing a BGP Switch Neighbor Configuration 82
Deleting a BGP Neighbor Configuration 84
OSPF 85
Editing the OSPF Global Configuration 86
Adding an OSPF Area Configuration 86
Editing an OSPF Area Configuration 87
Deleting an OSPF Area Configuration 87
Adding an OSPF Switch Configuration 88
Editing an OSPF Switch Configuration 89
Disabling an OSPF Switch Configuration 89
Editing an OSPF IP Interface Configuration 89
Resetting an OSPF IP Interface 90
EVPN 92
Adding an EVPN Configuration 92
Editing an EVPN Configuration 93
Deleting an EVPN Configuration 93
EVPN Settings 93

Aruba Fabric Composer 6.3.0 | User Guide 5

 Contents

EVPN VXLAN Multi-Fabric 93

Adding an EVPN VXLAN Multi-Fabric 94
Editing an EVPN VXLAN Multi-Fabric Configuration 94
Re-applying an EVPN VXLAN Multi-Fabric Configuration 95

Configurations: System 96
Fabrics & Switches 96
Fabric Information 96
Fabric Maintenance Actions 97
Editing a Fabric Configuration 97
Deleting a Fabric Configuration 97
AFC Remote Sites 98
Adding a Remote Site 98
Editing a Remote Site Configuration 98
Deleting a Remote Site 99
Refreshing a Remote Site Configuration 99
Monitoring Agents 99
Adding a Monitoring Agent 99
Deleting a Monitoring Agent 100
SmartNICs 100
System Settings 100
Appearance Theme 101
Neighbor Retention Timeout 101
Setting the Neighbor Retention Timeout 101
Remote Device Access 101
Session Inactivity Timeout 102
Switch Poll Interval 102

Configurations: Network 103

Resource Pools 103
Adding a Resource Pool 103
Editing a Resource Pool 104
Deleting a Resource Pool 104
VSX 105
Configuring VSX (automatic) 106
Configuring VSX (manual) 107
Editing a VSX Configuration 108
Deleting a VSX Configuration 108
Leaf-Spine Configuration 109
Configuring a Leaf-Spine (automatic) 109
Configuring a Leaf-Spine (manual) 110
Editing a Leaf-Spine Pair 110
Deleting a Leaf-Spine Pair 111
DNS 111
Adding a DNS Configuration 111
Editing a DNS Configuration 112
Deleting a DNS Configuration 113
NTP 113
Adding an NTP Configuration 113
Editing an NTP Configuration 114
Deleting an NTP Configuration 115
SNMP 115

Contents | 6
 Contents

Adding an SNMP Configuration 115

Editing an SNMP Configuration 117
Deleting an SNMP Configuration 117
VSF 117
sFlow 118
Adding an sFlow Configuration 119
Editing an sFlow Configuration 120
Deleting an sFlow Configuration 120
DHCP Relay 121
Adding a DHCP Relay Configuration 121
Editing a DHCP Relay Configuration 122
Deleting a DHCP Relay Configuration 122

Configurations: Administration 123

User Management 123
Adding a User Account 123
Editing a User Account 124
Deleting a User Account 124
Changing the Password for any User Account 124
Changing Your Password 125
Password Policy 125
Editing Password Policy 125
Certificates 126
Replacing the Certificate 126
Regenerating the Aruba Fabric Composer Server Certificate 127
Device Maps 127
Adding a Host Interface Connection to the Device Map 127
Editing a Host Interface Connection in the Device Map 127
Deleting a Host Interface Connection Entry from the Device Map 128
Statistics Settings 128
LDAP 128
Adding an LDAP Authentication Configuration 129
Editing LDAP Authentication 130
Deleting an LDAP Authentication Configuration 130

Configurations: Integrations 131

Viewing Integrations, Integration Configurations, and Connection Status 131
Viewing Installed Integrations 131
Integration Connection Status 131
Integration Status Messages 132
Open Distributed Infrastructure Management 132
Adding or Editing an ODIM Plugin Integration 132
Aruba NetEdit 134
Adding an Aruba NetEdit Integration 135
Editing an Aruba NetEdit Integration 136
Launching an Aruba NetEdit User Interface Window 136
Refreshing an Aruba NetEdit Configuration 136
HPE iLO Amplifier Integration 136
Adding an HPE iLO Amplifier Integration 137
Editing an HPE iLO Amplifier Integration 138
Launching an HPE iLO Amplifier User Interface Window 139

Aruba Fabric Composer 6.3.0 | User Guide 7

 Contents

HPE SimpliVity Integration 139

Adding an HPE SimpliVity Integration 140
Editing an HPE SimpliVity Integration 142
Refreshing an HPE SimpliVity Integration 142
Nutanix Prism 142
Adding a Nutanix Prism Integration 143
Editing a Nutanix Prism Integration 145
Refreshing a Nutanix Prism Integration 145
Pensando PSM Integration 146
Adding a Pensando PSM Integration 146
Editing a Pensando PSM Integration 147
Launching a Pensando PSM User Interface Window 148
Refreshing a Pensando PSM Configuration 148
VMware NSX-T 148
Adding a VMware NSX-T Integration 149
Editing a VMware NSX-T Integration 150
Refreshing a VMware NSX-T Integration 151
VMware vSphere 151
Adding a VMware vSphere Integration 151
Specific Privileges 154
Editing a VMware vSphere Integration 155
Registering the vSphere Plug-in with VMware 156
Refreshing a VMware vSphere Integration 156
Running Aruba Fabric Composer in the VMware vSphere Client 156
VMware SDDC Integration 157
Adding a VMware SDDC Integration 158
Editing a VMware SDDC Integration 159
Deleting an Integration Configuration 160

Configurations: Policy 161

Policy Groups 161
Adding a Policy Group 161
Editing a Policy Group 163
Deleting a Policy Group 163
Policies 163
Adding a Policy 163
Editing a Policy 164
Deleting a Policy 165
Cloning a Policy 165
Rules 165
Adding a Rule 166
Editing a Rule 166
Deleting a Rule 166
Cloning a Rule 166
Endpoint Groups 167
Adding an Endpoint Group 167
Editing an Endpoint Group 167
Deleting an Endpoint Group 168
Applications 169
Adding an Application 169
Editing an Application 169
Deleting an Application 170

Contents | 8
 Contents

Service Qualifiers 170

Adding a Service Qualifier 170
Editing a Service Qualifier 171
Deleting a Service Qualifier 171
Microsegmentation 172
Creating a Microsegmentation 172
Updating a Microsegmentation 173
Firewall Log 174
Adding a Firewall Log 174
Editing a Firewall Log. 175
Deleting a Firewall Log 175
Firewall Profiles 176
Editing a Firewall Profile. 176
PSM Alerts 177

Maintenance 178
Switches 178
Switch Information 178
Switch Maintenance Actions 180
Editing a Switch Configuration 181
Deleting a Switch Configuration 181
Rebooting Switches 183
Reconciling Switches 183
Discover Switches 183
Managing a Switch Password 183
Upgrading Switches 184
Onboarding a Replacement Switch 185
Audits 186
Support Bundles 187
Support Bundle Files 187
Creating a Support Bundle 188
Downloading a Full Support Bundle 188
Downloading a Support Bundle File for a Component 188
Deleting a Support Bundle 189
Deleting All Support Bundles 189
Device Firmware 190
Backups 190
Backups 190
Scheduled Backups 191
Creating a Backup Instance of the Aruba Fabric Composer Configuration 191
Adding or Editing a Schedule to Create Aruba Fabric Composer Configuration
Backups 192
Restoring the Composable Fabric Configuration From a Backup Instance 193
Deleting a Backup Instance 193
Deleting a Backup Schedule 193
Uploading a Backup 194
Switch Checkpoints 194
Adding a Switch Checkpoint 194
Deleting a Switch Checkpoint 195
Switch Checkpoint Rollback 195
Switch Checkpoints Snapshots 195

Aruba Fabric Composer 6.3.0 | User Guide 9

 Contents

Scheduled Checkpoints 196

Syslog 197
Adding a Syslog Configuration 198
Editing a Syslog Configuration 199
Deleting a Syslog Configuration 200
High Availability for Aruba Fabric Composer 200
Licenses 201
Adding a License 201
Deleting Licenses 202

Visualizations 203
Host Visualization 203
Icons Used in the Host Visualization 203
Example: VMware ESX Host Environment 204
Example: VMware ESX Host Environment with Intermediate Switches 205
Example: HPE iLO Environment 206
Example: Nutanix AHV Host Environment 206
Customizing the Host Visualization 207
General Host Visualizer Actions 207
Visualizing an ESX Host Environment Through Intermediate Switches 207
HPE iLO Actions 208
Filtering the Host Visualization 209
Hovering Over Host Visualization Elements for Detailed Information 211
Network Visualization: Viewing a Leaf-Spine Fabric 217
Filtering the Network View 221
Statistics Visualization 222
Filtering the Statistic Visualization View 225

Support and Other Resources 227

Accessing Hewlett Packard Enterprise Support 227
Information to collect 227
Accessing Updates 227
Regulatory Information 228
Documentation Feedback 228

Contents | 10
 Revision History

Revision History

Revision Change Description

Revision 01 Initial release for Aruba Fabric Composer 6.3.0

Revision History | 11
 Chapter 1
Important Information

Important Information

Notices
The information contained herein is subject to change without notice. The only warranties for Hewlett
Packard Enterprise products and services are set forth in the express warranty statements accompanying
such products and services. Nothing herein should be construed as constituting an additional warranty.
Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use,
or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under
vendor's standard commercial license.
Export of the information contained in this publication may require authorization from the U.S. Department
of Commerce.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.

Acknowledgments
Intel®, Itanium®, Optane™, Pentium®, Xeon®, Intel Inside®, and the Intel Inside logo are trademarks of
Intel Corporation in the U.S. and other countries.
Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the
United States and/or other countries.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java® and Oracle® are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
All third-party marks are property of their respective owners.

Safety
The Aruba Fabric Composer module system is classified as a class 1 telecommunications laser product
employing embedded class 1 lasers and complies with the following:
THIS PRODUCT COMPLIES WITH FDA RULE 21 CFR SUB CHAPTER J IN EFFECT AT DATE OF MANUFACTURE.
PRODUCT COMPLIES WITH 21 CFR 1040.10 AND 1040.11.
PRODUIT CONFORME SELON LE SOUS CHAPITRE J DU DOCUMENT FDA RÈGLE 21 CFR EN VIGUEUR LORS
DE LA DATE DE FABRICATION. PRODUIT CONFORME SELON 21CFR 1040.10 ET 1040.11.
Electrotechnical Commission (IEC) 60825-1, 60825-2
This product is classified as a: CLASS 1 LASER PRODUCT
APPAREIL À LASER DE CLASSE 1

Aruba Fabric Composer 6.3.0 | User Guide 12

Chapter 1 | Important Information

This unit is intended to be installed in a Restricted Access Location only with access only by trained personnel.

The primary hazards of exposure to invisible laser radiation from an optical fiber communications system
are:

n Damage to the eye by viewing an unterminated optical fiber or fiber optic connector.
n Damage to the eye from invisible laser radiation from viewing a cut fiber or a broken fiber.

Never attempt to view optical connectors that may be emitting laser energy and always avoid possible
exposure to invisible optical laser radiation. Using optical fiber scopes or magnifying lenses may increase the
possibility for an eye hazard. It is recommended that you use an optical power meter to determine if there is
optical laser radiation present or use a remote video display inspection tool to inspect connectors.

Regulatory Information
To view the regulatory information for your product, view the Safety and Compliance Information for Server,
Storage, Power, Networking, and Rack Products, available at the Hewlett Packard Enterprise Support Center:
[Link]

Additional Regulatory Information

Hewlett Packard Enterprise is committed to providing our customers with information about the chemical
substances in our products as needed to comply with legal requirements such as REACH (Regulation EC No
1907/2006 of the European Parliament and the Council). A chemical information report for this product can
be found at:
[Link]
For Hewlett Packard Enterprise product environmental and safety information and compliance data,
including RoHS and REACH, see:
[Link]
For Hewlett Packard Enterprise environmental information, including company programs, product recycling,
and energy efficiency, see:
[Link]

Important Information | 13
 Chapter 2
About the Aruba Fabric Composer

About the Aruba Fabric Composer

Aruba Fabric Composer is an intelligent, API-based, software-defined orchestration solution that simplifies
and accelerates leaf-spine network provisioning and day-to-day operations across a rack-scale compute and
storage infrastructure.
Aruba Fabric Composer orchestrates a discrete set of switches as a single entity called a fabric, which
significantly simplifies operations and troubleshooting. Aruba’s fabric solution is built from-the-ground-up to
be fully integrated with datacenter infrastructure as well as application and workload orchestration systems
like VMware vSphere®, VMware NSX-T®, Nutanix Prism®, HPE SimpliVity®, Pensando® PSM, HPE ILO
Amplifier, Aruba NetEdit®, and more.
Aruba Fabric Composer, in conjunction with Aruba AOS-CX Switches, and a wide range of third-party tools
and products, enables zero-touch operations throughout the Aruba network fabric.

Aruba Fabric Composer UI

The Aruba Fabric Composer UI is a user interface that enables you to configure and manage multiple fabrics
and fabric types.

Aruba Fabric Composer and Aruba AOS-CX switches

Aruba Fabric Composer supports the Aruba 6300, 6400, 8325, 8360, 8400, and AOS-CX 10000 switch
families running on Aruba AOS-CX 10.09.x, 10.08.x, 10.07.x and 10.06.x software versions.

Aruba AOS-CX 10.4 and 10.5 can be added to the Aruba Fabric Composer. However, they must be
upgraded to 10.6 before being configured to the fabric composer.

Aruba Fabric Composer 6.3.0 | User Guide 14

 Chapter 3
About the Leaf-Spine Fabric

About the Leaf-Spine Fabric

Aruba Fabric Composer now supports two types of fabrics;

n Management Fabrics
n Data Fabrics (previously called as Leaf-Spine Fabrics)

Management Fabrics provide L2 Spine-Leaf workflows with the Aruba 6300 switch family.
The Data Fabrics consists of the following:

n Leaf switches: Each rack contains two leaf switches. These switches contain access ports that connect to
servers, firewalls, load balancers, and edge routers within the rack. Each leaf switch has high-speed
connections to the spine switches for the fabric. Pairs of leaf-switches are interconnected together using
Aruba VSX technology with active LACP pairing to deliver superior server connection redundancy.
n Spine switches: Each rack can connect to all spine switches and each fabric supports two-to-eight spine
switches. The spine switches can be located inside or outside the racks. The spine switches connect the leaf
and border leaf switches, forming the leaf-spine fabric. The spine layer is made up of switches that serve as
the backbone of the network. The spine switches do not connect to each other: however each spine switch
does connect to all leaf and border leaf switches within the fabric.
n Border leaf switches: Border leaf switches provide Layer 2 or Layer 3 external connectivity to networks
outside the fabric and outside the rack. Additionally, border leaf switches can connect to servers within the
rack. Border leaf switches support routing protocols that exchange routes with external routers. These
switches apply and enforce policies for traffic between internal and external endpoints.

The leaf-spine fabric uses dynamic Layer 3 routing protocols to determine the best path. This type of
network supports data center architectures with a focus on East-West network traffic where data travels
inside a data center.

Aruba Fabric Composer 6.3.0 | User Guide 15

 Chapter 4
New Features Overview

New Features Overview

This chapter describes the new features in this release.
Most of the Aruba Fabric Composer 6.3.0 functionality is provided to support the Distributed Services
Architecture and the Aruba AOS-CX 10000 solution. This solution enables Aruba Data Center Networks to
combine Aruba switching technology with the AOS-CX 10K DSS, all centrally managed by Aruba Fabric
Composer.
Some of the salient features are:

n Support for larger-scale Fabrics

n Manage multi-site deployments
n Pensando PSM/DSS Phase 2 Integration
n Enhanced telemetry engine
n Enhanced Integrations
n License management
n Support for new switch model (Aruba 8360)

Aruba Fabric Composer 6.3.0 | User Guide 16

 Chapter 5
Logging into the Aruba Fabric Composer

Logging into the Aruba Fabric Composer

To log into the Aruba Fabric Composer:

1. In a Web browser, enter the host name or IP address of the Aruba Fabric Composer host: [Link]
name/
where host_name is the host name or IP address of the Aruba Fabric Composer host.
2. Log into Aruba Fabric Composer using your account credentials.

The UI opens on the Dashboard page.

First-Time Login as Admin

To log into the Aruba Fabric Composer for the first time as an admin user:

1. In a Web browser, enter the host name or IP address of the Aruba Fabric Composer host: [Link]
name/
where host_name is the host name or IP address of the Aruba Fabric Composer host.
2. On the first login, the Aruba Fabric Composer UI opens a Change Password dialog which must be
completed before the Dashboard is displayed. Complete the following:
n Current: Enter the current default password: aruba
n New: Enter the new password.
n Confirm: Re-enter the new password.

The default credentials for the first-time admin login after software installation are:
Username = admin
Password = aruba

3. If needed, click Password Policy and configure the password policy as described in Password Policy
on page 125.
4. Click Apply to log in.

The UI opens on the Dashboard page.

Aruba Fabric Composer 6.3.0 | User Guide 17

 Chapter 6
Using the Aruba Fabric Composer UI

Using the Aruba Fabric Composer UI

The topics within this section provide general information on how to use the Aruba Fabric Composer UI.

n Navigating the Aruba Fabric Composer UI

n Navigation Search
n Using Wizards
n Tool Tips
n Customizing Table Columns
n Filtering Tables
n Clicking Links to Launch Pages
n Expanding and Minimizing the Left Menu Bar
n About Aruba Fabric Composer Window
n End User License Agreement
n Aruba Fabric Composer API Explorer

Navigating the Aruba Fabric Composer UI

Menu Bar
The menu bar which appears across the top of the Configuration menu contains the following menu items:

Menu bar Menu item Sub-menu item

Dashboard Opens the –

dashboard

Configurations Ports Ports

Link Aggregation Groups

VLAN Groups

PVLANs

Transceivers

Aruba Fabric Composer 6.3.0 | User Guide 18

Chapter 6 | Using the Aruba Fabric Composer UI

Menu bar Menu item Sub-menu item

Configurations Routing VRF

BGP

OSPF

EVPN

EVPN VXLAN Multi-Fabric

Configurations System Fabrics & Switches

AFC Remote Sites

Monitoring Agents

SmartNICs

System Settings

Configurations Network Resource Pools

VSX

Leaf-Spine

DNS

NTP

SNMP

VSF

sFlow

DHCP Relay

Configurations Administration User Management

Password Policy

Certificates

Device Maps

Statistics Settings

LDAP

Using the Aruba Fabric Composer UI | 19

 Chapter 6 | Using the Aruba Fabric Composer UI

Menu bar Menu item Sub-menu item

Configurations Integrations Aruba NetEdit

HPE iLO Amplifier

ODIM Plugin Integration

HPE SimpliVity

Nutanix Prism

Pensando PSM

VMware NSX-T

VMware vSphere

VMware SDDC

Configurations Policy Policy Groups

Policies

Rules

Endpoint Groups

Applications

Service Qualifiers

Microsegmentation

Firewall Log

Firewall Profiles

PSM Alerts

Aruba Fabric Composer 6.3.0 | User Guide 20

Chapter 6 | Using the Aruba Fabric Composer UI

Menu bar Menu item Sub-menu item

Maintenance Switches

Audits

Support Bundles

Device Firmware

Backups

Switch Checkpoints

Syslog

High Availability

Licenses

Visualizations Networks Hosts

Networks

Statistics

Menu Bar Search icon Navigation Search (Where can I find?)

Icons
System Health n Green = healthy
icon
n Yellow = caution
n Red = warning

CLI CLI Commands Processor

Commands

Hamburger Guided Setup

icon

Admin icon Appearance Theme

Change Password

Logout

Help icon About

Help Contents

License Agreement

API Explorer

Web/UI Log

Navigation Pane

Using the Aruba Fabric Composer UI | 21

 Chapter 6 | Using the Aruba Fabric Composer UI

The navigation pane on the left side of the window lists the configurations available for the selected
configuration category. The preceding table lists the features that appear in the navigation pane. To open the
configuration page for a feature, in the navigation pane, select that feature.

Navigation Search
Entering the name of a configuration item in this navigation search window enables you to access the
configuration without searching through the drop-down menu. As you begin entering the configuration or
feature, one or more possible choices appear. Click a selection and you will be brought right to that
configuration page. For example, to access the EVPN configuration, you can enter "evp" or "evpn" and click
the selection that you want.
The search engine searches for all instances of the string as you enter it. It returns all the possible pages,
configurations, and variables as well as where they appear in the UI.

Using Wizards
The Aruba Fabric Composer UI makes use of wizards to guide you through the process of adding (creating) or
editing many configurations.
A wizard may be opened when you select an action such as Add or Edit from an active Actions drop-down.

Adding a Feature Configuration

When you are adding a configuration, the wizard guides you through the tabs, and presents the Next and
Back buttons as follows:

n When you complete all required parameters on a tab, the Next button will become active, enabling you to
continue to the next tab. When you have completed a tab, click Next to continue to the next tab.
n The Back button enables you to go back to the previous tab.
n Click Back and Next as needed to move around and access the wizard tabs.

Editing a Feature Configuration

When editing a configuration of a feature, the wizard window presents named tabs. You can select any tab in
any order and edit values on each tab as needed.

When a tab's configuration is not complete, the error will be highlighted in red and a red X will appear
next to the tab name indicating that it is not complete.

Rule Enforcement and Validation

As you are entering data for variables within wizards, the Aruba Fabric Composer UI enforces any rules or
limits; automatically preventing you from entering data that is outside of ranges or does not comply with
rules.

Conditional Tabs
In some configurations, selecting a parameter will cause a new related tab to be added to the wizard,
requiring information to be provided for the selected feature or parameter.

Summary Tab

Aruba Fabric Composer 6.3.0 | User Guide 22

Chapter 6 | Using the Aruba Fabric Composer UI

The Summary tab lists all configured parameters for you to verify the parameter values. If you need to make
any changes, open the tabs and update as needed.

Exiting the Wizard

Once you have completed and verified all parameters, you can exit the wizard as follows:

n Apply: Exit the wizard and either add a new configuration or save edits made to an existing configuration. A
temporary pop-up will confirm that the configuration was successful.
n Cancel: Exit the wizard without saving either a new configuration or edits made to an existing configuration.

Tool Tips
Throughout the UI, hovering over a selectable image or text, such as a link or an action, pops up a balloon
that contains a brief description of the selection. For example, hovering over the Assign Switch to Fabric link
on the Guided Setup panel provides a tool tip.

Using the Aruba Fabric Composer UI | 23

 Chapter 6 | Using the Aruba Fabric Composer UI

Customizing Table Columns

This feature enables you to select columns to display in various tables.
The Aruba Fabric Composer UI contains tables that provide information. By default, not all columns in these
tables are shown. You can customize the tables, selecting columns to view or hide.

Any column changes selected are persisted as user preferences for the logged-in account and are
applied anytime that account is used in the future.

To view or hide table columns, above a table, click the Customize table columns icon:

A list of column names appears. Checked names appear in the table and unchecked columns are hidden from
view. Click the check boxes as needed to customize the table.

Filtering Tables
The Aruba Fabric Composer UI contains a number of tables that enable you to filter the contents of the table
based on an entered value in one or more columns.

You enable the filter view by clicking the Toggle table filters icon located above the table. Once
enabled, filtering is ON for ALL tables. The icon is a toggle; clicking it again will disable filtering in all tables. The

icon is black when filtering is disabled and changes to green when filtering is enabled .
With filtering enabled, each column header in a table either contains a drop-down from which you can select
a value, or a field in which you can enter a value using Regular Expressions. As you select or enter a value, the
table immediately lists only the rows that match the filter.
You can filter for a single column or for several columns as needed to display a desired subset of information.

Filtering Drop-Downs
For columns that present a limited set of values such as State, Type, or Speed, with table filtering enabled, a
drop-down will enable you to select one value. Only rows that contain that value will be listed.

Filtering Using Regular Expressions

All table columns that do not use drop-downs can be filtered using Regular Expressions that list table
contents that match the filter value(s). For example, table columns that define QSFP port numbers (50.1,
50.2, and so on) or VLANs and VLAN ranges (30-50, 100, 101, and so on).

The filter will find a range given a single value that exists within the range. However, the filter does not
allow a range (for example, '30-50') to be entered.

Aruba Fabric Composer 6.3.0 | User Guide 24

Chapter 6 | Using the Aruba Fabric Composer UI

For information on regular expressions, refer to: [Link]

US/docs/Web/JavaScript/Guide/Regular_Expressions

Examples of regular expression filtering

Regular Expression Example: I have VLAN groups mapped to a port so there is a
range of VLANs
For example, "10-200" means that there are 190 individual VLANs mapped to this port.
Entering 4 in the table filter matches any number with a 4 in it. The VLAN range of 10-200 contains many,
including: 4, 14, 24...40-49, 54...194.
To search for 4 and not include the ports with 10-200, one way to accomplish this would be to use the filter
^4$, where:

n ^ signifies the start of the line.

n $ signifies the end of the line.

This says match anything where 4 is the first, last, and only character.

Regular Expression Example: Find specific ports

The following filter: ^[0-9]$|10 says to start and end with a number (0-9 in this example) or 10. Additionally,
the following example: ^(1|3|7)$ matches 1, 3, or 7 only.

Regular Expression Example: Reverse match: Find all ports without a specific
VLAN
In the Ports table, you can search for all ports that do NOT have a specific VLAN configured using the
following regular expression matching formula:
^(^(?!X$).+)*$
where X is the VLAN number.
For example, to find all ports that do NOT have VLAN 100 configured, you would use the filter: ^(^
(?!100$).+)*$.
The search will find all ports that do NOT have VLAN X configured. In the Ports table, all ports that do NOT
contain the specified VLAN are listed.

Regular Expression Example: List All QSFP Port 1

To enter a search value that contains a symbol such as a decimal point, precede the symbol with a backslash
'\'. For example, on the Configuration > Ports > Ports page, to search for all instances of port 1 in QSFP
ports, in the Port column with filters enabled, enter \.1

The port number for any QSFP port that is configured as a single 1x100 GbE or 1x40 GbE port will not
contain a decimal. For example, it would be port 20 or port 50, not port 20.1 or 50.3.

Without a backslash, the dot '.' means 'ANY single character'. Therefore, in the following Ports page example,
with .1 entered in the Port column filter, all ports that contain 'any character followed by a 1'.

Regular Expression Example: List All instances of a VLAN

In some tables, with table filtering enabled, an extra drop-down field is available in the VLAN column, enabling
you to search for VLAN ranges that match the symbol you select (=, >, >+, <, <=) and the value you enter.

Using the Aruba Fabric Composer UI | 25

 Chapter 6 | Using the Aruba Fabric Composer UI

The filter does not allow a range (20-30) to be entered, only a single value that exists within the range
such as 20 25, or 30.

Clicking Links to Launch Pages

Many status and visualization pages contain links that, when clicked, bring you directly to related
configuration pages. Here are two examples:

n From the Dashboard, you can immediately access the Configuration > Maintenance > Switches page
where all switches are listed in a table or on the graphical port view depending on the most recent view used
on that page. You can view switch configuration and state information as well as edit, delete, upgrade,
replace switches, as well as stage switch software install images to switches. To open this page from the
Dashboard, either:
n In the Switches panel, click Switches count, or
n In the Fabrics panel, click on any switch icon. Clicking the switch icon opens the switch page with the filters
enabled and the selected switch entered in the switch filter.
n In the Visualizations > Hosts view, clicking a port icon and selecting Ports opens the Configuration >
Ports > Ports page, listing only the selected port in a table. On this page, you can view port configuration
and state information as well as edit, enable, disable, change the port speed, change the QSFP mode, or
manage VLANs,

Expanding and Minimizing the Left Menu Bar

You can expand and minimize the left menu bar, as well as filters that appear within the primary window, by
clicking the >> icon to expand or << icon to minimize. This icon appears at the bottom of the menu or filter
field.

The About Aruba Fabric Composer Window

In the Aruba Fabric Composer banner, selecting the Help icon '?' and then clicking About opens the About
Aruba Fabric Composer window. This window presents the following:

n The Aruba Fabric Composer software version.

n A link to the Aruba Support Portal.
n A link to the Aruba Fabric Composer online help contents.

Click OK or X to close the window.

End User License Agreement

The End User License Agreement (EULA) is available to read from the Aruba Fabric Composer UI.
In the Aruba Fabric Composer header, select the Help icon ? and then click License Agreement.
The License Agreement displays. You can scroll through the agreement. When finished, click OK at the end of
the agreement.

Aruba Fabric Composer 6.3.0 | User Guide 26

Chapter 6 | Using the Aruba Fabric Composer UI

Aruba Fabric Composer API Explorer

In the Aruba Fabric Composer header, selecting the Help icon ? and then clicking API Explorer opens a tab
containing the Aruba Fabric Composer API documentation.

This feature is intended for advanced users.

Using the Aruba Fabric Composer UI | 27

 Chapter 7
Guided Setup

Guided Setup
After the Aruba CX-OS switching hardware and Aruba Fabric Composer software are installed, use the Aruba
Fabric Composer UI to configure a new leaf-spine fabric. The Aruba Fabric Composer UI Guided Setup
displays two configuration elements: Network Setup and Distributed Services Setup

Aruba Fabric Composer 6.3.0 | User Guide 28

Chapter 7 | Guided Setup

In the Network Setup UI, the following steps are available:

n Switches
n Fabric
n Assign Switch to Fabric
n NTP Configuration
n DNS Configuration
n VSX Configuration
n L3 Leaf-Spine Configuration
n L2 Leaf-Spine Configuration
n Leaf Spine Configuration
n Underlays
n Overlays
n EVPN Configuration

In the Distributed Services Setup UI, the following steps are available:

n Pensando PSM
n Configure VRFs
n Configure Networks
n Configure Policy
n Configure Microsegmentation

Color Codes
Configurations that cannot be repeated have a green check mark and the Close button becomes active after
you complete the required configurations. As you complete a configuration, its status icon changes to a white
on green background.

n The entire area containing the icon, header, and description text is clickable. This area is highlighted when
hovered over.
n Disabled options have a tool tip to explain why it is disabled (for example, All discovered switches have been
assigned).

n Completed steps that can continue to be configured (for example, Discover new Switches) have the same
icons with same green color.

Guided Setup | 29
 Chapter 7 | Guided Setup

n Color codes for Required, Completed, and Incomplete

Using Guided Setup

To open Guided Setup, click the Guided Setup icon located in the Aruba Fabric Composer header
menu bar. Select a setting in Guided Setup and perform the configuration as needed.
To close Guided Setup, click Close.

Guided Setup Configuration Options

Action Description Also See

Switches Perform manual switch Discover Switches on

discovery. page 183

Fabric Add single or multiple Leaf- Fabrics & Switches on

Spine fabrics.
page 96

Assign Switch To Fabric Assign discovered switches to a

fabric and assign a role (spine,
leaf, or border leaf) to each
switch.

NTP Configuration Configure access to an NTP Adding an NTP

server. Configuration on page
113

DNS Configuration Configure DNS settings. DNS on page 111

VSX Configuration Configure VSX Switch Pairing. VSX on page 105

L3 Leaf-Spine Configure L3 Leaf-Spine Leaf-Spine Configuration

Configuration connections. on page 109

L2 Leaf-Spine Configure L2 Leaf-Spine Leaf-Spine Configuration

Configuration connections on page 109

Underlay/Overlay Configure Underlay/Overlay. Adding an Overlay on

Configuration page 73

EVPN Configuration Configure EVPN instances. EVPN on page 92

Aruba Fabric Composer 6.3.0 | User Guide 30

 Chapter 8
Dashboard

Dashboard
The Dashboard provides status and configuration information about the Aruba Fabric Composer (switches,
software, fabrics, integrations, and configurations). You can monitor Aruba Fabric Composer activities on the
Dashboard.
The Dashboard contains selectable panels for the following Aruba Fabric Composer information:

n Switches - All Fabrics indicates the number of Aruba Fabric Composer fabrics, the number of Aruba Fabric
Composer switches, and the number of healthy or unhealthy Aruba Fabric Composer switches in the
fabrics.
n Fabric Inventory- All Fabrics provides inventory quantities for the following: MAC attachments, CDP
neighbors, LAGs, LLDP neighbors, and ports.
n Fabrics - All Fabrics provides health status of all the Fabrics.
n VMware Inventory provides VMware inventory quantities for the following connected elements: VMware
VMs, VMKernel adapters, and ESX Hypervisors. This panel is available as soon as an integration set
containing the VMware vSphere Integration is activated.
n VMware NSX-T Inventory provides inventory of the number of VMs connected, Transport Zones, Tier-0
Gateways, N-VDSs, Segments, Host Transport Nodes, and Tier-1 Gateways. This panel is available as soon as
an integration set containing the VMware NSX-T integration is activated.
n HPE iLO Inventory provides HPE iLO inventory quantities for the following connected elements: the
number of HPE iLO servers and health information for the servers. This panel is available as soon as an
integration set containing the HPE iLO Amplifier integration is activated.
n HPE SimpliVity Inventory provides an inventory of HPE SimpliVity clusters.
n Nutanix Prism Inventory provides Nutanix Prism inventory quantities for the following connected
elements: the number of Nutanix VMs, AHV Hypervisors, and CVMs. This panel is available as soon as an
integration set containing the Nutanix Prism integration is activated.
n Policy Inventory provides information about Policy Groups, Rules, Applications, Policies, Service Groups,
and Service Qualifiers.
n Remote AFC Sites provides information about all the remote sites managed by Aruba Fabric Composer.
n SmartNICs Inventory provides a view of the total SmartNICs discovered by Aruba Fabric Composer.
n Fabrics graphically represents the fabrics and switches in that fabric and indicates the health of each
switch.
n Integrations lists all installed integrations and their current state. This panel is available only if an
integration set has been activated.
n Audits lists a log of alarms and events.
n Distributed Services Inventory and Alerts lists a log of all distributed services.

Aruba Fabric Composer 6.3.0 | User Guide 31

Chapter 8 | Dashboard

You can hide individual data panels in the Dashboard by clicking the Hide Panel icon in the panel. The
Dashboard layout will persist after logging out of the session.

Selecting Panels in the Dashboard View

Clicking the Customize your dashboard icon in the Lower Left corner of the Dashboard window
opens a Panels window in which you can show and hide the data panels on the Dashboard tab.

The set of selected panels is persisted for the logged in user.

Dashboard | 32
 Chapter 8 | Dashboard

The Dashboard supports the following panels:

n Audits
n Distributed Services Inventory and Alerts
n Fabric Inventory-All Fabrics [Clicking the + icon next to Fabric Inventory enables additional panels for only a
selected set of fabric(s).]
n Fabrics-All Fabrics [Clicking the + icon next to Fabrics enables additional panels for only a selected set of
fabric(s).]
n HPE iLO Inventory
n HPE SimpliVity Inventory
n Integrations

Aruba Fabric Composer 6.3.0 | User Guide 33

Chapter 8 | Dashboard

n Nutanix Inventory
n Policy Inventory
n Remote AFC Sites
n SmartNICs
n Switches-All Fabrics [Clicking the + icon next to Switches enables additional panels for only a selected set of
fabric(s).]
n VMware Inventory
n VMware NSX-T Inventory
n VMware SDDC Inventory

Fabric, Switch, and Switch Health Inventory

The Dashboard > Switches panel provides the following Aruba Fabric Composer and switch inventory
information:

n Number of fabrics and a link to the Fabrics page.

n Total number of switches and a link to the Switches page.
n Number of switches in each health category:
n Red: Critical, Major, Non-recoverable
n Blue: Degraded, Healthy, But..., Minor, and Upgrading
n Green: Healthy
n Gray: Unknown

The health quantities are links to the Switches page with the related health category displayed. For example:

Fabric Inventory Panel

The Dashboard > Fabric Inventory panel provides an inventory of elements on the Aruba Fabric
Composer including MAC attachments, CDP neighbors, LAGs, LLDP neighbors, and ports. For example:

Dashboard | 34
 Chapter 8 | Dashboard

Fabrics Panel
The Dashboard > Fabrics panel provides a visualization of the Aruba Fabric Composer and the switches on
the fabric. The switches appear as color-coded squares; the color identifies the current health of each switch.
For example:

Colors Indicate Switch Health

The colors in this panel indicate the health of all Aruba Fabric Composer modules in the Fabric Composer. The
modules are displayed with the following colors to indicate health:

Switch is healthy.

Switch has a non-critical issue or is upgrading.

Switch has a critical issue.

For example:

Hover over a Switch

Hovering over a switch provides information about that switch. For example:

Aruba Fabric Composer 6.3.0 | User Guide 35

Chapter 8 | Dashboard

The following switch information is provided:

n Name: Name assigned to the switch.

n Health: Health of the switch. For example, Healthy, Upgrading, Healthy, But..., Degraded, Critical.
n Status: Status of the switch. For example, Synced, Syncing, or Sync Failure.
n Version: Switch software version.
n Type: Aruba Fabric Composer switch type.
n IP Address: Switch management IP address.
n MAC Address: Switch MAC address.

Click on a Switch
Clicking on any switch in the Fabrics panel opens the Configuration > Maintenance > Switches window,
displaying only that switch.

Integrations Panel
The Dashboard > Integrations panel identifies the current state of the integration. For example:

Viewing Integration State

Knowing the connection states of your integrations is useful for overall management and for diagnosing
issues. For integration connection state, you can view the following color-coded status banners in the
Dashboard > Integrations panel.
The following integration statuses are reported:

Dashboard | 36
 Chapter 8 | Dashboard

n This state banner indicates that for the integration, ALL configurations are connected.

n This state banner indicates that for the integration, one or more configurations are
disconnected.

n Integration configuration data is being updated. Some screens may not update properly.
This state appears while the integration configuration is updating. The integration configuration updates
after enabling or re-enabling the integration configuration, or after changing a value in the integration
configuration.

n This state banner indicates that the integration is configured and connected, but is limited in
functionality.

n This state banner indicates that an integration is not configured.

Aruba Fabric Composer 6.3.0 | User Guide 37

Chapter 8 | Dashboard

VMware Inventory Panel

The Dashboard > VMware Inventory panel provides an inventory of various elements of the VMware
environment such as the number of VMware VMs, VMKernel Adapters, and ESX Hypervisors.

HPE iLO Inventory Panel

The Dashboard > HPE iLO Inventory panel provides an inventory of the HPE iLO environment, including
the number of HPE iLO servers, and the server health. For example:

HPE SimpliVity Inventory Panel

The Dashboard > HPE SimpliVity Inventory panel provides an inventory of the HPE SimpliVity
environment, including the number of clusters. For example:

VMware NSX-T Inventory Panel

The Dashboard > VMWARE NSX-T INVENTORY panel provides an inventory of the number of VMs
connected to NSX-T, Transport Zones, Tier-0 Gateways, N-VDSs, Segments, Host Transport Nodes, and Tier-1
Gateways. For example:

Dashboard | 38
 Chapter 8 | Dashboard

SmartNICs Inventory Panel

The Dashboard > SmartNICs Inventory panel provides an inventory of all the NICs discovered by Aruba
Fabric Composer. For example:

Nutanix Inventory Panel

The Dashboard > Nutanix Inventory panel provides an inventory of the Nutanix Prism environment,
including the number of Nutanix VMs, AHV Hypervisors, and CVMs. For example:

Audits Panel
The Dashboard > Audits panel lists the last 25 logged Aruba Fabric Composer messages which may be
informational or alarms of varying severity.

Aruba Fabric Composer 6.3.0 | User Guide 39

Chapter 8 | Dashboard

Clicking on either Alarms or Events opens the Audits page with the table filtered to show either all alarms or
all events, as selected.
Audits can also be viewed on the Maintenance > Audits page.

Dashboard | 40
 Chapter 9
Configurations: Ports

Configurations: Ports
The Configurations > Ports option provides access to configure the following Aruba Fabric Composer
switch port features:

n Ports (to configure port characteristics)

n Link Aggregation Groups (LAGs)
n VLAN Groups
n PVLANs
n Transceivers

Ports
The Configuration > Ports > Ports page enables you to view and edit Aruba Fabric Composer switch port
configurations, performing actions such as enable or disable ports and assign VLANs.

Table View
With the Table icon/tab selected (default selection), a table such as the following lists all switch ports for
the selected Fabric and Switch(es).

Your view selection, table vs graphical view, as well as the switches selected to appear in that view, will
persist throughout the login session and between login sessions until you make a change in the view.
You can browse anywhere in the UI, logout and login repeatedly, and when you return to the Ports page,
you will see the table or graphic and switches view that you last selected.
In the table, each port is a line entry. By default, the table is sorted first by switch and then by port
number. You can re-sort the table by any column parameter. To return to the default sorting, click twice
on the Port column then twice on the Switch column.

Clicking the Refresh icon refreshes the table contents.

Graphical View

Aruba Fabric Composer 6.3.0 | User Guide 41

Chapter 9 | Configurations: Ports

Clicking the Graphical icon/tab in the Ports window opens a graphical view of selected switch(es). When
you login to the UI, by default, one switch is selected. You can add switches to this view by selecting them,
one at a time, in the switches drop-down field. Alternatively, you can click Select All to show all switches.
Switches can be removed from the view by clicking the X next to the switch name in the Switch drop-down
field. Once you have selected the switches, those switches will appear throughout the Aruba Fabric Composer
login session. This applies to both the graphical and table views of the switches and ports.
This view provides extensive port information by viewing the LEDs, port colors and icons in the graphic, as
well as by hovering over ports.

Port Shading, Symbols, and LED Indications in Graphical View

Port shading, symbols within ports, and the color of LEDs above ports provide the following information
about that port:

Symbol Meaning

Selected: The port is selected and

an Action can be performed.

Not Available: Indicates that the

port is not available for the current
activity. For example, if you are
selecting ports for a LAG, the
following are shown as Not
Available: fabric ports and ports
already in another LAG.

Link Aggregation Group:

Specifies that the port is part of a
link aggregation group.

Enabled: The port is enabled to be

ready for a network connection.

Disabled: A transceiver is installed

in the port, however the port is
disabled. A disabled port will not
operate, even if connected to the
network.

Filtered: The port is filtered in the

Ports table. If filtering is used in the
Ports table, ports that appear in the
filtered table are indicated using
the green haze border

Port Health Issue: The port has a

health issue. Hover over the port to
open a popup that contains port
info including the health state and
a health issue description.

Each port in the graphical view has an LED located above the port that lights as follows to
indicate the state of the port:

Configurations: Ports | 42
 Chapter 9 | Configurations: Ports

Symbol Meaning

Green, Link Up (Max Speed):

Indicates that the port Link is Up
and is operating at the maximum
speed.

Amber, Link Up (< Max Speed):

Indicates that the port Link is Up
and that the port is running at a link
speed which is lower than the
maximum link speed supported by
the port. For example, a 1 G link on
a port supporting 1 G and 10 G, or
a 1 G or 10 G link on a port that
supports 1 G, 10 G, and 25 G.

Gray (off), Link Down: Indicates

that the port Link is Down. This
might indicate that the port is not
connected or a physical error
exists.

Hovering Over a Port

Port information is provided by hovering over a port. This information includes port health.
Hovering over a QSFP port includes QSFP-specific information such as speed group and QSFP mode.

Selecting a Port and Port Actions

The graphical switch representation allows you to perform all of the actions defined below in Port Actions. To
perform any action on one or more ports, you must first select the port(s). With the switch shown, to select
ports, simply click on the port(s) in the image. The Selected symbol indicates that the port is selected.

Port Field Descriptions

In the table, each port is a line entry.
The following information is provided for each switch port:

n Health: Indicates the current port health state.

n Reason: Indicates current reason assigned to a port.
n Switch: Identifies the switch that contains the port defined in the table row.
n Port: Identifies the port number.
n Silkscreen: The port label on the front panel which indicates the port connector number.
n Name: The optional name assigned to the port.
n Description: An optional description of the port.
n LAG: Identifies the LAG if the port is a member of a Link Aggregation Group (LAG).
n Enabled: Indicates Yes if the port is enabled and No if the port is disabled.
n Link State: Indicates the link state of the port: up or down.
n Hold Down: Indicates that a port is being held down by one or more resources. Resources or health states
that can hold down a port include: admin. LACP, Loop Detected, Peering Lost, Penalty Box, Port Security or
access control list actions. For example, the following ports are held down for port security:

Aruba Fabric Composer 6.3.0 | User Guide 43

Chapter 9 | Configurations: Ports

n Type: Indicates the port type: Access or Fabric port.

n Current Speed: Indicates the configured port speed in Gbps.

Speed is not the same as QSFP mode; you cannot use Speed to change a 4 x 25 transceiver to 4 x 10.

n Configured Speed: The configured interface line speed in Mbps.

n Speed Group: Speed groups exist as part of the hardware implementation on some switches. Speed groups
are not created. This field lists all of the ports that are in the speed group that includes the port being
hovered over, or lists only the port being hovered over if that port is not a member of a speed group. For
example, a single value such as '48' for an SFP port or '10.1' for a QSFP port indicates that port is not in a
speed group.
The following graphical display hover-over excerpt shows a speed group consisting of QSFP ports 49.1
through 49.4:

n QSFP Mode: Indicates the QSFP mode (4 x 10, 1 x 40, and so on) of the port or 'Not Applicable'.
n QSFP Transform: Select between Split, Unsplit, or N/A.
n Form Factor: Form factor of the switch port (Internal, QSFP, OSFP28, SFP, SFP28, RJ45, or LRFSP).
n Split Operational Status: Operational status of the port between Active and Inactive.
n Split Admin Status: Admin status (Active or Inactive) of the port.
n Number of Lanes: Number of lanes used by the port.
n Routed: Route configuration of the port.
n Forward Error Correction: Indicates whether or not Forward Error Correction is enabled in QSFP mode on
an Access port or Fabric port.
n VLANs: Identifies VLANs configured on the port.
n Ungrouped VLANs: Identifies VLANs configured on the port that are not part of a VLAN group.
n VLAN Groups: Identifies VLAN Groups configured on the port.
n Native VLAN: Identifies a native VLAN configured on the Access port. Note that Native VLAN does not
apply to Fabric ports.
n MTU: Default Maximum Transmission Unit size for frames received and transmitted.
n Pause Mode: Pause mode enabled or disabled in the port.
n QoS Policies: Indicates status of QoS policy for outgoing network traffic in the port.
n QoS Local Priority: Priority of the QoS for local priority.
n QoS Priority Code Point: Code point status of the QoS Priority.
n Manager: Indicates if there is an external manager of this resource. For example, VMware vSphere may
manage this resource.

Configurations: Ports | 44
 Chapter 9 | Configurations: Ports

Port Actions
Selecting one or more port(s) from either the Table view or the Graphical view of the switch, then selecting
the Actions drop-down list provides the following Actions to perform for the selected port(s):

n Edit: This action appears for only a single selected port. For Edit settings of the selected port, see Editing the
Configuration of a Switch Port on page 46.
n Enable: If one or more ports are selected and if at least one port is disabled, this action enables the selected
ports. Any ports that are already enabled will remain enabled.
n Disable: If one or more ports are selected and if at least one port is enabled, this action disables the selected
ports. Any ports that are already disabled will remain disabled.

Disabling all fabric ports on a switch or switches will cause the fabric to become segmented. Ensure
that not all fabric ports on a single switch are being disabled.

n VLANs > Add: Opens a window in which you can add VLAN(s) to the selected ports. See Adding VLANs to
Switch Ports on page 48.
n VLANs > Remove: Opens a window in which you can remove VLANs from the selected ports. See Removing
VLANs from Switch Ports on page 50.
n VLANs > Set: Opens a window in which you can set up and replace VLAN(s) on the selected ports. See
Setting VLANs or VLAN Groups on Switch Ports on page 49.
n QSFP Transform > Split: Opens a window in which you can set up the QSFP Transform option to Split.
n QSFP Transform > Unsplit: Opens a window in which you can set up the QSFP Transform option to
Unsplit.

Viewing the Link State of Ports

The following is an example of viewing the Link States of the switch ports. In the following table, port 10 is up
and ports 1-9 are down:

In the graphical view, the Link State LEDs are green for Link Up (Max Speed), amber for Link Up (< Max
Speed), and gray for Link State Down.

Aruba Fabric Composer 6.3.0 | User Guide 45

Chapter 9 | Configurations: Ports

Editing the Configuration of a Switch Port

To edit the configuration of an Aruba Fabric Composer switch port:

1. In the Configuration > Ports > Ports page, select the switch from the Switch drop-down list.
2. Select either the Table view or the Graphical view:

a. For table view, select the Table icon . This view is selected by default when you open the Ports
page.

b. For graphical view, click the Graphical icon .

3. Select the port to edit:

n In the table view, find and click the port check box to select the port. To find the port(s), you can
either enable and use the filters, or scroll and select table pages. Note that you can select and edit
only one QSFP port.
n In the graphical view, locate the port on the switch and click on the port. A check mark appears in the
selected port.

4. Select Actions > Edit. A port edit window opens.

5. To edit the configuration of a port, select the following tabs and configure the port as needed:

Parameter
Tab Description Valid Values
Name

Enable to Select to enable network traffic on this port. Checked or unchecked.

allow network A disabled port will not operate, even if
traffic to be connected to the network.
passed
Settings through this
port.

MTU Enter a number between 46 and 9198. Between 46 and 9198.

Speed Select the port speed. The available port

speeds varies
depending on the switch
model and the port type.
Note: The Speed tab may not Speeds for SFP ports
appear if no speed options are may include the
Speed
available. following:
n 1 Gbps
n 10 Gbps
n 25 Gbps
n Auto

Configurations: Ports | 46
 Chapter 9 | Configurations: Ports

Parameter
Tab Description Valid Values
Name

Native VLAN Enter a Native VLAN ID. Between 0 and 4000.

VLANs Enter one or more VLANs and ranges which For example, 100-
VLANs are assigned to this switch port. 200,300,350-400.

VLAN Group Select any VLAN group(s) which are

assigned to this switch port.

Name Optional. A name for the port.

Name
Description Optional. A description for the port.

This tab lists all configured parameters for you to verify. Verify these parameter values. If
Summary
you need to make any changes, open the tabs and update as needed.

6. When finished, click either Apply to save any changes to the port configuration or Cancel to exit
without saving.

Aruba Fabric Composer 6.3.0 | User Guide 47

Chapter 9 | Configurations: Ports

Enabling or Disabling Switch Ports

To enable or disable selected switch ports:

1. Select the Configuration > Ports > Ports page.

2. If not already selected, select the fabric and the switches to edit.
3. Select the ports to configure:
a. In the Table view, scroll and select pages as needed and click on the port check box(es) to select
ports to configure.

To select one or more ports to configure within a QSFP, you need to check each port to be
configured.
I f a port is grayed out in the graphical view, you will be unable to edit that port until both of
the following are met: the port must be disabled and the port must not be a part of a
configuration. If the port is part of one of the following configurations, it must be removed
from the configuration: user LAG, VLAN, port mirror, port security, tunnel config, ACL.

b. In the switch Graphic view, click on the ports to configure. A check mark appears for each SFP or
QSFP.

4. Select Actions > Enable/Disable and in the drop-down list, select either Enable or Disable.
The ports are either enabled or disabled. A Success message is momentarily displayed.

Adding VLANs to Switch Ports

This feature enables you to add VLANs to ports. You can add VLANS to ports whether or not the ports
currently have VLANs. For example, if a port has VLANs 5 and 6 and you add ports 7 and 8, the port will now
have VLANs 5, 6, 7, and 8.

To add VLANs to switch ports:

You cannot use this feature to add VLANs that are part of a LAG; the LAG manages the VLANs.

1. Select the Configuration > Ports > Ports page.

2. If not already selected, select the fabric and the switches to edit.
3. Select the ports to configure:
a. In the Table view, scroll and select pages as needed and click on the port check box(es) to select
ports to configure.

To select one or more ports to configure within a QSFP, you need to check each port to be
configured.

b. In the switch Graphic view, click on the ports to configure. A check mark appears for each selected
port (SFP) or port range (QSFP).

Configurations: Ports | 48
 Chapter 9 | Configurations: Ports

4. Select Actions > VLANs > Add.

The Add VLANs window opens.
5. Complete the following fields as needed to enter VLANs and/or VLAN Groups to add to the ports:

Parameter
Description Valid Values
Name

Type In this drop-down list, select the VLAN type to assign to VLANs, Native VLAN, or VLAN
the port(s). Groups.

VLANs The VLANs field appears if Type = VLANs. In the VLANs One or more VLANs, comma-
field, enter one or more VLANs to assign to the separated to assign to the port(s).
selected ports. For example: 100,200,300,350-
400.

VLAN The VLAN group field appears only if Type = VLAN Select one or more VLAN Groups.
Group Groups. In this VLAN Group drop-down list, select one
or more VLAN Groups to assign to the port(s).

Native The Native VLAN field appears only if Type = Native Select one native VLAN.
VLAN VLAN. In the Native VLANs field, select one VLAN. The
default native VLAN is replaced with the new VLAN.

6. When finished, click either Apply to add the VLANs to the port or Cancel to retain the pre-configured
settings.

Setting VLANs or VLAN Groups on Switch Ports

You can add or remove VLANs or VLAN groups to or from ports that currently have configured VLANs using
the Set action. For example, if a port has VLANs 5 and 6, and if you set the port to use VLANs 7 and 8, then
the port will now have VLANs 7 and 8 only.
To set VLANs and/or VLAN groups on selected switch ports:

You cannot use this feature to assign or change VLANs that are part of a LAG; the LAG manages the
VLANs.

1. Select the Configuration > Ports > Ports page.

2. If not already selected, select the fabric and the switches to edit.
3. Select the ports to configure:
a. In the Table view, with the default Table icon selected, scroll and select pages as needed and click
on the port check box(es) as needed to select ports to configure. Note that to select all ports within
a QSFP, you need to check four ports.

b. In the switch Graphic view, click on the ports to configure. A check mark appears for each selected
port (SFP) or port range (QSFP).

4. Select Actions > VLANs > Set. The Set VLANs window opens.
5. Complete the following fields as needed to select the VLANs and/or VLAN Groups to either add-to or

Aruba Fabric Composer 6.3.0 | User Guide 49

Chapter 9 | Configurations: Ports

remove-from the ports:

Parameter
Description Valid Values
Name

Type In this drop-down list, select the VLAN type to replace or set VLANs, Native VLAN, or
on the port(s). VLAN Groups.

VLANs The VLANs field appears only if Type = VLANs. In the VLANs One or more VLANs,
field, enter one or more VLANs to set on the selected ports. comma-separated to
assign to the port(s). For
example:
100,200,300,350-400.

VLAN Group The VLAN group field appears only if Type = VLAN Groups. Select one or more VLAN
In the VLAN Group drop-down list, select one or more VLAN Groups.
Groups to set on the port(s).

Native VLAN The Native VLAN field appears only if Type = Native VLAN. Select one native VLAN.
In the Native VLANs field, select a VLAN; the current native
VLAN is replaced with the new Native VLAN.

6. When finished, click either Apply to set the VLANs or Cancel to retain the pre-configured settings.

Removing VLANs from Switch Ports

To remove VLANs from selected switch ports:

1. Select the Configuration > Ports > Ports page.

2. If not already selected, select the fabric and the switches to edit.
3. Select the ports to configure:
a. In the Table view, with the default Table icon selected, scroll and select pages as needed and click
on the port check box(es) as needed to select ports from which to remove VLANs. Note that to
select all ports within a QSFP, you need to check four ports.

b. In the switch Graphic view, click on the ports for which to unassign the VLANs. A check mark
appears for each selected port (SFP) or port range (QSFP).

4. Select Actions > VLANs > Remove. The Remove VLANs window opens.
5. Complete the following fields as needed to define the VLANs and/or VLAN Groups to remove/unassign
from the ports:

Parameter Name Description Valid Values

Type In this drop-down list, select the VLAN VLANs, Native VLAN, or VLAN
type to remove from the port(s). Groups.

VLANs The VLANs field appears only if Type = One or more VLANs, comma-separated
VLANs. In the VLANs field, enter one or to assign to the port(s). For example:
more VLANs to remove from the selected 100,200,300,350-400.
ports.

Configurations: Ports | 50
 Chapter 9 | Configurations: Ports

Parameter Name Description Valid Values

VLAN Group The VLAN group field appears only if Select one or more VLAN Groups.
Type = VLAN Groups. In the VLAN Group
drop-down list, select one or more VLAN
Groups to remove from the port(s).

Native VLAN The Native VLAN field appears only if Select one native VLAN.
Type = Native VLAN. In the Native VLANs
field, select one VLAN value; the native
VLAN is replaced with the default native
VLAN.

6. When finished, click either Apply to unassign the VLANs or Cancel to retain the pre-configured
settings.

Setting the QSFP Transform for QSFP Ports

To set the QSFP Mode for one or more QSFP ports:

1. Select the Configuration > Ports > Ports page.

2. If not already selected, select the fabric and the switches to edit.
3. Select the ports to configure:
n In the Table view, locate the QSFP and click on the check box for the 1st port in the QSFP. For
example, port 10.1 for QSFP port 10. Do not select more than one port on a QSFP. Repeat for all
QSFPs that need the mode set.
n In the switch Graphic view, click on each QSFP that needs the mode set. A check mark appears in
each selected QSFP.

4. Select Actions > QSFP Transform and select the correct mode from the drop-down list.
The mode is assigned and a Success message is momentarily displayed.

Link Aggregation Groups

Link aggregation is a method of combining multiple links to form a single virtual link that can carry a higher
combined bandwidth. You can link multiple ports on a single connector to form a Link Aggregation Group
(LAG). Additionally, you can connect multiple ports between multiple switches and configure them as a Multi-
Chassis Link Aggregation Group (MLAG) so that all links in the MLAG act like a single, larger (virtual) link.
LAG and MLAG functionality is standardized in IEEE 802.3ad and is also referred to by several other terms
including port trunking, link bundling, NIC bonding, or NIC teaming.
LAGs can be provisioned from hosts to adjacent Top-of-Rack (ToR) switches to provide additional bandwidth
and make them highly available. When configured correctly, LAGs make optimal use of the available physical
links on the host, boosting performance and preventing bottlenecks produced when all data is sent out of a
single NIC. For these reasons, the use of LAGs in VMware environments is highly recommended.

Aruba Fabric Composer 6.3.0 | User Guide 51

Chapter 9 | Configurations: Ports

Link Aggregation
n Increases link reliability (high availability and redundancy)
n Distributes traffic between multiple devices

You can either configure LAGs individually for one or more physical ports as a statically-defined LAG, or as a
Link Aggregation Control Protocol (LACP) controlled LAG. The main purpose of LACP is to manage the
dynamic addition and removal of links in a bundle.
For example, by bundling multiple ports between a server and a Top of Rack (ToR) Fabric Composer switch,
the server can communicate at the combined speed of the bundled ports. LACP is used between the multiple
devices to communicate the state of the links and their ability to be used for user traffic. Traffic between the
two devices is distributed between the links, typically on a per-flow basis. Based on the IP address and
UDP/TCP information in the packet, one of the links is chosen and all packets with those same IP addresses
and UDP/TCP information travel across the same link. Packets within a flow arrive in sequence. Traffic across
the links in a bundle is not necessarily symmetrical. It is completely normal for a flow to travel from server to
switch on one link, and the return part of that flow to travel on a different link.

Link Aggregation Control Protocol

Link Aggregation Control Protocol (LACP) provides a method to control the bundling of several physical ports
together to form a single logical channel. LACP lets a network device negotiate an automatic bundling of links
by sending LACP packets to the peer. LACP is used to establish and maintain the channel. The link state is
reported up to the user. When a port goes down, the existing traffic goes over the remaining links.
The LACP:

n Maintains configuration information to control aggregation.

n Exchanges configuration information with other peer devices.
n Attaches or detaches ports from the LAG, based on the exchanged configuration information.
n Maintains port operational link state, determining whether or not traffic is sent over a port.

Viewing LAGs
To list all Link Aggregation Groups (LAGs), select Configuration > Ports > Link Aggregation Groups.
The following information is provided for each LAG:

n Name: The LAG name.

n Description: The LAG description.
n Type: The LAG type.
n LAG Number: The LAG number.
n Switch: The switch that the LAG is configured on.
n Ports: The switch ports that make up the LAG.
n Bond Status: Indicates the bonding status of the LAG.
n VLANs: Lists all VLANs configured with this LAG.
n Ungrouped VLANs: Lists VLANs, not part of a VLAN group, that are configured with this LAG.
n VLAN Groups: Lists VLAN Groups configured with this LAG.
n Native VLAN: Native VLAN configured with this LAG.
n Lossless Ethernet Enabled: Supports lossless transmission.

Configurations: Ports | 52
 Chapter 9 | Configurations: Ports

n Manager: If a LAG is managed by an external resource, the manager, for example HPE OneView, is indicated
in this column.

Adding a LAG
To add a LAG:

1. In Aruba Fabric Composer, in the Configuration > Ports > Link Aggregation Groups page, select
Actions, and then click Add. The Link Aggregation Group wizard opens.
2. Configure the following parameters as needed:

Parameter
Tab Description Valid Values Default
Name

Create Select an option to

Mode create the LAG(s).
Choose to create
multiple MLAGs or to
configure a single LAG.

Name Prefix Assign a name for the Any non-empty string,

Settings LAG. example, LAG-1.

LAG Number Assign a LAG Number Enter a number between 1

Base Base. and 256.

Select VSX Pairs from For a LAG, you can assign as

the drop-down list and many as 8 ports from a
define a range of Ports switch.
to be included in the For an MLAG, you can assign
LAGs. This option as many as 8 ports from any
appears only if you switch. You cannot exceed
selected Create 64 user-defined LAGs per
multiple MLAGs for switch.
selected VSX Pairs.

Ports The following option

appears only if you
selected Create a
single Link Aggregation
Group.

On the Ports page, you

can select either the
Table view or the
Graphical view from
which to select ports.

Aruba Fabric Composer 6.3.0 | User Guide 53

Chapter 9 | Configurations: Ports

Parameter
Tab Description Valid Values Default
Name

Above the table or

graphical view, the LAG
Switch Member drop-
down enables you to
select one or more
switches that will
contain ports that are
members of the LAG.
Any selected switch(es)
will appear in the table
or graphical view.
In either the table or
graphical view, select
the ports to include in
the LAG.

Configurations: Ports | 54
 Chapter 9 | Configurations: Ports

Parameter
Tab Description Valid Values Default
Name

The following settings have default values that can be maintained. However, these
settings can be changed.

Enable Enable or disable

LACP Fallback.
LACP Fallback and
configure
LACP settings. ma

LACP Mode Select the LACP mode Off: LACP is disabled. LACP is
from the drop-down active
list. Active: Ports send LACP Mode =
packets at regular intervals Active
to the partner ports. The by
device immediately sends default.
LACP messages when the
port comes up and must
LACP reach an agreement with the
Settings attached port before traffic
will pass.

Passive: Ports do not

generate LACP packets until
they receive them from the
partner ports. If no LACP
messages are received, the
port aggregates as though
statically configured. If LACP
messages are received, an
agreement must be reached
with the peer before traffic
will pass.

LACP Interval Select an LACP Interval. Slow Slow

Fast

Priority Enter a priority. 1-32768, where 32768 is the 32768

highest priority.

VLANs Native VLAN Enter a VLAN between Empty or 0 disables the

0 and 3966. Native VLAN.

VLANs Enter a VLAN. A number, set, or range of

VLANs between 1 and 3966.

VLAN Group Select a VLAN Group. Select a VLAN Group from

the drop-down list.

This tab lists all configured parameters for you to verify. If you need to make any
Summary
changes, open the tabs and update as needed.

Aruba Fabric Composer 6.3.0 | User Guide 55

Chapter 9 | Configurations: Ports

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the LAG, Back to go back and change a setting, or Cancel to exit this configuration without
saving.

Editing a LAG
To edit a LAG:

1. In Aruba Fabric Composer, in the Configuration > Ports > Link Aggregation Groups page, select
Actions, and then click Edit. The Link Aggregation Group wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the LAG, Back to go back and change a setting, or Cancel to exit this configuration
without saving.

Deleting a LAG
To delete a LAG:

1. In the Aruba Fabric Composer UI, in the Configuration > Ports > Link Aggregation Groups page,
select the LAG to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the LAG or Cancel to retain the LAG.

Adding VLANs to LAG(s)

To Add VLANs to LAG(s):

1. In the Configuration > Ports > Link Aggregation Groups page, select the LAG(s) and then select
Actions > VLANs > Add. The Add VLANs wizard opens.
2. Complete the following fields as needed to enter VLANs and/or VLAN Groups to add to the LAG(s):
n Type: In this drop-down list, select the VLAN type: VLANs, Native VLAN, or VLAN Groups. One of
the following fields will appear for the selected type.
n VLANs: The VLANs field appears only if Type = VLANs. Enter one or more VLANs, comma-separated.
For example: 100,200,300,350-400.
n Native VLAN: The Native VLAN field appears only if Type = Native VLAN. If you select a value here,
the default native VLAN is replaced with the new native VLAN.
n VLAN Groups: The VLAN Groups field appears only if Type = VLAN Groups. In this drop-down list,
select one or more VLAN Groups.

3. When finished, click either Apply to add the VLANs to the LAG(s) or Cancel to retain the pre-
configured settings.

Editing VLANs on LAG(s)

You can add or remove VLANs or VLAN groups to/from LAGs that currently have configured VLANs using the
Set action.
To edit (set) VLANs and/or VLAN groups on selected switch LAGs:

1. In the Configuration > Ports > Link Aggregation Groups page, select the LAGs and then select
Actions > VLANs > Set. The Set VLANs wizard opens.

Configurations: Ports | 56
 Chapter 9 | Configurations: Ports

2. Make changes to the following fields as needed:

n Type: In this drop-down list, select the VLAN type: VLANs, Native VLAN, or VLAN Groups. One of
the following fields will appear for the selected type.
n VLANs: The VLANs field appears only if Type = VLANs. Enter one or more VLANs, comma-separated.
For example: 100,200,300,350-400.
n VLAN Groups: The VLAN Groups field appears only if Type = VLAN Groups. In this drop-down list,
select one or more VLAN Groups.
n Native VLAN: The Native VLAN field appears only if Type = Native VLAN. If you select a value here,
the current native VLAN is replaced with the new native VLAN.

3. When finished, click either Apply to change the VLANs or Cancel to retain the pre-configured settings.

Removing VLANs from LAG(s)

To remove VLANs from selected LAG(s):

1. In the Configuration > Ports > Link Aggregation Groups page, select the LAG(s) and then select
Actions > VLANs > Remove.
2. Complete the following fields as needed to select the VLANs and/or VLAN Groups to remove from the
LAGs:
n Type: In this drop-down list, select the VLAN type: VLANs, Native VLAN, or VLAN Groups. One of
the following fields will appear for the selected type.
n VLANs: The VLANs field appears only if Type = VLANs. Select the VLAN to remove from the LAG(s).
n Native VLAN: The Native VLAN field appears only if Type = Native VLAN. Select the native VLAN to
remove from the LAG(s).
n VLAN Groups: The VLAN Groups field appears only if Type = VLAN Groups. In this drop-down list,
select one or more VLAN Groups to remove from the LAG(s)

3. When finished, click either Apply to remove the VLANs or Cancel to retain the pre-configured settings.
4. Respond to the confirmation prompt.

Setting VLANs to LAG(s)

To set VLANs to LAGS:

1. In the Configuration > Ports > Link Aggregation Groups page, select the LAG(s) and then select
Actions > VLANs > Set. The Set VLANs window opens.
2. Complete the following fields as needed to enter VLANs and/or VLAN Groups to add to the LAG(s):
n Type: In this drop-down list, select the VLAN type: VLANs, Native VLAN, or VLAN Groups. One of
the following fields will appear for the selected type.
n VLANs: The VLANs field appears only if Type = VLANs. Enter one or more VLANs, comma-separated.
For example: 100,200,300,350-400.
n Native VLAN: The Native VLAN field appears only if Type = Native VLAN. If you select a value here,
the default native VLAN is replaced with the new native VLAN.
n VLAN Groups: The VLAN Groups field appears only if Type = VLAN Groups. In this drop-down list,
select one or more VLAN Groups.

Aruba Fabric Composer 6.3.0 | User Guide 57

Chapter 9 | Configurations: Ports

3. When finished, click either Apply to add the VLANs to the LAG(s) or Cancel to retain the pre-
configured settings.

VLAN Groups
To view all current VLAN groups, select Configuration > Ports > VLAN Groups.
The following information is provided for each VLAN Group:

n Name: The name of the VLAN group.

n Description: VLAN group description.
n VLANs: Indicates all VLANs in this VLAN group.
n Manager: Indicates if there is an external manager of this resource. For example, VMware vSphere may
manage this resource.

Manager Ownership
VLAN groups can be owned and managed by resources external to the Aruba Fabric Composer; for example
Nutanix or VMware vSphere can own and manage some or all VLAN groups. If a VLAN group is owned by an
external manager, that VLAN group should not be edited or deleted from the Aruba Fabric Composer. If you
select an owned VLAN group, the following warning will appear:

Configurations: Ports | 58
 Chapter 9 | Configurations: Ports

Adding a VLAN Group

To add a VLAN group:

1. In Aruba Fabric Composer, select Configuration > Ports > VLAN Groups.
2. Select Actions > Add.

VLAN groups can be owned and managed by resources external to the Aruba Fabric Composer;
for example HPE OneView or VMware vSphere can own and manage some or all VLAN groups. If
you are editing a VLAN group that is owned by an external manager, that VLAN group should not
be edited or deleted from the Aruba Fabric Composer. If you attempt to edit an owned VLAN
group, a warning such as the following for a vSphere manager will appear:

Use caution if you must edit a VLAN group when this warning appears.

3. In the VLAN Group window, complete the following fields:

Parameter Valid
Description
Name Values

Name Enter a name for the VLAN group.

Description Enter a description of the VLAN group.

VLANs Specify a set or range of VLANs, between 1-3966, for the VLAN group. When you 1-3966
begin entering the VLANs, the following text appears in red until you have entered
a valid set of VLANs or range of VLANs:
Error: A number, set, or range of VLANs between 1 and 3966, example, 5, 10-45,
102. 3967-4095 are reserved for internal VLANs

4. Click Apply to save the VLAN group or Cancel to exit without saving. .

Editing a VLAN Group

To edit a VLAN Group:

1. In the Aruba Fabric Composer UI, select Configuration > Ports > VLAN Groups.
2. Click the button next to the VLAN Group to edit and then select Actions > Edit.
3. In the Edit VLAN Group Configuration window, make changes to the fields as needed. Click a tab to
edit the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Aruba Fabric Composer 6.3.0 | User Guide 59

Chapter 9 | Configurations: Ports

Deleting a VLAN Group

To delete a VLAN group:

1. In Aruba Fabric Composer, select Configuration > Ports > VLAN Groups.
2. In the row for the group to delete, click the check box to select the group, then select Actions >
Delete.

VLAN groups can be owned and managed by resources external to the Aruba Fabric Composer;
for example HPE OneView or VMware vSphere can own and manage some or all VLAN groups. If
a VLAN group is owned by an external manager, that VLAN group should not be deleted from the
Aruba Fabric Composer.

Do NOT delete a VLAN group when this warning appears.

3. Click Apply.
4. In the confirmation pop-up, click OK to delete the group or Cancel to retain the group.

PVLANs
To view all current Private VLANs (PVLANs), select Configuration > Ports > PVLANs.
The following information is provided for each PVLAN:

n Name: The name of the PVLAN.

n Description: PVLAN description.
n Switch: The name of the switch.
n Primary VLAN: Name of the primary VLAN.
n Promiscuous Ports: Untagged traffic ports.
n Isolated VLANs: Number of isolated VLANs in the Fabric.
n Community VLANs: Name of the community VLANs.
n Secondary Ports: Name of the secondary ports.
n Inconsistency Reasons: Error notification are reasons for inconsistency.

Adding a PVLAN
To add a PVLAN:

1. In Aruba Fabric Composer, in the Configuration > Ports > PVLANs page, select Actions, and then
click Add. The PVLAN wizard opens.

Configurations: Ports | 60
 Chapter 9 | Configurations: Ports

2. Configure the following parameters as needed:

Parameter
Tab Description Valid Values Default
Name

Name Assign a name for the PVLAN. Any non-empty

Prefix string, for
Name example,
PVLAN-1.

Description Optional. Provide a description of the

PVLAN.

Select required Switches for this You can select

PVLAN to be applied to. The Primary individual
and Secondary VLANs will be switches or
Switches configured on these switches. click Select All
Promiscuous and Secondary Ports to select all the
can be chosen from these switches. switches in the
Fabric.

Primary Primary Configure a required Primary VLAN A

VLAN VLAN and select optional Promiscuous VLAN between
Ports to be associated with the VLAN. 2 and 4094.

Secondary Isolated Enter a number, set, or range Empty or 0

VLANs VLANs between 0 and 4094. disables the
Native VLAN.

Community Enter a number, set, or range A number, set,

VLANs between 0 and 4094. or range of
VLANs
between 1 and
3966.

Secondary Secondary Configure optional Secondary VLAN.

Ports VLAN

Ports Configure optional Port entries.

This tab lists all configured parameters for you to verify. If you need to make any
Summary
changes, click Back to open the tabs and update as needed.

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the PVLAN, Back to go back and change a setting, or Cancel to exit this configuration
without saving.

Editing a PVLAN.
To edit a PVLAN:

1. In Aruba Fabric Composer, in the Configuration > Ports > PVLANs page, select Actions, and then
click Edit. The PVLAN wizard opens.

Aruba Fabric Composer 6.3.0 | User Guide 61

Chapter 9 | Configurations: Ports

2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the PVLAN, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Deleting a PVLAN
To delete a PVLAN:

1. In the Aruba Fabric Composer UI, in the Configuration > Ports > PVLANs page, select the PVLAN(s)
to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the PVLAN or Cancel to retain the PVLAN.
3. You can also delete all PVLANs in the Fabric by selecting Actions > Delete All.

Transceivers
The Configuration > Ports > Transceivers window provides information on all transceivers installed in
selected fabric switches within a selected Fabric Composer. For example:

The transceiver table contains rows only for ports that contain a transceiver.

The following information is provided for each transceiver:

n Switch: The switch that contains the transceiver.

n Silkscreen: The port label printed next to the physical port on the switch chassis. For example, for a QSFP
port, this might be a single number such as 50.
n Known: Indicates whether or not the transceiver type is known by the Aruba Fabric Composer.
n Module Type: Indicates the transceiver module type. For example, SFP, QSFP 28, QSFP PLUS.
n QSFP Mode: For QSFP transceivers, indicates the QSFP mode that has been set for the transceiver. For
example, 4 x 10, 4 x 25 or 1 x 100. This is not set on this page; to set the QSFP mode, refer to the Ports page
at Port Configurations.
n Connector Type: Indicates the connector type compatible with the transceiver, for example, LC or NO_SEP_
CONN.
n Transceiver Description: The description of the Transceiver.

Configurations: Ports | 62
 Chapter 9 | Configurations: Ports

n DOM Supported: Whether DOM is supported or not.

n Vendor Name: The name of the transceiver manufacturer. For example, Siemon, Yamaichi.
n Vendor Part Number: The manufacturer part number of the transceiver.
n Vendor OUI: Indicates the IEEE company ID of the vendor. For example, [Link] for Siemon.
n Serial Number: The serial number of that transceiver. For example, 15154029625.
n Manufacture Date Code: The transceiver date of manufacture. For example, Feb 5th, 2021 @ [Link]
pm EST.
n Revision: The transceiver revision.
n Length:
n Wavelength: The transceiver wavelength in nm.
n Max Speed: The transceiver maximum speed in Mbps.
n SMF Length: Single Mode Fiber (SMF) supported length.
n OM1 Length: OM1 multi-mode fiber-supported length.
n OM2 Length: OM2 multi-mode fiber-supported length.
n OM3 Length: OM3 multi-mode fiber-supported length.
n OM4 Length: OM4 multi-mode fiber-supported length.

Further information is provided for each port by clicking on that port row. For example, expanding port rows
shows detailed information for the transceiver installed in that port. The following transceiver information is
provided:

n For each SFP transceiver and for each of the four ports on a QSFP transceiver, the following information is
provided:
o Channel: Indicates the transceiver channels. An SFP transceiver has a single channel 1, while a QSFP
transceiver has one, two, or four channels depending on the QSFP mode configured.
o Port: Indicates the port(s) that the transceiver connects. An SFP transceiver has a single port while a QSFP
transceiver has 4 ports.
o Name: Name assigned to the transceiver port.
o Description: Optional description of the transceiver.
o Link State: Indicates the current state of the link— Up or Down.
o Tx Power: Indicates the signal strength for data transmitted from that transceiver channel.
o Tx Quality: Indicates the quality of transmitted data on that transceiver channel.
o Rx Power: Indicates the signal strength for data received on that transceiver channel.
o Rx Quality: Indicates the quality of received data on that transceiver channel.

Aruba Fabric Composer 6.3.0 | User Guide 63

 Chapter 10
Configurations: Routing

Configurations: Routing
The Configuration > Routing option provides access to configure the following fabric routing features:

n VRF
n BGP
n OSPF
n EVPN
n EVPN VXLAN Multi-Fabric

VRF
You use the Virtual Routing and Forwarding (VRF) page to create VRF configurations, IP Interfaces, IP Static
Routes, Networks, Underlays, Overlays, ARP Tables, and IP Route Tables.
The following information is provided for each VRF configuration:

n Name: The name of the VRF configuration.

n Description: The description of the VRF configuration.
n Type: The type of the VRF configuration.
n Switches: Number of switches added to the VRF configuration.
n Route Distinguisher: The route distinguisher of the VRF configuration.
n L3VNI: The bridge domain of the VRF configuration.
n Route Target Ext-Community: The extended community value of the VRF configuration.
n Route Target Mode: The route target mode of the VRF configuration.
n Route Target Address Family: Address family indicator of the VRF configuration.

Adding a VRF Configuration

To add a VRF Configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Select Actions > Add. The Virtual Routing and Forwarding wizard appears.
3. In the Name page, complete the following fields:
n Name: Enter any non-empty string between 1 and 92 characters. For example, VRF1.
n Description: Enter a description of the VRF configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Scope page, set the scope of the VRF. The VRF may be applied to the entire Fabric or to a
specific set of Switches within the Fabric.
6. In the Routing page, complete the following field:
n L3VNI: Enter a number between 1 and 16777214.

Aruba Fabric Composer 6.3.0 | User Guide 64

Chapter 10 | Configurations: Routing

7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

8. In the Route Targets page, complete the following fields:

n Route Target Mode: In the drop-down list, select from Import, Export, or Both.
n Route Target Ext-Community: Enter a valid Autonomous System Number. For example,
65001:101.
n Address Family: In the drop-down list, select from IPv4 Unicast, IPv6 Unicast, or EVPN.

9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
10. In the Summary page, check the fields for accuracy and click Apply to apply the VRF configuration or
Cancel to exit without saving.

Editing a VRF Configuration

To edit a VRF Configuration:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > VRF.
2. Select the radio button next to the VRF configuration to edit and then select Actions > Edit.
3. In the Virtual Routing and Forwarding page, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a VRF Configuration

To delete a VRF Configuration:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > VRF.
2. Click the radio button next to the VRF configuration to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the VRF configuration or Cancel to retain the
configuration. When you click OK, the deleted VRF configuration gets removed from all associated
fabrics and switches.

Re-applying a VRF Configuration

To re-apply a VRF Configuration, default, to all of the switches within the fabric:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the radio button next to the VRF and select Actions > Reapply VRF.
3. In the confirmation pop-up box, click OK to re-apply the VRF to all of the switches within the fabric or
Cancel to retain the route.

Configurations: Routing | 65
 Chapter 10 | Configurations: Routing

IP Interfaces
You use the IP Interfaces page to create IP Interfaces configurations.
The following information is provided for each VRF configuration:

n Name: The name of the VRF configuration.

n Description: The description of the VRF configuration.
n Type: The type of the VRF configuration (SVI, RPI, or Loopback).
n Enabled: Whether enabled (Yes or No).
n Loopback Type: Generic, EVPN VTEP, VSX Keep Alive, or VSX/Underlay.
n Switch: Name of the switch currently enabled.
n VLAN: Name assigned to the VLAN.
n Local Proxy ARP Enabled: Whether enabled (Yes or No).
n Port/LAG: Name of the Port/LAG assigned.
n Active Gateway IP Address: IP Address of the Active Gateway.
n Active Gateway MAC Address: MAC Address of the Active Gateway.
n Primary IPv4 Network: Primary IPv4 Network address.
n Secondary IPv4 Networks: Secondary IPv4 Network address.
n VSX Shutdown on Split: Whether Yes or No.
n Operational State: Operational state, whether Up, Down, or Unknown.
n Admin State: Whether Up or Down.
n MAC Address: MAC Address of the primary IP Interface.
n IP MTU: Maximum size of an IP payload allowed to be transmitted.
n Auto Negotiation: Whether On or Off.
n Duplex Mode: Whether Half Duplex or Full Duplex.
n Error Control: Select between Reed-Solomon FEC, Firecode FEC, or None.

Adding an IP Interface
To add an IP Interface:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Select the VRF configuration.
3. Select Actions > IP Interfaces. The IP Interfaces Configuration window appears.
4. In the IP Interfaces tab, select Actions > Add.
5. In the IP Interface Type page, complete the following fields:
n Select the Enable this IP Interface checkbox.
n Type: In this drop-down list, select an Interface type: SVI, RPI, or Loopback. One of the following
fields will appear for the selected type.
n If SVI is selected, then:
o VLAN: The VLAN field appears only if Type = SVI. Enter a VLAN between 1 and 4094. (1-4094 is a
generic range potential. Reserved VLANs vary by switch model and are rejected automatically.)
o Switch: The switch field appears only if Type = SVI. Select one or more switches from the drop-
down list.

Aruba Fabric Composer 6.3.0 | User Guide 66

Chapter 10 | Configurations: Routing

o IPv4 Subnetwork Address: Enter a valid IPv4 network in the CIDR format.
o IPv4 Addresses: Enter a range of IPv4 Addresses to be assigned to selected switches. The range
should be sufficient for one IP per switch.
o Active Gateway IP Address: The Active Gateway IP Address field appears only if Type = SVI. Enter
a valid IPv4 address.
o Active Gateway MAC Address: The Active Gateway MAC Address field appears only if Type = SVI.
Enter a valid MAC address.
o Enable VSX Shutdown on Split: Click to shut down the configured non-VSX interfaces on the VSX
secondary along with VSX interfaces during a VSX split.
o Enable Local Proxy ARP: Click to enable the ability of the switches to respond to ARP requests for
the VLAN.
n If RPI is selected, then:
o Switch: The switch field appears only if Type = RPI. Select a switch from the drop-down list.
o Port/LAG: The Port/LAG field appears only if Type = RPI. Select a Port/LAG from the drop-down
list.
n If Loopback is selected, then:
o Loopback Type: The Loopback field appears only if Type = Loopback. Select Generic or EVPN VTEP
from the drop-down list.
o Description: The Description field appears only if Type = Loopback. This field is auto-populated
with whatever was selected in the Loopback Type field.
o Switch: The switch field appears only if Type = Loopback. Select a switch from the drop-down list.

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the IPv4 Addresses page, complete the following fields:
n Primary IPv4 Network Address: Enter a valid IPv4 Network in the CIDR format.
n Secondary IPv4 Network Address: Enter a valid IPv4 Network in the CIDR format. (Optional)

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Name page, enter an optional Name and Description.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to apply the IP Interface configuration or Cancel to exit without saving.

Editing an IP Interface
To edit an IP Interface:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > VRF.
2. Click the Expand icon ... next to the VRF configuration to edit and then select IP Interfaces tab >
Actions > Edit.
3. In the IP Interface page, make changes to the fields as needed. Click a tab to edit the settings on that
tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Configurations: Routing | 67
 Chapter 10 | Configurations: Routing

Deleting an IP Interface
To delete an IP Interface:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > VRF.
2. Click the button next to the VRF configuration to delete and then select Actions > Delete.
3. You can also delete all IP Interfaces by selecting Actions > Delete All.
4. In the confirmation pop-up box, click OK to delete the IP Interface configuration or Cancel to retain
the configuration. When you click OK, the deleted IP Interface configuration gets removed from all
associated fabrics and switches.

IP Static Routes
You can use the IP Static Routes tab to create configurations for IP static routes on Aruba switches.
To access the IP Static Routes tab, in Aruba Fabric Composer, select Configuration > Routing > VRF.
You can open the IP Static Routes tab under the VRF using either of these methods:

n Click the Expand icon ... next to VRF and select IP Static Routes, or
n Select a VRF and then select Actions > IP Static Routes.

The following information is provided for the IP static routes:

n Name: The name of the IP static route.

n Description: The description of the IP static route.
n Destination Prefix: Identifies the destination prefix for the static route as either an IP address or a MAC
address.
n Next Hop Address: The next-hop gateway address for the static route.
n Distance: The administrative distance for the static route.
n Tag: The route tag used to filter routes and apply administrative policies.
n Switches: The switch configured for this IP static route.

Adding an IP Static Route

To add a new IP Static Route:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select the IP Static Routes tab. The window will
expand and open on the IP Static Routes tab.
3. In the IP Static Routes tab, select Actions > Add. The IP Static Route wizard opens.
4. In the IP Static Route wizard, complete the following fields:
n Destination Prefix: Enter the destination prefix for the static route. The destination prefix
represents the target network IP address and subnet mask in CIDR notation for the route (for
example: [Link]/8). The remote network you specify here will be subject to this static route.
n Next Hop Address: Enter the next-hop gateway address for the static route, which would be part of
a subnet that is directly attached to the fabric with a VLAN.
n Distance: Enter a value for the administrative distance for the static route. Administrative distance
represents the number of hops between the Fabric Composer and the next-hop gateway. It is used to
establish route priority if multiple routes exist for the same destination prefix. You can configure

Aruba Fabric Composer 6.3.0 | User Guide 68

Chapter 10 | Configurations: Routing

multiple routes to the same destination prefix and assign different distances to them. The route with
the lowest distance will be selected first.
n Tag: Enter a value for the route tag. Route tags are used to filter routes and apply administrative
policies such as redistribution to tagged routes.
n Switch: From the drop-down list, select a switch.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Name page, complete the following fields:
n Name: Enter a name for the IP Static Route.
n Description: Enter a description of the IP Static Route.

7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
8. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
9. Click Apply to save the IP Static Route or Cancel to exit without saving.

Editing an IP Static Route

To edit an IP Static Route:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select IP Static Routes. The window will expand
and open on the IP Static Routes tab.
3. In the IP Static Routes tab, select an IP Static Route and then select Actions > Edit. The IP Static Route
wizard opens.
4. In the IP Static Route wizard, make changes to the fields as needed. Click a tab to edit the settings on
that tab.

Route tab

n Destination Prefix: This field cannot be edited; it is defined when you Add an IP Static Route, but cannot
be edited after the route is added. It indicates the configured destination prefix for the static route. The
destination prefix represents the target network IP address and subnet mask in CIDR notation for the route
(for example: [Link]/8). The remote network specified here is subject to this static route.
n Next Hop Address: Enter the next-hop gateway address for the static route, which would be part of a
subnet that is directly attached to the fabric with a VLAN.
n Distance: Enter a value for the administrative distance for the static route. Administrative distance
represents the number of hops between the Fabric Composer and the next-hop gateway. It is used to
establish route priority if multiple routes exist for the same destination prefix. You can configure multiple
routes to the same destination prefix and assign different distances to them. The route with the lowest
distance will be selected first.
n Tag: Enter a value for the route tag. Route tags are used to filter routes and apply administrative policies
such as redistribution to tagged routes.
n Switch: From the drop-down list, select a switch.

Name tab

Configurations: Routing | 69
 Chapter 10 | Configurations: Routing

n Name: Enter a name for the IP Static Route.

n Description: Enter a description of the IP Static Route.

Summary tab

n Check the fields for accuracy.

Click Apply to save your edits or Cancel to exit without saving.

Deleting an IP Static Route

To delete an IP Static Route:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and select IP Static Routes to expand the fields on the IP
Static Routes tab.
3. Click the button next to the IP Static Route to delete, and then select Actions > Delete. You can also
click on the buttons next to multiple VRFs and select Actions > Delete All.
4. In the confirmation pop-up box, click OK to delete the IP Static Route or Cancel to retain the route.

Networks
You can use the Networks tab to create configurations for networks on Aruba switches.
To access the Networks tab, in Aruba Fabric Composer, select Configuration > Routing > VRF.
You can open the Networks tab under the VRF using either of these methods:

n Click the Expand icon ... next to VRF and select Networks, or
n Select a VRF and then select Actions > Networks.

The following information is provided for the Networks routes:

n Name: The name of the Network.

n Description: The description of the Network.
n VLAN: Identifies the VLAN connected to the Network.

Adding Networks
To add a new Network:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select the Networks tab. The window will expand
and open on the Networks tab.
3. In the Networks tab, select Actions > Add. The Network wizard opens.
4. In the Name page, complete the following fields:
n Name: Enter any non-empty string, for example Network-1.
n Description: Enter a description for this network.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Settings page, set the required VLAN between 1 and 4094.
7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

Aruba Fabric Composer 6.3.0 | User Guide 70

Chapter 10 | Configurations: Routing

8. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
9. Click Apply to save the Network or Cancel to exit without saving.

Editing a Network
To edit a Network:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > VRF.
2. Click the Expand icon ... next to the VRF configuration to edit and then select Networks > Actions >
Edit.
3. In the Network wizard page, make changes to the fields as needed. Click a tab to edit the settings on
that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a Network
To delete a Network:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > VRF.
2. Click the Expand icon ... next to the VRF configuration to delete and then select Networks > Actions
> Delete.
3. In the confirmation pop-up box, click OK to delete the network or Cancel to retain the network. When
you click OK, the deleted network gets removed from all associated fabrics and switches.

Configurations: Routing | 71
 Chapter 10 | Configurations: Routing

Adding an Underlay
To add a new Underlay:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select the Underlays tab. The window will expand
and open on the Underlays tab.
3. In the Underlays tab, select Actions > Add. The Underlay Configuration wizard opens.
4. In the Underlay Configuration wizard, complete the following fields:
n Name: Enter a name for the Underlay.
n Description: Enter a description of the Underlay.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Underlay Type page, select an Underlay type. Only one of each Underlay configuration type
may be created. Choose either EBGP or OSPF.
7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
8. In the AS Numbers page, select an ASN Type to be used for setting ASNs on switches. Select between
Dual-ASN and Multi-ASN.
n If Dual-ASN is selected, then complete the following fields:
o Spine-ASN: Enter an ASPLAIN notation between 1 and 4294967295 or an ASDOT notation
between 1 and 65535.65535.
o Leaf-ASN: Enter an ASPLAIN notation between 1 and 4294967295 or an ASDOT notation between
1 and 65535.65535.
n If Multi-ASN is selected, then complete the following fields:
o Starting Spine-Leaf ASN: Enter an ASPLAIN notation between 1 and 4294967295 or an
ASDOT notation between 1 and 65535.65535.
o Starting Border ASN: Enter an ASPLAIN notation between 1 and 4294967295 or an
ASDOT notation between 1 and 65535.65535.

9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
10. In the Settings page, complete the following fields:
n Transit VLAN: Enter a VLAN between 1 and 3966.
n IPv4 Subnetwork Address: Enter a valid IPv4 Subnet in CIDR Format.
n Keep Alive Timer: Enter a number of seconds between 0 and 65535.
n Hold Down Timer: Enter a number of seconds between 0 and 65535.
n The following check boxes are selected by default:
o Immediately reset BGP session if link to a directory connected external peer becomes inactive.
o Consider routes with different AS-path but same length as ECMP for best-path selection.
o Enable IPv4/IPv6 routes between the peers.
o Accept routes with own AS present in the AS-Path.
o Enable Bidirectional Forwarding Detection (BFD)
11. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and

Aruba Fabric Composer 6.3.0 | User Guide 72

Chapter 10 | Configurations: Routing

make changes as needed.

12. Click Apply to save the Underlay or Cancel to exit without saving.

Editing an Underlay
To edit an Underlay:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select Underlays. The window will expand and
open on the Underlays tab.
3. In the Underlays tab, select an Underlay and then select Actions > Edit. The Underlay Configuration
wizard opens.
4. In the Underlay Configuration wizard, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
5. In the Summary tab, check the details for accuracy and click Apply to save your edits or Cancel to exit
without saving.

Deleting an Underlay
To delete an Underlay:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and select Underlays to expand the fields on the Underlays
tab.
3. Click the button next to the Underlay to delete and then select Actions > Delete. You can also click
on the buttons next to multiple Underlays and select Actions > Delete All.
4. In the confirmation pop-up box, click OK to delete the Underlay or Cancel to retain the Underlay.

Re-applying an Underlay
To re-apply an Underlay to all of the switches within the fabric:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and select Underlays to expand the fields on the Underlays
tab.
3. Click the button next to the Underlay to which you want to re-apply and then select Actions >
Reapply Underlay.
4. In the confirmation pop-up box, click OK to re-apply the Underlay to all of the switches within the
fabric or Cancel to retain the old Underlay.

Adding an Overlay
To add a new Overlay:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select the Overlays tab. The window will expand
and open on the Overlays tab.
3. In the Overlays tab, select Actions > Add. The Overlay Configuration wizard opens.

Configurations: Routing | 73
 Chapter 10 | Configurations: Routing

4. In the Overlay Configuration wizard, note that the AS Numbers tab is grayed out by default if an
EBGP Underlay is created first. If only an OSPF Underlay exists, then this field is displayed.
5. In the IPv4 Network Address tab, set the required Loopback IPv4 Network Address.
n IPv4 Subnetwork Address: Enter a valid IPv4 Subnet in the CIDR format.

6. Click Next to go to the next page or Cancel to exit without saving.

7. In the Settings page, complete the following fields:
n Keep Alive Timer: Enter a number of seconds between 0 and 65535.
n Hold Down Timer: Enter a number of seconds between 0 and 65535.
8. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
9. Click Apply to save the Overlay or Cancel to exit without saving.

Editing an Overlay
To edit an Overlay:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and then select Overlays. The window will expand and open
on the Overlays tab.
3. In the Overlays tab, select an Overlay and then select Actions > Edit. The Overlay Configuration
wizard opens.
4. In the Overlay Configuration wizard, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
5. In the Summary tab, check the details for accuracy and click Apply to save your edits or Cancel to exit
without saving.

Deleting an Overlay
To delete an Overlay:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and select Overlays to expand the fields on the Overlays
tab.
3. Click the button next to the Overlay to delete and then select Actions > Delete. You can also click on
the buttons next to multiple Overlays and select Actions > Delete All.
4. In the confirmation pop-up box, click OK to delete the Overlay or Cancel to retain the Overlay.

Re-applying an Overlay
To re-apply an Overlay to all of the switches within the fabric:

1. In Aruba Fabric Composer, select Configuration > Routing > VRF.

2. Click the Expand icon ... next to the VRF and select Overlays to expand the fields on the Overlay tab.
3. Click the button next to the Overlay to which you want to re-apply and then select Actions > Reapply
Overlay.

Aruba Fabric Composer 6.3.0 | User Guide 74

Chapter 10 | Configurations: Routing

4. In the confirmation pop-up box, click OK to re-apply the Overlay to all of the switches within the fabric
or Cancel to retain the old Overlay.

Configurations: Routing | 75
 Chapter 10 | Configurations: Routing

ARP Tables
The Address Resolution Protocol (ARP) discovers the link layer (MAC) addresses associated with IP addresses
for routes associated with all VRF interfaces. The ARP table provides ARP information for these interfaces and
routes
On the Configuration > Routing > VRF page, select a VRF, click the Expand icon ... and then select ARP
Tables to expand the VRF and open the ARP Tables tab.
The table contains the following information:

Parameter Description

Switch Specifies the switch that contains the interface.

Interface Interface name this ARP is on.

IP Address Identifies the IP address for an interface.

MAC Address The layer-2 MAC address for the device associated with the interface IP address.

Address Family Address family this ARP is on.

State State of the ARP (Reachable, State, Incomplete, Failed, Permanent)

Last Modified Indicates when this interface entry was last updated.

IP Route Tables
The IP Route Tables provides IP route information for IP routes that are configured within the VRFs on a
Fabric Composer.
Typical router troubleshooting involves looking at individual switch route tables via a CLI and hoping to notice
what is missing. In the Aruba Fabric Composer, we present data in the IP route tables, enabling you to
determine if the Fabric Composer is set up correctly. In this table, you can filter the switch column to display
all routing data for that switch.
In the Configuration > Routing > VRF page, click the Expand icon ... next to the VRF and select IP Route
Tables. A group of tabs nested under the VRF opens on the IP Route Tables tab.
The following data fields can be viewed for each route in the IP Routes table:

Parameter Description

Switch Indicates the switch that contains this route.

Route Type Indicates the type of route.

Prefix Indicates the prefix of the route destination.

Next Hop Address Indicates the IP address of the route next hop.

Protocol Indicates the protocol of the interface (Local, Connected,

Static, BGP, or OSPF).

Sub Protocol Type Indicates the sub protocol of the interface.

Aruba Fabric Composer 6.3.0 | User Guide 76

Chapter 10 | Configurations: Routing

Parameter Description

Address Family Indicates the Address family this IP Route is on (IPv4 or IPv6).

Sub Address Family Indicates the sub address family this IP Route is on (Unicast,
Multicast, or VPN).

Distance Indicates the administrative distance for a route.

Administrative distance enables the switches to select the
best route when there are multiple routes to the same
destination using different routing protocols. Administrative
distance defines the reliability of the routing protocols; each
routing protocol is prioritized based on reliability with the
help of an administrative distance value.

Tag Indicates the VLAN tag configured on the route.

Metric Indicates the cost associated with using a route. The value is
protocol dependent and can be in terms of hop count, link
speed, or time delay.

Last Modified Indicates when this interface entry was last updated.

BGP
This topic describes the Border Gateway Protocol (BGP) page and tabs.

BGP Routing Page

To view the BGP page, in the Aruba Fabric Composer UI, select Configuration > Routing > BGP. The BGP
page lists the selected fabric's default BGP global configuration and enables you to edit the configuration.
The following information is provided for each BGP configuration:

n VRF Name: The name of the VRF configuration.

n VRF Description: The description of the VRF configuration.
n Enabled: Indicates whether or not BGP is enabled on the VRF.
n Default Keep Alive Timer: The period of time between each keep alive message sent by a peer.
n Default Hold Down Timer: The period of time a BGP peer waits between the receipt of successive keep
alive and/or update messages from a peer before determining that the peer is dead.
n Redistribute Connected: Enabled: Redistribute connected routes from each switch in the fabric to its
internal and external BGP peers.
n Redistribute OSPF: Enabled: Redistribute OSPF routes from each switch in the fabric to its internal and
external BGP peers.
n Redistribute Static Routes: Enabled: Redistribute static routes from each switch in the fabric to its
internal and external BGP peers.

BGP Switch Configuration

Clicking the Expand ... icon next to a VRF and selecting Switches opens the Switches tab.
The following VRF switch information is provided:

Configurations: Routing | 77
 Chapter 10 | Configurations: Routing

n Name: BGP switch configuration name.

n Description: BGP switch configuration description.
n Router ID: The IPv4 router ID.
n AS Number: The Autonomous System number for the associated fabric.
n Networks: The IPv4 network address and subnet mask in CIDR notation for a network to be advertised by
this switch.
n Keep Alive Timer: The keep alive time interval.
n Hold Down Timer: The hold down time interval.
n Redistribute Connected: Indicates if connected routes are redistributed from the switch to its internal and
external BGP peers.
n Redistribute OSPF: Indicates if OSPF routes are redistributed from the switch to its internal and external
BGP peers.
n Redistribute Static Routes: Indicates if static routes are redistributed from the switch to its internal and
external BGP peers.

BGP Neighbors Tab

You can view the status of all BGP neighbors on a fabric.
Click the Expand ... icon next to a switch and select Neighbors to open a new page for that switch with the
Neighbors tab open.
The following neighbor information is provided:

n Name: BGP neighbor name.

n Description: BGP neighbor description.
n Type: Indicates whether the neighbor is internal or external to the Fabric Composer.
n Neighbor AS Number: Indicates the neighbor AS number.
n Local AS Number: Indicates local AS number.
n IP Address: The neighbor IP address.
n Keep Alive Timer: The keep alive interval.
n Hold Down Timer: The hold down time interval.
n Weight: The routing weight to the neighbor.
n Route Reflector Client: Indicates that this is a client of the route reflector.
n Address Family: Address families in which this neighbor is activated.
n EBGP Multi-hop: Indicates the number of multicast hops to the neighbor.
n Soft Reconfiguration: Indicates whether or not soft reconfiguration is enabled on the neighbor.
n Default Originate: Indicates whether or not the switch advertises a Default Route to BGP neighbors.
n Admin State: Indicates whether or not Admin State is enabled on the neighbor.

Aruba Fabric Composer 6.3.0 | User Guide 78

Chapter 10 | Configurations: Routing

n Fall Over: Fall over of the BGP session when the route to this peer fails.
n Remove Private AS: Specifies whether Private AS should be removed.

Configurations: Routing | 79
 Chapter 10 | Configurations: Routing

removed:

Configuring BGP
To configure BGP, follow this high-level procedure:

1. Complete and apply the default BGP global configuration. For instructions, see Editing the BGP Global
Configuration on page 80. When you apply the BGP global configuration, the system automatically
creates BGP switch configurations for the switches that you have defined in the fabric IP network
configuration.
2. To configure BGP settings, such as route redistribution and networks to be advertised by a BGP
switch, edit its BGP switch configuration. For instructions, see Editing a BGP Switch Configuration on
page 81.
3. When you complete and apply the BGP global configuration for a fabric, the system automatically
creates intra-fabric BGP neighbor configurations for the switches in the fabric. To configure settings
for a BGP neighbor such as specifying IP prefix lists to use to filter inbound and outbound routes, edit
its BGP neighbor configuration. To create or edit BGP neighbor configurations, see: Adding or Editing a
BGP Switch Neighbor Configuration on page 82.

Editing the BGP Global Configuration

To edit the BGP Global Configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > BGP.

2. On the BGP page with VRF shown, select Actions > Edit. The BGP Global Configuration wizard for VRF
opens.
3. In the Settings page, make changes to the fields as needed.
4. In the Summary page, verify the new settings.
5. Click Apply to save your changes to the BGP Global Configuration or Cancel to exit without saving.

Adding a BGP Switch Configuration

To add a BGP switch configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > BGP.

2. Click the Expand icon ... next to the VRF and select Switches. The Switches tab opens.
3. Select Actions > Add. The BGP Switch Configuration wizard opens.
4. In the Settings page, complete the following fields:
n Switch: From the drop-down list, select a switch.
n Router ID: This can be left empty or set to [Link] which means use either the address of the fabric
IP network if it is set or the highest IP address. Alternatively, it can be a user defined value. For a user-
defined value, enter the IPv4 router ID. This is the IP address of the switch assigned in the fabric IP
network configuration for this fabric.
n Keep Alive Timer: Keep alive messages are sent between BGP peers to indicate that the BGP
connection between them is active. The keep alive interval is the period of time between each keep
alive message sent by a peer. Enter a value in seconds for the keep alive timer for the BGP peers in the
fabric. The value can be between 1 and 65535. The default value is 30 seconds.

Aruba Fabric Composer 6.3.0 | User Guide 80

Chapter 10 | Configurations: Routing

Setting both the Keep Alive Timer and the Hold Down Timer to 0 resets both timers to their
default values (30 and 90).

n Hold Down Timer: The hold down time interval is the period of time a BGP peer waits between the
receipt of successive keep alive and/or update messages from a peer before determining that the
peer is dead. Enter a value in seconds for the hold down timer for the BGP peers in the fabric. The
value can be between 0 and 65535. The default value is 90 seconds. The hold down timer value
should be at least three times the keep alive timer value.
n Redistribute Connected: Select the check box to redistribute connected routes from the switch to
its internal and external BGP peers.
n Redistribute OSPF: Select the check box to redistribute OSPF routes from the switch to its internal
and external BGP peers.
n Redistribute Static Routes: Select the check box to redistribute static routes from the switch to its
internal and external BGP peers.
n Redistribute Loopback: Select the check box to redistribute loopback from the switch to its internal
and external BGP peers.
n ECMP Best Paths: Select the check box to consider routes with different AS-path but same length as
ECMP for best-path selection.
n Fast External Fallover: Select the check box to immediately reset BGP session if link to a directly
connected external peer becomes inactive.
n Trap Enable: Select the check box to enable BGP trap.
n Log Neighbor Changes: Select the check box to log BGP neighbors session-state changes.
n Deterministic Multi Exit Discriminator: Select the check box to pick the best-MED path among
paths advertised from the neighboring AS.
n Always Compare Multi Exit Discriminator: Select the check box to compare MED attribute for
BGP best-path selection across neighbors in different AS.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Networks page, complete the following fields:
n Network: Enter an IPv4 network address in CIDR notation for a network to be advertised by this
switch.
n Name: Enter a name for the network.
n Description: Enter a description of the network.

7. Click Add to add the network to the list of networks to advertise. To remove a network after you have
added it to the list, click the Delete icon to the right of the network name.
8. Continue to add networks to the list as needed.
9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to save the BGP switch configuration or Cancel to exit without saving.

Editing a BGP Switch Configuration

Configurations: Routing | 81
 Chapter 10 | Configurations: Routing

To edit a BGP switch configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > BGP.

2. Click the Expand icon ... to the left of VRF and select Switches. The Switches tab opens.
3. Click the button next to the BGP switch configuration you want to edit and then select Actions > Edit.
The BGP Switch Configuration wizard for the switch opens.
4. In the BGP Switch Configuration wizard, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
5. In the Summary tab, check the fields for accuracy.
6. Click Apply to save your changes to the BGP switch configuration or Cancel to exit without saving.

Deleting a BGP Switch Configuration

To delete a BGP switch configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > BGP.

2. Click the Expand icon ... next to the VRF and select Switches. The Switches tab opens.
3. Click the button next to the BGP switch configuration you want to delete and then select Actions >
Delete.
4. In the confirmation pop-up box, click OK to delete the BGP switch configuration or Cancel to retain
the configuration.

Adding or Editing a BGP Switch Neighbor Configuration

When you initially configure and apply the BGP global configuration for a fabric, the system automatically
creates intra-fabric BGP neighbor configurations for the switches in the fabric. The intra-fabric neighbors are
automatically created if BGP is enabled (full mesh or route reflector). These configurations appear on the
BGP Neighbors tab under each BGP switch configuration listed on the External BGP tab when you click the
Expand icon next to a BGP switch configuration. You can also manually create configurations for exterior
BGP neighbors. The settings in the BGP neighbor configuration take precedence over both switch and global
settings. To add a BGP neighbor configuration for an exterior BGP neighbor:

1. In Aruba Fabric Composer, select Configuration > Routing > BGP.

2. Click the Expand icon ... to the left of the VRF and select Switches. The Switches tab opens.
3. For a switch, click the Expand icon ... to the left of the BGP switch configuration and select Neighbors.
The BGP Neighbors tab opens, listing the current BGP neighbor configurations.
4. As follows, open the BGP Switch Neighbor Configuration wizard to either add or edit the configuration:
n To add a new BGP switch neighbor configuration, select Actions > Add.
n To edit a BGP switch neighbor configuration, select the configuration, and then select Actions > Edit.

Aruba Fabric Composer 6.3.0 | User Guide 82

Chapter 10 | Configurations: Routing

5. In the BGP Switch Neighbor Configuration wizard, complete the following fields:

Parameter Valid
Tab Description Default
Name Values

Neighbor Enter the Autonomous System (AS) number of The

AS Number the neighbor. value
can be
Local between
AS Number Enter the Autonomous System number of the 1 and
local system. 65535.

IP Address Enter the IPv4 address of the exterior BGP

neighbor.

Authentication Enter an authentication password for MD5

Settings Password authentication between BGP peers so that each
segment sent on the TCP connection between the
peers is verified. If you do not enter an
authentication password, sessions between BGP
neighbors are established without authentication.

Update Source For BGP peer relationship to be established, the

Address source IP address of packets must be the same
as the IP address used in the BGP neighbor
command. By default, the packet's source IP
address is the outgoing interface. You can
change the source IP address using this variable.

Keep Alive Keep alive messages are sent between BGP The The
Timer peers to indicate that the BGP connection value default
between them is active. The keep alive interval is can be value is
the period of time between each keep alive between 30
message sent by a peer. Enter a value in seconds 0 and seconds.
for the keep alive timer for the BGP peers in the 65535.
fabric.

Hold Down The hold down time interval is the period of time The The
Timer a BGP peer waits between the receipt of value default
successive keep alive and/or update messages can be value is
from a peer before determining that the peer is between 90
dead. Enter a value in seconds for the hold down 0 and seconds.
timer for the BGP peers in the fabric. The hold 65535.
down timer value should be at least three times
the keep alive timer value.

EBGP Multi Hop Select the number of hops to allow in a BGP Range = No
multi-hop setting, increasing the Time-To-Live 0-255. 0 default
value of the eBGP routers enabling multi hops. = Not in value.
use.

Enable EVPN Select to enable Ethernet VPN (EVPN).

Configurations: Routing | 83
 Chapter 10 | Configurations: Routing

Parameter Valid
Tab Description Default
Name Values

Accept A soft reset uses stored prefix information to

Incoming Soft reconfigure and activate BGP routing tables
Reconfiguration without tearing down existing peering sessions.
Soft reconfiguration uses stored update
information to allow you to apply new BGP policy
without disrupting the network.

Default Route This command artificially generates and

Originate advertises a default route only to the specific
BGP peer. The default route does not need to
exist in the Routing Table and it is not created in
the BGP Routing Information Base (RIB).

Enable Admin Disable a specific BGP neighbor. When disabled,

State the neighbor is configured in the switch in a
Settings shutdown state where it neither tries to connect
to the neighbor nor allows a connection request
from the neighbor.

Enable VPNv4 Select to enable VPNv4.

Enable Fall Select to enable Fall Over.

Over

Remove Private Select to remove private AS number.

AS

Name Enter a name for the exterior BGP neighbor.

Name
Description Enter a description of the exterior BGP neighbor.

This tab lists all configured parameters for you to verify. If you need to make any changes,
Summary
open the tabs and update as needed.

6. When you have completed and verified all parameters, click Apply to save the BGP neighbor
configuration or Cancel to exit without saving.

Deleting a BGP Neighbor Configuration

To delete a BGP neighbor configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > BGP.

2. Click the Expand icon next to the VRF and select Switches. The Switches tab opens.
3. For a switch, click the Expand icon ... to the left of the BGP switch configuration and select
Neighbors. The BGP Neighbors tab opens, listing the current BGP neighbor configurations.
4. Click the button next to the BGP neighbor configuration you want to delete, then select Actions >
Delete.
5. In the confirmation pop-up box, click OK to delete the BGP neighbor configuration or Cancel to retain
the configuration.

Aruba Fabric Composer 6.3.0 | User Guide 84

Chapter 10 | Configurations: Routing

OSPF
Open Shortest Path First (OSPF) is a standards-based dynamic routing protocol used within an Autonomous
System (AS). As such, it is classified as an Interior Gateway Protocol (IGP). It uses the link-state routing
algorithm when selecting paths, which calculates the shortest path through a network based on the cost of a
route. OSPF routers advertise information such as cost of links to all other OSPF neighbors. OSPF routers use
the received messages to build up identical databases. The routing table contains all of the destinations
associated with next hops the OSPF router is knowledgeable of. The protocol recalculates routes when
network changes occur.
To view the OSPF page, in Aruba Fabric Composer, select Configuration > Routing > OSPF.
If you click the Expand icon ... next to VRF, you can select from Areas, Switches, or IP Interfaces to expand
the table on the related tab.
The following information is provided for the VRF:

n VRF Name: The name of the VRF for which this OSPF configuration is enabled.
n VRF Description: User-defined VRF description.
n Enabled: Indicates whether or not OSPF is enabled on the VRF.
n Redistribute Connected: Indicates whether or not connected routes are redistributed from each switch in
the fabric to its OSPF neighbors.
n Redistribute Static Routes: Indicates whether or not static routes are redistributed from each switch in
the fabric to its OSPF neighbors.
n Redistribute BGP: Indicates whether or not BGP routes are redistributed from each switch in the fabric to
its OSPF neighbors.
n Maximum Paths: To control the maximum number of parallel routes that OSPF can support.

The Areas tab under the VRF provides the following OSPF area configuration information:

n Name: The name of the OSPF area configuration.

n Description: A description of this OSPF area configuration.
n Area ID: The ID of the OSPF area configuration.
n Type: The area type of the OSPF area configuration.
n Range: Gives a summary of route instead of many smaller routes.
n Authentication Type: The OSPF area authentication type.

The Switches tab under VRF provides the following OSPF switch information:

n Name: The name of the OSPF switch configuration.

n Description: A description of this OSPF switch configuration.
n Router ID: The router ID of the OSPF switch configuration.
n Networks: The network address of the OSPF switch configuration.
n Default Information: The configured state of default routes to be advertised: Disabled, Enabled, or
Always.

The IP Interfaces tab under VRF provides the following OSPF IP Interface information:

n Name: The name of the IP Interface configuration.

n Description A description of this OSPF IP Interface configuration.
n Type: The type of IP Interface configuration.

Configurations: Routing | 85
 Chapter 10 | Configurations: Routing

n Switch Name: The selected switch in the IP Interface configuration.

n VLAN: The name of the VLAN in the IP Interface configuration.
n Port/LAG: The name of the Port/LAG in the IP Interface configuration.
n IPv4 Addresses: The IPv4 addresses in the IP Interface configuration.
n Network Type: The network type of the IP Interface configuration.
n Hello Interval: The value in seconds between hello packets on the IP Interface.
n Dead Interval: The value in seconds for the dead interval for hello messages.
n Priority: The router priority used in designated router selection on this interface.
n Cost: The interface cost, which is based on the link speed.
n MTU Size: The Maximum Transmission Unit (MTU) size in bytes for the interface.
n Ignore MTU Mismatch: Indicates whether or not any OSPF MTU mismatch will be ignored for this IP
Interface. This option is enabled or disabled in the OSPF IP Interface configuration wizard.
n Passive Mode: Indicates whether or not OSPF passive mode is enabled on the IP Interface.
n BFD Enabled: Indicates whether Bidirectional Forwarding Detection (BFD) is enabled or not.
n Authentication Type: The authentication type for the interface.

Editing the OSPF Global Configuration

In this release, each fabric has a default VRF that contains an OSPF global configuration. The OSPF global
configuration can be edited but not deleted. When initially setting up OSPF for a fabric, you need to edit the
default OSPF global configuration to complete and apply it.
To edit the OSPF global configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Select Actions > Edit. The OSPF Global Configuration wizard opens.
3. In the OSPF Global Configuration wizard, edit the following fields as needed:
n Enable OSPF on default: Select the check box to enable OSPF on default.
n Redistribute Connected: Select the check box to redistribute connected routes from each switch in
the fabric to its OSPF neighbors.
n Redistribute Static Routes: Select the check box to redistribute static routes from each switch in
the fabric to its OSPF neighbors.
n Redistribute BGP: Select the check box to redistribute BGP routes from each switch in the fabric to
its OSPF neighbors.
n Maximum Paths: Enter a number between 1 and 8.

4. Click Apply to save the OSPF global configuration or Cancel to exit without saving.

Adding an OSPF Area Configuration

In this release, each fabric has a default VRF that contains a configuration for OSPF Area 0. The configuration
for Area 0 can be edited but not deleted. Area 0 can function alone or act as the OSPF backbone for
additional areas.
To add an OSPF area configuration:

Aruba Fabric Composer 6.3.0 | User Guide 86

Chapter 10 | Configurations: Routing

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF and select Areas from the drop-down list. The Areas,
Switches, and IP Interfaces tabs appear. The table expands with the Areas tab selected, listing the OSPF
area configurations.
3. Select Actions > Add. The OSPF Area Configuration wizard appears.
4. In the Name page, complete the following fields:
n Name: Enter a name for the OSPF area.
n Description: Enter a description of the OSPF area.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Settings page, complete the following fields:
n Area ID: The area ID can be an integer or an identifier in dotted-decimal notation.
n Type: The area type can be Standard (the area carries all route types), NSSA (Not So Stubby Area,
which can import external routes), or Stub (which does not receive routes from other autonomous
systems).
n Authentication Type: The authentication type can be Plain Text (the authentication password goes
over the network in clear text), None (no authentication), or MD5 (does not send the password over
the network and is the most secure authentication type).

7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
8. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
9. Click Apply to save the OSPF area configuration or Cancel to exit without saving.

Editing an OSPF Area Configuration

To edit an OSPF area configuration:

1. In the Aruba Fabric Composer, select Configuration > Routing > OSPF.
2. Click the Expand icon ... next to the VRF and select Areas. The Areas tab opens, listing the OSPF area
configurations.
3. Select the OSPF area configuration to edit.
4. Select Actions > Edit. The OSPF Area Configuration window appears.
5. In the OSPF Area Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
6. Click Apply to save your edits or Cancel to exit without saving.

Deleting an OSPF Area Configuration

To delete an OSPF area configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF Pair and select Areas from the drop-down menu. The Areas,
Switches, and IP Interfaces tabs appear. The table expands with the Areas tab selected, listing the OSPF
area configurations.

Configurations: Routing | 87
 Chapter 10 | Configurations: Routing

3. Select the OSPF area configuration to delete. Note that you cannot delete the default OSPF area
configuration for Area 0.
4. Select Actions > Delete.
5. In the confirmation pop-up box, click OK to delete the OSPF area configuration or Cancel to retain
the configuration.

Adding an OSPF Switch Configuration

To add an OSPF switch configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF and select Switches. The Switches tab opens, listing the OSPF
switch configurations.
3. Select Actions > Add. The OSPF Switch Configuration window opens.
4. In the Settings tab, configure the following fields:
n Switch: Select a switch from the drop-down list.
n Router ID: Enter the IPv4 router ID. You must enter a value in this field. Leaving it empty will result in
an error. If you specify [Link] in this field, the router ID will be selected by the system. If a fabric IP
network is configured, the system will select the IP address that is specified in the fabric IP network
configuration on the Switch Addresses tab. If a fabric IP network is not configured, the system will
select the highest IP address in the fabric.
n Default Information: Allows default routes to be advertised from this switch. From the drop-down
list, select a setting, which can be Disabled, Enabled, or Always. When Enabled is selected, OSPF
advertises default routes, if available. When Always is select, OSPF advertises routes even when there
are no default routes in the routing tables. The default setting is Disabled.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Networks page, complete the following fields:
n Area: From the drop-down list, select an OSPF area configuration. You configure OSPF area
configurations on the OSPF Area tab.
n Network: Enter an IPv4 network address in CIDR notation for a network to be included in the OSPF
area.

7. Click Add to add the area and the network to the list of OSPF areas. To remove an area after you have
added it to the list, click the Delete icon to the right of the name of the area.
8. Continue to add OSPF areas and associated networks to the list as needed.
9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to save the OSPF switch configuration or Cancel to exit without saving.

Aruba Fabric Composer 6.3.0 | User Guide 88

Chapter 10 | Configurations: Routing

Editing an OSPF Switch Configuration

To edit an OSPF switch configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF and select Switches. The Switches tab opens, listing the OSPF
switch configurations.
3. Select the OSPF switch configuration to edit.
4. Select Actions > Edit. The OSPF Switch Configuration window opens.
5. In the OSPF Switch Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab. On the Settings tab, to modify an IPv4 network address for an area, click the
Delete icon to the right of the name of the area in the list, and then add a new area and network
to the list.
6. Click Apply to save your edits or Cancel to exit without saving.

Disabling an OSPF Switch Configuration

An OSPF switch configuration specifies the area(s) where the switch resides and all associated network
statement(s). You can add and edit OSPF switch configurations, but you cannot delete them. Instead, you can
disable an OSPF switch configuration by removing all of the areas and associated network statements in the
configuration. To disable an OSPF switch configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF and select Switches. The Switches tab opens, listing the OSPF
switch configurations.
3. Select the OSPF switch configuration that you want to disable.
4. Select Actions > Edit. The OSPF Switch Configuration window for the switch appears.
5. Click the Networks tab.

6. In the list of OSPF areas and associated network statements, click the Delete icon to the right of
each of the areas in the list to remove them.
7. Click Apply to save your edits or Cancel to exit without saving.

Editing an OSPF IP Interface Configuration

You can edit default values in an OSPF IP interface configuration and apply your changes.
To edit an OSPF IP interface configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF and select IP Interfaces. The IP Interfaces tab opens, listing
the OSPF IP Interface configurations.
3. Select the OSPF IP interface configuration to edit.
4. Select Actions > Edit. The OSPF IP Interface Configuration window appears.
5. In the Settings tab, complete the following fields:
n Network Type: Select a network type from the drop-down list.

Configurations: Routing | 89
 Chapter 10 | Configurations: Routing

n Hello Interval: Enter a value in seconds between hello packets on the IP interface. The hello interval
is advertised in the hello packets. The value can be between 1 and 65535 seconds. The default value
is 10 seconds.
n Dead Interval: Enter a value in seconds for the dead interval for hello messages. The dead interval is
the duration of time that a router waits to receive a hello packet from a neighbor before declaring the
neighbor down. The value can be between 1 and 65535 seconds. The default value is 40 seconds.
n Priority: Enter a value for the router priority used in designated router selection on this interface. The
default value is 1.
n Cost: Enter a value for the interface cost, which is based on the link speed. The default value is 1.
n MTU Size - Enter a value for the Maximum Transmission Unit (MTU) size in bytes for the interface.
The MTU size is the maximum size of a single data unit that can be transmitted over a network. The
default value is 1500 bytes.
n Ignore MTU Mismatch: Select the check box to ignore an MTU mismatch on the interface.
n Passive Mode: Select the check box to set OSPF passive mode on the interface. The interface is part
of the OSPF routing, but does not have OSPF neighbors on it.
n Enable Bidirectional Forwarding Detection (BFD): Select the check box to enable bidirectional
forwarding detection.

6. Select the Authentication tab.

7. In the Authentication tab, complete the following fields:
n Clear all authentication: Select this check box to clear all existing authentications.
n Authentication Value: Enter an authentication value for the interface. This field is used when the
authentication type selected in the associated OSPF area configuration is Plain Text.
n MD5 Key: Enter an MD5 key for authentication on the interface. This field and the MD5 value field
below is used when the authentication type selected in the associated area configuration is MD5.
n MD5 Value: Enter an MD5 value for authentication on the interface. This field and the MD5 key field
above is used when the authentication type selected in the associated area configuration is MD5.

8. Click Add to add the MD5 key and value to the list of MD5 key-value pairs. To remove an MD5 key-
value pair after you have added it to the list, click the Delete icon to the right of the entry.
9. Continue to add MD5 keys and associated values to the list as needed.
10. Select the Summary tab.
11. On the Summary tab, check the fields for accuracy. If you need to change anything, select a tab and
make changes as needed.
12. Click Apply to save the OSPF IP interface configuration or Cancel to exit without saving.

Resetting an OSPF IP Interface

You can reset an OSPF IP interface as follows:

1. In Aruba Fabric Composer, select Configuration > Routing > OSPF.

2. Click the Expand icon ... next to the VRF and select IP Interfaces. The IP Interfaces tab opens, listing
the OSPF IP Interface configurations.
3. Select the OSPF IP interface to reset.

Aruba Fabric Composer 6.3.0 | User Guide 90

Chapter 10 | Configurations: Routing

4. Select Actions > Reset.

The interface is immediately reset. A momentary Success message will be returned.

Configurations: Routing | 91
 Chapter 10 | Configurations: Routing

EVPN
You use the Ethernet VPN (EVPN) page to create configurations for Aruba switches to communicate with the
EVPN servers in the network. You can apply a EVPN configuration to one or more switches or to entire
fabrics. The EVPN page enables you to generate multiple EVPN instances, one for each VLAN included in the
VNI Mapping step. The EVPN EVIs will not be active until after an Underlay and Overlay has been configured
on the default VRF.
The following information is provided for each EVPN configuration:

n Name: The name of the EVPN configuration.

n Description: The description of the EVPN configuration.
n VLAN: The name of the VLAN associated with the switch.
n L2VNI: The bridge domain of the EVPN configuration.
n Route Distinguisher: The route distinguisher of the EVPN configuration.
n Import Route Targets: Import route targets of the EVPN configuration.
n Export Route Targets: Export route targets of the EVPN configuration.
n Redistribute Host Route: The redistribute host route of the EVPN configuration.
n ARP Suppression: ARP Suppression status of the EVPN configuration.

Adding an EVPN Configuration

To add an EVPN configuration:

The EVPN Configuration wizard can also be accessed from the Guided Setup menu.

1. In Aruba Fabric Composer, select Configuration > Routing > EVPN.

2. Select Actions > Add. The EVPN Configuration wizard opens.
3. In the Introduction page, read the instructions and click Next.
4. In the Switches page, create EVPN instances across the entire Fabric and all Switches contained within it
or select specific Switches. Click Next.
5. In the Name page, complete the following fields:
n Name Prefix: Enter any non-empty string. For example, evpn-mapping
n Description: Enter a description of the EVPN configuration.

6. Click Next to go to the next page or Cancel to exit without saving.

7. In the VNI Mapping page, complete the following fields:
n VLANs: Enter a number, set, or range of VLANs between 1-3966. For example, 5, 10~45, 102, and so
on.
n Base L2VNI: Enter a number between 1 and 15000000. For example, 5, 15000000, and so on.

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

9. In the Settings page, complete the following fields:

n Route Target ASN Prefix: Enter a number between 1 and 65535. For example, 15, 65535, and so

Aruba Fabric Composer 6.3.0 | User Guide 92

Chapter 10 | Configurations: Routing

on.
n System MAC Address Range: Enter a hyphen-separated range of valid MAC Addresses.

10. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
11. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
12. Click Apply to apply the EVPN configuration or Cancel to exit without saving.

Editing an EVPN Configuration

To edit an EVPN configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > EVPN.

2. Select the check box next to the EVPN to be edited and select Actions > Edit. The EVPN configuration
wizard opens.
3. In the EVPN Switch Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving.

Deleting an EVPN Configuration

To delete an EVPN configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > EVPN.

2. Select the check box next to the EVPN you want to delete and then click Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the OSPF area configuration or Cancel to retain
the configuration.

EVPN Settings
To apply EVPN settings to all EVPN configurations within the fabric:

1. In Aruba Fabric Composer, select Configuration > Routing > EVPN.

2. Select Actions > Settings. The EVPN Settings window opens.
3. De-select the Enable ARP Suppression check box and then click Apply to apply the settings to all
EVPN configurations within the fabric or Cancel to exit without applying the settings.

EVPN VXLAN Multi-Fabric

You use the EVPN VXLAN Multi-Fabric page to create configurations for Aruba switches.
To open the EVPN VXLAN Multi-Fabric page, in Aruba Fabric Composer, select Configuration > Routing >
EVPN VXLAN Multi-Fabric.
The EVPN VXLAN Multi-Fabric table provides the following information for each configuration:

n Name: User-defined name for the EVPN VXLAN Multi-Fabric configuration.

n Description: User-defined description of the EVPN VXLAN Multi-Fabric configuration.

Configurations: Routing | 93
 Chapter 10 | Configurations: Routing

n Border Leader:
n L3 eBGP Borders:

Adding an EVPN VXLAN Multi-Fabric

To add a new EVPN VXLAN Multi-Fabric configuration:

1. In Aruba Fabric Composer, select Configuration > Routing > EVPN VXLAN Multi-Fabric.
2. Select Actions > Add. The EVPN VXLAN Multi-Fabric Configuration window appears.
3. In the Name page, complete the following fields:
n Name: Enter a name for the EVPN VXLAN Multi-Fabric configuration.
n Description: Enter a description of the EVPN VXLAN Multi-Fabric configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Settings page, complete the following fields to select a required Border Leader and optional L3
eBGP Borders and BGP Authentication Password:
n Border Leader: Select switch(es) from the drop-down list.
n L3 eBGP Borders: This is an optional field. Select switch(es) from the drop-down field or alternatively
click Select All to select all the switches in the Fabric.
n BGP Auth Password: This is an optional field. Enter any non empty string as a password.

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Remote Fabrics page, complete the following fields to add optional Remote Fabrics:
n AS Number: Enter any ASPLAIN notation.
n Remote Border Leader Address: Enter any valid IPv4 Address.
n Secondary Remote Border Leader Address: Enter any valid IPv4 Address.

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
10. Click Apply to apply the EVPN VXLAN Multi-Fabric configuration or Cancel to exit without saving.

Editing an EVPN VXLAN Multi-Fabric Configuration

To edit an EVPN VXLAN Multi-Fabric configuration:

1. In the Aruba Fabric Composer UI, select Configuration > Routing > EVPN VXLAN Multi-Fabric.
2. Click the button next to the EVPN VXLAN Multi-Fabric configuration to edit and then select Actions >
Edit.
3. In the EVPN VXLAN Multi-Fabric Configuration window, make changes to the fields as needed. Click a
tab to edit the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Aruba Fabric Composer 6.3.0 | User Guide 94

Chapter 10 | Configurations: Routing

Re-applying an EVPN VXLAN Multi-Fabric Configuration

To re-apply an EVPN VXLAN Multi-Fabric configuration, default, to all of the switches within the fabric:

1. In Aruba Fabric Composer, select Configuration > Routing > EVPN VXLAN Multi-Fabric.
2. Click the radio button next to an EVPN VXLAN Multi-Fabric configuration and select Actions >
Reapply EVPN VXLAN Multi-Fabric.
3. In the confirmation pop-up box, click OK to re-apply the EVPN VXLAN Multi-Fabric to all of the
switches within the fabric or Cancel to retain the earlier configuration.

Configurations: Routing | 95
 Chapter 11
Configurations: System

Configurations: System
The Configuration > System page, provides access to configure the following system-level features:

n Fabrics & Switches

n AFC Remote Sites
n Monitoring Agents
n SmartNICs
n System Settings

Fabrics & Switches

You can display the Aruba Fabric Composer or leaf-spine fabric status by selecting Configuration > System
> Fabrics & Switches. This page also enables you to perform Fabric maintenance tasks.

Fabric Information
The Fabrics page displays the following information, which applies to both fabric classes (Fabric Composer
and Leaf-Spine Fabric) except where noted:

Column Head Description

Name* Fabric name.

Health* Fabric health, where the possible states are as

follows:
n Healthy: Fabric is healthy.
n Unknown: Fabric health is unknown.
n Healthy, But...: Fabric is operating; however, it
might not be fully operational.
n Degraded: Fabric has an issue and is not operating
optimally.
n Minor: Minor issue exists.
n Major: Major issue exists.
n Critical: Critical issue exists.
n Non-recoverable: Non-recoverable issue exists.

Switches* Switches configured within the fabric.

Type Whether Management of Data.

Description Fabric description.

Time Zone Time zone for the fabric and switches in the fabric.

Aruba Fabric Composer 6.3.0 | User Guide 96

Chapter 11 | Configurations: System

Column Head Description

Auto Save Interval Auto save the running configuration in seconds.

Manager Aruba Fabric Composer

*Default displayed columns. To manage which columns display, use the Customize table contents tool.

Fabric Maintenance Actions

You can perform the following maintenance activities on fabrics using the options available from the Actions
button.

Action Description

Add Add a Fabric.

Edit Edit a Fabric.

Delete Delete a Fabric.

Discover Switches Discover new switches.

Save Configuration Save the running configuration to the startup configuration for
all switches in the selected fabric.

Switches Open switches.

Editing a Fabric Configuration

To edit a fabric configuration:

1. Select Configuration > System > Fabrics & Switches. The Fabrics page displays.
2. Click the radio button of the Fabric to be edited.
3. From the Actions drop-down menu, select Edit. The Fabric configuration wizard opens.
4. In the Fabric configuration window, make changes to the fields as needed.
5. Click Apply to change the password or Cancel to exit without making a change.

Deleting a Fabric Configuration

To delete a Fabric configuration:

1. In Aruba Fabric Composer, select Configuration > System > Fabrics & Switches.
2. Click the button next to the fabric configuration to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the fabric configuration or Cancel to retain the
configuration. When you click OK, the deleted fabric configuration gets removed from all associated
switches.

Configurations: System | 97
 Chapter 11 | Configurations: System

AFC Remote Sites

You use the AFC Remote Sites page to create configurations for remote sites.
To open the AFC Remote Sites page, in Aruba Fabric Composer, select Configuration > System > AFC
Remote Sites.
The AFC Remote Sites page lists the current AFC Remote Sites and enables you to add, edit, and delete them.
The AFC Remote Sites table provides the following information for each remote site configuration:

n Status: Select from Disabled, Disconnected, Degraded, Connected, and Updating.

n Host: The name of the remote host.
n User Name: User name associated with the remote site.
n Enabled: Whether enabled (Yes) or Disabled (No).
n Verify SSL: Whether SSL is verified (Yes) or not verified (No).
n Name: The name of the remote site.
n Description: Description of the remote site.
n Fault Message: Fault message, if any.
n Last Successful Connection: The date and time stamp of the last successful connection to the remote
site.
n Last Update Time: The date and time stamp of the last update made to the remote site.

Adding a Remote Site

To add and configure a new remote site for this Aruba Fabric Composer:

1. In Aruba Fabric Composer, select Configuration > System > AFC Remote Sites.
2. Select Actions > Add. The Remote AFC Site Configuration window appears.
3. In the Host tab, complete the following fields
n Name: Enter any non empty string. For example, Remote AFC Site 1.
n Description: Enter a description of the remote site.
n Host: Enter a valid Hostname of at least two characters long or an IPv4 Address.
n Username: Enter any non empty string. For example, SiteUser1.
n Password: Enter a password for the remote site.
n Select, if needed, the checkboxes to Validate SSL/TLS server certificates.
n Select Enable this configuration and then click Validate.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
6. Click Apply to apply the remote site configuration or Cancel to exit without saving.

Editing a Remote Site Configuration

To edit a remote site configuration:

1. In the Aruba Fabric Composer UI, select Configuration > System > AFC Remote Sites.
2. Click the button next to the remote site to edit and then select Actions > Edit.

Aruba Fabric Composer 6.3.0 | User Guide 98

Chapter 11 | Configurations: System

3. In the Remote AFC Site Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to the remote site.

Deleting a Remote Site

To delete a remote site configuration:

1. In Aruba Fabric Composer, select Configuration > System > AFC Remote Sites.
2. Click the button next to the remote site to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the remote site or Cancel to retain the
configuration. When you click OK, the deleted remote site gets removed from all associated fabrics
and switches.

Refreshing a Remote Site Configuration

If a connection error or other error causes you to suspect that a remote site configuration is not
synchronized with Aruba Fabric Composer, you can refresh the configuration. A refresh re-fetches all data for
a selected configuration and updates the cache for that configuration.

1. In Aruba Fabric Composer, select Configuration > System > AFC Remote Sites.
2. Select a remote site configuration and then select Actions > Refresh AFC Site Configuration.
3. At the Refresh AFC Site Configuration confirmation prompt, select either OK to refresh the remote site
cache or select Cancel to exit without refreshing the cache.

Monitoring Agents
You use the Monitoring Agents page to configure metric collectors that monitor the health of Aruba Fabric
Composer.
To open the Monitoring Agents page, in Aruba Fabric Composer, select Configuration > System >
Monitoring Agents.
The Monitoring page lists the current metric collectors and enables you to add, edit, and delete them.
The Monitoring Agents table provides the following information for each metric collector:

n Name: User-defined name of the metric collector.

n Description: Description of the metric collector.
n Type: The type of metric collector, whether NAE or Prometheus Exporter.
n Status: Whether Starting, Running, Failed, or Stopped.
n Metric Collector: The actual name of the metric collector.
n Last Update Time: Date and time stamp of the last update.

Adding a Monitoring Agent

To add a new Monitoring Agent:

1. In Aruba Fabric Composer, select Configuration > System > Monitoring Agents.
2. Select Actions > Add. The Monitor Agents Configuration window appears.

Configurations: System | 99
 Chapter 11 | Configurations: System

3. In the Name page, complete the following fields:

n Name Prefix: Enter any non empty string as a name prefix for the monitoring agent, for example,
MonitorAgent1.
n Description: Enter a description of the Monitoring Agent.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Settings page, complete the following fields:
n Metric Collector: From the drop-down list, select one or more Monitoring Agents on selected
supported switches for the selected Metric Collector.
n Switches: Select a single switch from the drop-down list or click Select All to select all the switches in
the Fabric.
n Select the Auto-start Monitor Agent)s) checkbox to auto start the monitoring agent(s).

6. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
7. Click Apply to apply the configuration or Cancel to exit without saving.

Deleting a Monitoring Agent

To delete a monitoring agent:

1. In Aruba Fabric Composer, select Configuration > System > Monitoring Agents.
2. Click the button next to the monitoring agent to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the monitoring agent or Cancel to retain the
monitoring agent. When you click OK, the deleted monitoring agent gets removed from all associated
fabrics and switches.

SmartNICs
SmartNICs are Network Interface Cards that provide additional functionality beyond network connectivity.
For example, the Pensando DSC SmartNIC provides distributed firewall capabilities. Aruba Fabric Composer
6.1.0 supports the Pensando DSC SmartNIC.
The SmartNICs table provides the following information:

n Name: User-defined name for the SmartNIC.

n MAC Address: The MAC Address of the SmartNIC.
n Admit: Admit status of the SmartNIC (Yes or No).
n Phase: One of Unknown, Registering, Rejected, Pending, Admitted, and Decommissioned.
n Status: Status of the SmartNIC (Healthy, Unhealthy, or Unknown).
n Version: Version of the SmartNIC.

System Settings
The System Settings page enables you to configure the following:

n Appearance Theme
n Neighbor Retention Timeout

Aruba Fabric Composer 6.3.0 | User Guide 100

Chapter 11 | Configurations: System

n Remote Device Access

n Session Inactivity Timeout
n Switch Poll Interval

Appearance Theme
You can change the appearance theme of Aruba Fabric Composer between dark and light.
To change the appearance theme:

1. In Aruba Fabric Composer, select Configuration > System > System Settings.
2. To edit the settings, click the radio button next to Appearance Theme and then select Actions >
Edit. In the edit pop-up, you can select between Light and Dark themes.
3. When finished with edits, click Apply to save the edits or Cancel to exit without saving.

Neighbor Retention Timeout

Stale neighbors are devices that stop providing timely neighbor advertisements. The neighbor data used by
the Aruba Fabric Composer becomes stale and after a period of time is discarded. Neighbor Retention
Timeout retains the neighbor data for an extended period of time in Aruba Fabric Composer.
Neighbor Retention Timeout enables services such as automatic VLAN provisioning to continue to operate
for an extended period of time when neighbor advertisements from the host environment are temporarily
suspended. For example, with an adequate timeout setting, automatic VLAN provisioning remains stable
when an ESXi host is rebooted.
In the Host Visualization, you can view the connection status for a host physical network interface connected
to an intermediate switch by hovering over the physical network interface. Refer to Hovering Over Host
Visualization Elements for Detailed Information on page 211.

Setting the Neighbor Retention Timeout

To set the neighbor retention timeout:

1. In Aruba Fabric Composer 6.3.0, select Configuration > System > System Settings.
2. To edit the settings, click the radio button next to Neighbor Retention Timeout and then select
Actions > Edit.
3. In the edit pop-up, make any changes as needed. The default neighbor retention timeout period is set
to one day when Aruba Fabric Composer is initially installed. To enter another timeout period, enter
the number in minutes. For example, for a 2-hour timeout, enter 120. The range is 0 minutes and
10080 minutes. This allows as much as 168 hours or 7 days. A value of 0 (zero) means that there is no
extended neighbor retention in Aruba Fabric Composer.

When finished with edits, click Apply to save the edits or Cancel to exit without saving.

Remote Device Access

You can allow remote access to managed switches using this feature.
To change the remove device access settings:

1. In Aruba Fabric Composer, select Configuration > System > System Settings.

Configurations: System | 101

 Chapter 11 | Configurations: System

2. To edit the settings, click the check box next to Remote Device Access and then select Actions >
Edit. In the edit pop-up, select the Enable Interactive Access check box to allow remote access to
the managed switches.
3. When finished with edits, click Apply to save the edits or Cancel to exit without saving.

Session Inactivity Timeout

You can change the default Session Inactivity Timeout that is used for new users when an administrator
creates a new user.
To change the default timeout value:

1. In Aruba Fabric Composer, select Configuration > System > System Settings.
2. To edit the settings, click the radio button next to Session Inactivity Timeout and then select
Actions > Edit. In the edit pop-up, make any changes as needed. The default new user session
inactivity timeout period is 30 minutes of inactivity.
3. To enter another timeout period, enter the number in minutes.
For example, for a 2-hour timeout, enter 120. The range is 0 minutes to 10080 minutes. This amounts
to as much as 168 hours or 7 days. A value of 0 (zero) disables the session inactivity timeout so that
the session is unlimited.
4. When finished with edits, click Apply to save the edits or Cancel to exit without saving.

Switch Poll Interval

You can specify how often Aruba Fabric Composer should poll the switches for configuration changes.
To specify the switch poll interval:

1. In Aruba Fabric Composer, select Configuration > System > System Settings.
2. To edit the settings, click the radio button next to Switch Poll Interval and then select Actions >
Edit. In the edit pop-up, specify any number between 0 and 60000 in seconds. The default is 90
seconds and 0 seconds disables polling.
3. When finished with edits, click Apply to save the edits or Cancel to exit without saving.

Aruba Fabric Composer 6.3.0 | User Guide 102

 Chapter 12
Configurations: Network

Configurations: Network
The Configuration > Network page, provides access to configure the following network-level features:

n Resource Pools
n VSX
n Leaf-Spine
n DNS
n NTP
n SNMP
n VSF
n sFlow
n DHCP Relay

Resource Pools
Resource Pools are logical abstraction for flexible management of resources. They can be grouped into
hierarchies and used to hierarchically partition available CPU and memory resources.
The Resource Pools table provides the following information:

n Name: User-defined name for the Resource Pool.

n Description: Description of the Resource Pool.
n Type: Select between IPv4 or MAC Address.
n Complete Range: Entire range of available IP Addresses.
n Available Range: Available range of IP Addresses.
n Used Range: Total used range of IP Addresses.
n Usage: Select from VSX, EVPN, L3 Leaf-Spine, Underlay, or Overlay.

Adding a Resource Pool

To add a Resource Pool:

1. In Aruba Fabric Composer, in the Configuration > Network > Resource Pools page, select Actions,
and then click Add. The Resource Pool Configuration wizard opens.

Aruba Fabric Composer 6.3.0 | User Guide 103

Chapter 12 | Configurations: Network

2. Configure the following parameters as needed:

Parameter
Tab Description Valid Values Default
Name

Name Assign a name for the Any non-empty

Resource Pool. string, for example,
Name
ResourcePool-1.

Description Enter a description for

the Resource Pool. Click
Next.

Resource Select from either IPv4

Type or MAC Address from
Settings the drop-down list.

Resource Enter a set and/or

Pool ranges of IPv4 up to
65535.

Resource Set to 0 by default. Click 0

Count Next.

This tab lists all configured parameters for you to verify. If you need to make
Summary
any changes, click Back to open the tabs and update as needed.

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the Resource Pool, Back to go back and change a setting, or Cancel to exit this configuration
without saving.

Editing a Resource Pool

To edit a Resource Pool:

1. In Aruba Fabric Composer, in the Configuration > Network > Resource Pool page, select Actions,
and then click Edit. The Resource Pool Configuration wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the Firewall Log, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Deleting a Resource Pool

To delete a Resource Pool:

1. In the Aruba Fabric Composer UI, in the Configuration > Network > Resource Pool page, select the
Resource Pool(s) to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the Resource Pool or Cancel to retain the Resource
Pool.
3. You can also delete all Resource Pools in the Fabric by selecting Actions > Delete All.

Configurations: Network | 104

 Chapter 12 | Configurations: Network

VSX
The Virtual Switching Extension (VSX) creation workflow is a configuration workflow that automatically
creates all necessary configurations to pair two switches up in a fully functional VSX configuration. You use
the VSX page to create the VSX pair(s). Choose to automatically generate the VSX Pairs based on discovered
connection data or manually configure a single VSX Pair.
The VSX table provides the following information for each VSX configuration:

n Fabric: Currently selected fabric.

n Name: User-defined name of the VSX configuration.
n Description: User-defined description of the VSX configuration.
n Primary Switch: Primary switch allocated to the VSX Pair configuration.
n Primary Switch ISL LAG: Inter-Switch Link LAG allocated to the primary switch.
n Primary Switch Keep Alive Interface: The Keep Alive interval interface of the primary switch.
n Primary Switch Overall State: Working status of the primary switch.
n Primary Switch ISL State: Inter-Switch Link status of the Primary switch.
n Primary Switch Device State: Status of the primary switch device.
n Primary Switch Config Sync State: Synchronized state of the primary switch.
n Primary Switch Peer Status Ready: Operational status of the VSX Pair with the secondary switch.
n Primary Switch Keep Alive Status Protocol State: On or Off status of the Keep Alive timer between
peers.
n Secondary Switch: Secondary switch allocated to the VSX Pair.
n Secondary Switch ISL LAG: Inter-Switch Link LAG allocated to the secondary switch.
n Secondary Switch Keep Alive Interface: The Keep Alive interval interface of the secondary switch.
n Secondary Switch Overall State: Working status of the secondary switch.
n Secondary Switch ISL State: Inter-Switch Link status of the secondary switch.
n Secondary Switch Device State; Status of the secondary switch device.
n Secondary Switch Config Sync State: Synchronized state of the secondary switch.
n Secondary Switch Peer Status Ready: Operational status of the VSX Pair with the primary switch.
n Secondary Switch Keep Alive Status Protocol State: On or Off status of the Keep Alive timer between
peers.
n ISL Timeout: Inter-Switch Link timeout in number of seconds.
n ISL Hello Interval: Inter-Switch Link Hello Interval in seconds between hello packets on the VSX
configuration.
n ISL Hold Time: The period of time an Inter-Switch Link waits between the receipt of successive Keep Alive
and/or update messages from a peer before determining that the peer is dead.
n Keep Alive Dead Interval: Interval in seconds when the peer is still alive but the network channel between
the VSX Pair has gone down.
n Keep Alive Hello Interval: Interval in seconds to determine how often hello packets are sent between the
VSX Pair.
n Keep Alive UDP Port: Interval in seconds to determine how often Keep Alive packets are sent to the
UDP Port.

Aruba Fabric Composer 6.3.0 | User Guide 105

Chapter 12 | Configurations: Network

n Linkup Delay Timer: Timer delay set for linkup between the primary and secondary VSX configurations.
n QOS Trust: Whether QOS Trust is enabled or not for the VSX Pair.
n System MAC Address: System's MAC Address.

Configuring VSX (automatic)

Use the VSX wizard to automatically generate the VSX pairs based on discovered connection data.
To configure VSX automatically:

You can also select VSX Configuration from the Guided Setup to access this configuration wizard.

1. In Aruba Fabric Composer, select Configuration > System > VSX.

2. Select Actions > Add. The VSX Configuration wizard opens.
3. In the Create Mode page, select Automatically generate VSX Pairs and click Next.
4. In the Name page, complete the following fields:
n Name Prefix: Enter any non-empty string. For example, MyVsxPair.
n Description: Enter a description of the VSX pair configuration.

5. Click Next to go to the next page or Cancel to exit without saving.

6. In the Inter-Switch Link Settings page, complete the following fields:
n Hello Interval: Enter a number of seconds between 1 and 5.
n Peer Detect Interval: Enter a number of seconds between 60 and 600.
n Hold Timer: Enter a number of seconds between 0 and 3.
n Timeout: Enter a number of seconds between 2 and 20.

7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

8. In the Keep Alive Interfaces page, complete the following fields:

n Interface Mode: In the drop-down list, select either Loopback or Point-to-Point.
n IPv4 Subnetwork Address: Enter a valid IPv4 Subnet in CIDR format. For example, [Link]/24

9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

10. In the Keep Alive Settings page, complete the following fields:
n Hello Interval: Enter a number of seconds between 1 and 5.
n Dead Interval: Enter a number of seconds between 2 and 20.
n UDP Port: Enter a number between 1024 and 65535.

11. In the Options page, complete the following fields:

n Linkup Delay Timer: Enter a number of seconds between 0 and 600.
n System MAC Address Range: Enter a hyphen-separated range of valid MAC addresses.

12. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
13. Click Apply to apply the VSX configuration or Cancel to exit without saving.

Configurations: Network | 106

 Chapter 12 | Configurations: Network

Configuring VSX (manual)

You use the VSX page to manually configure a single VSX Pair.
To configure VSX manually:

You can also select VSX Configuration from the Guided Setup to access this configuration wizard.

1. In Aruba Fabric Composer, select Configuration > System > VSX.

2. Select Actions > Add. The VSX Configuration wizard opens.
3. In the Create Mode page, select Manually configure a VSX Pair and click Next.
4. In the Name page, complete the following fields:
n NamePrefix: Enter any non-empty string. For example, MyVsxPair.
n Description: Enter a description of the VSX pair configuration.

5. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
6. In the Switches page, complete the following fields:
n Discovered Switch Pair: In the drop-down list, select a Discovered Switch Pair to set the Primary
and Secondary Switches or None to manually define a pair.
n Primary Switch: Select a Primary Switch in the VSX pair. The Primary and Secondary switches must
be unique.
n Secondary Switch: Select a Secondary Switch in the VSX pair. The Primary and Secondary switches
must be unique.

7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

8. In the Inter-Switch Links page, specify the Primary and Secondary ISL LAGs from the list of existing
LAGs or click Add to create a new ISL LAG:
n Primary Switch ISL LAG: Select a Primary Switch LAG from the drop-down list.
n Secondary Switch ISL LAG: Select a Secondary Switch LAG from the drop-down list.

9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

10. In the Inter-Switch Link Settings page, complete the following fields:
n Hello Interval: Enter a number of seconds between 1 and 5.
n Peer Detect Interval: Enter a number of seconds between 60 and 600.
n Hold Time: Enter a number between 0 and 3.

11. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
12. In the Keep Alive Interfaces page, complete the following fields:
n Interface Mode: In the drop-down list, select either Loopback for Point-to-Point. If Loopback is
selected, then click Add for the Primary and Secondary Switch Interfaces.
n Primary Switch Interface: Select a Primary Switch RPI from the drop-down list.
n Secondary Switch Interface: Select a Secondary Switch RPI from the drop-down list.

Aruba Fabric Composer 6.3.0 | User Guide 107

Chapter 12 | Configurations: Network

13. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
14. In the Keep Alive Interfaces page, complete the following fields:
n Hello Interval: Enter a number of seconds between 1 and 5.
n Dead Interval: Enter a number of seconds between 2 and 20.
n UDP Port: Enter a number between 1024 and 65535.
15. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

16. In the Options page, complete the following fields:

n Linkup Delay Timer: Enter a number of seconds between 0 and 600.
n System MAC Address Range: Enter a hyphen-separated range of valid MAC addresses.

17. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
18. Click Apply to apply the manually created VSX configuration or Cancel to exit without saving.

Editing a VSX Configuration

To edit a VSX configuration:

1. In the Aruba Fabric Composer UI, select Configuration > System > VSX.
2. Click the button next to the VSX configuration to edit and then select Actions > Edit.
3. In the VSX Configuration window, make changes to the fields as needed. Click a tab to edit the settings
on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a VSX Configuration

To delete a VSX configuration:

1. In Aruba Fabric Composer, select Configuration > System > VSX.

2. Click the button next to the VSX configuration to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the VSX Pair or Cancel to retain the configuration.
When you click OK, the deleted VSX configuration gets removed from all associated fabrics and
switches. To delete all active VSX configurations, click the buttons next to the VSX configurations you
need to delete and then select Actions > Delete All.
4. In the confirmation pop-up box, click OK to delete the VSX configuration or Cancel to retain the
configuration. When you click OK, the deleted VSX configuration gets removed from all associated
fabrics and switches.

Configurations: Network | 108

 Chapter 12 | Configurations: Network

Leaf-Spine Configuration
The Leaf-Spine creation workflow is a configuration workflow that creates RPI interfaces between spines and
leafs and configures them with IP addresses from a user-provided range with QoS enabled. You use the Leaf-
Spine page to create the Leaf-Spine pair(s). Choose to automatically generate the Leaf-Spine Pairs based on
discovered connection data or manually configure a single Leaf-Spine Pair.
The Leaf-Spine table provides the following information for each Leaf-Spine configuration:

n Name: User-defined name for the Leaf-Spine configuration.

n Description: User-defined description of the Leaf-Spine configuration.
n Spine Switch: Primary switch allocated to the Spine in the Leaf-Spine configuration.
n Spine Interface: Operational status of the Interface between Spine and Leaf switches in the Leaf-Spine
configuration.
n Spine Status: Operational status of the Spine in the Leaf-Spine configuration.
n Leaf Switch: Primary switch allocated to the Leaf in the Leaf-Spine configuration.
n Leaf Interface: Operational status of the interface between Leaf and Spine switches in the Leaf-Spine
configuration.
n Leaf Status: Operational status of the Leaf in the Leaf-Spine configuration.
n QoS Trust: Whether QoS Trust is enabled in the Leaf-Spine configuration.

Configuring a Leaf-Spine (automatic)

To configure a Leaf-Spine automatically:

You can also select Leaf Spine Configuration from the Guided Setup to access this configuration wizard.

1. In Aruba Fabric Composer, select Configuration > System > Leaf-Spine.

2. Select the Fabric from the Fabric drop-down list.
3. Select either the L3 Leaf-Spine or the L2 Leaf-Spine tabs, as required.
4. Select Actions > Add. The Leaf-Spine Configuration wizard opens.
5. In the Create Mode page, select Automatically generate L3 (or L2) Leaf-Spine Pairs and click
Next.
6. In the Name page, complete the following fields:
n Name Prefix: Enter any non-empty string. For example, MyLeafSpinePair.
n Description: Enter a description of the Leaf-Spine configuration.

7. Click Next to go to the next page or Cancel to exit without saving.

8. In the Settings page, complete the following fields:
n IPv4 Subnetwork Address: Enter a valid IPv4 Subnet in CIDR format. The IPv4 Subnet Address will
be utilized to automatically assign IPv4 Addresses to the generated IP Interfaces which will be
assigned to the Leaf-Spine members.

9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

Aruba Fabric Composer 6.3.0 | User Guide 109

Chapter 12 | Configurations: Network

10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to apply the Leaf-Spine configuration or Cancel to exit without saving.

Configuring a Leaf-Spine (manual)

To configure a Leaf-Spine manually:

You can also select Leaf Spine Configuration from the Guided Setup to access this configuration wizard.

1. In Aruba Fabric Composer, select Configuration > System > Leaf-Spine.

2. Select Actions > Add. The VSX Configuration wizard opens.
3. In the Create Mode page, select Manually configure an L3 (or L2) Leaf-Spine Pair and click Next.
4. In the Name page, complete the following fields:
n NamePrefix: Enter any non-empty string. For example, MyLeafSpinePair.
n Description: Enter a description of the Leaf-Spine Pair configuration.

5. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
6. In the Switches page, complete the following fields:
n Discovered Switch Pair: In the drop-down list, select a Discovered Switch Pair to set the Leaf-Spine
Switches or None to manually define a pair.
n Spine Switch: The Spine Switch is auto-populated if you selected an already Discovered Switch Pair in
the previous field.
n Leaf Switch: This field is grayed out if you selected an already Discovered Switch Pair. If you selected
None in the first field, then choose a Leaf Switch from the drop-down list.

7. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

8. In the Interfaces page, specify the Spine and Leaf Interfaces from the list of existing interfaces or
create a new interface.
n Spine Interface: Select a Spine Interface from the drop-down list.
n Leaf Interface: Select a Leaf Interface from the drop-down list.

9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to apply the manually created Leaf-Spine configuration or Cancel to exit without saving.

Editing a Leaf-Spine Pair

To edit a Leaf-Spine Pair:

1. In the Aruba Fabric Composer UI, select Configuration > System > Leaf-Spine.
2. Click the button next to the Leaf-Spine Pair to edit and then select Actions > Edit.

Configurations: Network | 110

 Chapter 12 | Configurations: Network

3. In the Leaf-Spine Configuration window, the only change you can make is to the Name and Description
fields. Make changes to the fields as needed and click on the Summary tab to verify the details.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a Leaf-Spine Pair

To delete a Leaf-Spine Pair:

1. In Aruba Fabric Composer, select Configuration > System > Leaf-Spine.

2. Click the button next to the Leaf-Spine pair to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the Leaf-Spine pair or Cancel to retain the
configuration. When you click OK, the deleted Leaf-Spine Pair gets removed from all associated fabrics
and switches. To delete all active Leaf-Spine pairs, select Actions > Delete All.
4. In the confirmation pop-up box, click OK to delete the Leaf-Spine Pair or Cancel to retain the
configuration. When you click OK, the deleted Leaf-Spine Pairs get removed from all associated fabrics
and switches.

DNS
You use the DNS page to create configurations for Aruba switches to communicate with the DNS servers in
the network for DNS resolution. You can apply a DNS configuration to one or more switches or to entire
fabrics.
To open the DNS page, in Aruba Fabric Composer, select Configuration > System > DNS.
The DNS page lists the current DNS configurations and enables you to add, edit, and delete them.

If switch IP addresses were previously configured via a DHCP server and if DNS is enabled, the DHCP
settings will automatically apply to all switches in the fabric. The Aruba Fabric Composer UI will display
this configuration information in the DNS configuration table.

The DNS table provides the following information for each DNS configuration:

n Name: User-defined name for the DNS configuration.

n Description: User-defined description of the DNS configuration.
n Domain Name: Domain name of the DNS server.
n Domain List: List of domains associated with the DNS servers.
n Name Servers: IPv4 addresses of the DNS servers.
n Applies To: The fabric or switches that the DNS configuration applies to.
n Set by DHCP: Indicates whether or not the DNS configuration parameters were set by DHCP.

Adding a DNS Configuration

To add a new DNS configuration:

If DNS is configured by DHCP for a fabric, you cannot add a DNS configuration to the fabric or edit an
existing DNS configuration.

Aruba Fabric Composer 6.3.0 | User Guide 111

Chapter 12 | Configurations: Network

1. In Aruba Fabric Composer, select Configuration > System > DNS.

2. Select Actions > Add. The DNS Configuration window appears.
3. In the Name page, complete the following fields:
n Name: Enter a name for the DNS configuration.
n Description: Enter a description of the DNS configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Settings page, complete the following fields:
n Domain Name: Enter a domain name for the DNS server.
n Domain List: Enter a list of domains.
n Name Servers: Enter the IPv4 or IPv6 addresses of the DNS servers. You can enter the addresses of
active and standby DNS servers.

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Application page, complete the following fields:
n Fabrics: Select the fabric that will use this DNS configuration. To remove a fabric, click the X next to
the fabric name. When you select a fabric, all of the switches within the fabric are automatically
selected. If you later add a switch to a fabric, the configuration settings are automatically applied to
the new switch.
n Switches: When you select a fabric, all switches on that fabric are automatically selected to use this
DNS configuration. If this DNS configuration is NOT used on ALL switches in the selected fabric(s), in
this drop-down list, select the switch(es) that will use this DNS configuration. If ALL switches use this
DNS configuration, ignore this field; do not select any switches. To remove a selected switch, click the
X next to the switch name.

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
10. Click Apply to apply the DNS configuration or Cancel to exit without saving.

Editing a DNS Configuration

To edit a DNS configuration:

If DNS is configured by DHCP, any changes made using the Aruba Fabric Composer UI will be
overwritten by DHCP.

1. In the Aruba Fabric Composer UI, select Configuration > System > DNS.
2. Click the button next to the DNS configuration to edit and then select Actions > Edit.
3. In the DNS Configuration window, make changes to the fields as needed. Click a tab to edit the settings
on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Configurations: Network | 112

 Chapter 12 | Configurations: Network

Deleting a DNS Configuration

To delete a DNS configuration:

1. In Aruba Fabric Composer, select Configuration > System > DNS.

2. Click the button next to the DNS configuration to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the DNS configuration or Cancel to retain the
configuration. When you click OK, the deleted DNS configuration gets removed from all associated
fabrics and switches.

NTP
In the NTP page, you can create configurations for NTP (Network Time Protocol) clients on Aruba switches to
communicate with NTP servers in the network, thereby maintaining accurate and synchronized system time.
The NTP configuration specifies the IP addresses of the NTP servers that the NTP clients synchronize with.
You can apply an NTP configuration to entire fabric(s), which includes all switches in the fabric(s), or to a
selection of switches.
To open the NTP page which lists all current NTP configurations, in the Aruba Fabric Composer UI, select
Configuration > System > NTP.
The NTP table lists the current NTP configurations and enables you to add, edit, and delete them.

If switch IP addresses were previously configured via a DHCP server and if NTP is enabled, the DHCP
settings will automatically apply to all switches in the fabric. The Aruba Fabric Composer UI will display
this configuration information in the NTP configuration table.

The NTP table provides the following information for each NTP configuration:

n Name: The name of the NTP configuration.

n Description: The description of the NTP configuration.
n Servers: The IPv4 addresses or host names of the NTP servers.
n NTP Authentication Enabled: Whether NTP Authentication is enabled or not.
n Key ID: The key ID of the NTP configuration.
n Key Type: The key type of the NTP configuration.
n Trust Enabled: Whether trust is enabled in the NTP configuration.
n Applies To: The fabric or switches that the NTP configuration applies to.
n Set by DHCP: Indicates whether or not the NTP configuration parameters were set by DHCP.

Adding an NTP Configuration

To add a new NTP configuration:

If NTP is configured by DHCP for a fabric, you cannot add an NTP configuration to the fabric or edit an
existing NTP configuration.

1. In Aruba Fabric Composer, select Configuration > System > NTP.

2. Select Actions > Add. The NTP Configuration window opens.

Aruba Fabric Composer 6.3.0 | User Guide 113

Chapter 12 | Configurations: Network

3. In the Name page, complete the following fields:

n Name: Enter a name for the NTP configuration.
n Description: Enter a description of the NTP configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Entries page, complete the following fields:
n Servers: Enter the IPv4, IPv6 addresses, or host names of the NTP servers that you want the Aruba
switches to synchronize with. To remove an address or host name after you have entered it, click the
X next to the address or host name.
n Enable NTP Authentication: Click the check box to enable NTP Authentication.
n Key ID: Enter a number between 1 and 65534.
n Key Password: Enter a valid password.
n Fabrics: Select the fabric that will use this NTP configuration. To remove a fabric, click the X next to
the fabric name. When you select a fabric, all of the switches within the fabric are automatically
selected. If you later add a switch to a fabric, the configuration settings are automatically applied to
the new switch. Note that an already used Fabric would be removed from the Fabric list.
n Switches: When you select a fabric, all switches on that fabric are automatically selected to use this
NTP configuration. If this NTP configuration is NOT used on ALL switches in the selected fabric(s), in
this drop-down list, select the switch(es) that will use this NTP configuration. If ALL switches use this
NTP configuration, ignore this field; do not select any switches. To remove a selected switch, click the
X next to the switch name.

6. Click Next to go to the next page, Cancel to exit without saving, or Back to edit a previous page.
7. In the Application page, complete the following fields:
n Fabrics: In this drop-down list, select the fabric(s) that will use this NTP configuration. To remove a
fabric, click the X next to the fabric name. When you select a fabric, all of the switches within the fabric
are automatically selected. If you later add a switch to a fabric, the configuration settings are
automatically applied to the new switch.
n Switches: When you select a fabric, all switches on that fabric are automatically selected to use this
NTP configuration. If this NTP configuration is NOT used on ALL switches in the selected fabric(s), in
this drop-down list, select the switch(es) that will use this NTP configuration. If ALL switches use this
NTP configuration, ignore this field; do not select any switches. To remove a selected switch, click the
X next to the switch name.
8. In the Summary page, check the fields for accuracy. If needed, click Back and make changes.
9. Click Apply to apply the NTP configuration or Cancel to exit without saving.

Editing an NTP Configuration

To edit an NTP configuration:

If NTP is configured by DHCP, any changes made using the Aruba Fabric Composer UI will be overwritten
by DHCP.

1. In Aruba Fabric Composer, select Configuration > System > NTP.

2. Click the button next to the NTP configuration to edit and then select Actions > Edit.

Configurations: Network | 114

 Chapter 12 | Configurations: Network

3. In the NTP Configuration window, make changes to the fields as needed. Click a tab to edit the settings
on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting an NTP Configuration

To delete an NTP configuration:

1. In Aruba Fabric Composer, select Configuration > System > NTP.

2. Click the button next to the NTP configuration to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the NTP configuration or Cancel to retain the
configuration. When you click OK, the deleted NTP configuration gets removed from all associated
fabrics and switches.

SNMP
You use the SNMP page to create SNMP configurations for the SNMP clients on Aruba switches to
communicate with a third-party SNMP manager. This enables the SNMP manager to monitor the Aruba
switches.
You can apply an SNMP configuration to one or more switches or to entire fabrics.
To open the SNMP page, in Aruba Fabric Composer, select Configuration > System > SNMP. The SNMP
page lists the current SNMP configurations and enables you to add, edit, and delete them.
The SNMP table provides the following information for each SNMP configuration:

n Name: SNMP configuration name.

n Description: SNMP configuration description.
n Enabled: Indicates if this SNMP configuration is enabled — Yes or No.
n Location: SNMP server location.
n Contact: SNMP server contact information.
n Community: Community name for basic authentication for SNMPv1 and SNMPv2c access from the SNMP
agents to the SNMP manager.
n Agent Port: The SNMP agent switch port used to listen for SNMP messages from the SNMP manager.
n Trap Port: The port number of the SNMP trap receiver used to receive SNMP traps from the SNMP agents
on the switches.
n Trap Sinks: Lists configured trap sinks — IPv4 address and community for each.
n Users: Configured SNMP users.
n Applies To: Switches that this configuration applies to.

Adding an SNMP Configuration

To add a new SNMP configuration:

1. In Aruba Fabric Composer, select Configuration > System > SNMP.

2. Select Actions > Add. The SNMP Configuration window appears.

Aruba Fabric Composer 6.3.0 | User Guide 115

Chapter 12 | Configurations: Network

3. In the Settings page, complete the following fields:

n Name: Enter a name for the SNMP configuration.
n Description: Enter a description of the SNMP configuration.
n Enable: Select the check box to enable this SNMP configuration.
n Contact: Enter the SNMP server contact information such as an email address.
n Location: Enter the SNMP server location.
n Community: Enter the community name for basic authentication for SNMPv1 and SNMPv2c access
from the SNMP agents to the SNMP manager.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the SNMP Users page, SNMPv3 introduces a User-based Security Model (USM) that includes options
for user authentication and encryption of information in requests and responses. In the SNMP Users
page, complete the following fields. You can create multiple users. For each user, complete the
following fields, then click Add to add the SNMP user to the list of users. To delete a user, click the
Delete icon on the same row as the user.
n Level: From the drop-down list, select an authentication level for the SNMP user, which can be Not
Authorized (communication without authentication and privacy), Authorized (communication with
authentication but without privacy), or Privileged (communication with authentication and privacy).
n Name: Enter a name for the SNMP user.
n Context: Enter any string between 1 and 32 characters.
n Auth Type: From the drop-down list, select the SHA or MD5 hash algorithm to use for the
authentication password.
n Auth Password: Enter an authentication password for the user. The password must be a minimum
of 8 characters and a maximum of 16 characters. Valid characters include A-Z, a-z, 0-9 and the
following special characters: ~ ! # $ % & - + : / . ?
n Priv Type: From the drop-down list, select AES or DES encryption to use for the privacy (encryption)
password.
n Priv Password: Enter a privacy (encryption) password for the user. The password must be a
minimum of 8 characters and a maximum of 16 characters. Valid characters include A-Z, a-z, 0-9 and
the following special characters: ~ ! # $ % & - + : / . ?

6. In the Ports page, complete the following fields:

n Agent Port: Enter the SNMP agent port number on the switches used to listen for SNMP messages
from the SNMP manager, which can be between 1 and 65535.
n Trap Port: Enter the port number of the SNMP trap receiver (typically on the SNMP manager) used to
receive SNMP traps from the SNMP agents on the switches, which can be between 1 and 65535.
n Trap Sinks: Specify the trap sinks. This is a required step if Trap Port is specified in the earlier step.
You can specify multiple trap sinks. For each trap sink, enter the following Address and Community,
then click Add to add the entry to the Trap Sink list. To remove an entry from the list, click the Delete
icon to the right of the entry.
n Address: Enter an IPv4 or IPv6 address of the SNMP trap sink.
n Community: Enter the SNMP trap sink community string.

7. Click Next to go to the next page, Cancel to exit without saving, or Back to return to the previous
page.

Configurations: Network | 116

 Chapter 12 | Configurations: Network

8. In the Application page, complete the following fields:

n Fabrics: Select the fabric that will use this SNMP configuration. To remove a fabric, click the X next to
the fabric name. When you select a fabric, all of the switches within the fabric are automatically
selected. If you later add a switch to a fabric, the configuration settings are automatically applied to
the new switch.
n Switches: When you select a fabric, all switches on that fabric are automatically selected to use this
SNMP configuration. If this SNMP configuration is NOT used on ALL switches in the selected fabric(s),
in this drop-down list, select the switch(es) that will use this SNMP configuration. If ALL switches use
this SNMP configuration, ignore this field; do not select any switches. To remove a selected switch,
click the X next to the switch name.

9. Click Next to go to the next page, Cancel to exit without saving, or Back to return to the previous
page.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to apply the SNMP configuration or Cancel to exit without saving.

Editing an SNMP Configuration

To edit an SNMP configuration:

1. In Aruba Fabric Composer, select Configuration > System > SNMP.

2. Click the button next to the SNMP configuration to edit and then select Actions > Edit.
3. In the SNMP Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting an SNMP Configuration

To delete an SNMP configuration:

1. In Aruba Fabric Composer, select Configuration > System > SNMP.

2. Click the button next to the SNMP configuration to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the SNMP configuration or Cancel to retain the
configuration. When you click OK, the deleted SNMP configuration gets removed from all associated
fabrics and switches.

VSF
The HPE Virtual Switching Framework (VSF) technology virtualizes two physical devices in the same layer into
one Virtual Fabric which provides high availability and scalability. A Virtual Fabric is therefore two physical
devices in the same layer that utilize VSF technology. VSF allows supported switches connected to each other
through normal Ethernet connections (Copper or Fiber) to behave like a single switch.
In Aruba Fabric Composer, you use the VSF page to configure supported switches connected to each other.
The VSF table provides the following information for each VSF configuration:

Aruba Fabric Composer 6.3.0 | User Guide 117

Chapter 12 | Configurations: Network

n Fabric: Select a Fabric from the drop-down list.

n Health: In the drop-down list, select from Healthy, Healthy, But...., Upgrading, Degraded, Minor, Major,
Critical, Unknown, or Non Recoverable.
n Name: The VSF configuration name.
n Type: The type of VSF configuration.
n Switch: The switch ID.
n Conductor Model: The model number of the Conductor.
n Conductor Status: The status of the Conductor.
n Conductor MAC Address: The MAC Address of the Conductor.
n Conductor Serial Number: The serial number of the Conductor.
n Conductor Switch Version: The version number of the Conductor.
n Conductor HW Revision: The revision number of the Conductor hardware.
n Conductor Ports: The port numbers of the Conductor.
n Conductor Operational Status: The operational status of the Conductor.

sFlow
sFlow (sampled Flow) is an industry-standard sampling technology used to sample application-level packet
flows and gather interface statistics from network devices such as high-speed switches and routers. sFlow
provides visibility into network activity, which helps in network management and control of network
resources.
sFlow has two main components: the sFlow agent and the sFlow collector. In an Aruba Fabric Composer
environment, an sFlow agent runs on each Aruba switch and monitors network traffic, collects interface
counters and packet flow samples from the switch, generates sFlow data, and sends the data in sFlow
datagrams to a third-party sFlow collector residing in an existing network management infrastructure. The
sFlow agent captures interface counters and packet flow samples in both directions for access ports and
fabric ports. The sFlow collector receives and analyzes the traffic data.
Each datagram sent by an sFlow agent includes one or more sFlow samples. There are two types of sFlow
samples: interface counter samples, which include sampled interface counter values, and flow samples of the
packets moving through the agent device, which include the header of the sampled packet, the input
interface upon which the packet was received, the output interface determined by the switching/routing
decision, sampling process parameters, and source and destination information.
You create an sFlow configuration to specify:

n The IPv4 or IPv6 address of the sFlow agent on the Aruba switch. If you do not specify an IP address for the
sFlow agent, the sFlow agent uses the IP address of the management interface on the switch.
n The IPv4 or IPv6 address and port number of the sFlow collector.
n The polling interval, which is the time period between successive interface counter samples. The polling
interval can be between 5 and 300 seconds, with a default value of 20 seconds.
n The sampling rate, which specifies the ratio of packets observed at the data source to the samples
generated. The sampling rate can be between 1 and 1,000,000, with a default value of one sample packet
every 20,000 packets.

You can apply an sFlow configuration to one or more switches or to entire fabrics.
To open the sFlow page, in Aruba Fabric Composer, select Configuration > System > sFlow.
The sFlow page lists the current sFlow configurations and enables you to add, edit, and delete them.

Configurations: Network | 118

 Chapter 12 | Configurations: Network

The Configuration > System > sFlow page contains the following table and are defined as follows:

n Name: SNMP configuration name.

n Description: SNMP configuration description.
n Enable sFlow: Whether sFlow is enabled or not.
n Agent IP Address: IPv4 or IPv6 address of the sFlow agent on the Aruba switch.
n Collectors: IPv4 or IPv6 address of the sFlow collector.
n Polling Interval: Polling interval (the time period between successive interface counter samples) in
seconds.
n Sampling Rate: Sampling rate, which specifies the ratio of packets observed at the data source to the
samples generated. The range is 1-1,000,000. The default is 20,000 (one sample packet every 20,000
packets).
n Applies To: Indicates what the sFlow configuration applies to and specifies the fabric or switch.

Adding an sFlow Configuration

Guidelines
n If you specify an sFlow Agent or sFlow Collector IP address, both must be of the same type: IPv4 or IPv6.
n If you do not specify an sFlow Agent address but specify an sFlow Collector, then the Collector address type
must be the same as the IP Address of the management interface on the switch.
n If you specify an sFlow Agent IP address, the address will be a unique IP address for the sFlow agent on a
specific switch, and therefore you should not apply this sFlow configuration to multiple switches or to entire
fabrics.
n If you do not specify an sFlow Agent IP address, the sFlow agent will use the IP address of the management
interface on the switch.
To add an sFlow configuration:

1. Aruba Fabric Composer, select Configuration > System > sFlow.

2. Select Actions > Add. The sFlow Configuration window opens.
3. In the Name page, complete the following fields:
n Name: Enter a name for the sFlow configuration.
n Description: Enter a description of the sFlow configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Settings page, complete the following fields:
n Enable sFlow: Select the check box to enable sFlow.
n Agent IP Address: Specify the IPv4 or IPv6 address of the sFlow agent on the Aruba switch.
n Collector IP Address: Enter the IPv4 or IPv6 address of the sFlow collector.
n Collector Port Number: Enter the port number for the IPv4 or IPv6 address of the sFlow collector,
which can be between 1024 and 65535. The default port number is 6343.
n Polling Interval: Specify the polling interval, which is the time period between successive interface
counter samples. The polling interval can be between 5 and 300 seconds, with a default value of 20
seconds.

Aruba Fabric Composer 6.3.0 | User Guide 119

Chapter 12 | Configurations: Network

n Sampling Rate: Specify the sampling rate, which specifies the ratio of packets observed at the data
source to the samples generated. The sampling rate can be between 1 and 1,000,000. The default is
20,000 (one sample packet every 20,000 packets).

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Fabrics and Switches page, complete the following fields:
n Fabrics: Select the fabric that will use this sFlow configuration. To remove a fabric, click the X next to
the fabric name. When you select a fabric, all of the switches within the fabric are automatically
selected. If you later add a switch to a fabric, the configuration settings are automatically applied to
the new switch.
n Switches: When you select a fabric, all switches on that fabric are automatically selected to use this
sFlow configuration. If this sFlow configuration is NOT used on ALL switches in the selected fabric(s),
in this drop-down list, select the switch(es) that will use this sFlow configuration. If ALL switches use
this sFlow configuration, ignore this field; do not select any switches. To remove a selected switch,
click the X next to the switch name. An sFlow configuration applied to a specific switch takes
precedence over an sFlow configuration applied to the fabric where the switch resides. If you delete
an sFlow configuration that had been applied to a specific switch, the switch will begin using the sFlow
configuration applied to the fabric where the switch resides, if any.

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
10. Click Apply to apply the sFlow configuration or Cancel to exit without saving.

Editing an sFlow Configuration

Guidelines
n If you specify an sFlow Agent or sFlow Collector IP address, both must be of the same type: IPv4 or IPv6.
n If you do not specify an sFlow Agent address, but specify an sFlow Collector, then the Collector address type
must be the same as the IP Address of the management interface on the switch.
n If you specify an sFlow Agent IP address, the address will be a unique IP address for the sFlow agent on a
specific switch, and therefore you should not apply this sFlow configuration to multiple switches or to entire
fabrics.
n If you do not specify an sFlow Agent IP address, the sFlow agent will use the IP address of the management
interface on the switch.

To edit an sFlow configuration:

1. In Aruba Fabric Composer, select Configuration > System > sFlow.

2. Click the button next to the sFlow configuration to edit, and then select Actions > Edit.
3. In the sFlow Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting an sFlow Configuration

Configurations: Network | 120

 Chapter 12 | Configurations: Network

To delete an sFlow configuration:

1. In Aruba Fabric Composer, select Configuration > System > sFlow.

2. Click the button next to the sFlow configuration to delete, then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the sFlow configuration or Cancel to retain the
configuration. When you click OK, the deleted sFlow configuration gets removed from all associated
fabrics and switches.

DHCP Relay
Dynamic Host Configuration Protocol (DHCP) enables each DHCP client to automatically obtain an IP address
from a DHCP server as needed. When a client connects to a network, it sends an IP broadcast packet, visible
only within the subnet on which the requester resides, to find the DHCP server. Typically, DHCP servers are
centralized and are not present on every subnet.
DHCP Relay provides a way for DHCP clients to communicate with DHCP servers when none are available on
its local subnet. A Relay Agent uses IP routing to forward discover messages to a provisioned DHCP server.
The relay agent then relays the DHCP offer back to the client network.
In Aruba Fabric Composer, you can configure per VLAN or for selected VLANs, the IP address(es) of DHCP
server(s) that service those VLANs. Multiple configurations can be created to support many DHCP server-to-
VLAN client relationships. The DHCP Relay feature is available in the Aruba Fabric Composer UI by selecting
Configuration > System > DHCP Relay. The DHCP Relay page opens, listing all DHCP Relay configurations.

The DHCP relay table provides the following information for each DHCP relay configuration:

n VLANs: Identifies the VLANs supported by a DHCP relay configuration.

n Gateway Address: Identifies Gateway Address of the DHCP relay configuration.
n Multicast IPv6 DHCP Relay Servers: Identifies Multicast IPv6 DHCP relay configurations.
n IPv4 DHCP Server Addresses: Indicates the IPv4 IP addresses of DHCP server(s) that dynamically provide
IP addresses to clients located on the VLANs that are part of this configuration.
n IPv6 DHCP Server Addresses: Indicates the IPv6 IP addresses of DHCP server(s) that dynamically provide
IP addresses to clients located on the VLANs that are part of this configuration.

Using the Aruba Fabric Composer UI, you can create and edit DHCP Relay configurations.

Adding a DHCP Relay Configuration

This procedure assumes that DHCP is set up on the customer network and that the DHCP server(s) support
the nodes on the VLANs to be configured within this DHCP Relay configuration.
To create a DHCP relay configuration that ties one or more VLANs to one or more DHCP servers that reside
outside the VLAN(s) subnet(s):

Make sure that all VLAN subnets being used have access to one or more DHCP servers.

1. In the Aruba Fabric Composer UI, select Configuration > System > DHCP Relay.
2. Select Actions > Add. The DHCP Relay wizard opens.

Aruba Fabric Composer 6.3.0 | User Guide 121

Chapter 12 | Configurations: Network

3. In the Settings page, complete the following fields:

n Name: Enter any non-empty string. For example, Dhcp Relay.
n VLANs: Enter the VLANs for the devices that will use the DHCP server(s) to be configured in this
DHCP relay configuration. You can enter one or more VLANs and VLAN ranges.
n Gateway Address: Enter any valid Gateway address.
n Multicast IPv6 DHCP Relay Servers: Enter a valid IPv6 address.

4. In the IPv4 Addresses page, define the IPv4 addresses for DHCP server(s) as follows:
n DHCP Server Address: For each DHCP server that supports the VLANs within this configuration:
1. Enter the IPv4 address (for example, [Link]) of the DHCP server that supports the nodes
within the configured VLAN(s).
2. Click Add to add it to the list of available DHCP servers for these VLANs.
3. If you need to delete a server IP address from the list of available DHCP servers, click the
Delete icon located on the row to be deleted.
4. Repeat these sub-steps as needed to enter or delete DHCP servers from this DHCP Relay
configuration.
5. Click Next once done.

5. In the IPv6 Addresses page, follow the same steps as outlined in Step 4 above and click Next.
6. In the Application page, select a Fabric for this configuration to be applied to. A Fabric implies all
switches contained within it.
7. In the Summary page, verify the configuration, then click Apply to save the configuration or click
Cancel to exit without creating the configuration.

Editing a DHCP Relay Configuration

To edit an existing DHCP Relay configuration in the Aruba Fabric Composer UI:

1. In the Aruba Fabric Composer UI, select Configuration > System > DHCP Relay.
2. Select the configuration to edit and then select Actions > Edit. The DHCP Relay window opens.
3. Select tab(s) and make edits as needed.
4. In the Summary tab, verify the configuration, and then click Apply to save the configuration or click
Cancel to exit without creating the configuration.

Deleting a DHCP Relay Configuration

To delete a DHCP Relay configuration:

1. In Aruba Fabric Composer, select Configuration > System > DHCP Relay.
2. Click the button next to the DHCP Relay to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the DHCP Relay configuration or Cancel to retain
the configuration. When you click OK, the deleted DHCP Relay configuration gets removed from all
associated fabrics and switches.

Configurations: Network | 122

 Chapter 13
Configurations: Administration

Configurations: Administration
The Configuration > Administration page provides access to configure the following Fabric Composer
administration features:

n User Management
n Password Policy
n Certificates
n Device Maps
n Statistics Settings
n LDAP

User Management
You can configure and view configured Aruba Fabric Composer UI users by selecting Configuration >
Administration > User Management.
The following information is provided for each configured Aruba Fabric Composer UI user:

n Username: The user name.

n Role: The user role: Administrator, Operator, Viewer.
n Authentication Service: Indicates the service that authenticates that user: local or LDAP.
n Session Inactivity Timeout: Indicates the amount of time that needs to elapse before the user is
automatically logged out of the session.

Adding a User Account

To add an Aruba Fabric Composer user account:

To configure user accounts, you must have Administrator privileges.

Before adding users mapped to LDAP authentication sources, ensure that the users exist on the LDAP
server.

1. In Aruba Fabric Composer, select Configuration > Administration > User Management.
2. Select Actions > Add. The User wizard opens.
3. Configure the Identification as follows and then click Next:
n Authentication Service: In this drop-down list, select the authentication service where local is the
local authentication service.
n Username: Enter the name of the Aruba Fabric Composer user.
n Password: Enter the password for the user.
n Confirm Password: Re-enter the password to confirm.

Aruba Fabric Composer 6.3.0 | User Guide 123

Chapter 13 | Configurations: Administration

4. Configure the Role as follows and then click Next:

n Role: Select the user role:
n Administrator: A user with Administrator privileges has full read/write privileges. Administrator
privilege is needed for any management operation, such as, to manage users, support bundles,
integration configuration, and device mapping.
n Operator: A user with Operator privileges can perform most operations that an administrator can
perform, except that an operator cannot manage users, password policies, switch passwords, system
settings, backups, or certificates.
n Viewer: A user with Viewer privileges has read-only access. Viewers can change their own password,
however they cannot make any other changes.

5. In the Session tab, configure the session inactivity timeout in minutes for this user. The default
timeout for an inactive session is 30 minutes. To enter another timeout period, enter the number in
minutes or 0 for unlimited. For example, for a two-hour timeout, enter 120. When finished, click Next.
6. In the Summary tab, verify the settings and then click Apply to complete and save the user account,
or Back to go back and change a setting, or Cancel to exit this configuration without saving.

Editing a User Account

To edit an Aruba Fabric Composer user account:

To edit user accounts, you must have Administrator privileges.

1. In Aruba Fabric Composer, select Configuration > Administration > User Management.
2. Select the user to edit and then select Action > Edit.
3. Select tab(s) and make edits as needed.
4. Select the Summary tab to view and verify all settings for this user.
5. Click Apply to save the edits or Cancel to exit without saving.

Deleting a User Account

To delete an Aruba Fabric Composer user account:

You must have Administrator privileges to delete an Aruba Fabric Composer user account.
You cannot delete an administrator account if it is the only administrator account.

1. In Aruba Fabric Composer, select Configuration > Administration > User Management.
2. Select the user to delete and then select Action > Delete.
3. In the confirmation window, click OK to delete the user account or Cancel to retain the user account.

Changing the Password for any User Account

To change the password for any Aruba Fabric Composer user:

You must have Administrator access to change passwords for other users.

Configurations: Administration | 124

 Chapter 13 | Configurations: Administration

1. In Aruba Fabric Composer, select Configuration > Administration > User Management.
2. Select the user to edit and then select Action > Edit.
3. In the Identification tab, in the Password and Confirm Password fields, enter a new, secure, and
private password.
4. Click Apply to save the edits or Cancel to exit without saving.

Changing Your Password

A user, while logged into the Aruba Fabric Composer, can change the password as follows:

1. In the Aruba Fabric Composer header, select the icon and then Change Password.
2. In the Change Password window, enter the current password, and then enter a new password twice to
confirm.
3. Click Apply to save the new password or Cancel to exit without saving.

Password Policy
Password Policy enables you to define Aruba Fabric Composer UI password requirements. Set up the
password policy to meet password requirements for your network and compute environment.

Editing Password Policy

In the Aruba Fabric Composer UI, to edit password policy, select Configuration > Administration >
Password Policy and then select Actions > Edit. In the Password Policy window, configure the following
password requirements and then click either Apply to implement the policies or Cancel to exit without
changing the policies.

Policy Para-
Purpose Valid Values Default
meter

Minimum Minimum password length. 1-15 1

Length

Maximum Maximum password length. 0-64, where 0 0 = password

Length disables this requirement
password disabled
requirement.

Minimum Minimum number of lower case characters that 0-64, where 0 0 = minimum
Lower Case a password must contain. disables this length value
password
requirement.

Minimum Minimum number of upper case characters that 0-64, where 0 0 = minimum
Upper Case a password must contain. disables this length value
password
requirement.

Aruba Fabric Composer 6.3.0 | User Guide 125

Chapter 13 | Configurations: Administration

Policy Para-
Purpose Valid Values Default
meter

Minimum Minimum number of numbers (0-9) that a 0-64, where 0 0 = minimum

Numbers password must contain. disables this length value
password
requirement.

Minimum Minimum number of special characters that a 0-64, where 0 0 = minimum

Special password must contain. disables this length value
Characters password
requirement.

Special Allowed special characters. !"#$%&" Empty by default.

Characters ()*+,-./:;<=>?@
[]^_`{|}~

Certificates
This feature enables you to replace the current, installed certificate with a new PEM-encoded certificate and
Private Key file.
In Aruba Fabric Composer, select Configuration > Administration > Certificates to show currently
installed certificates.
The following information is provided for each certificate:

n Issuer: Issuer of the certificate.

n Common Name: Automatically generated file name of the certificate.
n Self Signed: Indicates if the certificate was self-signed: Yes or No.
n Subject Alternative Name(s): Lists any SANs assigned to the certificate.
n Valid Until: Date and time that the certificate expires.

Replacing the Certificate

To replace the Aruba Fabric Composer certificate:

Before performing this procedure, you need both the PEM-encoded certificate and the private key file.

1. Download the PEM-encoded certificate and the private key to a local drive.
2. In Aruba Fabric Composer, select Configuration > Administration > Certificates.
3. Select Actions > Replace.
4. Browse for the downloaded certificate.
5. Browse for the downloaded private key file.
6. Click Apply to save the certificate or Cancel to exit without saving.

Configurations: Administration | 126

 Chapter 13 | Configurations: Administration

Regenerating the Aruba Fabric Composer Server Certificate

This procedure shows how to generate a self-signed certificate for Aruba Fabric Composer that is valid for 27
months (825 days).

Do NOT regenerate the certificate if you have installed an environment-specific certificate that is signed
by a certificate authority.

1. In Aruba Fabric Composer, select Configuration > Administration > Certificates.

2. Select Actions > Regenerate.
3. In the Regenerate Certificate confirmation pop-up, select OK to regenerate the certificate or Cancel to
quit without regenerating.

Device Maps
For Virtual Machines in environments where host port information is unavailable from CDP or LLDP, new or
changed hosts and host interfaces must be mapped to their associated Aruba Fabric Composer switch access
port through the Device Map.
The Device Maps table provides the following information for each Device Map configuration:

n Fabric: The currently selected fabric.

n Switch: Name of the selected switch.
n Port: Port assigned to the switch.
n Host: Fully qualified host name or IP address.
n Host Interfaces: Host interface of the switch.

Adding a Host Interface Connection to the Device Map

If an ESX host does not use CDP or LLDP, you need to manually add the host and interface information to
the device map. To add a host interface connection to the device map:

1. In Aruba Fabric Composer, select Configuration > Administration > Device Maps.
2. Select Actions > Add.
3. Complete the following fields for the host connection to an Aruba switch port:
n Switch: In this drop-down list, select the Aruba switch connected to the host.
n Port: In this drop-down list, select the switch port connected to the host.
n Host: Enter either the fully qualified host name or the IP address of the host connected to the Aruba
Fabric Composer switch port. Enter an IP address only if the host was added to vSphere by IP address
(instead of by host name).
n Host Interface: Enter the name of the host's physical adapter (for example, vmnic1) connected to
the Aruba Fabric Composer switch port.

4. Click Apply to save the connection or Cancel to exit without saving.

Editing a Host Interface Connection in the Device Map

To edit a host interface connection entry in the device map:

Aruba Fabric Composer 6.3.0 | User Guide 127

Chapter 13 | Configurations: Administration

1. In Aruba Fabric Composer, select Configuration > Administration > Device Maps.
2. Select the connection to edit and then select Actions > Edit.
3. Edit the fields as needed for the host connection to an Aruba switch port.
4. Click Apply to save the edits or Cancel to exit without saving.

Deleting a Host Interface Connection Entry from the Device Map

To delete a host interface connection entry from the device map:

1. In Aruba Fabric Composer, select Configuration > Administration > Device Maps.
2. Select the connection to delete and then select Actions > Delete.
3. At the confirmation prompt, click OK to delete the entry or Cancel to retain the host connection
entry.

Statistics Settings
The Statistics Settings page enables configuring the frequency of collecting data from the switches.
To edit the statistics settings:

1. In Aruba Fabric Composer, select Configuration > Administration > Statistics Settings.
2. Select Actions > Edit.
3. In the Sampling Rate field, enter a number of seconds between 10 and 300.
4. Click Apply to save the edits or Cancel to exit without saving.

LDAP
You can set up LDAP authentication to be performed by one or more Microsoft Active Directory or
OpenLDAP servers. LDAP allows switch users to be authenticated using LDAP and using the standard Linux
Pluggable Authentication Modules (PAM).
Two types of LDAP authentication configurations are supported. Depending on the options selected, they
can be in a single, shared LDAP configuration or separate LDAP configurations.

n The Aruba Fabric Composer uses LDAP Authentication for logins via Microsoft Active Directory or
OpenLDAP.
n Switch(es) use LDAP Authentication for logins via OpenLDAP.

LDAP authentication can be configured for an entire Fabric Composer or for selected switches in the fabric.
With LDAP enabled, users that log in to the Aruba Fabric Composer or to any switch are authenticated using
an external LDAP server and placed in an Administrator, Operator, or Viewer group as defined in the LDAP
server configuration.
The table columns are defined as follows:

n Name: Name for the LDAP configuration.

n Description: Description of the LDAP configuration.
n DN Template: The Distinguished Name (DN) Template.
n TLS Private Key File Path: The path to the TLS private key file.

Configurations: Administration | 128

 Chapter 13 | Configurations: Administration

n TLS Certificate File Path: The path to the TLS certificate file.
n SSL: The SSL mode: Off, On, Start TLS.
n Distinguished Name Bind: The Distinguished Name which binds the LDAP server for lookups.
n Distinguished Name Base: The base Distinguished Name used as a search base.
n NS Switch: Indicates if the NS switch is enabled.
n TLS Require Cert: The level of checks to perform on certs: Demand, Hard, Never, Try.
n LDAP Server(s): List of LDAP server URLs.
n X.509 Certificate File Path: The path to the X.509 certificate.
n PAM Enable: Indicates if the Pluggable Authentication Module (PAM) is enabled (Yes or No).
n Validate SSL/TLS: Indicates if Validate SSL/TLS certificates for Aruba Fabric Composer is enabled (Yes or
No). If Aruba Fabric Composer is enabled, this should be enabled.
n Applies To: Identifies the switches that this configuration applies to.

Adding an LDAP Authentication Configuration

This feature enables you to set up LDAP authentication to be performed by one or more Microsoft Active
Directory or OpenLDAP servers.

Guidelines
Before adding users mapped to LDAP authentication sources, ensure that the following is completed on the
LDAP server:

n LDAP users are configured.

n You know the LDAP user's login name for each user you plan to configure.
n If the LDAP server supports LDAP over SSL (LDAPS), you need to ensure that a properly formatted certificate
is trusted before enabling LDAP authentication.
n If you need to configure LDAP over SSL and your LDAP or Active Directory server does not have an officially
signed certificate, you need to import the certificate into Aruba Fabric Composer.

To configure authentication to be performed by a specific LDAP server:

1. Select Configuration > System > LDAP.

2. Select Actions > Add. The LDAP Authentication wizard opens.
3. In the Settings page, specify a name and description for this LDAP configuration:
n Name: Enter a name for this LDAP configuration.
n Description: Enter a description of this LDAP configuration.
n LDAP Server(s): Enter a valid LDAP Server(s) with optional protocol and port.

4. Click Next.
5. In the Aruba Fabric Composer page, complete the following fields as needed:
n Aruba Fabric Composer: Enables the Aruba Fabric Composer to use the LDAP server for API or UI
authentication. Selecting Aruba Fabric Composer activates the Validate SSL/TLS certificates for the
Aruba Fabric Composer option and also enables the Validate button which enables you to run a
validation.

Aruba Fabric Composer 6.3.0 | User Guide 129

Chapter 13 | Configurations: Administration

n Validate SSL/TLS Certificates for Aruba Fabric Composer: Check this field to enable validation of
SSL/TLS (Secure Socket Layer/Transport Layer Security) certificate chains when connecting to the
LDAP server.

6. Click Validate to validate the configuration and its connection. A Validation Successful pop-up
should be returned.
7. In the Aruba Fabric Composer page again, specify a DN (Distinguished Name) Template for this
LDAP configuration as follows:
n Microsoft Active Directory format: {{username}}
n SSL: Only applicable if Aruba Fabric Composer is enabled.

8. Click Next.
9. In the Summary page, verify the configuration, and then click Apply to save and apply the
configuration, or click Back to go back and change a value, or click Cancel to cancel the entire LDAP
wizard session.
10. A confirmation appears and then the new LDAP configuration appears in the LDAP Authentication
table.

Authentications for currently logged-in LDAP users are not affected.

Editing LDAP Authentication

The LDAP authentication configuration can be edited as follows:

1. In Aruba Fabric Composer, select Configuration > System > LDAP.

2. Select a row, then select Actions > Edit. The LDAP Authentication window opens.
3. As needed, select the tabs and make changes.
4. In the Summary tab, verify the configuration, and then click Apply to save and apply the configuration,
or click Cancel to cancel the LDAP wizard session without applying changes.
5. A confirmation appears and then the new LDAP configuration appears in the LDAP Authentication
table.

Authentications for currently logged-in LDAP users are not affected.

Deleting an LDAP Authentication Configuration

To delete an LDAP configuration:

1. In Aruba Fabric Composer, select Configuration > System > LDAP.

2. Select the LDAP configuration to delete and then select Action > Delete.
3. In the confirmation window, click OK to delete the LDAP configuration or Cancel to retain the LDAP
configuration.

Configurations: Administration | 130

 Chapter 14
Configurations: Integrations

Configurations: Integrations
The Configuration > Integrations page provides access to configure the following Fabric Composer
Integrations features:

n Aruba NetEdit®
n HPE iLO Amplifier
n ODIM™ Plugin Integration
n HPE SimpliVity®
n Nutanix Prism®
n Pensando™ PSM
n VMware NSX-T™
n VMware vSphere®
n VMware SDDC

Viewing Integrations, Integration Configurations, and

Connection Status
Viewing Installed Integrations
On the Dashboard, in the Integrations panel, you can view:

n Installed integrations.
n The number of configurations added for each integration.
n Integration connection status.

Integration Connection Status

Knowing the connection status of your integration configurations is useful for overall management and for
diagnosing issues. You can view the connection status in the following:

n Dashboard > Integrations panel

n Configuration > Integrations pages

The following integration configuration statuses are reported:

n The integration configuration is connected.

n The integration configuration is disabled.

n The integration configuration is not connected.

n Integration configuration data is being updated. Some screens may not update properly.
This message appears after changing a value in the integration configuration or after enabling the

Aruba Fabric Composer 6.3.0 | User Guide 131

Chapter 14 | Configurations: Integrations

integration.

n The integration is degraded and not operating optimally.

Integration Status Messages

You can view Integration status messages if you either:

n Customize the table and display the Fault Message column. The Fault Message column is hidden by
default. Displaying this column enables you to view multiple configuration messages without needing to
hover over each Status banner.

n To view the Fault Message column in an Integration table, click the Customize table columns icon ,
and then in the list select the Fault Message check box and click outside the window. The Fault Message
column appears in the Integration table.

Open Distributed Infrastructure Management

Aruba Fabric Composer’s integration with ODIM Plugin allows the HPE Resource Aggregator for Open
Distributed Infrastructure Management (ODIM) to manage Aruba CX switch-based fabrics that are typically
deployed across data centers as spine-leaf architectures. This capability enables the logical centralization of
network address resource pool management, along with fabric-wide configuration parameters and back-end
host-to-host communication.
For more details refer to: [Link]

Adding or Editing an ODIM Plugin Integration

The Kafka host must be set up and the Kafka SSL certificates must be available for download. The certificate
files include the Kafka SSL certificate file, the Kafka root CA cert file, and the Kafka SSL key file.
Configure an integration between Aruba Fabric Composer and ODIM as follows:

Only one ODIM Plugin Integration configuration instance can be configured.

1. In Aruba Fabric Composer, select Configuration > Integrations > ODIM Plugin Integration, and
then select Actions and either Add or Edit. The ODIM Plugin Integration wizard opens.
2. In the ODIM Plugin Integration wizard, configure the following integration parameters:

Valid
Tab Parameter Name Description Default
Values

Name Enter a name

Host for this
integration.

Description (Optional)
Enter a
description
for this
integration.

Configurations: Integrations | 132

 Chapter 14 | Configurations: Integrations

Valid
Tab Parameter Name Description Default
Values

Host Enter the fully

qualified host
name or IPv4
address of
the ODIM
host.

Port Enter the port Default port

number of number: 30080
Host the ODIM
host.

Username Enter the Refer to the

username for ODIM User
Aruba Fabric Guide for the
Composer to default user
connect to ID/password,
the ODIM Kafka default
host. port, and the
certificate
details.

Password Enter the

password for
Aruba Fabric
Composer to
connect to
the HPE
ODIM host.
Host
Enable this configuration To enable Checked Checked
this ODIM = (enabled)
Plugin enabled
Integration Cleared
configuration, =
check this disabled
box.

Enter the Apache Kafka host configuration settings for this ODIM Plugin
Integration configuration.

Kafka Kafka Host The host

Settings name or IPv4
address of
the Kafka
host.

Kafka Port The Kafka 0-

port number. 65535

Specify the Kafka SSL Certs: The following Kafka SSL searches enable you to
Kafka
specify and download the Kafka SSL certificates. The certificates provide trust
Settings
and enable the ODIM Plugin Integration to connect to the Kafka host.

Aruba Fabric Composer 6.3.0 | User Guide 133

Chapter 14 | Configurations: Integrations

Valid
Tab Parameter Name Description Default
Values

Kafka SSL Cert Click Browse

and search
for the Kafka
SSL
Certificate
file.

Kafka SSL Root CA Cert Click Browse

and search
for the Kafka
root CA
Certificate
file.

Kafka SSL Key Click Browse

and search
for the Kafka
SSL key file.

All configured parameters are listed for you to verify. Verify these parameter
Summary
values. To make changes, open tabs and update as needed.

3. After completing and verifying all parameters, click Apply to save the configuration or Cancel to exit
the wizard without saving the configuration.
4. Verify that the integration appears on the Integrations > ODIM Plugin Integration page.

Aruba NetEdit
The Configuration > Integrations > Aruba NetEdit page is used to create configurations for Aruba
switches.
The Aruba NetEdit page lists the current Aruba NetEdit configurations and enables you to add, edit, and
delete them.
The table provides the following information for each Aruba NetEdit configuration:

n Status: Status of the Aruba NetEdit configuration.

n Host: Fully qualified host name or IP address of the Aruba NetEdit host.
n Username: Username associated with each Aruba NetEdit configuration.
n Enabled: Whether Aruba NetEdit Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to Aruba
NetEdit.
n Name: User-defined name for the Aruba NetEdit Integration.
n Description: User-defined description of the Aruba NetEdit Integration.
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of the last update of Aruba NetEdit.

Configurations: Integrations | 134

 Chapter 14 | Configurations: Integrations

Adding an Aruba NetEdit Integration

Configure access between Aruba Fabric Composer and an Aruba NetEdit host by adding one or more Aruba
NetEdit integrations as follows:

1. In Aruba Fabric Composer, select Configuration > Integrations > Aruba NetEdit and then select
Actions > Add. The Aruba NetEdit wizard opens.
2. Configure the following Aruba NetEdit Integration parameters:

Parameter Valid
Tab Description Default
Name Values

Name Enter a name for this integration. None

Description Enter a description for this integration. None

Host Enter the fully qualified host name or IP None

address of the Aruba NetEdit host.

Username Enter the username to enable the Aruba Fabric None

Composer to connect to the Aruba NetEdit host.
Without DNS, everything needs to be
configured consistently with regards to using
hostname or IP address. This includes
configuring Aruba NetEdit Manager with the
right type of hostname for communicating with
the host.

Host Password Enter the password to enable the Aruba Fabric None
Composer to connect to the Aruba NetEdit host
as the configured user.

Validate Check this box to enable validation of SSL/TLS Checked Unchecked

SSL/TLS certificate chains for Aruba Fabric Composer or
certificates when connecting to Aruba NetEdit. unchecked
for Aruba
Fabric
Composer

Enable this Check this box to enable this Aruba NetEdit Checked Checked
configuration integration. The field is checked by default to or
enable the integration. unchecked

Validate (Recommended) Click Validate to validate the N/A N/A

configuration and its connection. A Validation
Successful pop-up should be returned.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

3. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
4. Repeat the steps above to add additional Aruba NetEdit configurations.

Aruba Fabric Composer 6.3.0 | User Guide 135

Chapter 14 | Configurations: Integrations

Editing an Aruba NetEdit Integration

To edit an Aruba NetEdit Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > Aruba NetEdit.
2. Click the button next to the Aruba NetEdit Integration to edit and then select Actions > Edit.
3. In the Aruba NetEdit Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Launching an Aruba NetEdit User Interface Window

You can launch an Aruba NetEdit User Interface (UI) window directly from the Aruba Fabric Composer UI.
To launch an Aruba NetEdit UI window:

1. In Aruba Fabric Composer, select Configuration > Integrations > Aruba NetEdit.
2. Select an Aruba NetEdit Integration and then select Actions > Launch.
3. A new browser window launches and opens the Aruba NetEdit UI. You must provide login credentials
in order to log in to the UI.

Refreshing an Aruba NetEdit Configuration

If a connection error or other error causes you to suspect that an Aruba NetEdit configuration is not
synchronized with the Aruba Fabric Composer, you can refresh the Aruba NetEdit configuration. A refresh re-
fetches all data for a selected configuration and updates the cache for that configuration.

1. In Aruba Fabric Composer, select Configuration > Integrations > Aruba NetEdit.
2. Select an Aruba NetEdit configuration and then select Actions > Refresh NetEdit Configuration.
3. At the Refresh NetEdit Configuration confirmation prompt, select either OK to refresh the Aruba
NetEdit Integration cache or select Cancel to exit without refreshing the cache.

HPE iLO Amplifier Integration

HPE ilO Amplifier Pack (Integrated Lights-Out) is the Hewlett Packard Enterprise deployment engine for
updating firmware, drivers, agents and configuration tools for HPE ProLiant servers, HPE Blade servers and
HPE Apollo servers. It can discover and inventory up to 10,000 servers, providing detailed server inventory
and downloadable reports. ilO Amplifier Pack enables you to view your complete inventory and keep your
servers up to date from a single dashboard.
iLO Amplifier Pack discovers supported servers and gets detailed inventory from the iLO management
processor. The inventory include firmware, software and hardware details which can be viewed and
downloaded from the GUI.
iLO Amplifier Pack has an integrated hardware and software discovery engine that finds the installed
hardware and current versions of firmware and software in use on target servers. iLO Amplifier Pack installs
updates in the correct order and ensures that all dependencies are met before deploying an update. It also
minimizes downtime by deploying all updates while the target servers are online, limiting the downtime to a
single reboot in most cases.
The HPE iLO Amplifier page is used to create configurations for Aruba switches.

Configurations: Integrations | 136

 Chapter 14 | Configurations: Integrations

To open the HPE iLO Amplifier page, in Aruba Fabric Composer, select Configuration > Integrations > HPE
iLO Amplifier.
The HPE iLO Amplifier page lists the current HPE iLO Amplifier configurations and enables you to add, edit,
and delete them.
The table provides the following information for each HPE iLO Amplifier configuration:

n Status: Status of the HPE iLO Amplifier configuration.

n Host: Fully qualified host name or IP address of the HPE iLO Amplifier host.
n Username: Username associated with each HPE iLO Amplifier configuration.
n Enabled: Whether HPE iLO Amplifier Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to HPE
iLO Amplifier.
n Name: User-defined name for the HPE iLO Amplifier Integration.
n Description: User-defined description of the HPE iLO Amplifier Integration.
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of the last update of HPE iLO Amplifier.

Adding an HPE iLO Amplifier Integration

With an HPE iLO Amplifier Integration configured and enabled, integration between Aruba Fabric Composer
and HPE iLO Amplifier is activated.

As many as 10 HPE iLO Amplifier Integrations can be configured.

The HPE iLO Amplifier Integration is included as a part of the Fabric Composer and SimpliVity Integration
sets. Only HPE servers can be discovered and managed via HPE iLO Amplifier.

Configure an integration between Aruba Fabric Composer and HPE iLO Amplifier by adding an iLO Amplifier
Integration as follows:

1. In Aruba Fabric Composer, select Configuration > Integrations > HPE iLO Amplifier and then
select Actions > Add. The HPE iLO Amplifier wizard opens.

Aruba Fabric Composer 6.3.0 | User Guide 137

Chapter 14 | Configurations: Integrations

2. Configure the following integration parameters:

Parameter
Tab Description Valid Values Default
Name

Name Enter a name for this integration. None

Description Enter a description for this integration. None

Host Host Enter the fully qualified host name or IP None

address of the HPE iLO Amplifier host.

Username Enter the username to enable the Aruba None

Fabric Composer to connect to the HPE
iLO Amplifier host. This needs to be a
user with appropriate permissions to
perform configuration or administrative
tasks within HPE iLO Amplifier.

Password Enter the password to enable the Aruba None

Fabric Composer to connect to the HPE
iLO Amplifier host as the configured user.

Validate Check this box to enable validation of Checked or Unchecked

SSL/TLS SSL/TLS certificate chains when unchecked
certificates connecting to HPE iLO Amplifier.
for Aruba
Fabric
Host Composer

Enable this Check this box to enable this iLO Checked or Checked
configuration Amplifier Integration. The field is checked unchecked
by default to enable the integration.

Validate Click Validate to validate the Button is N/A

configuration and its connection. A disabled until
Validation Successful pop-up should be the Name, Host,
returned. Username and
Password fields
have been
completed.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

3. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
4. Repeat the steps above to add additional HPE iLO Amplifier Integrations.

Editing an HPE iLO Amplifier Integration

To edit an HPE iLO Amplifier Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > HPE iLO Amplifier.
2. Click the button next to the HPE iLO Amplifier Integration to edit and then select Actions > Edit.

Configurations: Integrations | 138

 Chapter 14 | Configurations: Integrations

3. In the HPE iLO Amplifier Configuration window, make changes to the fields as needed. Click a tab to
edit the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Launching an HPE iLO Amplifier User Interface Window

You can launch an iLO Amplifier User Interface (UI) window directly from the Aruba Fabric Composer UI.
To launch an iLO Amplifier UI window:

1. In Aruba Fabric Composer, select Configuration > Integrations > HPE iLO Amplifier.
2. Select an HPE iLO Amplifier Integration and then select Actions > Launch.
3. A new browser window launches and opens the HPE iLO Amplifier UI. You must provide login
credentials in order to log in to the HPE iLO Amplifier UI.

HPE SimpliVity Integration

The HPE SimpliVity integration integrates Aruba Fabric Composer with the HPE SimpliVity hyperconverged
infrastructure for VMware vSphere. The HPE SimpliVity integration supports as many as ten integration
configurations. Each integration configuration supports a federation, that is, a related group of clusters, with
each cluster containing any number of HPE SimpliVity Nodes. HPE SimpliVity runs on top of VMware ESXi;
therefore the required VMware vSphere integration gathers much of the infrastructure data and performs
much of the Aruba Fabric Composer configuration (VLAN provisioning, and so on).
The HPE SimpliVity Integration discovers and creates an inventory of SimpliVity Cluster-specific information
that cannot be retrieved from vSphere. This enables the isolation of VLANs that, although provisioned by
vSphere, are used by SimpliVity for storage isolation.
Most of the host and VM data is obtained from the VMware environment by the VMware vSphere
integration. Data gathered by the HPE SimpliVity integration is used to identify which clusters, hosts, and VMs
are part of the SimpliVity environment. The following information is discovered by the HPE SimpliVity
integration:

n SimpliVity Cluster information

n SimpliVity Host information
n SimpliVity VM information

Also, ESX LLDP or CDP harvests node locations for presentation in the Aruba Fabric Composer UI.
Using information gathered by both the VMware vSphere Integration and the HPE SimpliVity Integration, the
Aruba Fabric Composer UI Host Visualization presents SimpliVity OmniStack ESX host environment objects
and details. The Aruba Fabric Composer visualizations provide an overall view of the SimpliVity <> Aruba
Fabric Composer environment, showing the virtualized infrastructure.
The HPE SimpliVity page is used to create configurations for Aruba switches.
To open the HPE SimpliVity page, in Aruba Fabric Composer, select Configuration > Integrations > HPE
SimpliVity.
The HPE SimpliVity page lists the current HPE SimpliVity configurations and enables you to add, edit, and
delete them.
The table provides the following information for each HPE SimpliVity configuration:

Aruba Fabric Composer 6.3.0 | User Guide 139

Chapter 14 | Configurations: Integrations

n Status: Status of the HPE SimpliVity configuration.

n Host: Fully qualified host name or IP address of the HPE SimpliVity host.
n Username: VMware vSphere credentials.
n Enabled: Whether HPE SimpliVity Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to HPE
SimpliVity.
n Name: User-defined name for the HPE SimpliVity Integration.
n Description: User-defined description of the HPE SimpliVity Integration.
n Automated Optimization of Storage and Federation Traffic: Whether enabled (Yes) or not (No).
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of last update of HPE SimpliVity.

Adding an HPE SimpliVity Integration

With an HPE SimpliVity integration configured, Aruba Fabric Composer becomes aware of the HPE SimpliVity
environment data.

Before you configure the HPE SimpliVity integration, in the Aruba Fabric Composer UI, make sure that at
least one VMware vSphere integration configuration has been configured and enabled.

Configure access between Aruba Fabric Composer and HPE SimpliVity by adding one or more SimpliVity
Integrations as follows:

1. In Aruba Fabric Composer, select Configuration > Integrations > HPE SimpliVity, then select
Actions > Add or Edit. The HPE SimpliVity wizard opens.
2. Configure the integration, completing the following parameters:

Parameter Valid
Tab Description Default
Name Values

Name Enter a name for this integration. None

Description Enter a description for this integration. None

Host Host Enter the fully qualified host name or IP None

address of one of the HPE SimpliVity
OmniStack Virtual Controller (OVC) VMs.

Username Enter the username to enable Aruba Fabric None

Composer to connect to the VMware vSphere
instance that the HPE SimpliVity Host is a part
of.

Configurations: Integrations | 140

 Chapter 14 | Configurations: Integrations

Parameter Valid
Tab Description Default
Name Values

Password Enter the password to enable Aruba Fabric None

Composer to connect to the VMware vSphere
host as the configured user.

Validate Check this box to enable validation of SSL/TLS Checked Unchecked

SSL/TLS certificate chains when connecting to VMware or
certificates vSphere. unchecked
Host
Enable this Check this box to enable this HPE SimpliVity Checked Checked
configuration Integration. or
unchecked

Validate (Recommended) Click Validate to validate the N/A N/A

configuration and its connection. A Validation
Successful pop-up should be returned.

Optimize Selecting this field will trigger an automatic Unchecked

SimpliVity optimization of the HPE SimpliVity Storage and
Storage and Federation Traffic. This ensures that QoS
Federation profile for the Storage and Federation Traffic
HPE
Traffic is applied, which minimizes interference from
SimpliVity
other workload traffic. QoS profile HPE
SimpliVity Storage and Federation Traffic is
applied automatically and across the fabric.
This field is unchecked (disabled) by default.

This tab lists all configured parameters for you to verify. Verify these parameter values. If
Summary
you need to make any changes, open the tabs and update as needed.

3. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
4. Repeat the steps above to add or edit additional HPE SimpliVity integrations.

Aruba Fabric Composer 6.3.0 | User Guide 141

Chapter 14 | Configurations: Integrations

Editing an HPE SimpliVity Integration

To edit an HPE SimpliVity Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > HPE SimpliVity.
2. Click the button next to the HPE SimpliVity configuration to edit and then select Actions > Edit.
3. In the HPE SimpliVity Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Refreshing an HPE SimpliVity Integration

If a connection error or other error causes you to suspect that an Aruba Fabric Composer HPE SimpliVity
Integration is not synchronized with HPE SimpliVity, you can refresh the integration. A refresh re-fetches all
data for a selected integration and updates the cache for that integration.

1. In Aruba Fabric Composer, select Configuration > Integrations > HPE SimpliVity.
2. Select a Prism Integration and then select Actions > Refresh HPE SimpliVity Integration.
3. At the Refresh HPE SimpliVity Integration confirmation prompt, select either OK to refresh the
SimpliVity Integration cache or select Cancel to exit without refreshing the cache.

Nutanix Prism
The Nutanix Prism page is used to create configurations for Aruba switches.
To open the Nutanix Prism page, in Aruba Fabric Composer, select Configuration > Integrations >
Nutanix Prism.
The Nutanix Prism page lists the current Nutanix Prism configurations and enables you to add, edit, and
delete them.
The table provides the following information for each Nutanix Prism configuration:

n Status: Status of the Nutanix Prism configuration.

n Host: Fully qualified host name or IP address of the Nutanix Prism host.
n Username: Username associated with each Nutanix Prism configuration.
n Enabled: Whether Nutanix Prism Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to the
Nutanix Prism Integration.
n Name: User-defined name for the Nutanix Prism Integration.
n Description: User-defined description of the Nutanix Prism Integration.
n Visualization; A consolidated graphical representation of the Nutanix Prism configuration.
n Provisioning: Indicates provisioning status of the Nutanix Prism configuration.
n VLAN Range: Select between VLAN Range Base and Length.
n Automated Optimization of CVM Traffic: Enable automatic optimization of the Nutanix Controller VM
(CVM).
n Fault Message: Fault message or alert in case of a connection failure.

Configurations: Integrations | 142

 Chapter 14 | Configurations: Integrations

n Last Successful Connection: Time of last successful connection.

n Last Update Time: Time of the last update of Nutanix Prism.

Adding a Nutanix Prism Integration

SNMP must be configured on all Fabric Composer switches that use a Nutanix Prism Integration for AHV
before you can configure the integration. Refer to SNMP on page 115 and Adding an SNMP
Configuration on page 115.
As many as 10 Nutanix Prism Integrations can be configured.

Configure access between Aruba Fabric Composer and Nutanix Prism by adding one or more Nutanix Prism
Integrations as follows:

1. In Aruba Fabric Composer, select Configuration > Integrations > Nutanix Prism.
2. To add a new integration, select Actions > Add. The Nutanix Prism wizard opens.
3. Configure the integration by completing the following parameters:

Parameter Valid
Tab Description Default
Name Values

Name Enter a name for this integration. None

Description Enter a description for this integration. None

Host Host Enter the fully qualified host name or cluster None
virtual IP address of Nutanix Prism.

Username Enter the username to enable the Aruba Fabric None

Composer to connect to Nutanix Prism. This
needs to be a user with appropriate
permissions to perform configuration or
administrative tasks within Nutanix Prism.

Password Enter the password to enable the Aruba Fabric None

Composer to connect to Nutanix Prism as the
configured user.

Validate Check this box to enable the validation of Checked Unchecked

SSL/TLS SSL/TLS certificate chains of trust for Aruba or
certificates Fabric Composer when connecting to Nutanix unchecked
Host for Aruba Prism.
Fabric
Composer
For this to work, the Prism
SSL certificate must be added to
Aruba Fabric Composer through a
manual procedure.

Aruba Fabric Composer 6.3.0 | User Guide 143

Chapter 14 | Configurations: Integrations

Parameter Valid
Tab Description Default
Name Values

Enable this Check this box to enable this Nutanix Prism Checked Checked
configuration Integration. or
unchecked

Validate Click Validate to validate the configuration and N/A N/A

Host its connection. A Validation Successful pop-up
should be returned.

Nutanix supports only SHA

authorization.

Automated Checking this field enables Aruba Fabric Disabled

VLAN Composer to automatically provision VLAN by default.
configuration Groups in Aruba Fabric Composer based on the
on Physical VLAN's used by Virtual Machines running on
Switches for AHV. This needs to be checked (enabled) for
AHV automation of this function to occur. This field is
disabled by default.

VLAN Range To enable automated provisioning of specific You can The

VLANs for Nutanix hosts directly connected to enter default
the Fabric Composer, enter the VLANs or VLAN individual range is
ranges. VLANs and the entire
ranges, VLAN
separated range 1-
by 4094.
Aruba commas;
Fabric for
example:
5,10-
45,102.

Automated Selecting this field will trigger an automatic This field is

Optimization optimization of CVM network traffic, by applying disabled
of CVM a QoS profile for CVM traffic. This minimizes by default.
network interference on CVM traffic from other
traffic workload traffic. QoS profile for CVM is applied
automatically and across the fabric. This field is
unchecked (disabled) by default.

Enable Auto Enable automated LAG provisioning for certain This field is
Nutanix AFV integrations. disabled
LAG Support
by default.

Validate Verify that SNMP has been configured on all

Fabric Composers that use the Nutanix
SNMP
Nutanix Integration. Click Validate SNMP; if all fabrics
are configured, a Success message will be
returned.

Configurations: Integrations | 144

 Chapter 14 | Configurations: Integrations

Parameter Valid
Tab Description Default
Name Values

Note: You will not be able to continue to the

next wizard page or complete the integration
until SNMP has been configured on all Fabric
Composers that use this integration, and SNMP
has been successfully validated.
If necessary, refer to SNMP on page 115 and
Adding an SNMP Configuration on page 115.

Populate Checking this field enables visualization of the This field is

Network related Aruba Fabric Composer from Nutanix disabled
Visualization Prism when AHV is used. If enabled, Nutanix by default.
Prism harvests network information via LLDP
and SNMP from Aruba Fabric Composer
switches in the Fabric. Prism uses this data to
populate the Network view, showing the
network from VMs/Hosts to Aruba Fabric
Composer switches. This needs to be checked
(enabled) for automation of this function to
occur.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

4. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
5. Repeat the steps above as needed to add or edit Nutanix Prism integrations.

Editing a Nutanix Prism Integration

To edit a Nutanix Prism Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > Nutanix Prism.
2. Click the button next to the Nutanix Prism configuration to edit and then select Actions > Edit.
3. In the Nutanix Prism Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Refreshing a Nutanix Prism Integration

If a connection error or other error causes you to suspect that an Aruba Fabric Composer Nutanix Prism
Integration is not synchronized with Nutanix Prism, you can refresh the Prism Integration. A refresh re-
fetches all data for a selected integration and updates the cache for that integration.

1. In Aruba Fabric Composer, select Configuration > Integrations > Nutanix Prism.
2. Select a Prism Integration and then select Actions > Refresh Prism Integration.
3. At the Refresh Prism Integration confirmation prompt, select either OK to refresh the Prism
Integration cache or select Cancel to exit without refreshing the cache.

Aruba Fabric Composer 6.3.0 | User Guide 145

Chapter 14 | Configurations: Integrations

Pensando PSM Integration

The Configuration > Integrations > Pensando PSM page is used to create configurations for Aruba
switches.
The Pensando PSM page lists the current Pensando PSM configurations and enables you to add, edit, launch,
and refresh them.
The table provides the following information for each Pensando PSM configuration:

n Status: Status of the Pensando PSM configuration.

n Host: Fully qualified host name or IP address of the Pensando PSM host.
n Username: Username associated with each Pensando PSM configuration.
n Enabled: Whether Pensando PSM Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to
Pensando PSM.
n Name: User-defined name for the Pensando PSM Integration.
n Description: User-defined description of the Pensando PSM Integration.
n Fabric: Name of the Fabric associated with this PSM.
n Auto Decommission: Automatically decommission PSM.
n Auto VLAN Placement: Automatically assign VLAN placement.
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of last update of Pensando PSM.

Adding a Pensando PSM Integration

Configure access between Aruba Fabric Composer and a Pensando PSM host by adding one or more
Pensando PSM integrations as follows:

1. In Aruba Fabric Composer, select Configuration > Integrations > Pensando PSM and then select
Actions > Add or Edit. The Pensando PSM wizard opens.
2. Configure the following Pensando PSM Integration parameters:

Valid
Tab Parameter Name Description Default
Values

Name Enter a name for this integration. None

Host
Description Enter a description for this integration. None

Host Enter the fully qualified host name or IP None

address of the Pensando PSM host.

Host Username Enter the username to enable the Aruba None

Fabric Composer to connect to the
Pensando PSM host.

Configurations: Integrations | 146

 Chapter 14 | Configurations: Integrations

Valid
Tab Parameter Name Description Default
Values

Without DNS, everything needs to be

configured consistently with regards to
using hostname or IP address. This
includes configuring Pensando PSM
Manager with the right type of hostname
for communicating with the host.

Password Enter the password to enable the Aruba None

Fabric Composer to connect to the
Pensando PSM host as the configured
user.

Validate SSL/TLS Check this box to enable validation of Checked Unchecked

certificates for SSL/TLS certificate chains for Aruba Fabric or
Aruba Fabric Composer when connecting to Pensando unchecked
Composer PSM.

Enable this Check this box to enable this Pensando Checked Checked
configuration PSM integration. The field is checked by or
default to enable the integration. unchecked

Validate (Recommended) Click Validate to validate N/A N/A

the configuration and its connection. A
Validation Successful pop-up should be
returned.

Settings Fabric All distributed Services operations with the

specified Fabric will be applied to this
PSM instance. Do not specify a Fabric if this
PSM instance does not support Distributed
Services Switches.

Enable auto Checked Unchecked

decommissioning or
for switches unchecked
deleted from the
system.

Enable auto Checked Checked

VLAN placement or
on all switches unchecked
when creating a
Network.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

3. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
4. Repeat the steps above to add additional Pensando PSM configurations.

Editing a Pensando PSM Integration

To edit a Pensando PSM Integration:

Aruba Fabric Composer 6.3.0 | User Guide 147

Chapter 14 | Configurations: Integrations

1. In Aruba Fabric Composer, select Configuration > Integrations > Pensando PSM.
2. Click the button next to the Pensando PSM Integration to edit and then select Actions > Edit.
3. In the Pensando PSM Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Launching a Pensando PSM User Interface Window

You can launch a Pensando PSM User Interface (UI) window directly from the Aruba Fabric Composer UI.
To launch a Pensando PSM UI window:

1. In Aruba Fabric Composer, select Configuration > Integrations > Pensando PSM.
2. Select a Pensando PSM Integration and then select Actions > Launch.
3. A new browser window launches and opens the Pensando PSM UI. You must provide login credentials
in order to log in to the UI.

Refreshing a Pensando PSM Configuration

If a connection error, or any other error, causes you to suspect that a Pensando PSM configuration is not
synchronized with the Aruba Fabric Composer, you can refresh the Pensando PSM configuration. A refresh
re-fetches all data for a selected configuration and updates the cache for that configuration.

1. In Aruba Fabric Composer, select Configuration > Integrations > Pensando PSM.
2. Select a Pensando PSM configuration and then select Actions > Refresh Pensando PSM
Configuration.
3. At the Refresh Pensando PSM Configuration confirmation prompt, select either OK to refresh the
Pensando PSM Integration cache or select Cancel to exit without refreshing the cache.

VMware NSX-T
The VMware NSX-T page is used to create configurations for Aruba switches.
To open the VMware NSX-T page, in Aruba Fabric Composer, select Configuration > Integrations >
VMware NSX-T.
The VMware NSX-T page lists the current VMware NSX-T configurations and enables you to add, edit, and
delete them.
The table provides the following information for each VMware NSX-T configuration:

n Status: Status of the VMware NSX-T configuration.

n Host: Fully qualified host name or IP address of the VMware NSX-T host.
n Username: Username associated with each VMware NSX-T configuration.
n Enabled: Whether VMware NSX-T Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to VMware
NSX-T.
n Name: User-defined name for the VMware NSX-T Integration.
n Description: User-defined description of the VMware NSX-T Integration.

Configurations: Integrations | 148

 Chapter 14 | Configurations: Integrations

n Auto Discovery: Select between auto discovery (Yes or No).

n Provisioning: Indicates provisioning status of the VMware NSX-T configuration.
n VLAN Range: Select between VLAN Range Base and Length.
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of the last update of VMware NSX-T.

Adding a VMware NSX-T Integration

Configure access between Aruba Fabric Composer and VMware NSX-T by adding one or more VMware NSX-T
Integrations as follows:

Before you can add the first VMware NSX-T Integration, in the Aruba Fabric Composer UI, make sure that
at least one VMware vSphere Integration has been configured and enabled.
As many as 10 VMware NSX-T Integrations can be configured.

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware NSX-T and then select
Actions > Add or Edit. The VMware NSX-T wizard opens.
2. Configure the following VMware NSX-T Integration parameters:

Parameter Valid
Tab Description Default
Name Values

Name Enter a name for this integration. None

Description Enter a description for this integration. None

Host Enter the fully qualified host name or IP None

address of the VMware NSX-T host.

Username Enter the username to enable the None

Host Aruba Fabric Composer to connect to
the VMware NSX-T host. Without DNS,
everything needs to be configured
consistently with regards to using
hostname or IP address. This includes
configuring NSX-T Manager with the
right type of hostname for
communicating with VMware vSphere.

Password Enter the password to enable the None

Aruba Fabric Composer to connect to
the VMware NSX-T host as the
configured user.

Aruba Fabric Composer 6.3.0 | User Guide 149

Chapter 14 | Configurations: Integrations

Parameter Valid
Tab Description Default
Name Values

Validate Check this box to enable validation of Checked Unchecked

SSL/TLS SSL/TLS certificate chains for Aruba or
certificates Fabric Composer when connecting to unchecked
for Aruba VMware NSX-T.
Fabric
Composer
Host
Enable this Check this box to enable this VMware Checked Checked
configuration NSX-T Integration. The field is checked or
by default to enable the integration. unchecked

Validate Click Validate to validate the N/A N/A

configuration and its connection. A
Validation Successful pop-up should
be returned.

Aruba Automated Click the check box to automate the Unchecked

Fabric VLAN configuration.
Configuration
on Physical
Switches for
NSX-T

VLAN Range Enter the VLAN range Aruba Fabric Between 1 Enabled only when
Composer is allowed to modify as part and 4094 Automated
of an integration. VLAN configuration
check box is
checked.

NSX-T Discovery Enable or disable discovery settings for Unchecked

protocols this VMware NSX-T configuration.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

3. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
4. Repeat the steps above to add additional VMware NSX-T configurations.

Editing a VMware NSX-T Integration

To edit a VMware NSX-T Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware NSX-T.
2. Click the button next to the VMware NSX-T configuration to edit and then select Actions > Edit.
3. In the VMware NSX-T Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Configurations: Integrations | 150

 Chapter 14 | Configurations: Integrations

Refreshing a VMware NSX-T Integration

If a connection error or other error causes you to suspect that an Aruba Fabric Composer VMware NSX-T
integration is not synchronized with VMware NSX-T, you can refresh the integration. A refresh re-fetches all
data for a selected integration and updates the cache for that integration.

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware NSX-T.
2. Select a VMware NSX-T Integration and then select Actions > Refresh NSX-T Integration.
3. At the Refresh NSX-T Integration confirmation prompt, select either OK to refresh the NSX-T
Integration cache or select Cancel to exit without refreshing the cache.

VMware vSphere
The VMware vSphere page is used to create configurations for Aruba switches.
To open the VMware vSphere page, in Aruba Fabric Composer, select Configuration > Integrations >
VMware vSphere.
The VMware vSphere page lists the current VMware vSphere configurations and enables you to add, edit, and
delete them.
The table provides the following information for each VMware vSphere configuration:

n Status: Status of the VMware vSphere Integration.

n Host: Fully qualified host name or IP address of the VMware vSphere host.
n Username: Username associated with each VMware vSphere configuration.
n Enabled: Whether VMware vSphere Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to the
VMware vSphere Integration.
n Name: User-defined name for the VMware vSphere Integration.
n Description: User-defined description of the VMware vSphere Integration.
n Auto Discovery; Select between auto discovery (Yes or No).
n Use CDP: Enables selecting between Yes and No for using Cisco Discovery Protocol (CDP) in the vSphere
configuration.
n Provisioning: Indicates provisioning status of the VMware vSphere configuration.
n Intermediate PVLAN Range: The PVLAN range Aruba Fabric Composer is allowed to modify.
n Automated Endpoint Group Provisioning: Indicates whether or not to automatically create Endpoint
Groups based on VM Tags.
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of the last update of VMware vSphere.

Adding a VMware vSphere Integration

Configure access between Aruba Fabric Composer and VMware vSphere by adding one or more VMware
vSphere configurations as follows:

VMware vSphere Plugin requires administrator privileges. Refer to the Specific Privileges table below for
specific privileges as applicable to specific requirements in Aruba Fabric Composer.

Aruba Fabric Composer 6.3.0 | User Guide 151

Chapter 14 | Configurations: Integrations

As many as 10 VMware vSphere Integrations can be configured.

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware vSphere.
2. Select Actions > Add or Edit. The VMware vSphere wizard opens.
3. Configure the following integration parameters:

Parameter
Tab Description Valid Values Default
Name

Name Enter a name for this integration.

Description Enter a description for this integration.

Host Enter the fully qualified host name or IP

address of the VMware vSphere host.

Username Enter the username to enable the Aruba

Fabric Composer to connect to the
Host VMware vSphere host. This needs to be a
user with appropriate permissions to
perform configuration or administrative
tasks within VMware vSphere. If the
vSphere Plug-in is going to be registered,
ensure that the user configured here has
enough permissions to perform plug-in
registrations within vSphere. Click the
following links for further information:
n Using Roles to Assign Privileges
n Required Privileges for Common Tasks
n Defined Privileges

Password Enter the password to enable the Aruba

Fabric Composer to connect to the
VMware vSphere host as the configured
user.

Validate Check this box to enable validation of Checked or Unchecked

SSL/TLS SSL/TLS certificate chains for Aruba Fabric unchecked
certificates Composer when connecting to VMware
for Aruba vSphere.
Host Fabric
Composer

Enable this Check this box to enable this VMware Checked or Checked
configuration vSphere Integration. The field is checked unchecked
by default to enable the integration.

Validate Click Validate to validate the N/A

configuration and its connection. A
Validation Successful pop-up should be
returned.

Configurations: Integrations | 152

 Chapter 14 | Configurations: Integrations

Parameter
Tab Description Valid Values Default
Name

Automated Checking this field enables Aruba Fabric Checked or Unchecked

VLAN Composer to automatically provision unchecked
provisioning VLAN Groups in Aruba Fabric Composer
for ESX Hosts based on the VLANs used by Virtual
directly Machines and VMKernel Adapters running
connected to on VMware ESX. This field must be
the fabric checked (enabled) for automation of this
function to occur. This field is unchecked
(disabled) by default.
Aruba
Fabric
VLAN Range Enter the VLAN range that Aruba Fabric Individual VLAN
Composer is allowed to modify as part of VLANs and range 1-
an integration. An empty VLAN Range will ranges, 4094.
prevent Aruba Fabric Composer from separated by
modifying VLANs. commas; for
example: 5,10-
45,102.
The range of
valid VLANs is
1-4094.

Automated In an environment where intermediate Checked or Unchecked

VLAN switches appear between the Fabric unchecked
provisioning Composer and the host environment, this
for ESX Hosts feature enables Aruba Fabric Composer
connected to automatically provision VLAN Groups
through for ESX hosts connected through the
intermediate intermediate switches based on the
switches VLANs used by Virtual Machines and
VMKernel Adapters running on VMware
ESX. For example, with VMware vSphere
integrated with HPE Synergy systems,
checking this field automates the
provisioning of VLAN groups in the Fabric
Composer based on VLANs and VMs
within the HPE Synergy environment. This
needs to be checked (enabled) for
Aruba automation of this function to occur. This
Fabric field is unchecked(disabled) by default.

NOTE: The intermediate switch also

requires LLDP Transmit to be configured,
advertising to the Fabric Composer
switches and to the ESXi vSwitches.

Intermediate Automated PVLAN provisioning for ESX Enter the PVLAN

VLAN Range hosts directly connected to the Fabric. PVLAN range range 1-
Checking this field enables automatic that Aruba 4094.
provisioning of PVLANs based on the Fabric
PVLANs configured on a distributed port Composer is
group of a distributed switch. This field allowed to
must be checked (enabled) for automation modify as part of
of this function to occur. This field is an integration.
unchecked (disabled) by default. An empty

Aruba Fabric Composer 6.3.0 | User Guide 153

Chapter 14 | Configurations: Integrations

Parameter
Tab Description Valid Values Default
Name

PVLAN range
will prevent
Aruba Fabric
Composer from
modifying
PVLANs.
Individual
PVLANs and
ranges,
separated by
commas; for
example: 5,10-
45,102.
The range of
valid VLANs is
1-4094.

Automated Automated Endpoint Group Provisioning. Checked or Unchecked

Optimization Selecting this field will trigger an unchecked
of vSAN automatic provisioning of Endpoint
Traffic Groups based on tags assigned to VMs.
This will assist in creating rules for
network policies. This field is unchecked
(disabled) by default.

Discovery Checking this field enables discovery Checked or Unchecked

protocols protocols (LLDP and CDP) on vSphere unchecked
switches. This must be enabled for Host
visualization to fully function. This field is
unchecked (disabled) by default.
LLDP is not supported by VMware on
standard vSwitches.
vSphere
Use CDP If automatic discovery is enabled, Checked or Unchecked
when checking this field automatically enables unchecked
configuring CDP on vSwitches and Distributed
distributed vSwitches. Leaving this field unchecked
vSwitches enables LLDP. This field is unchecked
(disabled) by default.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

4. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
5. Repeat the steps above to add additional VMware vSphere integrations.

Specific Privileges
Refer to the table below for specific administrator privileges as applicable to specific requirements in Aruba
Fabric Composer.

Configurations: Integrations | 154

 Chapter 14 | Configurations: Integrations

Privilege Resource Use Case Source

All dvPort group DVportGroups Creating DVPortGroups/Micro- dvPort Group

privileges segmentation workflows.
Privileges

All Distributed Switch DVswitches n VLAN privisioning (LLDP settings) Distributed Switch
Privileges Privileges
n Micro-segmentation workflows

[Link] Privilege Many General Integration

Administrative VMware Registration of Aruba Fabric Composer Extension Privileges

Privileges Plugin VMware Plugin.

Editing a VMware vSphere Integration

To edit a VMware vSphere Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware vSphere.
2. Click the button next to the VMware vSphere configuration to edit and then select Actions > Edit.
3. In the VMware vSphere Configuration window, make changes to the fields as needed. Click a tab to
edit the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Aruba Fabric Composer 6.3.0 | User Guide 155

Chapter 14 | Configurations: Integrations

Registering the vSphere Plug-in with VMware

Before you can use the vSphere Plug-in, in the Aruba Fabric Composer UI, you must:

n Have already created one vSphere configuration as described in Adding a VMware vSphere Integration on
page 151.
n Register the vSphere Plug-in with VMware as described in this section.

When the vSphere plug-in is registered, bi-directional communication must be available between Aruba
Fabric Composer and VMware vSphere (that is, Aruba Fabric Composer must be able to reach vSphere,
and vSphere must be able to reach Aruba Fabric Composer). If this communication is not available, the
plug-in registration will fail. However, it will be reported as successfully registered.
Ensure that the user configured in the vSphere integration configuration has appropriate permissions to
perform plug-in registrations within vSphere.

To register the vSphere Plug-in with VMware:

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware vSphere.
2. Select a vSphere Integration that needs the plug-in registered and then select Actions > Register
Plug-in.
3. At the Register Plug-in confirmation prompt, click OK to register the plug-in with VMware or Cancel to
exit. When the registration completes, a success notification momentarily appears.

After registering the vSphere Web Client Plug-in from the Aruba Fabric Composer UI, and when
you open the vSphere Plug-in UI, you must first configure Aruba Fabric Composer authentication.
Once configured, the full Aruba Fabric Composer UI can be run within vSphere.

Refreshing a VMware vSphere Integration

If a connection error or other vSphere error causes you to suspect that an Aruba Fabric Composer VMware
vSphere Integration is not synchronized with vSphere, you can refresh the VMware vSphere Integration. A
refresh re-fetches all data for a selected integration and updates the cache for that integration.

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware vSphere.
2. Select a VMware vSphere Integration and then select Actions > Refresh vSphere Integration.
3. At the Refresh vSphere Integration confirmation prompt, select either OK to refresh the VMware
vSphere Integration cache or select Cancel to exit without refreshing the cache.

Running Aruba Fabric Composer in the VMware vSphere Client

Aruba Fabric Composer can be run as a window in the VMware vSphere Client UI. Once in the VMware
vSphere Client UI, after configuring the Aruba Fabric Composer for the first time, you will have all of the
viewing and configuration features available in the Aruba Fabric Composer.

Updating Aruba Fabric Composer Certificate and Authentication in vSphere

Before you can run Aruba Fabric Composer from a vSphere window, from the VMware vSphere UI, you need
to configure Aruba Fabric Composer Certificates and Authentication as described in the below procedure.

Configurations: Integrations | 156

 Chapter 14 | Configurations: Integrations

This procedure assumes that you have already created a VMware vSphere configuration as described in
Adding a VMware vSphere Integration on page 151 and registered the VMware vSphere plug-in as
described in Registering the vSphere Plug-in with VMware on page 156.

1. In the VMware vSphere UI, select Administration > Aruba Fabric Composer > Settings.
2. In the Certificates tab, create a certificate by entering in the Aruba Fabric Composer URL and clicking
+ADD CERTIFICATE.
3. In the Authentication tab, verify the Hostname and Username used to connect to Aruba Fabric
Composer.
4. If this is an initial configuration or if an update is needed, click Update Settings.
5. Enter the login credentials that have been previously configured to log in to Aruba Fabric Composer.
These credentials only enable the Aruba Fabric Composer Plug-in to log in to Aruba Fabric Composer;
they do not change the actual credentials. These settings are:
n Hostname: Enter the fully qualified host name or IP address of Aruba Fabric Composer.
n Username: Enter the username to connect to Aruba Fabric Composer. The user of an Aruba Fabric
Composer account must be an administrator; the default administrator account is admin.
n Password: Enter the password to connect to Aruba Fabric Composer.

6. Save the settings.

7. You can now open the Aruba Fabric Composer vSphere plug-in as described in the next section.

Opening the Aruba Fabric Composer vSphere Plug-in

The Aruba Fabric Composer plug-in places no browser restrictions beyond browsers approved by
VMware.

In the VMware vSphere UI, open the Aruba Fabric Composer plug-in. For example:

n In the VMware vSphere Client, select Menu > Aruba Fabric Composer, or
n In the VMware vSphere Client, click vSphere Client and in the left-hand menu bar click Aruba Fabric
Composer.

The Aruba Fabric Composer Home page opens in the vSphere Workspace (content area).

Leaving the Aruba Fabric Composer window will terminate the Aruba Fabric Composer session without
retaining unsaved changes; you will lose unsaved changes.

The following message in VMware vSphere indicates that the certificate and credential are not configured, or
Aruba Fabric Composer is not reachable. Verify the Aruba Fabric Composer certificate and authentication as
described above.

Aruba Fabric Composer settings are not valid or not configured. Navigate to the
Administration option and then select Aruba Fabric Composer > Settings.

VMware SDDC Integration

Aruba Fabric Composer 6.3.0 | User Guide 157

Chapter 14 | Configurations: Integrations

The Configuration > Integrations > VMware SDDC page is used to create configurations for Aruba
switches.
The VMware SDDC page lists the current VMware SDDC configurations and enables you to add, edit, and
delete them.
The table provides the following information for each VMware SDDC configuration:

n Status: Status of the VMware SDDC configuration.

n Host: Fully qualified host name or IP address of the VMware SDDC host.
n Username: Username associated with each VMware SDDC configuration.
n Enabled: Whether VMware SDDC Integration is enabled or disabled.
n Verify SSL: Validation of SSL/TLS certificate chains for Aruba Fabric Composer when connecting to VMware
SDDC.
n Name: User-defined name for the VMware SDDC Integration.
n Description: User-defined description of the VMware SDDC Integration.
n Fault Message: Fault message or alert in case of a connection failure.
n Last Successful Connection: Time of last successful connection.
n Last Update Time: Time of the last update of VMware SDDC.

Adding a VMware SDDC Integration

Configure access between Aruba Fabric Composer and a VMware SDDC host by adding one or more VMware
SDDC integrations as follows:

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware SDDC and then select
Actions > Add. The VMware SDDC wizard opens.

Configurations: Integrations | 158

 Chapter 14 | Configurations: Integrations

2. Configure the following VMware SDDC Integration parameters:

Parameter Valid
Tab Description Default
Name Values

Name Enter a name for this integration. None

Description Enter a description for this integration. None

Host Enter the fully qualified host name or IP None

address of the VMware SDDC host.

Username Enter the username to enable the Aruba Fabric None

Composer to connect to the VMware SDDC host.
Without DNS, everything needs to be
configured consistently with regards to using
hostname or IP address. This includes
configuring VMware SDDC Manager with the
right type of hostname for communicating with
the host.

Host Password Enter the password to enable the Aruba Fabric None
Composer to connect to the VMware SDDC
host as the configured user.

Validate Check this box to enable validation of SSL/TLS Checked Unchecked

SSL/TLS certificate chains for Aruba Fabric Composer or
certificates when connecting to VMware SDDC. unchecked
for Aruba
Fabric
Composer

Enable this Check this box to enable this VMware SDDC Checked Checked
configuration integration. The field is checked by default to or
enable the integration. unchecked

Validate (Recommended) Click Validate to validate the N/A N/A

configuration and its connection. A Validation
Successful pop-up should be returned.

This tab lists all configured parameters for you to verify. Verify these parameter values. If you
Summary
need to make any changes, open the tabs and update as needed.

3. When you have completed and verified all parameters, click Apply to complete and save the
configuration or Cancel to exit the wizard without saving.
4. Repeat the steps above to add additional VMware SDDC configurations.

Editing a VMware SDDC Integration

To edit a VMware SDDC Integration:

1. In Aruba Fabric Composer, select Configuration > Integrations > VMware SDDC.
2. Click the button next to the VMware SDDC Integration to edit and then select Actions > Edit.
3. In the VMware SDDC Configuration window, make changes to the fields as needed. Click a tab to edit
the settings on that tab.

Aruba Fabric Composer 6.3.0 | User Guide 159

Chapter 14 | Configurations: Integrations

4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting an Integration Configuration

To delete an integration, select the check box for the integration to delete and then select Actions > Delete.
At the confirmation prompt, click either OK to continue deleting the integration configuration or Cancel to
retain the configuration.

Configurations: Integrations | 160

 Chapter 15
Configurations: Policy

Configurations: Policy
The Configurations > Policy page provides access to configure the following Aruba Fabric Composer policy
features:

n Policy Groups
n Policies
n Rules
n Endpoint Groups
n Applications
n Service Qualifiers
n Microsegmentation
n Firewall Log
n Firewall Profiles
n PSM Alerts

Policy Groups
You use the Policy Groups page to create logical collection of stateful and stateless policies for a given Fabric.
To open the Policy Groups page, in Aruba Fabric Composer, select Configuration > Policy > Policy
Groups.
The Policy Groups page lists the current configurations and enables you to add, edit, or delete them.
The Policy Groups table provides the following information for each configuration:

n Health: In the drop-down list, select from Healthy, Healthy, But, Upgrading, Degraded, Minor, Major,
Critical, Unknown, and Non Recoverable.
n Name: User-defined name for the Policy Groups configuration.
n Description: User-defined description of the Policy Groups configuration.

Adding a Policy Group

To add a new Policy Group:

1. In Aruba Fabric Composer, select Configuration > Policy > Policy Groups.
2. Select Actions > Add. The Policy Group window appears.
3. In the Name page, complete the following fields:
n Name: Enter any non-empty string, for example, My Policy Group, as a name for the Policy Group.
n Description: Enter a description of the Policy Group.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Policies page, set the Policies to include in this group. Select Actions > Add > and choose either
New (to create a new policy group) or Existing (to choose an existing policy group). If you choose to
create a new policy group:

Aruba Fabric Composer 6.3.0 | User Guide 161

Chapter 15 | Configurations: Policy

n Name: Enter any non-empty string, example, Policy-1.

n Description: Enter a description of Policy-1.

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Settings page, select a required type.
n Type: In the drop-down list, select from the options, Distributed Firewall, L2 ACL, or L3 ACL.

8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Rules page, set one or more Rules on the Policy. Click Actions > Add > New to create a new
Rule. You can also select Existing to choose an existing Rule.

Parameter Valid
Tab Description Default
Name Values

Name Assign a name for the Rule. Any non-

empty
Name string, for
example,
Rule-1.

Description Enter a description for the

Resource Pool. Click Next.

Action Select from either Allow or

Action Drop from the drop-down
list. Click Next.

Source Select from an existing

Endpoint endpoint group or click Add
Group to add a new endpoint
Endpoint group.
Groups
Destination Select from an existing
Endpoint destination endpoint group
Group or click Add to add a new
destination endpoint group.

Applications Applications Select or Add Application.

and Service
Qualifiers Service Select or Add Service
Qualifiers Qualifiers.

This tab lists all configured parameters for you to verify. If you need to
Summary make any changes, click Back to open the tabs and update as needed. Click
Next to go apply the Rules and go back to the Policy Group page.
10.

11. In the Enforcers page, select a Fabric, Direction, VRF, and a Network from their respective drop-down
lists.
12. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
13. Click Apply to apply the policy or Cancel to exit without saving.

Configurations: Policy | 162

 Chapter 15 | Configurations: Policy

Editing a Policy Group

To edit a Policy Group:

1. In the Aruba Fabric Composer UI, select Configuration > Policy > Policy Groups.
2. Click the button next to the Policy Group to edit and then select Actions > Edit.
3. In the Edit Policy Group Configuration window, make changes to the fields as needed. Click a tab to
edit the settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a Policy Group

To delete a Policy group:

1. In Aruba Fabric Composer, select Configuration > Policy > Policy Groups.
2. In the row for the group to delete, click the checkbox to select the group, and then select Actions >
Delete.
3. In the confirmation pop-up, click OK to delete the group or Cancel to retain the group.

Policies
You use the Policies page to create policies that contain rules and define which enforcement point is used.
To open the Policies page, in Aruba Fabric Composer, select Configuration > Policy > Policies.
The Policies page lists the current Policies and enables you to add, edit, or delete them.
The Policies table provides the following information for each Policy configuration:

n Health: The health of the switch (Healthy, Health, But, Upgrading, Degraded, Minor, Major, Critical,
Unknown, and Non Recoverable).
n Name: User-defined name for the Policy configuration.
n Type: Type of the Policy (Distributed Firewall, L2 ACL, or L3 ACL).
n Enforcer Direction: Ingress or Egress.
n Enforcer Type: Port, LAG, or Network.
n Enforcer: Name of the Enforcer rule.
n Policy Groups: Name of the Policy Group.

Adding a Policy
To add a new Policy:

1. In Aruba Fabric Composer, select Configuration > Policy > Policies.

2. Select Actions > Add. The Policy configuration window appears.
3. In the Name page, complete the following fields:
n Name: Enter any non-empty string, for example, Policy1, as a name for the Policy.
n Description: Enter a description of the Policy.

4. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

Aruba Fabric Composer 6.3.0 | User Guide 163

Chapter 15 | Configurations: Policy

5. In the Settings page, select a required type.

n Type: In the drop-down list, select from the options, Distributed Firewall, L2 ACL, or L3 ACL.

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Rules page, set one or more Rules on the Policy. Click Actions > Add > New to create a new
Rule. You can also select Existing to choose an existing Rule.

Parameter Valid
Tab Description Default
Name Values

Name Assign a name for the Rule. Any non-

empty
Name string, for
example,
Rule-1.

Description Enter a description for the

Resource Pool. Click Next.

Action Select from either Allow or

Action Drop from the drop-down
list. Click Next.

Source Select from an existing

Endpoint endpoint group or click Add
Group to add a new endpoint
Endpoint group.
Groups
Destination Select from an existing
Endpoint destination endpoint group
Group or click Add to add a new
destination endpoint group.

Applications Applications Select or Add Application.

and Service
Qualifiers Service Select or Add Service
Qualifiers Qualifiers.

This tab lists all configured parameters for you to verify. If you need to
Summary make any changes, click Back to open the tabs and update as needed. Click
Next to go apply the Rules and go back to the Policy Group page.
8.

9. In the Enforcers page, select a Fabric, Direction, VRF, and a Network from their respective drop-down
lists.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to apply the policy or Cancel to exit without saving.

Editing a Policy
To edit a Policy:

Configurations: Policy | 164

 Chapter 15 | Configurations: Policy

1. In the Aruba Fabric Composer UI, select Configuration > Policy > Policies.
2. Click the button next to the Policy to edit and then select Actions > Edit.
3. In the Edit Policy Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a Policy
To delete a Policy:

1. In Aruba Fabric Composer, select Configuration > Policy > Policies.

2. In the row for the policies to delete, click the checkbox to select the policy and then select Actions >
Delete.
3. In the confirmation pop-up, click OK to delete the group or Cancel to retain the group.

Cloning a Policy
To clone a Policy:

1. In Aruba Fabric Composer, select Configuration > Policy > Policies.

2. In the row for the policies to clone, click the checkbox to select the policy and then click Actions >
Clone.

Rules
You use the Rules page to create rules that consist of Source/Destination Endpoint Groups,
Application/Qualifiers, and Actions.
To open the Rules page, in Aruba Fabric Composer, select Configuration > Policy > Rules.
The Rules page lists the current rules and enables you to add, edit, or delete them.
The Rules table provides the following information for each rule:

n Name: User-defined name for the rule.

n Description: User-defined description of the rule.
n Type: Type of rule (Layer 2 or Layer 3).
n Action: Indicates the action of the rule (Allow or Drop).
n Source Endpoint Groups: Name of the source endpoint groups.
n Source Endpoint Group IPv4 Addresses: IPv4 addresses of the source endpoint group.
n Destination Endpoint Groups: Name of the destination endpoint groups.
n Destination Endpoint Group IPv4 Addresses: IPv4 addresses of the destination endpoint group.
n Applications: Name of the application using the rule.
n Service Qualifiers: Name of the Service Qualifiers.
n Service Qualifier Source Ports: Name of the source ports of the service qualifier.
n Service Qualifier Dest Ports: Name of the destination port of the service qualifier.
n Service Qualifier IP Protocols: Protocols being used by the service qualifier (TCP, ICMP, or Any).
n Policies: Names of the policies governing the rule.

Aruba Fabric Composer 6.3.0 | User Guide 165

Chapter 15 | Configurations: Policy

Adding a Rule
To add a new Rule:

1. In Aruba Fabric Composer, select Configuration > Policy > Rules.

2. Select Actions > Add. The Rule configuration window appears.
3. In the Name page, complete the following fields:
n Name: Enter any non-empty string, for example, Rule-1, as a name for the Rule.
n Description: Enter a description of the Rule.

4. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
5. In the Settings page, select a required type and action.
n Type: In the drop-down list, select from the options (Layer 2 or Layer 3).
n Action: In the drop-down list, select from the options (Allow and Drop).

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Endpoint Groups page, select one or more Source and Destination Endpoint Groups. You can
also click Add to create new Source or Destination Endpoint Groups.
8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Applications and Service Qualifiers page, select or add either Application or Service Qualifiers.
10. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
11. Click Apply to apply the rule or Cancel to exit without saving.

Editing a Rule
To edit a Rule:

1. In the Aruba Fabric Composer UI, select Configuration > Policy > Rules.
2. Click the checkbox next to the Rule to edit and then select Actions > Edit.
3. In the Edit Rule Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting a Rule
To delete a Rule:

1. In Aruba Fabric Composer, select Configuration > Policy > Rules.

2. In the row for the rules to delete, click the checkbox to select the rule and then select Actions >
Delete.
3. In the confirmation pop-up, click OK to delete the rule or Cancel to retain the rule.

Cloning a Rule

Configurations: Policy | 166

 Chapter 15 | Configurations: Policy

To clone a rule:

1. In Aruba Fabric Composer, select Configuration > Policy > Rules.

2. In the row for the rules to clone, click the checkbox to select the rule and then click Actions > Clone.

Endpoint Groups
You use the Endpoint Groups page to create collection of endpoints that can be defined by IPv4 or
VMname/Tag.
To open the Endpoint Groups page, in Aruba Fabric Composer, select Configuration > Policy > Endpoint
Groups.
The Endpoint Groups page lists the current configurations and enables you to add, edit, or delete them.
The Endpoint Groups table provides the following information for each configuration:

n Name: Indicates the name of the endpoint group.

n Description: Indicates the description of the endpoint group.
n Type: Indicates the type of the endpoint group (Layer 2 or Layer 3).
n IPv4 Addresses: Indicates the IP address of the endpoint group.
n MAC Addresses: Indicates the MAC address of the endpoint group.
n Rules: Indicates the name of the rule governing this endpoint group.

Adding an Endpoint Group

To add an Endpoint Group:

1. In Aruba Fabric Composer, select Configuration > Policy > Endpoint Groups.
2. Select Actions > Add. The Endpoint Groups Configuration window appears.
3. In the Name page, complete the following fields:
n Name: Enter any non-empty string. For example, EndpointGroup1.
n Description: Enter a description of the Endpoint Group.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Type page, select the required Type from the drop-down list: Choose either Layer 2 or Layer 3.
6. Click Next to go to the next page or Cancel to exit without saving.
7. In the Endpoints page, add one or more IPv4 Address endpoints. Select between
VM/VNIC/VMKernel Endpoint or Manual Endpoint entry to manually enter the IPv4 Address.
8. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
9. In the Summary page, check the fields for accuracy and click Apply to create the Endpoint Group or
Cancel to exit without saving.

Editing an Endpoint Group

To edit an Endpoint Group:

1. In the Aruba Fabric Composer UI, select Configuration > Policy > Endpoint Groups.
2. Select the checkbox next to the Endpoint Group to edit and then select Actions > Edit.

Aruba Fabric Composer 6.3.0 | User Guide 167

Chapter 15 | Configurations: Policy

3. In the Endpoint Groups wizard page, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
get applied to all associated fabrics and switches.

Deleting an Endpoint Group

To delete an Endpoint Group:

1. In the Aruba Fabric Composer UI, select Configuration > Policy > Endpoint Groups.
2. Select the checkbox next to the Endpoint Group to delete and then select Actions > Delete.
3. In the confirmation pop-up box, click OK to delete the endpoint group or Cancel to retain the
endpoint group. When you click OK, the deleted endpoint group gets removed from all associated
fabrics and switches.

Configurations: Policy | 168

 Chapter 15 | Configurations: Policy

Applications
You use the Applications page to create collection of Service Qualifiers that are mostly used for ACLs.
To open the Applications page, in Aruba Fabric Composer, select Configuration > Policies > Applications.
The Applications table provides the following information for each configuration:

n Name: User-defined name for the application configuration.

n Description: User-defined description of the application configuration.
n Service Qualifiers: Name of the Service Qualifiers.
n Service Qualifier Source Ports: Source ports of the Service Qualifier.
n Service Qualifier Dest Ports: Destination ports of the Service Qualifier.
n Service Qualifier IP Protocols: Protocols of the Service Qualifier, for example, TCP, ICMP, or Any.
n Rules: Name of the Rules governing the application.

Adding an Application
To add an Application:

1. In Aruba Fabric Composer, in the Configuration > Policies > Applications page, select Actions, and
then click Add. The Application Configuration wizard opens.
2. Configure the following parameters as needed:

Parameter Valid
Tab Description Default
Name Values

Name Assign a name for the Service Any non-

Qualifier. empty
string, for
Name
example,
Application-
1.

Description Enter a description for the Service

Qualifier. Click Next.

Qualifiers Select from the drop-down list or click

Add to create a new Service Qualifier.
Service
See Adding a Service Qualifier for
Qualifiers
detailed information. Click Next.

This tab lists all configured parameters for you to verify. If you need to make
Summary
any changes, click Back to open the tabs and update as needed.

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the Application, Back to go back and change a setting, or Cancel to exit this configuration
without saving.

Editing an Application
To edit an Application:

Aruba Fabric Composer 6.3.0 | User Guide 169

Chapter 15 | Configurations: Policy

1. In Aruba Fabric Composer, in the Configuration > Policies > Application page, select the Application
you need to edit and then select Actions > Edit. The Application Configuration wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the Application, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Deleting an Application
To delete an Application:

1. In the Aruba Fabric Composer UI, in the Configuration > Policies > Applications page, select the
Application(s) to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the Application(s) or Cancel to retain the Application(s).

Service Qualifiers
You use the Service Qualifiers page to create Service Qualifiers that contain a list of ports/protocols.
To open the Service Qualifiers page, in Aruba Fabric Composer, select Configuration > Policy > Service
Qualifiers.
The Service Qualifiers page lists the current configurations and enables you to add, edit, or delete them.
The Service Qualifiers table provides the following information for each configuration:

n Name: User-defined name for the configuration.

n Description: User-defined description of the configuration.
n Type: Type of Service Qualifier (Layer 2 or Layer 3).
n VLANs: Names of the VLANs associated with the Service Qualifiers.
n Ethertype: Ethertype of the Service Qualifier.
n IP Protocol: Protocol associated with the Service Qualifier (TCP, UDP, ICMP, and so on).
n Source Ports: Source Ports of the Service Qualifiers.
n Destinations Ports: Destination Ports of the Service Qualifiers.
n Rules: Name of the Rule associated with the Service Qualifiers.
n Applications: Name of the Application associated the Service Qualifiers.

Adding a Service Qualifier

To add a Service Qualifier:

1. In Aruba Fabric Composer, in the Configuration > Policies > Service Qualifiers page, select
Actions, and then click Add. The Service Qualifier Configuration wizard opens.

Configurations: Policy | 170

 Chapter 15 | Configurations: Policy

2. Configure the following parameters as needed:

Parameter Valid
Tab Description Default
Name Values

Name Assign a name for the Service Any non-

Qualifier. empty
string, for
Name
example,
Service-
Qualifier-1.

Description Enter a description for the Service

Qualifier. Click Next.

Type Select from either Layer 2 or Layer 3

Settings from the drop-down list.

IP Protocol Enter a number between 0 and 255, or

'tcp' 'icmp', or 'any'. For example: tcp

Source Port Enter 'any', a number, set, or range

between 1-65535.

Destination Enter 'any', a number, set, or range

Port between 1-65535. Click Add to add the
settings or Clear to clear the entries
and start over again. Click Next if you
wish to proceed.

This tab lists all configured parameters for you to verify. If you need to make any
Summary
changes, click Back to open the tabs and update as needed.

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the Service Qualifier, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Editing a Service Qualifier

To edit a Service Qualifier:

1. In Aruba Fabric Composer, in the Configuration > Policies > Service Qualifiers page, select
Actions, and then click Edit. The Service Qualifiers Configuration wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the Service Qualifier, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Deleting a Service Qualifier

To delete a Service Qualifier:

1. In the Aruba Fabric Composer UI, in the Configuration > Policies > Service Qualifiers page, select
the Service Qualifier(s) to delete, and then select Actions > Delete.

Aruba Fabric Composer 6.3.0 | User Guide 171

Chapter 15 | Configurations: Policy

2. At the confirmation prompt, click OK to delete the Service Qualifier or Cancel to retain the Service
Qualifier.

Microsegmentation
As an orchestrator of the Data Center infrastructure, Aruba Fabric Composer manages and automates
network and compute/storage infrastructure and can use API-based, third-party integrations. These
integrations can be used to create microsegmentation on the compute host and the network from a single
UI.
Aruba Fabric Composer orchestrates end-to-end microsegmentation functionality in conjunction with:

n A hypervisor, to create PVLAN-based segmentation. For example, vSphere.

n Aruba CX switches, to match network-level PVLAN-based segmentation.
n Pensando components, to allow Aruba Fabric Composer append the segmentation with firewall policies and
rules.

Therefore, when orchestrating a microsegmentation solution, Aruba Fabric Composer focuses on two main
concepts: Segmentation and Policies.

n Segmentation, which is responsible for isolation of endpoints. This is done by PVLAN implementation.
n Policies, which consist of rules that execute actions for endpoints. This is done by permit/deny/log and so
on.

In Aruba Fabric Composer 6.3.0, policies must be enforced by the Stateful Distributed Firewall.

Creating a Microsegmentation
To create a new Microsegmentation:

1. In Aruba Fabric Composer, select Configuration > Policy > Microsegmentation

2. Click Action > Add. The Distributed Virtual Switch (DVS) Configuration window appears.
3. In the Settings page, enter a required name and NICs from the selected host:
n Name: Enter a name for the DVS configuration.
n Host: Select a Host from the drop-down list that is populated from the vSphere integration.
n NICs: Select NICs from the drop-down list that will serve as your uplinks from the host to the switch
Fabric. Click Add once all your NICs have been selected or click Clear if you need to start over. Repeat
for any new Host selection.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the PVLAN page, configure optional Primary and Isolated VLANs:
n Port Group Name Prefix: Enter a prefix name for the port groups to be created.
n Primary VLAN: Enter a VLAN between 2 and 4094.
n Isolated VLAN: Enter a VLAN between 2 and 4094.
n Click Add to add the Primary VLAN and Isolated VLAN to the list or click Clear to clear the list and start
over again.

Configurations: Policy | 172

 Chapter 15 | Configurations: Policy

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.

7. In the VRF page, configure optional Network and SVI:

n Fabric: Select a Fabric from the drop-down list.
n VRF: Select a VRF from the drop-down list or click Add to open the VRF Configuration window. Then,
proceed to configure the VRF as in VRF. Once the VRF configuration is applied, the VRF will be
automatically selected.

VRF configuration is already applied to the system even if you cancel out the microsegmentation
configuration at this point.

n Network: Select a network from the drop-down list or click Add to open the Network Configuration
window. Then, proceed to configure a Network as in Networks. Once the Network configuration is
applied, the Network will be automatically selected.

Most of the fields are pre-populated and editable except for VLAN.

PSM Integration is required for Network configuration.

Network configuration is already applied to the system even if you cancel out of the
microsegmentation configuration at this point.

n SVI: Select an SVI from the drop-down list or click Add to open the IP Interface Configuration
window. Then, proceed to configure an SVI as in Adding an IP Interface. Once the SVI configuration is
applied, the SVI will be automatically selected.

Some of the fields are pre-populated and most of the fields are editable except for Name.

8. Disable ICMP Redirect on all switches within the selected Fabric. Select to disable ICMP Redirects as
switches have this feature enabled by default.
9. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
10. In the Policy page, select a policy from the drop-down list or click Add to open the Policy Configuration
window. Then, proceed to configure the policy as in Adding a Policy. Once the policy configuration is
applied, the Policy will be automatically selected.
11. In the Summary page, check the fields for accuracy. If you need to change anything, click Back and
make changes as needed.
12. Click Apply to apply the DVS configuration or Cancel to exit without saving.

Updating a Microsegmentation
To update a Microsegmentation:

1. In Aruba Fabric Composer, select Visualizations > Hosts.

2. Right click on a Host and then click Update Microsegmentation. The Update Microsegmentation
window appears.

Aruba Fabric Composer 6.3.0 | User Guide 173

Chapter 15 | Configurations: Policy

3. Select, from the drop-down lists, a required DVS and NICs from the selected host.
4. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the Microsegmentation or Cancel to exit this configuration without saving.

Firewall Log
The Firewall Log provides the following information:

n Name: User-defined name for the Firewall Log.

n Facility: Choose a transport facility from the drop-down list.
n Severity: Choose between All, ALLOW, and DENY.
n Format: Choose between Syslog-BSD and Syslog-RFC5424.
n Logging Enabled: Enable or Disable logging.
n Host: Host name.
n Port: Name of the port.
n Transport: Transport protocol (for example, UDP).
n Applies to: Name of the Fabric to which this log applies.

Adding a Firewall Log

To add a Firewall Log:

1. In Aruba Fabric Composer, in the Configuration > System > Firewall Log page, select Actions, and
then click Add. The Firewall Log Configuration wizard opens.
2. Configure the following parameters as needed:

Parameter Valid
Tab Description Default
Name Values

Name Name Assign a name for the Firewall Any non-

Prefix Log. empty string,
for example,
firewall log-1.

Fabrics Select the Fabric in which to

apply this configuration. A Fabric
implies that all Switches
contained within it.
Application
Switches Select the Switch in which to
apply this configuration. Note
that this is not applicable when a
Fabric is selected.

Settings Facility Select a facility from the drop-

down list.

Configurations: Policy | 174

 Chapter 15 | Configurations: Policy

Parameter Valid
Tab Description Default
Name Values

Severity Select between All, Allow, and

Deny from the drop-down list.

Format Select between Syslog-BSD and

Syslog-RFC5424

Enable PSM Click the checkbox to enable

Target PSM Target.

Entries Host Enter a valid Hostname, IPv4, or

IPv6 address.

Port Enter a number between 1 and Any number

65535. between 1
and 65535.

Transport Select UDP from the drop-down

list. Click Add to add the
configuration or Clear to clear
the configuration.

Networks Networks Select the network.

Enable Select to enable or disable

Logging logging.

This tab lists all configured parameters for you to verify. If you need to make
Summary
any changes, click Back to open the tabs and update as needed.

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the Firewall Log, Back to go back and change a setting, or Cancel to exit this configuration
without saving.

Editing a Firewall Log.

To edit a Firewall Log:

1. In Aruba Fabric Composer, in the Configuration > System > Firewall Log page, select Actions, and
then click Edit. The Firewall Log Configuration wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the Firewall Log, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Deleting a Firewall Log

To delete a Firewall Log:

1. In the Aruba Fabric Composer UI, in the Configuration > System > Firewall Log page, select the
Firewall Log(s) to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the Firewall Log or Cancel to retain the Firewall Log.

Aruba Fabric Composer 6.3.0 | User Guide 175

Chapter 15 | Configurations: Policy

Firewall Profiles
Firewall Profiles allows you to view the current settings for the firewall aspect of any Pensando PSM instances
being managed through the Pensando PSM Integration.
The Firewall Profiles table provides the following information:

n Name
n Connection Tracking
n Session Idle Timeout
n TCP Timeout
n Detect App
n UDP Timeout
n Drop Timeout
n ICMP Timeout
n TCP Drop Timeout
n UDP Drop Timeout
n ICMP Drop Timeout
n TCP Close Timeout
n TCP Half-Closed Timeout
n UDP Active Session Limit
n ICPM Active Session Limit
n TCP Half-Open Session Limit
n TCP Connection Setup Timeout

Editing a Firewall Profile.

To edit a Firewall Profile:

1. In Aruba Fabric Composer, in the Configuration > System > Firewall Profiles page, select Actions,
and then click Edit. The Firewall Profiles Configuration wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the Firewall Log, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Configurations: Policy | 176

 Chapter 15 | Configurations: Policy

PSM Alerts
The Configuration > Policy > PSM Alerts page lists the below details of each Pensando PSM integration in
Aruba Fabric Composer.

n Message: System-generated error message.

n State: State of the PSM (Acknowledged, Open, or Resolved).
n Tenant: The manufacturer's product name of the switch.
n Severity: Severity of the error.
n PSM Link:
n PSM Events Link:
n Source:
n Created: Date and time stamp of when the error was created.
n Modified: Date and time stamp of when the error was modified.
n Total Hits:

Aruba Fabric Composer 6.3.0 | User Guide 177

 Chapter 16
Maintenance

Maintenance
The Maintenance option provides access to the following features to maintain the fabric and switches:

n Switches
n Audits
n Support Bundles
n Device Firmware
n Backups
n Switch Checkpoints
n Syslog
n High Availability
n Licenses

Switches
You can display the status of the leaf-spine fabric switches by selecting Configuration > Maintenance >
Switches, which displays the Switches page. This page also enables you to perform switch maintenance
tasks.

Switch Information
The Switches page displays the following information:

Column Description

Health* Switch health state. Possible values:

n Healthy
n Healthy, But...
n Upgrading
n Degraded
n Minor
n Major
n Critical
n Unknown
n Non Recoverable

Status* Switch status. Possible values:

n Synced
n Syncing
n Authenticate
n Sync Failure
n Connected
n Uninitialized
n Out of Fabric

Aruba Fabric Composer 6.3.0 | User Guide 178

Chapter 16 | Maintenance

Column Description

n Unresponsive

NAE Status Network Analytics Engine (NAE) status (CRITICAL, MAJOR, MINOR, NORMAL, DISABLED,
UNKNOWN)

Name* Unique switch name.

Description Standard or user-friendly description of the switch.

Hostname Fully qualified host name or IP address.

Fabric Fabric on which the switch resides.

Valid Password* Switch password fulfills the password policy and the default password has been changed.
Possible values: Yes or No.

Password Scope* Scope of the password for the Linux admin user on a switch. Possible values:
n Fabric
n Switch

IPv4 Mode IPv4 mode. Possible values:

n DHCP
n Static

IPv4 Address* Switch IPv4 address.

IPv4 Mask Switch IPv4 mask.

IPv4 Gateway Switch IPv4 gateway address.

IPv6 Mode Switch IPv6 Mode.

IPv6 Address Switch IPv6 address.

IPv6 Mask Switch IPv6 mask.

IPv6 Gateway Switch IPv6 gateway address.

MAC Address Switch MAC address.

Model* Switch model.

Hardware Revision Revision number of the hardware.

Serial Number Switch serial number.

Software Version* Switch software version installed on the switch.

Non-Active Non-active software version installed on the switch.

Software Version

Staged Software Not used with leaf-spine fabric.

Version*

Maintenance | 179
 Chapter 16 | Maintenance

Column Description

Software State Select from STAGING PENDING, STAGING, STAGING COMPLETE, STAGING FAILED,
UPGRADE PENDING, UPGRADING, UPGRADE COMPLETED, AND UPGRADE FAILED.

Platform Name Platform name assigned to the switch.

Available Firmware Firmware version available for upgrade.

Product Code Aruba model of each switch.

Fan Direction Not used with leaf-spine fabric.

TAA Compliant Indicator that the switch meets, or does not meet, Trade Agreements Act (TAA)
compliance. Possible values: Yes or No.

Role* Switches assigned role in the leaf-spine fabric. Possible values: Spine, Leaf, or Border
Leaf.

Reserved Reserved VLAN range between 1 to 4095

VLAN Range

Stats Enabled Whether statistics enabled or not for each switch.

VSX Peer Name of the switch's VSX Peer.

VSX Capabilities Switch's VSX capabilities:

Live, if VSX Switch, AOS-CX Version 10.07 or later installed and configured for VSX.
Sequenced, if VSX Switch, AOS-CX Version 10.06 installed and configured for VSX.
None, if no VSX switch or not configured for VSX.

VSX Update Status VSX Live Update status of switch during VSX Live update.

VSX Protocol Status VSX protocol status readiness for shutdown during VSX live update.

*Default displayed columns. To manage which columns display, use the Customize table contents tool.

Switch Maintenance Actions

You can perform the following maintenance activities on switches using the options available from the
Actions button:

Action Description

Discover Switches Discover a switch, which you can then assign to a Leaf-Spine Fabric.

Edit Edit the configuration of one or more switches.

Delete Delete a switch from the fabric after physically powering off and disconnecting the switch
from the fabric.

Assign Switch to Assign a switch to a fabric.

Fabric

Stage firmware Stage a firmware from a saved configuration.

Aruba Fabric Composer 6.3.0 | User Guide 180

Chapter 16 | Maintenance

Action Description

Reboot Reboot the selected switches.

Reconcile Synchronize the selected switches with the Aruba Fabric Composer configuration data.

Save Configuration Save the running configuration to the startup configuration for all selected switches.

Stage Firmware Stage a Firmware to the switch.

Update Update switch software.

DSM Only Distributed Services-capable switches are supported.

Statistics Enable or Disable.

Change Password Change a switch password.

Launch NetEdit Launch Aruba NetEdit from the UI console.

n Topology View Launch into the Aruba NetEdit topology view with switches selected.
n Details View
Launch into Aruba NetEdit details view for a single selected switch.

The Launch NetEdit option is available only if the Aruba NetEdit Integration is
configured and is managing the switch(es).

Editing a Switch Configuration

Editing a switch configuration enables you to define whether the switch uses DHCP or static IP for switch
access through the management port.
To edit a switch configuration:

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Switches.
2. Select the switch to edit and then select Actions > Edit.
3. In the Switch window, make changes to the switch configuration as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save the edits or Cancel to exit without saving.

Deleting a Switch Configuration

You can delete the configuration for a switch that is being permanently removed from the Aruba Fabric
Composer.

This is a destructive procedure and must not be performed if the switch is being replaced.
Also, you cannot delete a switch configuration for a switch that is currently in the fabric; this action will
not be allowed.

To delete the configuration for a switch that has been removed from the Aruba Fabric Composer:

Maintenance | 181
 Chapter 16 | Maintenance

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Switches.
2. Select the switch to remove from the fabric and then select Actions > Delete.
3. In the Delete confirmation window, click OK to delete the switch configuration or Cancel to exit
without any action.

Aruba Fabric Composer 6.3.0 | User Guide 182

Chapter 16 | Maintenance

Rebooting Switches
1. Select Configuration > Maintenance > Switches.
2. Check the box next to each switch that needs to be rebooted.

When issuing a reboot request to multiple fabric modules, do not include more than 10 modules
in the reboot request. Including more than 10 modules in the reboot request may cause fabric
communication instability, resulting in a failed reboot request for some modules.

3. Select Actions > Reboot.

4. At the confirmation prompt, click OK to reboot the switch(es) or Cancel to exit without rebooting.

Reconciling Switches
1. Select Configuration > Maintenance > Switches.
2. Check the box next to each switch that needs to be reconciled.

Issuing a reconcile may cause the selected switch(es) to experience changes in status as the
reconcile is performed. This may occur even if the switch is currently in the Synced state.

3. At the confirmation prompt, click OK to reconcile the switch(es) or Cancel to exit without rebooting.

Discover Switches
You use the Discover Switches wizard in Guided Setup to discover new switches.
You can also go to Configuration > Maintenance > Switches > Discover Switches
In Guided Setup, click Switches to open the wizard and enter the details of the switches to be discovered:

Parameter Name Description

Switches An IPv4 address, IPv6 address, Hostname and/or and IPv4 hyphenated range not to
exceed 256 switches.

admin Switch Password The switches admin account password for switch access. If the switches have no
password, this password will be set on them.

Confirm admin Switch Must match the admin Switch Password.

Password

afc_admin Account A password to be used for the afc_admin creation for switch access.
Password

Confirm afc_admin Must match the afc_admin Account Password.

Account Password

Click Apply to complete the process and exit or click Cancel to exit without making any changes.
After a switch is discovered, you can verify that it was discovered and displayed in the Switches page
(Configuration > Maintenance> Switches). See Switches on page 178.

Managing a Switch Password

Maintenance | 183
 Chapter 16 | Maintenance

When you add a fabric to Aruba Fabric Composer, you assign a password to the fabric, which sets the
password of the Linux admin user for all switches in the fabric. This procedure shows how to set unique
passwords for each switch if needed and how to revert a switch password back to the fabric password. The
process of configuring a switch password can be performed on more than one switch at a time.
To set a unique password for each switch:

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Switches.
The Switches page is displayed.
2. Select the switch requiring a new password and then select Actions > Change Password.
The Change Password dialog box is displayed.
3. Do one of the following:
n To configure a switch password, complete the following fields:

Parameter Description

Current Enter the current switch password, which can be the

fabric password or a switch-specific password.

Use Fabric Deselect this option if it is selected. The New and

Password Confirm fields become active.

New Enter the new password.

Confirm Enter the new password to confirm. The Apply button

becomes active.

n To revert a switch password back to the fabric password, enter the current password and select Use
Fabric Password. The Apply button becomes active.

4. Click Apply to complete the process and exit or click Cancel to exit without making any changes.

Upgrading Switches
If a newer switch software install image is staged for switches, upgrading the switches as described below will
reboot the switches using the staged image.

If you are upgrading to a new switch software version, before you perform the upgrade as described
below, you must first upload the new switch install image to the Aruba Fabric Composer and then stage
the install image to all switches to be upgraded. Uploading is performed from the window:
Configuration > Maintenance > Switch Images. Staging is performed from the window:
Configuration > Maintenance > Switches.
If you try to use this feature to revert the switch to an older software image, you may encounter issues if
the older image does not support features available in the current newer image.

To upgrade the switch software image for one or more switches:

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Switches.
2. In the Switches page, click the Refresh icon and make sure that the recently-staged switch image
appears in the 'Staged Software Version' column for the switch(es) to be upgraded.

Aruba Fabric Composer 6.3.0 | User Guide 184

Chapter 16 | Maintenance

3. Select the switches to upgrade and then select Actions > Upgrade.

Any switch being upgraded will reboot to complete the upgrade.

4. In the Upgrade Switch confirmation window:

a. You must check Accept the license agreement. You can view the license agreement and click
either the X or the OK button. Clicking OK does not accept the agreement; you must select the
check box.

b. You can optionally check the Perform the switch upgrades in parallel to upgrade all selected
switches at the same time.
Selecting Perform the switch upgrades in parallel upgrades ALL selected switches at the same
time. Depending on the number and distribution of switches in the fabric selected to upgrade, there
could be a significant impact on production traffic.

c. Click either Apply to upgrade the switches or Cancel to exit without upgrading.

Each switch upgrade takes several minutes.

If you upgrade multiple switches and did not check Perform the switch upgrades in parallel,
the switches will upgrade one at a time.

As each switch upgrades, the status is reported on the following UI pages:

n In the Health column on the Configuration > Maintenance > Switches page.
n On the Dashboard in the Fabrics panel by hovering over the yellow status indicator for that switch. A
window opens and indicates the Health as Upgrading.

5. To verify that the switch(es) have been successfully upgraded, refer to the Software Version column on
the Configuration > Maintenance > Switches page.

Onboarding a Replacement Switch

This section explains the steps necessary to add or onboard a replacement switch to Aruba Fabric Composer.

Guidelines
A successful switch replacement requires an up-to-date copy of the startup configuration from the switch to
be replaced. Therefore, it is recommended that, during the operation of an Aruba Fabric, the startup
configuration from each and every switch in the Fabric be periodically saved and made available in the event
of a total switch failure.
Aruba Fabric Composer-powered configuration changes that are not reflected in the most recent copy of the
startup configuration will not be present on the replacement switch and therefore will need to be restored
manually.

Process
To replace the switch software image for one or more switches:

Maintenance | 185
 Chapter 16 | Maintenance

1. Power off the switch, or otherwise isolate the defective switch from the network.
2. Assign a temporary IP address (one not known previously by Aruba Fabric Composer) to the
replacement switch management interface.
3. Install the switch firmware version that matches the switch to be replaced.
4. Using the CLI command, transfer the backup startup-configuration file to the replaced switch. Ensure
that this file is on a server accessible through the management interface using TFTP or SFTP protocols.
5. Using the show startup-config command, verify that the startup configuration is correct,
6. If using a static IP address for the management interface, just rebooting the switch is sufficient.
However, if using DHCP to assign IP addresses, then the DHCP server must be updated to assign the
correct IP address to a request matching the new switch's MAC address.

After the switch reboots, the replacement switch will assume the IP address of the switch that was replaced.
Aruba Fabric Composer will then contact the new switch and start a configuration-reconciliation process. The
resulting Aruba Fabric Composer configuration will then match the restored startup configuration.

Audits
In Aruba Fabric Composer, by selecting Configuration > Maintenance > Audits, you can view logged audit
messages which may be Events (informational) or Alarms.
Also, you can access this Audits page from the Dashboard Audits panel by clicking on either Alarms or
Events. This opens the Audits page with the table filtered to show either all alarms or all events, as selected.
The following information is provided with event time and description:

n Severity: Color-coded alarms that indicate the severity of the alarm. Severities include:
n ALERT: Red. An alert that urgently needs to be addressed.
n EMERGENCY: Red. An alert that urgently needs to be addressed.
n ERROR: Red. An alert that urgently needs to be addressed.
n CRITICAL: Red. A critical message that urgently needs to be addressed.
n WARNING: Yellow. A cautionary message.
n INFORMATIONAL: Gray. A message that provides non-alarm information about a component.
n UNSPECIFIED: Gray. A message that provides non-alarm information about a component.
n DEBUG: Gray. A message that provides non-alarm information about a component.
n NOTICE: Gray. A message that provides non-alarm information about a component.
n Type: The type of message; an event or alarm.
n EVENT: Indicates a non-alarm message such as updating a configuration parameter.
n ALARM: Indicates that the message is an alarm that needs to be addressed.
n Time: The time that the message occurred.
n Description: A descriptive message of what occurred on the system.
n Component: Provides the configured description of the component generating the event.
n Component Type: Indicates the type of component generating the event. For example, LAG, Fabric, Port,
Switch, Neighbor Discovery, Audit Notification, Port Security, Access Control Lists, Reconcile Notification,
MAC Attachment, Alarm, Upgrade Notification, Resource Audit Notification or Integration Pack Status.
n Event Type: Indicates the type of type of error being generated by the component. For example, Created,
Deleted, Modified, Notify, Replaced, and Alarm Received.

Aruba Fabric Composer 6.3.0 | User Guide 186

Chapter 16 | Maintenance

Support Bundles
The Support Bundles feature enables you to generate a compressed archive of configuration and log files to
be used for troubleshooting and support. You can:

n Collect Aruba Fabric Composer logs.

n Collect switch logs for a selected switches or for all switches in the fabric.
n Specify a time period for which to collect the logs.
n Specify a name for the support bundle.
n Download an entire bundle, a specific switch log bundle, or the Aruba Fabric Composer bundle.

You must have Administrator or Operator access to manage support bundles.

To access and view support bundles, select Configuration > Maintenance > Support Bundles.
The following information is provided for each support bundle:

n Name: User-defined or automatically generated file name of the support bundle.

n Status: The current status of the support bundle which may include Updating, Completed, or Completed
with Errors.
n Created: Date and time that the support bundle was created.
n History (hidden by default): Indicates the length of time that the support bundle data was collected and
covers.
n Aruba Fabric Composer: Indicates if Aruba Fabric Composer logs are included in the support bundle.
n Size: The size of the support bundle.
n Checksum (SHA256) (hidden by default): SHA256 checksum value for the support bundle.
n Applies To: Indicates which fabric, switches, or software components, are represented in the support
bundle data that was captured. For example, Fabric0, Switch1, Switch2 or Aruba Fabric Composer Data.

Support Bundle Files

Each support bundle contains files for individual components such as the Aruba Fabric Composer or each
switch. To expand a bundle and view its contents, either:

n Click the Expand icon ... and then select Bundle Files, or
n Select the bundle to expand and then select Actions > Bundle Files.

You can download either the entire bundle or a bundle file for a specific component. For example, you can
download either the Aruba Fabric Composer bundle file which is, for example, 36 MB or the bundle file for
switch xenon1 which is, for example, 17 MB. These and the other listed files are part of the full,
approximately 300 MB bundle.
The following information is provided for each component bundle file:

n Status: The current status of the component bundle file — Requested, Transferring, Failed, Available, and
Recovered.
n Name: User-defined or automatically generated file name of the component bundle.
n Created: Date and time that the component bundle was created.
n Size: The size of the component bundle.

Maintenance | 187
 Chapter 16 | Maintenance

n Source: Indicates which fabric, switches, or software, are represented in the component bundle data that
was captured. For example, Fabric0, Switch1, Switch2 or Aruba Fabric Composer Data.
n Checksum (SHA256)(hidden by default): SHA256 checksum value for the component bundle.
n Status Reason (hidden by default): Indicates the reason for the status condition.

Creating a Support Bundle

To create a support bundle:

You must have Administrator or Operator access to create a support bundle.

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Support Bundles.
2. Select Actions > Add.
3. In the Support Bundles window, complete the following fields:
n Include Aruba Fabric Composer data: This option is selected by default. If you do not want Aruba
Fabric Composer log data to appear in this support bundle, unselect this option.
n Name Prefix: Optionally, enter a user-friendly name for this support bundle.
n Fabrics: If you want a support bundle to contain information for all switches in a fabric, in this drop-
down list, select the fabric.
n Switches: This field is enabled only if No fabric is selected. This enables you to select any switches
managed by this Aruba Fabric Composer to appear in the support bundle.
n History: Enter either the number of days (1-7) to include in this bundle, or 0 (zero) to bundle all
available logs.

4. When finished, click either Apply to create the support bundle or Cancel to exit without creating a
bundle.
The bundle is created in the background. To update the status as it progresses, click the Refresh
button .

Downloading a Full Support Bundle

This procedure shows how to download a full support bundle containing all component-specific bundle files.

The support bundle size is estimated as the sum of all the support bundle files until the support bundle is
downloaded. The support bundle compressed file is not created until you download it. After download,
the actual size of the support bundle is known and updated in the UI. Because file compression is used to
create the support bundle, the actual and estimated sizes may differ.
To download the support file for a specific switch or for the Aruba Fabric Composer, refer to
Downloading a Support Bundle File for a Component on page 188.

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Support Bundles.
2. Select the support bundle radio button and then select Actions > Download.
The support bundle is downloaded to your local Download directory.

Downloading a Support Bundle File for a Component

Aruba Fabric Composer 6.3.0 | User Guide 188

Chapter 16 | Maintenance

To download a generated support bundle file for a specific component such as the Aruba Fabric Composer or
a specific switch:

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Support Bundles.
2. Expand the bundle to list the component files.
n Click the Expand icon ... and then select Bundle Files, or
n Select the bundle to expand and then select Actions > Bundle Files.
The individual component bundle files are listed.
3. Select the file to download from the expanded list and then select Actions > Download.
The support bundle is automatically downloaded to your local Download directory.

Deleting a Support Bundle

To delete a specific support bundle:

You must have Administrator or Operator access to delete a support bundle.

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Support Bundles.
2. Check the box for that bundle and then select Actions > Delete.
3. At the confirmation prompt, click either OK to delete the support bundle or Cancel to exit without
deleting the bundle.

Deleting All Support Bundles

To delete all support bundles:

You must have Administrator or Operator access to delete all support bundles.

1. In the Aruba Fabric Composer UI, select Configuration > Maintenance > Support Bundles.
2. Select Actions > Delete All.
3. At the confirmation prompt, click either OK to delete all support bundles or Cancel to exit without
deleting the bundles.

Maintenance | 189
 Chapter 16 | Maintenance

Device Firmware
Device Firmware allows a new image to be uploaded to the system.
The Device Firmware table provides the following information:

n Name: User-defined name for the system.

n Checksum (SHA256): SHA256 checksum value.
n Version: Version of the firmware.
n Created: Date of firmware creation.
n Platform Name: Platform associated with the firmware.
n Size: Size of the firmware file.

Using the Device Firmware page, you can upload a new image to the system.

1. In Aruba Fabric Composer, select Configuration > Maintenance > Device Firmware.
2. Select Actions > Add To System. The Device Firmware window opens.
3. Click Browse to choose an image file from your local drive.
4. Click Apply to apply the new image or Cancel to exit without saving.

Backups
You can create multiple backup instances of the Aruba Fabric Composer configuration, saving known states
of the fabric configuration. These backups contain all of the Fabric Composer configuration information
available at the moment that the backup(s) are created. The Aruba Fabric Composer Backup file also contains
the running and startup configurations from each switch at the time the backup was taken. The switch
configurations are not automatically applied on a restore of a backup, but the switch configuration snapshots
are taken to facilitate manual disaster.
This information is stored as a backup instance that can be used in the future to restore the Fabric Composer
configuration to a known saved state.
For example:

Backups

Aruba Fabric Composer 6.3.0 | User Guide 190

Chapter 16 | Maintenance

This tab lists all created backups, scheduled or unscheduled. The fields under the Backups tab are defined as
follows:

n Name: The file name of the backup.

n Created: The backup creation time stamp.
n Checksum (SHA256): The SHA256 checksum of the backup.
n Status: Indicates the status of the backup.
n Retention: Indicates how long the backup is retained.
n Software Version: Identifies the Aruba Fabric Composer software version of the backup.
n Supported: Indicates whether or not the backup is supported on this software version of the Aruba Fabric
Composer. You cannot restore a backup that was created from an Aruba Fabric Composer version that was
newer than the current installed version.

Scheduled Backups
This tab identifies the configured scheduled backups. It lists the schedules, not the actual generated backups.
The fields under the Scheduled Backups tab are defined as follows:

n Name: The name of the backup schedule.

n Repeat: Identifies how often the backup is generated.
n Next Backup Date: Identifies when the next scheduled backup will occur.
n Retention: Identifies how long the backup is retained.

Creating a Backup Instance of the Aruba Fabric Composer

Configuration
To create a backup instance of the current Aruba Fabric Composer configuration:

1. In Aruba Fabric Composer, select Configuration > Maintenance > Backups. The window opens the
Scheduled Backups tab.
2. Select the Backups tab.
3. Select Actions and click Create Backup.
4. In the Backups wizard, complete the following as needed:

Parameter Valid
Description Default
Name Values

Name Prefix Enter any non-empty string. For example, My Backup.

Set Backup Check this box to activate the Retention fields that follow, Checked Unchecked
Retention enabling you to define a period of time for which to retain the or
Limit backup. unchecked

Retention Active only if Set Backup Retention Limit is selected. Hour(s)

Unit In this drop-down list, select the type of period (hour(s), days, Day(s)
weeks, and so on) that you want the backup to be retained. Week(s)
Months

Maintenance | 191
 Chapter 16 | Maintenance

Parameter Valid
Description Default
Name Values

Retention Active only if Set Backup Retention Limit is selected. For Hours:
Value For the selected retention period type, enter a number to 1-8760
specify the exact retention period. For Days:
1-365
For Weeks:
1-52
For
Months: 1-
12

5. When finished setting up the backup, click Apply to create the backup schedule or Cancel to exit
without creating the schedule.

Adding or Editing a Schedule to Create Aruba Fabric Composer

Configuration Backups
To add or edit a schedule to create Aruba Fabric Composer configuration backups:

1. In Aruba Fabric Composer, select Configuration > Maintenance > Backups. The window opens the
Scheduled Backups tab.
2. Select the Scheduled Backups tab.
3. Select Actions and either Add or Edit.
4. In the Scheduled Backups wizard, complete the following as needed:

Parameter Valid
Description Default
Name Values

Name Enter a name for this backup schedule.

Repeat In this drop-down list, select how often the backup repeats. Never
Every
NOTE: Your selection determines which fields are active to Hour
complete and which are grayed out as being inapplicable. Every Day

Time In the Time field, enter the time in hours and minutes, using Example =
the 12-hour format, for the backup to occur. Next, enter 03:30 AM
either AM or PM.
Click Next to go to the Retention tab.

Set Backup Check this box to activate the Retention fields that follow, Checked Unchecked
Retention enabling you to define a period of time for which to retain the or
Limit backup. unchecked

Retention Active only if Set Backup Retention Limit is selected. Hour(s)

Unit In this drop-down list, select the type of period (hour(s), days, Day(s)
weeks, and so on) that you want the scheduled backup to be Week(s)
retained. Months

Aruba Fabric Composer 6.3.0 | User Guide 192

Chapter 16 | Maintenance

Parameter Valid
Description Default
Name Values

Retention Active only if Set Backup Retention Limit is selected. For Hours:
Value For the selected retention period type, enter a number to 1-8760
specify the exact retention period. For Days:
1-365
For
Weeks: 1-
52
For
Months: 1-
12

5. When finished setting up the scheduled backup, verify the Summary and then click Apply to create the
backup schedule or Cancel to exit without creating the schedule.

Restoring the Composable Fabric Configuration From a Backup

Instance
This procedure show how to restore the fabric configuration to a known state from a saved fabric
configuration backup.

If you are re-deploying the Aruba Fabric Composer and restoring the Composable Fabric configuration
from a backup, you must restore the backup before adding a fabric. If you add a fabric and then restore
from an old database, the restore will not work.

1. In Aruba Fabric Composer, select Configuration > Maintenance > Backups.

2. Select a backup instance to use, then select Actions > Restore from Backup.
3. At the confirmation prompt, click OK to restore the fabric configuration using the selected backup
instance or Cancel to exit without restoring.

You will lose connectivity with the Aruba Fabric Composer UI. After a number of minutes, allowing
the fabric to restore from the backup, log back into the Aruba Fabric Composer UI.

Deleting a Backup Instance

To delete a backup instance:

1. In Aruba Fabric Composer, select Configuration > Maintenance > Backups.

2. Select the backup instance to delete and then select Actions > Delete.
3. At the confirmation prompt, click OK to delete the backup instance or Cancel to exit without deleting
the backup.

Deleting a Backup Schedule

To delete a backup schedule:

Maintenance | 193
 Chapter 16 | Maintenance

1. In Aruba Fabric Composer, select Configuration > Maintenance > Backups. The window opens on
the Backups tab,
2. Select the Scheduled Backups tab
3. Select the backup schedule to delete and then select Actions > Delete.
4. At the confirmation prompt, click OK to delete the backup schedule or Cancel to exit without deleting
the schedule.

Uploading a Backup
To upload a fabric configuration backup to the Aruba Fabric Composer from a local system:

1. In Aruba Fabric Composer, select Configuration > Maintenance > Backups. The window opens on
the Backups tab.
2. Select Actions > Upload Backup.
3. In the Upload Backup window, browse for the backup file, click Open to select the file, then click Apply
to upload the file to the Aruba Fabric Composer or Cancel to exit without uploading.

Switch Checkpoints
To open the Switch Checkpoints page, in Aruba Fabric Composer, select Maintenance > Switch
Checkpoints.
The Switch Checkpoints dashboard displays information on Checkpoints, Snapshots, and Scheduled
Checkpoints.
The Switch Checkpoints table provides the following information for each configuration:

n Name: User-defined name for the switch configuration.

n Description: User-defined description of the switch configuration.
n Checkpoint Type: Type of checkpoints (One Time, System, Periodic).
n Applies To: Source ports of the Service Qualifier.
n Creation Time: Time of creating the checkpoint.
n Checkpoint Status: Status of the checkpoint.
n Last Rollback Time: Time of the last rollback.
n Rollback Status: Status of the rollback.

Adding a Switch Checkpoint

To add a Switch Checkpoint:

1. In Aruba Fabric Composer, in the Maintenance > Switch Checkpoint page, select Actions, and then
click Add. The Checkpoints Configuration wizard opens.

Aruba Fabric Composer 6.3.0 | User Guide 194

Chapter 16 | Maintenance

2. Configure the following parameters as needed:

Parameter
Tab Description Valid Values Default
Name

Name Assign a name for the Switch Any non-empty

Checkpoint. string, for
Name example,
Application-1.

Description Enter a description for the Service

Qualifier. Click Next.

Fabrics Select a Fabric from the drop-down list.

Switches Select switches from the drop-down list.

Note that you can choose only Fabric or
Switches and not both.

3. Once you have completed and verified all parameters, you can exit the wizard. Click Apply to complete
and save the Application, Back to go back and change a setting, or Cancel to exit this configuration
without saving.

Deleting a Switch Checkpoint

To delete a Switch Checkpoint:

1. In the Aruba Fabric Composer UI, in the Maintenance > Switch Checkpoint page, select the Switch
Checkpoint to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the Switch Checkpoint or Cancel to retain the Switch
Checkpoint.

Switch Checkpoint Rollback

To rollback a Switch Checkpoint:

1. In the Aruba Fabric Composer UI, in the Maintenance > Switch Checkpoint page, select the Switch
Checkpoint to rollback, and then select Actions > Rollback.
2. At the confirmation prompt, click Apply to apply the rollback or Cancel to abort the rollback.

It is recommended to generate a checkpoint for the selected switches prior to performing the rollback.

Switch Checkpoints Snapshots

To open the Switch Checkpoints Snapshots page, in Aruba Fabric Composer, select Maintenance > Switch
Checkpoints > Snapshots.
The Switch Checkpoints Snapshots table provides the following information for each configuration:

n Checkpoint: Name of the switch checkpoint.

n Fabric: Name of the Fabric.
n Switch: Name of the switch.

Maintenance | 195
 Chapter 16 | Maintenance

n Switch Checkpoint Name: Name of the switch checkpoint.

n Checkpoint Type: Select from One Time, System, or Periodic.
n Switch Firmware Version: The version of the switch firmware.
n Creation Time: The time of first creating the switch checkpoint.
n Last Rollback Time: Time of the last rollback.
n Rollback Status: Status of the rollback.

Further actions that can be carried out in this page are Rollback and Diff. Click Rollback to rollback selected
snapshot on to the corresponding switch. Click Diff to compare the differences between the switch
configuration and the selected snapshot.

Scheduled Checkpoints
You use the Scheduled Checkpoints page to create scheduled checkpoints.
To open the Scheduled Checkpoints page, in Aruba Fabric Composer, select Maintenance > Switch
Checkpoints > Scheduled Checkpoints.
The Scheduled Checkpoints table provides the following information for each configuration:

n Name Prefix: Name of the switch checkpoint.

n Description: Description of the Scheduled Checkpoint.
n Enabled: Whether Enabled or Disabled.
n Repeat: How often the backup should be repeated.
n Next Checkpoint Date: Date of the next scheduled checkpoint.

Adding a Scheduled Checkpoint

To add a Scheduled Checkpoint:

1. In Aruba Fabric Composer, in the Maintenance > Switch Checkpoint > Scheduled Checkpoints
page, select Actions, and then click Add. The Scheduled Checkpoints Configuration wizard opens.
2. Specify a required name prefix and set a schedule for when the checkpoint should be created. Time
and Date must set later than the current time and date where applicable. The checkpoints generated
will be for all switches within all Fabrics.

Parameter Valid
Tab Description Default
Name Values

Enable Select the checkbox if you want to enable. Unchecked.

Checkpoint Only one schedule may be enabled at a time.
schedule.

Aruba Fabric Composer 6.3.0 | User Guide 196

Chapter 16 | Maintenance

Parameter Valid
Tab Description Default
Name Values

Name Enter any non-empty string. For example, Any non-

Prefix checkpoint-1 empty
string, for
example,
Application-
Schedule 1.

Description Enter a description for the Service Qualifier.

Click Next.

Repeat Select how often the backup should be

repeated. 'Never' will run the backup once at
the scheduled time and date.

Day of Select one or more days from the drop-down

Week list.

Summary Once you have completed and verified all

parameters, you can exit the wizard. Click
Apply to complete and save the Scheduled
Checkpoint, Back to go back and change a
setting, or Cancel to exit this configuration
without saving.

Editing a Scheduled Checkpoint

To edit a Scheduled Checkpoint:

1. In Aruba Fabric Composer, in the Maintenance > Switch Checkpoints page, select the Scheduled
Checkpoint you need to edit and then select Actions > Edit. The Scheduled Checkpoints
Configuration wizard opens.
2. Once you have made the changes and verified all parameters, you can exit the wizard. Click Apply to
complete and save the Application, Back to go back and change a setting, or Cancel to exit this
configuration without saving.

Deleting a Scheduled Checkpoint

To delete a Scheduled Checkpoint:

1. In the Aruba Fabric Composer UI, in the Maintenance > Switch Checkpoint page, select the
Scheduled Checkpoint to delete, and then select Actions > Delete.
2. At the confirmation prompt, click OK to delete the Scheduled Checkpoint or Cancel to retain the
Scheduled Checkpoint.
3. You can also select all the Scheduled Checkpoints and click Delete All to delete all the Scheduled
Checkpoints in one go.

Syslog
You can create Syslog configurations that enable the Aruba Fabric Composer and some or all Fabric
Composer modules (switches) to forward event messages to a Syslog server. Syslog messages include
information to identify where, when, and why the log was sent — IP address, time stamp, and the actual log
message.

Maintenance | 197
 Chapter 16 | Maintenance

You can create only one configuration that uses the Aruba Fabric Composer audit log feature.

You can define many Syslog configurations to generate custom Syslogs.

The Configuration > System > Syslog page lists Syslog configurations and enables you to add, edit, or
delete Syslog configurations.
The Syslog page contains the following columns:

n Name: Name for the Syslog configuration.

n Description: Description of the Syslog configuration.
n Facility: Facility selection from a drop-down list of all nodes.
n Persistent Storage Logs Enabled: Status of log enabled (Yes or No).
n Persist with Severity: Select persistence of severity (All, EMERG, ALERT, CRIT, ERROR, WARNING, NOTICE,
INFO, DEBUG).
n Host: Fully qualified host name or IP address of the connected host.
n Port: Port number.
n Severity: Select severity of all logs (All, EMERG, ALERT, CRIT, ERROR, WARNING, NOTICE, INFO, DEBUG).
n Include Auditable Events: Select events that can be audited (Yes or No).
n Unsecure TLS Renegotiation: Enable or disable unsecure TLS renegotiation.
n TLS Auth Mode: Indicates mode of TLS authorization between Certificate and Subject Name.
n Transport: Select between transport modes between UDP, TCP, or TLS.
n Applies To: Identifies the switches that this configuration applies to.

Adding a Syslog Configuration

To add a new Syslog configuration:

1. In Aruba Fabric Composer, select Configuration > System > Syslog.

2. Select Actions > Add.
3. In the Name page, complete the following fields:
n Name: Enter a name for the Syslog configuration.
n Description: Enter a description of the Syslog configuration.

4. Click Next to go to the next page or Cancel to exit without saving.

5. In the Application page, complete the following fields:
n Fabrics: Select the fabric that will use this Syslog configuration. To remove a fabric, click the X next to
the fabric name. When you select a fabric, all of the switches within the fabric are automatically
selected. If you later add a switch to a fabric, the configuration settings are automatically applied to
the new switch.
n Switches: When you select a fabric, all switches on that fabric are automatically selected to use this
Syslog configuration. If this Syslog configuration is NOT used on ALL switches in the selected fabric(s),
in this drop-down list, select the switch(es) that will use this Syslog configuration. If ALL switches use
this Syslog configuration, ignore this field; do not select any switches. To remove a selected switch,
click the X next to the switch name.
n Aruba Fabric Composer: Selecting Aruba Fabric Composer enables the forwarding of Aruba Fabric
Composer audit logs to a remote Syslog server. The audit logs, which provide events for all severities

Aruba Fabric Composer 6.3.0 | User Guide 198

Chapter 16 | Maintenance

except Informational and Debug, are the events that appear on the Dashboard in the Audits panel.
The actual filters configured in this Syslog configuration have no effect on the logs sent to the Syslog
server. Deselecting Aruba Fabric Composer disables the forwarding of audit logs to the remote Syslog
server. You would select Aruba Fabric Composer when you want see the audit logs on a remote Syslog
server. You would deselect Aruba Fabric Composer when you are interested in log messages from
only switches. This option is unchecked/deselected by default.
The resulting Syslog log can be used to analyze the system health or trigger automation.

You can create only one configuration that uses the Aruba Fabric Composer feature.

6. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
7. In the Local Storage page, complete the following fields:
n Persist with Severity: This field is grayed out by default.
n Facility: Select a Local from the drop-down list.
8. In the Entries page, complete the following fields for each entry:
n Host: Enter the IPv4 or IPv6 address or hostname of the host to which the Syslog will be sent.
n Port: Enter the port of the host to which the Syslog will be sent.
n Severity: Select from the drop-down list. Options are All, EMERG, ALERT, CRIT, ERROR, WARNING,
NOTICE, and INFO.
n TLS Auth Mode: Select Certificate or Subject Name from the drop-down list.
n Transport: Select from UDP, TCP, or TLS from the drop-down list.
n Unsecure TLS Renegotiation: Select this check box if you wish to unsecure the TLS renegotiation.
n Include Auditable Events: Select this check box if you wish to include auditable events.

9. Click Add to add the host-port entry to the Entries table.

To remove an entry from the table, click the Delete icon to the right of the entry.

10. Repeat steps 7 and 8 to add all hosts and ports to which this Syslog should be sent.
11. Click Next to go to the next page or Cancel to exit without saving. You can also click Back to edit the
previous page.
12. In the Summary page, check the fields for accuracy.

To change any settings, click Back or select the page, make changes as needed, and click Next to
return to the Summary page.

13. Click Apply to apply the Syslog configuration or Cancel to exit without saving.

Editing a Syslog Configuration

To edit a Syslog configuration:

Maintenance | 199
 Chapter 16 | Maintenance

1. In Aruba Fabric Composer, select Configuration > System > Syslog.

2. In the row for the Syslog configuration to edit, click the button next to the configuration and then
select Actions > Edit.
3. In the Syslog Configuration window, make changes to the fields as needed. Click a tab to edit the
settings on that tab.
4. Click Apply to save your edits or Cancel to exit without saving. When you click Apply, your changes
are applied to all associated fabrics and switches.

Deleting a Syslog Configuration

To delete a Syslog configuration:

1. In Aruba Fabric Composer, select Configuration > System > Syslog.

2. Select the Syslog configuration to delete and then select Actions > Delete.
3. Click Apply.
4. In the confirmation pop-up, click OK to delete the Syslog configuration or Cancel to retain the entry.
When you click OK, the deleted Syslog configuration gets removed from all associated fabrics and
switches.

High Availability for Aruba Fabric Composer

The High Availability tables shows the health of the High Availability cluster and the Virtual IP Address (VIP).
The following information is provided for each node:

Refer to the Aruba Fabric Composer 6.0 Installation Guide for detailed installation steps as well as post-
installation configuration checks.

1. The sub-table contains each node in the cluster with its Name, Status, Management IP Address, and
the Active Services.

2. Click Actions > Change VIP to change the existing VIP. The Add option screen opens.

3. The VIP is set up during installation. But, in case that has not been set up, you are provided with the
option to Add the VIP. Click Add.
Note: The VIP is required for a High Availability setup, so there is no Delete option in the User
Interface.

Aruba Fabric Composer 6.3.0 | User Guide 200

Chapter 16 | Maintenance

4. Changing, or creating, a VIP requires an IPv4 or IPv6 network address. Enter the VIP address in the
Virtual IP Address field and click Apply.

The VIP must be within the same subnet and have the same prefix length as the nodes in the
cluster. The nodes are displayed in the dialog box to provide context for the validation.

5. If the user is in a standalone mode (High Availability has not been configured), then a message is
displayed that the High Availability is not set up and a VIP cannot be added.

6. The VIP must be within the same subnet and have the same prefix length as the nodes in the cluster.
The nodes are displayed in the dialog box to provide context for the validation.
7. Click Apply to complete the process and exit or click Cancel to exit without making any changes.

Licenses
You can view the status of the switch licenses.
The Maintenance > Licenses page lists the below details of each switch license in Aruba Fabric Composer.

n Status: The status of the switch.

n License Key: The license key of the switch.
n Product: The manufacturer's product name of the switch.
n Start Date: The start date of the license key.
n End Date: The end date of the license key.
n Duration: The duration of the license key.
n Quantity: The number of switches in the Fabric.
n Tier: Tier level of the switch (Tier 3 or Tier 4).
n Type: Whether Paid or Evaluation.
n Serial Number: Serial number of the switch.

Adding a License
To add a new License:

1. In Aruba Fabric Composer, select Maintenance > Licenses.

2. Select Actions > Add.

Maintenance | 201
 Chapter 16 | Maintenance

3. In the License page, enter a JSON string in the License field.

4. Click Apply to apply the License or Cancel to exit without saving.

Deleting Licenses
To delete a License:

1. In Aruba Fabric Composer, select Maintenance > Licenses.

2. Select the License to delete and then select Actions > Delete.
3. Click Apply.
4. You can also delete all the licenses at once by selecting the Delete All option and clicking OK.

Aruba Fabric Composer 6.3.0 | User Guide 202

 Chapter 17
Visualizations

Visualizations
The Aruba Fabric Composer UI contains the following visualizations that provide views and detailed
information on the Aruba Fabric Composer environment as well as attached host environments:

n Host: Presents information about the host environments attached to Aruba Fabric Composer and the
paths and connections between the Aruba Fabric Composer switches and the attached host environments.
n Network: Presents views of the Aruba Fabric Composer switches, paths between the fabric switches, as-
selected-through filters, details table, any selected hosts, attachments, or neighbors, and their connections
to the switches.
n Statistics: Presents statistics of the Aruba Fabric Composer switches, ports, paths between fabric switches,
filters, details tables, and so on.

These visualizations are described and illustrated in the topics that follow.

Host Visualization
Host Visualization enables you to view and obtain information about the host environment, as well as paths
and port connections to Aruba Fabric Composer.
Host Visualization provides a graphical representation of one or more hosts and their respective virtual
elements (VMs, VMKernels, vSwitches, port groups, bridges, bonds) as well as the physical elements (NICs)
that provide connections to the Fabric Composer. The information regarding the host elements is harvested
by Aruba Fabric Composer through configured host integrations such as the VMware vSphere Integration or
the Nutanix Prism Integration. This feature enables you to view connectivity within a host as well as between
the host and Aruba Fabric Composer.
A host environment such as VMware ESX, Nutanix AHV, or HPE iLO is presented in a shaded area. Depending
on the host, this environment might contain NICs, VMs, VMKernels, vSwitches, port groups, bridges, bonds,
and so on. The visualization also shows connections from the host environment to the Fabric Composer
switches. State information such as the current state of links and elements is also provided to assist in
troubleshooting.
The following sections provide examples for VMware ESX, Nutanix AHV, and HPE iLO Amplifier.
The Host Visualization can be used to:

n Troubleshoot issues within a host.

n Determine if a host is connected correctly.
n Present users with a way to visualize if the hosts, VMs, or VMKernel Adapters can pass traffic.

Icons Used in the Host Visualization

The Host Visualizations use the following icons to present elements (components), paths, and states:

Icon Use

Elements: The following icons depict various host elements or components.

Aruba Fabric Composer 6.3.0 | User Guide 203

Chapter 17 | Visualizations

Icon Use

Element: HPE switch or host.

Element: Aruba Fabric Composer switch port

Element: This is used to represent a bond or a port group.

Element: NIC (PNIC or VNIC)

Element: vSwitch or Bridge

Element: Virtual Machine. Virtual machines within a host are listed at the far
right and contain a count unless a specific VM is selected through the filter.
The VM field can be expanded to see all VMs.

Element: VMKernel Adapter

Paths: The following icons depict active and backup paths which connect the elements.

Active Path: This path is a solid dark gray line from Port or Element to the
next port or element.

Stale Path: This path, shown as short dashes, indicates that the path is stale.
This is related to LLDP/CDP neighbor aging, which is controlled by
Configuration > System > System Settings > Neighbor Retention
Timeout.

Backup Path: Indicates that the path is a backup path. Note that this enables
you to determine which PNICs are used for backup paths and which PNICs
are used for active paths.

State: The following state symbols attached to element symbols provide further quick information as to the state
of the elements:

State: Link Down - Indicates that the associated link is down.

State: Warning - Indicates that a warning exists.

Example: VMware ESX Host Environment

The following example illustrates an ESX host environment where eight VMs are connected to Fabric
Composer switches.

Visualizations | 204
 Chapter 17 | Visualizations

For detailed information on any element within the visualization, hover over the element instance (VM,
vSwitch, NIC, port group, and so on) as described in the topic: Hovering Over Host Visualization Elements for
Detailed Information on page 211.

Example: VMware ESX Host Environment with Intermediate Switches

The following example illustrates one ESX host containing 10 VMs and host network components connected
to a Fabric Composer named PlexxiFabric0 through a set of intermediate switches (IntSwitch0 and 1). Also
demonstrated, port security is enabled on all Fabric Composer switch ports as indicated by the blue shield on
the switch access ports.

You can visualize specific VMs by selecting the VM table from the Filters and then selecting VMs to show in the
visualizer.

Where an intermediate switch is installed, LLDP transmit must be configured on the intermediate switch,
advertising to the Fabric Composer switches and to the ESXi vSwitches.

Aruba Fabric Composer 6.3.0 | User Guide 205

Chapter 17 | Visualizations

For detailed information on any element within the visualization, hover over the element instance (VM,
vSwitch, NIC, port group, and so on) as described in the topic: Hovering Over Host Visualization Elements for
Detailed Information on page 211.

Example: HPE iLO Environment

The following example illustrates an HPE iLO environment with three hosts, each connected to the Fabric
Composer through PNICs connected to switch ports.

In iLO host visualization, you can do the following: Refer to HPE iLO Actions on page 208.

n Turn the UID Indicator on or off.

n Control the host power.
n Launch the HPE iLO UI for the host.

For detailed information on any element within the visualization, hover over the element instance (switch,
switch port, and NIC) as described in the topic: Hovering Over Host Visualization Elements for Detailed
Information on page 211.
Hovering over host environment elements displays data gathered by the VMware vSphere Integration and
available through the Host Visualization. In the example above, you can hover over any element. For
example, in the host environment from left to right, you can hover over NIC ports, vSwitch, Port Groups,
VMKernel Adapters, and VMs. For hover-over examples, see the topic: Hovering Over Host Visualization
Elements for Detailed Information on page 211.

You can also refer to VMware documentation for information on values presented in Host Visualization
details in host environments that use the ESXi Hypervisor.

Example: Nutanix AHV Host Environment

The following example illustrates one Nutanix AHV host containing 10 VMs and host network components
connected to a Fabric Composer named PlexxiFabric0.

Visualizations | 206
 Chapter 17 | Visualizations

For detailed information on any element within the visualization, hover over the element instance (VM,
vSwitch, NIC, port group, and so on) as described in the topic: Hovering Over Host Visualization Elements for
Detailed Information on page 211.

Customizing the Host Visualization

You can customize the Host Visualization using filters as described in Filtering the Host Visualization on page
209.

General Host Visualizer Actions

From the Host Visualizations, you can do the following by hovering over the icon and left-clicking to open a
menu of actions:

n For Ports, you can navigate directly to either the Port configuration page or the Port Security configuration
page for that port.
n For VMs or VMKernel adapters, if there is more than one, you can expand the visualization to show all VMs
or VMKernel adapters in the group.
n For one VM at a time, you can expand the visualization to show the virtual network interfaces (VNICS) for
that VM.

Visualizing an ESX Host Environment Through Intermediate Switches

In some VMware ESX environments, the ESX servers connect to the Fabric Composer indirectly through
intermediate switches. These environments can be visualized in the Host Visualizer, presenting the
intermediate switch as well as the ESX host environment, For this to occur, in the VMware vSphere
Integration, the selection, Automated VLAN provisioning for ESX Hosts connected through intermediate switches
must be enabled (refer to Adding a VMware vSphere Integration on page 151). In this environment, the ESX
servers connect to an intermediate top-of-rack switch which is uplinked to the Fabric Composer; the
intermediate switches connect to the ESX host environments and the Fabric Composer is used for rack-to-
rack connectivity. The VMware vSphere Integration pack harvests data to determine that an intermediate
switch is located between the Fabric Composer and the ESX server.

Example: VMware ESX Host Environment With Intermediate Switches

The Aruba Fabric Composer Host Visualization displays intermediate switches; IntSwitch0-IntSwitch2 in the
following example:

Aruba Fabric Composer 6.3.0 | User Guide 207

Chapter 17 | Visualizations

VLAN Automation
The Aruba Fabric Composer integration pack treats ESX servers as if the servers were directly connected to
the access port. VLAN automation is applied to any port that is associated with an intermediate switch
connected to an ESX host. The VLAN range is used as configured in the VMware vSphere pack.

Neighbor Retention Timeout

Neighbor Retention Timeout enables services such as automatic VLAN provisioning to continue to operate
for a defined period of time when neighbor advertisements from the host environment are temporarily
suspended. For example, with an adequate timeout setting, automatic VLAN provisioning remains stable
when an ESXi host is rebooted.
For ESXi hosts connected to the Fabric Composer through intermediate switches, we do not support the
display of the inactive state. Connected vmnics will only be Disconnected or Connected. If an intermediate
switch is detected, the vmnic will always be Connected.
Refer to Neighbor Retention Timeout on page 101.

HPE iLO Actions

In the HPE iLO host visualization, you can perform the following actions which are described in greater detail
in the subsections below:

n Turn the UID Indicator on or off.

n Control the host power.
n Launch the HPE iLO UI for the host.

Turn the UID Indicator On or Off

You can turn the UID indicator On or Off as follows:
Left-click on the iLO host icon and select Turn UID Indicator On or Turn UID Indicator Off, depending on
whether it is currently off or on. A Success message will momentarily appear indicating the successful action.

Control the Host Power

You can turn the host power On or Off as follows:
Left-click on the iLO host icon and select Modify Host Power. The Modify Host Power window opens. This
window contains a Current host power state field that indicates the current host power state. You can
then, in the Set Power drop-down list, select one of the following actions:

n On: For a host that is currently off, turn the host power On.
n Force Off: For a host that is currently on, force the power to turn off.

Visualizations | 208
 Chapter 17 | Visualizations

n Force Restart: For a host that is currently on, force a power restart.
n Push Power Button: Simulates the action of pushing the power button, either turning the host On or Off.

After selecting the action, click either Apply to perform the action or Cancel to exit the window without
making the power change.

Launch the HPE iLO UI

You can launch the HPE iLO UI for the host in a new browser tab using either the IP address or the hostname,
as follows:
Left-click on the iLO host icon and select either Launch HPE iLO UI: HostName or Launch HPE iLO UI:
IPAddress. The HPE iLO UI will open in a new browser tab.

Filtering the Host Visualization

The left side of the Host Visualization window contains a set of filters and a scaling bar for the host
visualization. For example:

Clicking << at the bottom of the Filters sidebar pane collapses the sidebar, allowing the visualization to take
up the entire window. Clicking >> expands the Filters sidebar pane.

Filters
The following filters enable you to select fabrics, environment types and hosts, as well as VMs to display in the
Host Visualization. Possible filters include:

Aruba Fabric Composer 6.3.0 | User Guide 209

Chapter 17 | Visualizations

n Selection: This field populates the table with objects that you can select to visualize. For example, you can
select Hosts to select host environments to visualize, or you can select VMs to list VMs in the table to select
and visualize. The Host Visualization will show information and connections for the selected hosts or VMs.
Displaying multiple hosts may increase the complexity of the Host Visualization.

Settings
This filter contains the following selections to show or hide features:

n Show Hosts: Select this check box to display the visualizer populated with all hosts or VMs that are selected
in the Selection Table.
n Show Selection Table: Select this check box to show the table from which you will select hosts or VMs to
visualize. To expand the visualizer, you can uncheck Show Selection Table which removes the table and
expands the visualizer. Likewise, to expand the table you can uncheck Show Hosts which removes the
visualization and expands the table.
n Hide Disconnected NICs: Select this check box to hide host-side NICs that are not attached to any host or
virtual elements.
n Zoom: Enables you to scale the Host Visualization spacing so that the view is expanded or compressed.
Zoom does not change graphics or text size, only spacing between components.
n Name Truncation: Enables you, for very long names/identifiers, to determine how many and which
characters in each name appear with the component icons in the host view. This helps reduce clutter and
enables you to more easily find specific components, especially in large environments. To truncate, select the
characters to remove (remove Start, Middle, End, or None characters) and specify the number of characters
to display.

Zooming the Host Visualization

You can zoom the host visualization spacing in and out using the zoom control in the Settings side bar. Zoom
changes the spacing within the view; it does not change the size of the icons or text. You can zoom out to
50% of the original size, or to zoom in to 150% of the original size. The current zoom in percent is shown.

Depending on your browser, tick marks may appear on top of the slider to help visualize the current zoom.

Summary
To visualize the host environment:

1. Select Visualization > Hosts to open the Hosts Visualization page.

2. Under Filters, select the Fabric to visualize.
3. In the Selection drop-down list, select the host element types to visualize. For example, Hosts or VMs.
4. By default, the Selection table should be shown. If it is not shown, click the Show Selection Table
checkbox.
5. In the table, select the hosts or VMs to view. They will appear in the visualizer.
6. To expand the visualizer, you can uncheck Show Selection Table which removes the table and
expands the visualizer.

Visualizations | 210
 Chapter 17 | Visualizations

Hovering Over Host Visualization Elements for Detailed Information

Hovering over icons for the various elements depicted in the Host Visualization provides detailed information
about that element.
The following sections provide examples of information provided while hovering over some Fabric Composer
and host environment icons.

Aruba Fabric Composer Switch Information

Hovering over a Fabric Composer switch icon displays information about that switch.

Aruba Fabric Composer switch information includes:

n Name: Aruba Fabric Composer switch name.

n MAC Address: Aruba Fabric Composer switch MAC address.
n IP Address IP address of the Aruba Fabric Composer switch for switch management.
n Health: Health of the switch. For example, Healthy, Upgrading, Healthy, But..., Degraded, Critical.
n Status: Status of the switch. For example, Synced, Syncing, or Sync Failure.
n Software Version: Version of switch software installed on the switch.
n Model: Aruba Fabric Composer switch model.

Aruba Fabric Composer Switch Port Information

Hovering over an Aruba Fabric Composer switch port icon displays information about that switch port.

Aruba Fabric Composer switch port information includes:

Aruba Fabric Composer 6.3.0 | User Guide 211

Chapter 17 | Visualizations

n Name: Port name.

n Port ID: Port number.
n Mode: Indicates whether the port is a Fabric port or an Access port.
n Enabled: Indicates if the port is enabled.
n Link State: Current link state of the Aruba Fabric Composer switch port. If a port's link state is down, a Link
Down symbol overlays the port symbol.
n Speed: Configured speed for that port. Possible speeds, depending on the switch model and the port, are 1,
10, and 25 Gbps.
n Speed Group: Ports in the speed group if the port is part of a speed group. If only the single port is listed,
the port is not part of a speed group.
n Port Type: Indicates if the port is SFP or QSFP.
n QSFP Mode: For switches with QSFP ports, indicates if the port is a QSFP port and, if it is, indicates the
configured speed and type.
n VLANs: VLANs associated with the port.
n Native VLAN: Untagged VLAN.
n LAG: If the port is part of a LAG, indicates the LAG.
n L2VPNs: If the port is assigned to any layer 2 VPNs, lists the assigned layer 2 VPNs.

Intermediate Switch Information

Hovering over an intermediate switch icon displays information about that switch.

Intermediate switch information includes:

n Name: Name of the intermediate switch.

n Description: Description of the intermediate switch.
n MAC Address: MAC address of the intermediate switch.
n Vendor: Vendor of the intermediate switch.
n Product: Indicates the product as an intermediate switch.

Host Information
Hovering over a Host displays information about that host.

Visualizations | 212
 Chapter 17 | Visualizations

Host information includes:

n Name: The name of the host.

n Product Name: The product on which the host resides.
n Health: The health of the host.
n Server OS: The operating system.
n Server OS Version: The version of the server operating system.
n IP Addresses: The IP addresses for the connections to the host environment
n Serial Number: The serial number of the server that hosts this host.
n Hypervisor: The Hypervisor type that hosts this host.
n VMs: The number of Virtual Machines (VMs) on this host.
n iLO IPv4 Address: The IPv4 address that connects the iLO manager to this host.
n iLO IPv6 Address: The IPv6 address that connects the iLO manager to this host.
n iLO Host UUID: The Universally Unique Identifier that software (for example, HP SIM) uses to uniquely
identify this host.
n iLO Power State (iLO): The current power state of the server that hosts this host.
n Cluster: The cluster that contains this host.

Physical Network Interface Information

Hovering over a Physical Network Interface icon displays information about that interface.

Physical Network Interface information includes:

n Name: Physical Network Interface port name.

n VLAN: Indicates the interface VLAN.

Aruba Fabric Composer 6.3.0 | User Guide 213

Chapter 17 | Visualizations

n MAC Address: Physical Network Interface MAC address.

n IP Address: Indicates an IP address associated with this interface.
n Speed: Indicates the speed that the port is operating at. Possible speeds are 1, 10, or 25 Gbps.
n iLO IPv4 Addresses: Indicates IPv4 addresses associated with the interface.
n iLO IPv6 Addresses: Indicates IPv6 addresses associated with the interface.
n Health: Indicates the health of the interface.
n Network Adapter: Network adapter information.
n Network Adapter Slot: Indicates the slot that the Physical Network Interface is plugged into.
n Admin Status: Admin state of the Physical Network Interface port. For example, Up.
n Neighbor Status: State of the connection to the neighbor. For example, Connected.
n Firmware Version: Firmware version installed on the Physical Network Interface.
n Port ID: Port ID of the interface.
n Prefix Length: Indicates the prefix length (subnet mask) if an IP prefix list is configured on this interface.
n VNIs: Indicates a Virtual Network Identifier (VNI) for a VXLAN on the interface.
n Link State: Indicates the link state of the interface.

There are a number of additional properties that might display here depending on how the NIC is
configured and discovered:

nFornon-iLO NICs, you might also see the following items if they are configured or available:
VLAN, IP address, prefix length, VNIs, intermediate switch port, neighbor status.
nIf
discovered through iLO, you may also see: iLO IPv4 and/or IPv6 IP address, iLO health,
network adapter name (on which this NIC is found), network adapter slot ID in the server,
network adapter firmware version, port number of this NIC on the network adapter.

Virtual Switch Information

Hovering over a host vSwitch or network bridge icon displays information about that bridge. For example:

Virtual switch information includes:

n Name: Bridge name.

n Type: The type of switch.
n Hypervisor: Virtualized environment Hypervisor. In this example, VMware ESXi.
n Vendor: vSwitch vendor. In this example, VMware.
n Override VLANs: Indicates whether or not VLANs are overridden.
n Override Teaming: Indicates Yes if network adapter teaming is overridden or No if not overridden.
n Uplink: Indicates the number of uplink ports.
n VLANs: Indicates VLANs, tagged or untagged, associated with the vSwitch.

Visualizations | 214
 Chapter 17 | Visualizations

Port Group (Virtual Network) Information

The virtual network environment is also referred to as a port group. Hovering over a port group icon displays
information about that port group. For example:

Port group information includes:

n Name: Virtual network name.

n Override VLANs: Indicates whether or not VLANs are overridden.
n Override Teaming: Indicates Yes if network adapter teaming is overridden or No if not overridden.
n Uplink: Number of uplink ports.
n VLANs: Any VLANs configured on the port group.
n Uplink Teaming Policy: Identifies the port group teaming policy for an ESXi host.
n Bond Status (Nutanix): Indicates the Nutanix bond status.
n Bond Mode (Nutanix): Indicates the Nutanix bond mode.

Virtual Machine Information

Hovering over a VM icon displays information as follows:

n If all of the VMs for a host are visually grouped together within a single icon in the Host Visualization,
hovering over the VMs icon lists all VMs that are configured on that host.
n If the VMs are individually represented in the host visualizer, hovering over a VM icon displays information
about that VM.

If all VMs are grouped into one icon, left-click the icon and select Expand. All VMs will appear as independent
icons with names.
Also, you can list all network interfaces (adapters) that are associated with a VM. To do this, for a single VM,
left-click the VM icon and select Expand. The network interfaces/ports will be listed as separate icons with
port names, for example eth0 and eth1. These icons replace the VM icon.

Aruba Fabric Composer 6.3.0 | User Guide 215

Chapter 17 | Visualizations

The following is an example of information provided when you hover over the icon for a single VM:

Virtual Machine (VM) information includes:

n Name: Name of the VM.

n Powered On: Indicates whether or not the VM is powered On.
n OS: Guest operating system.
n IP Addresses: IP addresses used by the VM.
n Vendor: Host vendor.
n Host Name: Name of the host that this VM is on.
n Type: VM type. Possible types include SimpliVity Controller, NSX Controller, NSX Distributed Router, NSX
Edge Gateway, Nutanix Controller, and User.
n NSX Edge Features: Where applicable for NSX Edge gateway, this field lists the NSX Edge features and
indicates the current state of each feature, For example, NAT: Enabled.
n VLAN: Tagged or untagged VLANs associated with the VM.
n VNIs: Virtual Network Instances.

VMKernel Adapter Information

Hovering over a VMKernel icon displays information as follows:

n If all of the VMKernels for a host are visually grouped together within a single icon in the Host Visualization,
hovering over the VMKernel icon lists all VMKernels that are configured on that host.
n If the VMKernels are individually represented in the host visualizer, hovering over a VMKernel icon displays
information about that VMKernel.

The following is an example of information provided when you hover over the icon for a single VMKernel:

Visualizations | 216
 Chapter 17 | Visualizations

VMKernel adapter information includes:

n Name: The name of the VMKernel adapter.

n MAC Address: The MAC address of the VMKernel adapter.
n VLAN: A VLAN associated with the VMKernel adapter.
n IP Address: The IP address of the VMKernel adapter.
n Prefix Length: Indicates the prefix length (subnet mask) on this VMKernel address.
n VNIs: The Virtual Network Identifiers (VNI) on the VMKernel.
n TCP IP Stack: Indicates the VMKernel TCP/IP stack name. For example, VXLAN.
n Services: The services provided by the VMKernel.

Network Visualization: Viewing a Leaf-Spine Fabric

The Network Visualization enables you to view and obtain information about components and paths from
the Aruba leaf-spine fabric switches.
To access this view, in Aruba Fabric Composer, select Visualizations > Networks. The leaf-spine fabric is
visualized such as the following:

Aruba Fabric Composer 6.3.0 | User Guide 217

Chapter 17 | Visualizations

In the example:

n The top two switches with the icon are spine switches. You can see the spine symbol in
the switch icon. These switches are in the top row as specified in the Spine Location selection in the Filters
pane.

n Switches with the icon are leaf switches. The icon contains a single leaf symbol.

n Switches with the icon are border leaf switches. The icon contains a double leaf symbol.

Switch Health
A colored icon on each switch symbol indicates the switch health:

n Green indicates Healthy.

n Yellow indicates Degraded.
n Red indicates Critical.

Hovering over switches

Hovering over any switch in the fabric visualization provides information about that switch. For example:

Visualizations | 218
 Chapter 17 | Visualizations

This information includes:

n Name: Switch name.

n MAC Address: Switch MAC address.
n IP Address: IP address of the switch for switch management.
n Health: Health of the switch. For example, Healthy, Upgrading, Healthy, But..., Degraded, Critical.
n Status: Status of the switch. For example, Synced, Syncing, or Sync Failure.
n Software Version: Version of software installed on the switch.
n Model: Switch model.
n Type: The type of switch: Spine, Leaf, or Border Leaf.

Neighbor Information and Visualization

You can display neighbor information and select neighbors to visualize within the Network visualizer. To
display the details table, in the Filters panel, select Overlays > Neighbors and then select Show Network
and Show Details Table.
The table provides the following fabric switch and neighbor information:

n System Name: The system name of the BGP neighbor.

n Chassis ID: The chassis ID of the BGP neighbor.
n Switch: The fabric switch.
n Port/LAG: The fabric switch port or LAG of that BGP neighbor connection.

Aruba Fabric Composer 6.3.0 | User Guide 219

Chapter 17 | Visualizations

n Time to Live: The time-to live for that BGP neighbor.

n Stale: The state of the routes associated with the BGP neighbor: No = not stale, Yes = stale.
n Switch MAC Address: Not used by leaf-spine.
n Source MAC Address: Not used by leaf-spine.

In the table, using the check boxes, you can select all neighbors or specific neighbors to appear in the
visualization.

Visualizations | 220
 Chapter 17 | Visualizations

Filtering the Network View

In Aruba Fabric Composer, selecting Visualizations > Networks opens the Network Visualization that
shows the Aruba fabric switches and the links between the switches. Neighbors are not automatically
displayed.
Using the details table, you can select neighbors, then in the table, select neighbors to appear in the visualizer.
Note that the Hosts and Attachments selections are not supported with a leaf-spine fabric.

Using the Filters Panel

The left side of the Network Visualization window contains a set of filters and a scaling bar for the network
visualization.

Clicking << at the bottom of the Filters sidebar pane collapses the sidebar, allowing the visualization to
take up the entire window. Clicking >> expands the Filters sidebar pane.

The following filters enable you to customize the Network visualization:

n Fabric: Select one fabric to display in this visualizer. This drop-down lists all connected fabrics.
n Overlays: From this drop-down list, select one of the following:
o Attachments: Not supported with a leaf-spine fabric.
o Hosts: Not supported with a leaf-spine fabric.
o Leaf-Spine:
o Neighbors: Lists neighbors in the network table. Selecting neighbors in the table displays the selected
neighbors in the network visualization.
o VSX:
n Filter: Not supported with a leaf-spine fabric.

Settings

n Show Network: If checked, the fabric visualization is displayed.

n Show Details Table: If checked, the network details table appears below the visualizer.
n Custom Layout: This can be activated only if the Grid Layout is unchecked.
n Grid Layout: Displays the visualization in a grid layout. Use the slider bar to scale the grid.
n Zoom: Sliding the Zoom bar scales the visualization.

Name Truncation
Enables you, for very long names/identifiers, to determine how many and which characters in each name
appear with the component icons in the host view. This helps reduce clutter and enables you to more easily
find specific components, especially in large environments. To truncate, select the characters to remove
(remove Start, Middle, End, or None characters) and specify the number of characters to display.

Spine Location
Select where spine switches are located in the visualization: Top or Bottom.

Selecting Neighbors from the Table

You can select one or more neighbors from the details table. Table filters enable you to easily locate desired
neighbors. You can use regular expressions in the table column filters to list a set of desired attachments.
Refer to Filtering Using Regular Expressions on page 24.

Aruba Fabric Composer 6.3.0 | User Guide 221

Chapter 17 | Visualizations

Statistics Visualization
The Statistics Visualization enables you to view and obtain information about components and paths from
the Aruba leaf-spine fabric switches.
To access this view, in Aruba Fabric Composer, select Visualizations > Statistics Visualization. The leaf-
spine fabric is visualized such as the following:

Table View
With the Table icon/tab selected (default selection), a table such as the following lists all switch ports for
the selected Fabric and Switch(es).

n Health: Displays the health of the selected switch (Healthy, Healthy, But..., , Degraded, Minor, Major,
Critical, Unknown, Non Recoverable).
n Reason: The system name of the BGP neighbor.
n Switch: The fabric switch.
n Port: The fabric port.
n Silkscreen: The port label on the front panel which indicates the port connector number.
n Name: Port name.
n Description: An optional description of the port.
n LAG: Identifies the LAG if the port is a member of a Link Aggregation Group (LAG).
n Enabled: Indicates Yes if the port is enabled and No if the port is disabled.
n Link State: Indicates the link state of the port: up or down.
n Hold Down: Indicates that a port is being held down by one or more resources.
n Routed: Route configuration of the port.
n Uplink: The port is an Uplink port connected to another network device such as a switch or router. Indicates
Yes if the port is an Uplink port or No if the port is not an Uplink port.
n Current Speed: Indicates the current port speed in Gbps.
n Configured Speed: The configured interface line speed in Mbps.
n Speed Group: Speed groups exist as part of the hardware implementation on some switches. Speed groups
are not created. This field lists all of the ports that are in the speed group that includes the port being
hovered over, or lists only the port being hovered over if that port is not a member of a speed group. For

Visualizations | 222
 Chapter 17 | Visualizations

example, a single value such as '48' for an SFP port or '10.1' for a QSFP port indicates that port is not in a
speed group.
n QSFP Mode: Indicates the QSFP mode (4 x 10, 1 x 40, and so on) of the port or Not Applicable.
n QSFP Transform: Select between Split, Unsplit, or N/A.
n Form Factor: Form factor of the switch port (Internal, QSFP, OSFP28, SFP, SFP28, RJ45, or LRFSP).
n Split Operational Status: Operational status of the port between Active and Inactive.
n Split Admin Status: Admin status of the port (Active or Inactive).
n Number of Lanes: Number of lanes used by the port.
n Forward Error Correction: Indicates whether or not Forward Error Correction is enabled in QSFP mode on
an Access port or Fabric port.
n LLDP Mode: Indicates whether the port is in Disabled, RX Only, TX Only, or RX & TX modes.
n CDP Mode: Indicates whether the port is in Disabled, RX Only, TX Only, or RX & TX modes,
n VLANs: Identifies VLANs configured on the port.
n Ungrouped VLANs: Identifies VLANs configured on the port that are not part of a VLAN group.
n VLAN Groups: Identifies VLAN Groups configured on the port.
n Native VLAN: Identifies a native VLAN configured on the Access port. Note that Native VLAN does not
apply to Fabric ports.
n MTU: Default Maximum Transmission Unit size for frames received and transmitted.
n Lossless Ethernet Enabled: Enabled (Yes or No) for the port.
n Pause Mode: Pause mode enabled or disabled in the port.
n Manager: Aruba Fabric Composer

Graphical View
Clicking the Graphical icon/tab opens a graphical view of the selected switch(es).

Switch Health
A colored icon on each switch symbol indicates the switch health:

n Green indicates Healthy.

n Yellow indicates Degraded.
n Red indicates Critical.

Aruba Fabric Composer 6.3.0 | User Guide 223

Chapter 17 | Visualizations

Hovering over switches

Hovering over any switch in the fabric visualization provides information about that switch. For example:

This information includes:

n Name: Switch name.

n Enabled: Whether enabled or not.
n Link State: Link state, whether Up or Down.
n Current Speed: Indicates the current port speed in Gbps.
n Port Type: Indicates if the port is SFP or QSFP.
n Transceiver Type: Whether a transceiver is connected or not.
n LLDP Mode: Tx or Rx.
n CDP Mode: Whether enabled or disabled.
n MTU: Maximum Transmission Unit (MTU) size for frames received and transmitted.
n Hold Down: Indicates that a port is being held down by one or more resources.
n Health: Health of the switch. For example, Healthy, Upgrading, Healthy, But..., Degraded, Critical.
n Reason: Status of the switch. For example, Synced, Syncing, or Sync Failure.

Visualizations | 224
 Chapter 17 | Visualizations

Filtering the Statistic Visualization View

In Aruba Fabric Composer, selecting Visualizations > Statistics Visualization opens the Visualization that
shows the Aruba fabric switches and the links between the switches.

Using the Filters Panel

The left side of the Statistics Visualization window contains a set of filters for the Statistics Visualization.

Clicking << at the bottom of the Filters sidebar pane collapses the sidebar, allowing the visualization to
take up the entire window. Clicking >> expands the Filters sidebar pane.

The following filters enable you to customize the Statistics Visualization:

n Fabric: Select a fabric to display in this visualizer. This drop-down lists all connected fabrics.
n Switches: Select a switch from this drop-down list,
n Displayed Points from 2 to 60: Enter any number between 2 to 60.
n The following check boxes are also available:
o Multiple Points (up to 12)
o Display As Bar Chart
o Show Ports Table
o Display Data As Deltas

The following check boxes allow customized data to be displayed.

Aruba Fabric Composer 6.3.0 | User Guide 225

Chapter 17 | Visualizations

Visualizations | 226
 Chapter 18
Support and Other Resources

Support and Other Resources

n Accessing Hewlett Packard Enterprise Support
n Accessing updates
n Regulatory Information
n Documentation Feedback

Accessing Hewlett Packard Enterprise Support

n For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website:
[Link]
n To access documentation and support services, go to the Hewlett Packard Enterprise Support Center
website: [Link]

Information to collect
n Technical support registration number (if applicable)
n Product name, model or version, and serial number.
n Operating system name and version
n Firmware version
n Error messages
n Product-specific reports and logs
n Add-on products or components
n Third-party products or components.

Accessing Updates
n Some software products provide a mechanism for accessing software updates through the product
interface. Review your product documentation to identify the recommended software update method.
n To download product updates:
Hewlett Packard Enterprise Support Center
[Link]/support/hpesc
Hewlett Packard Enterprise Support Center: Software downloads
[Link]/support/downloads

n To subscribe to eNewsletters and alerts:

[Link]/support/e-updates

Aruba Fabric Composer 6.3.0 | User Guide 227

Chapter 18 | Support and Other Resources

n To view and update your entitlements, and to link your contracts and warranties with your profile, go to the
Hewlett Packard Enterprise Support Center More Information on Access to Support Materials page:
[Link]/support/AccessToSupportMaterials

Access to some updates might require product entitlement when accessed through the Hewlett Packard
Enterprise Support Center. You must have an HPE Passport set up with relevant entitlements.

Regulatory Information
To view the regulatory information for your product, view the Safety and Compliance Information for Server,
Storage, Power, Networking, and Rack Products, available at the Hewlett Packard Enterprise Support Center:
[Link]
Additional Regulatory Information
Hewlett Packard Enterprise is committed to providing our customers with information about the chemical
substances in our products as needed to comply with legal requirements such as REACH (Regulation EC No
1907/2006 of the European Parliament and the Council). A chemical information report for this product can
be found at:
[Link]
For Hewlett Packard Enterprise product environmental and safety information and compliance data,
including RoHS and REACH, see:
[Link]
For Hewlett Packard Enterprise environmental information, including company programs, product recycling,
and energy efficiency, see:
[Link]

Documentation Feedback
Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us
improve the documentation, send any errors, suggestions, or comments to Documentation Feedback
(docsfeedback@[Link]). When submitting your feedback, include the document title, part number, edition,
and publication date located on the front cover of the document. For online help content, include the
product name, product version, help edition, and publication date located on the legal notices page.

Support and Other Resources | 228