Link Aggregation

Link aggregation configuration depends on the number of ports available on the switch. Instant On currently supports switches with the following number of ports:

Table 1: Switch Ports Aggregation

Number of Ports per Switch

Number of LAG Supported

Number of LAG members supported

8 ports

4 trunks

4 trunk members

24 ports

8 trunks

4 trunk members

48 ports

16 trunks

8 trunk members

The following procedure describes how to add a link aggregation group on the switch:

  1. Click the Devices () tile on the Instant On web application home page or click Devices from the navigation pane on the left. The Device Overview page is displayed.
  2. Use one of the following methods to view the switch details:
    1. Clicking on the switch name.
    2. Hover the cursor to the end of the row, click the button, and select View Details from the drop-down list.
  3. Click the Link Aggregation tab.
  4. Click Create.
  5. Under Identification, configure the following:
    • Name—Provide a custom name for the Link aggregation in the text field.
    • Enabled—Select the checkbox to enable the LACP ports. It indicates that the port members of the link aggregation are available for devices to connect. Unselect the checkbox to disable the LACP ports.
    • Port Members—Select the ports to add as members of the link aggregation. The list of selected port members is displayed.

      To assign a port profile, enable the Use Port Profile option. From the Port Profile drop-down list, select an existing port profile or create a new one.

      For more information on creating a port profile, see Creating a Port Profile.

      Once a port profile is assigning, the View Port Profile is displayed. When you click the View Port Profile, he port profile details panel opens on the left.

      To modify the configuration, click View Details to navigate to the port profile configuration page.

      If a port profile is selected, then Security section is not displayed. These parameters are configured in the port profile.

  6. Under Link Aggregation, you must select either Static (default) or LACP as the aggregation type.
  7. This is an option settings. Under Security > Port Security, select DHCP and ARP Port Protections (Untrusted Port) or Port Isolation (Protected Port).
  8. Under Security > Spanning Tree Protections, you must select one option from the list of Spanning Tree Protection options. The list of options are:
    • No spanning tree protections (default)—The default spanning tree protection settings without the BPDU option.
    • Filter spanning tree protocol (BPDU filter)—Filters incoming and outgoing BPDUs on the port.
    • Block spanning tree protocol (BPDU guard)—Stops the incoming and outgoing BPDUs received on the port.
    • Root bridge protection (Root guard)—Protects the designated root bridge by preventing unauthorized ports from becoming a root bridge.
  9. Under Port Options > Advanced Options, select the Limit Broadcast and Multicast Storms checkbox to limit excessive broadcast and multicast traffic.
  10. Click Create.

Identification

The Identification section displays the following information:

  • Name—Provide a custom name for the Link aggregation in the text field.
  • Enabled—Select the checkbox to enable the LACP ports. It indicates that the port members of the link aggregation are available for devices to connect. select the checkbox to disable the LACP ports.
  • Port Members—Displays the list of ports that are currently members of the link aggregation. When you select a port that is not part of the existing link aggregation, a new link aggregation must be created. Each device port can belong to only one link aggregation at a time.

    To assign a port profile, enable the Use Port Profile option. From the Port Profile drop-down list, select an existing port profile or create a new one.

    For more information on creating a port profile, see Creating a Port Profile.

    Once a port profile is assigning, the View Port Profile is displayed. When you click the View Port Profile, he port profile details panel opens on the left.

    To modify the configuration, click View Details to navigate to the port profile configuration page.

    If a port profile is selected, then Security section is not displayed. These parameters are configured in the port profile.

Link Aggregation

Select one of the following aggregation modes:

  • Static (default)—This option is selected by default. It indicates simple aggregation of ports with no active link detection or failover.
  • LACP—Selecting this option indicates dynamic detection and automatic failover when connected to other LACP (802.3ad) capable switches. This mode will allow only one user defined network through the aggregated link. This option will pass the management VLAN network as untagged and all other networks as tagged.

Security

In Security > Port Security section consists of the following options:

  • DHCP and ARP Port Protections (Untrusted Port)—Enable this option when untrusted devices are connected to the port. This setting in combination with Network Security configuration is used to prevent DHCP and ARP attacks on the wired network. This setting is enabled by default. For more information, see Security.
  • Port Isolation (Protected Port)—Enable this option to provide Layer 2 isolation between interfaces (Ethernet ports and LAGs) that belong to the same broadcast domain (VLAN). This ensures that the specific ports can be isolated from others within the same VLAN. When this option is enabled, the port can only send traffic to unprotected ports. Any packets received on a protected port are filtered at the egress of other protected ports, preventing communication between them. This option is disabled by default. Protected ports are not supported on Instant On 1830 switches.

In Security > Spanning Tree Protections, select an option listed under Spanning Tree Protections to protect spanning tree configurations from interference. BPDU protection is a security feature designed to protect the active MSTP topology by preventing spoofed BPDU packets from entering the MSTP domain. The Spanning Tree Protections section consists of the following options:

  • No spanning tree protections (default)—The default spanning tree protection settings without the BPDU option.
  • Filter spanning tree protocol (BPDU filter)—Filters incoming and outgoing BPDUs on the port.
  • Block spanning tree protocol (BPDU guard)—Stops the incoming and outgoing BPDUs received on the port.
  • Root bridge protection (Root guard)—Protects the designated root bridge by preventing unauthorized ports from becoming a root bridge.

Port Access

Under Ports > Port Access, select the Specific Clients checkbox to allow the port to connect to specific clients.

During discovery, port restrictions on the link aggregation are temporarily disabled to enable new clients and devices to connect.

To add clients, complete the following steps:

  1. Select the Specific Clients checkbox.

    Allowed Clients and Devices option is displayed.

  2. Click Add.

    The Select Clients and Devices to Allow, window is displayed.

  3. Click Search, to detect new devices.
  4. Select the devices, and click Add Clients and Devices.

Port Options

Port Options option displays the link speed and how the port handles the traffic in both directions (Half or Full-Duplex). The data volume is displayed in Mbps.

The configurations displayed under Speed/Duplex are:

  • Auto Negotiated(default)—displays the recommended setting for almost all devices.
  • Manual—displays the port to a specific speed and duplex values by selecting Manual Speed / Duplex Options from the drop-down list. (e.g., 100 Mbps Half-Duplex, 100 Mbps Full-Duplex, 1 G Full-Duplex, 2.5 G Full-Duplex).

Under Port Options > Advanced Options, select the Limit Broadcast and Multicast Storms checkbox to limit excessive broadcast and multicast traffic.

Clients and Devices

  • Connected Clients and Devices - Allows you to view devices connected to port sorted by network. By default, All Networks is selected. To filter the clients and devices connected to a specific network, select a network from the Wired Network drop-down list. The clients and infrastructure devices directly connected to the port are displayed as a link that takes you to the client details page. The indirectly connected clients are displayed by their MAC address.

Transceiver Details

Instant On switches are capable of detecting an SFP transceiver. When a transceiver is connected to a switch, the details of the transceiver are displayed under the Ports tab of the switch details page. It is possible that the transceiver details are displayed even if the port state is up, down, loop detected, or link flapping.

The following transceiver details are displayed under the Ports tab:

Table 2: Transceiver Details

Line No

Transceiver Details

Line 1

Denotes the transceiver compatibility in the following categories:

  • Supported transceiver—Official transceiver models recommended by HPE Networking and appearing on the switch datasheet.
  • Unsupported transceiver—Third party transceiver models that are compatible with the switch.
  • Incompatible or faulty—Third party transceiver models that are unsupported and incompatible with the switch. The transceiver information is unavailable in this case.

Line 2

Name of the Vendor

Line 3

Type of transceiver

Line 4

Serial number of the transceiver.

Line 5

Model number of the transceiver.
  • If the switch port is offline but a transceiver is detected, the transceiver information will still be displayed.
  • Instant On supported transceivers are recommended for optimal performance. Please refer to the Instant On product datasheets for supported transceiver list and Instant On Transceiver Guide for additional detail. Unsupported transceivers are not guaranteed for proper operation and may experience function limitation. Information displayed for unsupported transceivers may be limited and inaccurate.

Delete Link Aggregation

To delete the link aggregation, complete the following steps:

  1. Click Delete.
  2. In the Delete Link Aggregation pop-up, confirm the delete operation.