Aruba S2500 Mobility Access Switches
Brings user role-based access to wired networks.

Features:

Secure Wired Access Deployments

What makes Aruba Mobility Access Switches unique is their ability to easily provision role-based user access for wired users and devices. Roles may be defined for users or groups of users, such as employees or guests. Security, quality of service (QoS), application policies or ACLs are associated with the defined role.

Mobility Access Switches support a unique per-port Tunneled Node capability that enables policy enforcement by an ICSA-certified stateful firewall resident in the Aruba Mobility Controller platforms.

Ports in shared locations such as conference rooms and common areas may be configured so the traffic is enforced by the Mobility Controller's firewall, while other ports may use local forwarding. With policies enforced by the Mobility Controller, all access and QoS policies are consistently applied to users and devices regardless of the location and media type used to connect to the network, wired or wireless. A Tunneled Node port essentially operates as a wired AP, identical to Aruba 802.11n wireless campus APs.

When used with Aruba's ClearPass Policy Manager for user and device authentication, ACLs may be automatically downloaded and applied to the Mobility Access Switch. If a user's authorization parameters change - for example, if user access extends outside time-of-day parameters or disabling a firewall violates device health check policies - both ClearPass Policy Manager and the Mobility Access Switch will automatically change the policy. This integration and automation significantly reduces IT overhead by eliminating the need to manually configure policies on every Mobility Access Switch.

ArubaStack Extends Beyond The Wiring Closet

With ArubaStack, Mobility Access Switches enable new opportunities for network access designs. ArubaStack allows up to eight S2500 or S3500 models to be interconnected and managed as a single logical device with one IP address and one configuration file. Each S2500 includes four integrated Gigabit/10 Gigabit Ethernet ports to enable stacking.

With ArubaStack, 10 Gigabit Ethernet ports are used for the stack interconnects. Each S2500 model comes with a 50-cm direct-attach copper cable used to create a stack within the wiring closet. A variety of other 10 Gbps pluggable optical transceivers may also be used to extend the ArubaStack to other Mobility Access Switches across wiring closets or buildings separated by up to 10 kilometers

By interconnecting multiple wiring closets into a single ArubaStack, the Mobility Access Switch reduces uplinks and expensive routed ports in the LAN core, simplifies LAN topologies, and reduces capital and operating costs over legacy wiring closet designs. The S2500 provides a compact, economical and powerefficient solution for aggregating Gigabit Ethernet uplinks from building wiring closets. Multiple Mobility Access Switches can be interconnected to the S2500

Free IT Staff From Tediuos Network Configuration

Several features to reduce time-to-configure and upgrades are supported.

Mobility Access Switches employ a profile-based configuration similar to the one found on the Aruba Mobility Controllers. Utilizing port-profiles ensures ports are configured correctly the first time and simplifies configuration compliance with additional port configuration changes.

When used with Aruba Instant APs, Mobility Access Switches automatically learn VLANs configured on the Instant cluster. They also modify the PoE priority of Instant APs as a business-critical resource, reserving power for APs in the event of loss of budgeted PoE power.

Additionally, Mobility Access Switches are capable of shutting down a port classified as a rogue AP by an Aruba Instant AP.

When used with Aruba's ClearPass Policy Manager, ACLs may be automatically downloaded from ClearPass and applied to the Mobility Access Switch port based on the user and device's role and defined policies.

Configured as wired APs, Mobility Access Switches free network administrators from the need to configure VLANs, ACLs and QoS policies at each switch in the access layer. Policies for users, devices and applications are defined and enforced by Mobility Controllers.

This integration and automation with Aruba Instant, ClearPass and Mobility Controllers eliminates traditional IT overhead that comes from manually configuring parameters and policies on every legacy switch in the access network.

Mobility Access Switches can also utilize the Aruba Activate™ service, which enables customers to efficiently deploy and maintain Aruba devices across a distributed enterprise. Customers that subscribe to Aruba Activate can categorize and set specific provisioning parameters to enable Aruba devices to automatically obtain their configurations. Aruba Activate benefits include:

• Asset tracking and device categorization within the customer organization
• Reduced time-to-deploy across a large number of locations
• Automated software-update notifications and simplified upgrades

No special VLANs are required at the access layer because VLAN trunks are configured by the Mobility Controller, and traffic is routed to the correct VLAN in the core. Likewise, security and QoS are enforced by a Mobility Controller that employs user rolebased policies.

Architected For High Availability

The S2500 includes a number of features that make it ideal to deploy in customer locations that require maximum availability.

• Distributed link aggregation: Link aggregation groups (LAG) with physical ports may be shared across members of an ArubaStack. This distribution of a LAG across the ArubaStack allows load-sharing and redundant connections across multiple devices, providing an additional level of reliability and maximum availability.
• PoE priority: ArubaOS PoE priority enables IT staff to classify attached PoE devices with a priority level, ensuring no loss of power for business-critical devices like APs, security cameras and red phones.
• Hot Standby Link (HSL): ArubaOS HSL provides a simplified link failover mechanism without configuring and running the spanning-tree protocol. A port or group of ports may be configured as redundant for another port or group of ports.
• ArubaStack with S3500: All S2500 models may be a member of an ArubaStack concurrently with S3500 models. The S3500, with its redundant power and field-replaceable fan tray, provides an added level of hardware availability for networkcritical devices.

Specifications:

Technical Specifications
Physical Specifications
S2500-24T: 24x10/100/1000BASE-T RJ-45 + 4xSFP/SFP+ S2500-24P: 24x10/100/1000BASE-T PoE RJ-45 + 4xSFP/SFP+ S2500-48T: 48x10/100/1000BASE-T RJ-45 + 4xSFP/SFP+ S2500-48P: 48x10/100/1000BASE-T PoE RJ-45 + 4xSFP/SFP+ Common interface feature support (all models) Diagnostic LEDs (link/admin/duplex/PoE/speed/fault) Auto-negotiation and auto MDI/MDIX support Time domain feflectometry (TDR) PoE feature support (P models) IEEE 802.3af: PoE (15.4 watts) IEEE 802.3at: PoE+ (30 watts) Aruba efficient PoE (priority, guard-band and time range) LCD management display RJ-45/mUSB console port (RS-232) Out-of-band 10/100/1000BASE-T management port USB interface for software/configuration files
Uplink Interfaces
Fixed 4x1000BASE-X/10GBASE-X SFP/SFP+ (SFP/SFP+ purchased separately) Supported SFP/SFP+ transceivers 10GBASE-LR 1310-nm SFP+ (LC) for up to 10 kilometers over SMF 10GBASE-SR 850-nm SFP+ (LC) for up to 300 meters over MMF (OM3) 10GBASE-LRM 1310-nm SFP+ (LC) for up to 220 meters over MMF (OM2) 1000BASE-LX 1310-nm SFP (LC) up to 10 kilometers over SMF 1000BASE-SX 850-nm SFP (LC) up to 550 meters over MMF (OM2) 1000BASE-T SFP (RJ-45) up to 100 meters (CAT5) Direct Attach Cable - Twinax (50 cm, 1 m, 3 m or 7 m lengths)
Uplink Pluggable Transceivers
10GBASE-LR 1310-nm SFP+, LC connector 10GBASE-SR 850-nm SFP+, LC connector 10GbE SFP+ Dual-Attach Cable, for stacking 1000BASE-LX SFP, LC connector 1000BASE-SX SFP, LC connector 1000BASE-T SFP, RJ-45
Power Options
Integrated power supply Autosensing 100-240 VAC, 150 watts (T models) Autosensing 100-240 VAC, 580 watts (P models) PoE budget: 400 watts
Performance
S2500-24P/24T: 128 Gbps/95 Mpps S2500-48P/48T: 176 Gbps/131 Mpps
Dimensions
Height 1.75" (44mm) Width 17.5" (445mm) Depth 12.0" (305mm) Weight: S2500-24T 10.0lbs (4.54kg) S2500-24P 12.1lbs (5.5kg) S2500-48T 10.9lbs (4.96kg) S2500-48P 13.3lbs (6.2kg)
Environmental
Operating temperature: 0°C to 50°C Storage Temperature: -40°C to 70°C Operating Humidity: 5% to 95% non-condensing Operating Altitude: 10,000 feet Acoustic Noise: 42 dB with AC power supply
Layer 2 Features
MAC addresses per system: 12,000 Jumbo frames: 9,216 bytes Number of VLANS: 4,094 Port-and MAC-based VLAN IEEE 802.1AB: Link-layer discovery protocol (LLDP) Device discovery and advertisement Voice VLAN support using LLDP-MED Cisco dscovery protocol (CDP) Device discovery Voice VLAN support IEEE 802.1Q: VLAN tagging IEEE 802.1D: Spanning tree protocol (STP) IEEE 802.1w: Rapid reconfiguration of spanning tree protocol (RSTP) IEEE 802.1s: Multiple instances of spanning tree protocol (MSTP) Maximum number of supported instances: 64 Rapid per-VLAN spanning tree plus (PVST+) Spanning tree protocol features Portfast Root guard Loop guard Aruba loop protect Link aggregation groups Static IEEE 802.3ad: Link-aggregation control protocol (LACP) Number of link aggregation groups: 64 Number of ports per aggregation group: 8 Aruba Hot Standby Link (HSL) IEEE 802.3ah: Ethernet operations, administration and maintenance (OAM)
Layer 3 Features and Scaling
Unicast routes in hardware: 8,000 Routed VLAN interface (RVI) Loopback interface Static routing Open shortest path first (OSPF) v2 DHCP server/client DHCP relay (including Option 82) Network time protocol (NTP)
Security
802.1X MAC authentication RADIUS (device management, 802.1X, accounting) TACACS+ (Device Management and accounting) LDAP (802.1x) Digital certificates Internal user database Aruba Tunnel-Node Access control lists (ACLs) Storm control IPv6 router-advertisement (RA) guard DHCP guard MAC limiting
Multicast
Multicast routes in hardware: 2,000 PIM sparse mode (PIM-SM) IGMP v1/v2 IGMP snooping Multicast listener discovery (MLD) v1
Quality of Service (QoS)
802.1p DSCP IP precedence QoS trust (802.1p/DSCP/Auto) QoS classification by ACL, user and interface Policer classification by ACL, user and interface Egress strict priority queuing/low-latency queuing (LLQ) Eight hardware queues per port
Management
Command line interface (serial, telnet, SSHv2) Graphical user interface (HTTP/HTTPs) AirWave management platform SNMP v1, v2c, v3 IPv6 management Port mirroring (single destination) Remote monitoring (RMON)
Warranty and Support
Limited lifetime warranty (all models) includes: Return-to-factory hardware replacement with following business day shipment of failed product 24x7 access to Aruba’s Technical Assistance Center (TAC) for 90 days after the purchase date Warranty coverage as long as the original purchaser owns the product Power supply and fans are covered for five years from initial purchase
Safety
UL-UL60950-1 (second edition) C-UL to CAN/CSA 22.2 No.60950-1 (second edition) TUV/GS to EN 60950-1, Amendment A1-A4, A11 CB-IEC60950-1, all country deviations
Electromagnetic Compatibility Certifications
FCC 47CFR Part 15, Class A EN 55022 Class A ICES-003 Class A VCCI Class A AS/NZS CISPR 22 Class A CISPR 22 Class A EN 55024
Environmental Certifications
Reduction of Hazardous Substances 5 (RoHS-5)

Documentation:

Aruba S2500 Mobility Access Switches Datasheet (.PDF)