Provisioning Pre-Configured AOS-CX Switches

Unlike factory default switches, locally managed switches and the switches with custom configuration require one touch provisioning. On AOS-CX switches, Aruba Central (on-premises) is enabled, by default, as their management platform, and therefore the switches connect to Aruba Central (on-premises) automatically.

To onboard a locally-managed or a pre-configured AOS-CX switch to Aruba Central (on-premises), follow one of the following options:

Connect the AOS-CX switch directly to Aruba Central (on-premises). Aruba recommends that you use this option if you want to preserve the current configuration running on the switch. For more information on this procedure, see the workflows described in this topic.
To manually connect the switch to Aruba Central (on-premises), you must configure the Aruba Central (on-premises) URLUniform Resource Locator. URL is a global address used for locating web resources on the Internet. on the switch. Execute the following commands in the switch CLI:
config terminal
aruba-central <Aruba Central (on-premises) URL> vrf mgmt
exit
Aruba does not recommend to manually provision the URL in a cloud deployment.
Reset the switch configuration and use ZTPZero Touch Provisioning. ZTP is a device provisioning mechanism that allows automatic and quick provisioning of devices with a minimal or at times no manual intervention. to provision the switch. You must first create a backup of the configuration, then reset the switch using the erase all zeroize command in the CLI. This initiates ZTP on the switch, enabling the switch to obtain the IP address from the option 43 sent by the DHCPDynamic Host Configuration Protocol. A network protocol that enables a server to automatically assign an IP address to an IP-enabled device from a defined range of numbers configured for a given network. server and then connect to Aruba Central (on-premises).

Aruba Central (on-premises) supports provisioning AOS-CX switches using one of the following methods:

Pre-provisioning—In this workflow, a switch is added to the device inventory and assigned a group in Aruba Central (on-premises) before it connects to Aruba Central (on-premises).
See Workflow 1—Pre-Provisioning an AOS-CX Switch.
Onboarding connected switches—In this workflow, Aruba Central (on-premises) onboards the switch that attempts to connect and then assigns a group.
See Workflow 2—Provisioning an AOS-CX Switch On-Demand.

The following figure illustrates provisioning procedure for a pre-configured switch.

Figure 1 Provisioning Workflow for Pre-Configured AOS-CX Switches

Workflow 1—Pre-Provisioning an AOS-CX Switch

The pre-provisioning workflow includes the following steps:

Step 1: Onboard the AOS-CX Switch to Aruba Central (on-premises)

To onboard AOS-CX switches to the device inventory in Aruba Central (on-premises), complete the following steps:

Step 2: Assign the AOS-CX Switch to a Group

AOS-CX switches can be provisioned in a template group only. If you want to preserve the existing configuration on the switch, Aruba recommends that you create a new group for the switch.

For more information on creating a group, see Creating a Group.

To assign a device to a group from the Account Home page:

In the Account Home page, under Global Settings, click Device Inventory.
The Device Inventory page is displayed
Select the device that you want to assign to a group.
Click Assign Group. The Assign a Group to the Selected Devices window is displayed.
Select the group to which you want to assign.
Click Assign Device(s).

To assign a device to a group from the Network Operations app:

In the Network Operations app, set the filter to Global.
Under Maintain, click Organization.
By default, the Network Structure tab is displayed.
Click the Groups tile.
The Groups page is displayed.
From the list of devices, select the switches to assign.
Click the Move devices icon.
The Move Devices page is displayed.
Select the Destination Group from the drop-down list.
Click Move.

The selected devices are moved to the destination group. These devices will adopt the destination group configuration.

Step 3: Provision the AOS-CX Switch to a Group

When the switch connects to Aruba Central (on-premises), Aruba Central (on-premises) automatically assigns it to the pre-assigned group. The following figure illustrates the provisioning steps for each group type.

Figure 2 Switch Provisioning Steps Per Group Type

If the switch is assigned to a new UI group, you can modify the configuration of switches in a group using the UI menu options under the Network Operations app > Manage > Device(s) > Switches. For more information, see Configuring AOS-CX Switches in UI Groups.

If you have assigned the switch to a template group, you can import the existing configuration to a new configuration template and apply this template to other devices in the group. To create a configuration template using the existing configuration on the switch:

In the Network Operations app, set the filter to a template group.
The dashboard context for the group is displayed.
Under Manage, click Devices > Switches.
Click the Config icon.
The tabs to configure switches using templates is displayed.
Click the Templates tab. The Templates page is displayed.
Click + to add a new template. The Add Template window is displayed.
In the Basic Info tab, enter a name for the template in the Template Name field.
In the Device Type drop-down, select Aruba CX.
Select the switch model and software version. You can specify any of the following combinations:
- ALL for both Model and Version—To apply the template to all switch models and all supported switch software versions.
- ALL for Model and a software version for Version—To apply the template to all switch models running the selected software version.
- ALL for Version and a switch model for Model—To apply the template to a switch model and all software versions supported by the selected switch model.
- A switch model and a software version—To apply the template to a specific switch model and the software version. The template created for a switch model and a software version takes precedence over the template that is created for all platforms and versions.
Select the manufacturing part number of the switch in the Part Number drop-down.

The Part Number drop-down is displayed only if you select a switch model in the Model drop-down.
If you select a specific switch model and part number, you can apply the template to a standalone switch and not to a stack.
If you select All in the Model drop-down, or if you select a switch model and All in the Part Number drop-down, you can apply a template to both a standalone switch and stack.

Click Next. The Template tab is displayed.
Build a new template by adding the output of the show running-config from the switch CLI in the Template text box. Ensure that the template text adheres to the guidelines listed in Important Points to Note.

You must manually create the template for the AOS-CX switch in a group, along with the password in plaintext format. You can use the output of the show running-config command to create the template. You can also add variables to use the same template for onboarding multiple AOS-CX switches. For more information on variables, see Managing Variable Files.
All switch templates must include a password command to set a password for the device. The template cannot be saved without adding a password command. If the configuration that is pushed from Aruba Central (on-premises) to the device does not contain a password command, the configuration push is aborted for the device and a log is added to the audit trail. For example, if you add the password command in a condition block and the condition evaluates to false, the configuration that is pushed will not contain the password command. For more information, see Managing Password in Configuration Templates.
For AOS-CX switches, you must configure the password only in plaintext. Also, the format of password must be user admin group administrators password plaintext <string>.
For AOS-CX switches, the password configured in the template must match the password configured on the switch. Aruba Central (on-premises) cannot override the password that is configured on the switch.

Click Save. After you apply the configuration template, switches reboot and reconnect to Aruba Central (on-premises) with the new configuration.

Step 4: Verify the Configuration Status

To verify the configuration status:

In the Network Operations app, set the filter to a template group.
The dashboard context for the group is displayed.
Under Manage, click Devices > Switches.
Click the Config icon.
The tabs to configure switches using templates is displayed.
- To verify the configuration status for the template group, click Configuration Audit. The Configuration Audit dashboard displays the number of devices with template and configuration synchronization errors.
- To view configuration errors for a specific device, select a switch from the filter bar. The Configuration Audit dashboard displays the number of template and configuration synchronization errors for the device.
To view template errors, click View Template Errors.
To view configuration synchronization errors, click View Details under Configuration Status.
To compare running configuration and pending changes, click View under Config Comparsion Tool.

Workflow 2—Provisioning an AOS-CX Switch On-Demand

To dynamically provision switches on-demand, complete the following steps:

Step 1: Add the AOS-CX Switch to Aruba Central (on-premises)

Add the switch to the Aruba Central (on-premises) device inventory. For more information, see Onboarding Devices.

Step 2 Assign a Subscription to the AOS-CX Switch

To allow Aruba Central (on-premises) to manage the switch, ensure that a valid subscription is assigned to the switch.

Step 3: Provision the AOS-CX Switch to a Group

If the switch has a valid subscription assigned, Aruba Central (on-premises) marks the switch as unprovisioned. To preserve the switch configuration, move it to a new template group.

To move the device to a UI group:

In the Network Operations app, set the filter to Global.
Under Maintain, click Organization.
By default, the Network Structure tab is displayed.
Click the Groups tile.
The Groups page is displayed.
Select the device.
Click Import configuration. Aruba Central (on-premises) imports the switch configuration to the new group.
You can also modify the configuration of switches in a group using the UI menu options under the Network Operations app > Manage > Devices > Switches. For more information, see Configuring AOS-CX Switches in UI Groups.

To move the device to a template group:

Create a template group.
In the Network Operations app, set the filter to Global.
Under Maintain, click Organization.
By default, the Network Structure tab is displayed.
Click the Groups tile.
The Groups page is displayed.
Select the AOS-CX switch from a group.
Click the Move devices icon.
The Move Devices page is displayed.
Select the Destination Group from the drop-down list.
Click Move.

The selected devices are moved to the destination group. These devices will adopt the destination group configuration.
To build a new configuration template:
1. In the Network Operations app, set the filter to a template group.
  The dashboard context for the group is displayed.
2. Under Manage, click Devices > Switches.
3. Click the Config icon.
  The tabs to configure switches using templates is displayed.
4. Click the Templates tab. The Templates page is displayed.
5. Click + to add a new template. The Add Template window is displayed.
6. In the Basic Info tab, enter a name for the template in the Template Name field.
7. In the Device Type drop-down, select Aruba CX.
8. Select the switch model and the software version to which you want to apply the new template. You can specify any of the following combinations:
  - ALL for both Model and Version—To apply the template to all switch models and all supported switch software versions.
  - ALL for Model and a software version for Version—To apply the template to all switch models running the selected software version.
  - ALL for Version and a switch model for Model—To apply the template to a switch model and all software versions supported by the selected switch model.
  - A switch model and a software version—To apply the template to a specific switch model and the software version. The template created for a switch model and a software version takes precedence over the template that is created for all platforms and versions.
9. Select the manufacturing part number of the switch in the Part Number drop-down.
  - The Part Number drop-down is displayed only if you select a switch model in the Model drop-down.
  - If you select a specific switch model and part number, you can apply the template to a standalone switch and not to a stack.
  - If you select All in the Model drop-down, or if you select a switch model and All in the Part Number drop-down, you can apply a template to both a standalone switch and stack.
10. Click Next. The Template tab is displayed.
11. Build a new template by adding the output of the show running-config from the switch CLI in the Template text box. Ensure that the template text adheres to the guidelines listed in the Important Points to Note.
  - You must manually create the template for the AOS-CX switch in a group, along with the password in plaintext format. You can use the output of the show running-config command to create the template. You can also add variables to use the same template for onboarding multiple AOS-CX switches. For more information on variables, see Managing Variable Files.
  - All switch templates must include a password command to set a password for the device. The template cannot be saved without adding a password command. If the configuration that is pushed from Aruba Central (on-premises) to the device does not contain a password command, the configuration push is aborted for the device and a log is added to the audit trail. For example, if you add the password command in a condition block and the condition evaluates to false, the configuration that is pushed will not contain the password command. For more information, see Managing Password in Configuration Templates.
  - For AOS-CX switches, you must configure the password only in plaintext. Also, the format of password must be user admin group administrators password plaintext <string>.
  - For AOS-CX switches, the password configured in the template must match the password configured on the switch. Aruba Central (on-premises) cannot override the password that is configured on the switch.
12. Click Save. After you apply the configuration template, switches reboot and reconnect to Aruba Central (on-premises) with the new configuration.

Step 4: Verify the Configuration Status

To verify the configuration status:

In the Network Operations app, set the filter to a template group.
The dashboard context for the group is displayed.
Under Manage, click Devices > Switches.
Click the Config icon.
The tabs to configure switches using templates is displayed.
- To verify the configuration status for the template group, click Configuration Audit. The Configuration Audit dashboard displays the number of devices with template and configuration synchronization errors.
- To view configuration errors for a specific device, select a switch from the filter bar. The Configuration Audit dashboard displays the number of template and configuration synchronization errors for the device.
To view template errors, click View Template Errors.
To view configuration synchronization errors, click View Details under Configuration Status.
To compare running configuration and pending changes, click View under Config Comparsion Tool.