Aruba Central Online Help

Viewing Configuration Status

Aruba Central provides an audit dashboard for reviewing configuration changes for the devices provisioned in UI and template groups. The Configuration Audit page is available for Instant APs, switches, and gateways.

The Configuration Audit page and the Auto Commit feature is available for Foundation and Advanced licenses for APs, switches, and gateways.

Viewing the Configuration Audit Page

To view the Configuration Audit page, complete the following steps:

  • For Instant APs:
    1. In the Network Operations app, set the filter to a group that contains at least one AP.

      The dashboard context for the selected group is displayed.

    2. Under Manage, click Devices > Access Points.
    3. Click the Config icon.

      The tabs to configure access points are displayed.

    4. Click Show Advanced, and click the Configuration Audit tab.

      The Configuration Audit details page is displayed.

  • For Aruba switches:
    1. In the Network Operations app, set the filter to a group that contains at least one switch.

      The dashboard context for the selected group is displayed.

    2. Under Manage, click Devices > Switches.
    3. Click the Config icon.

      The tabs to configure switches are displayed.

    4. Click Configuration Audit.

      The Configuration Audit details page is displayed.

  • For Aruba gateways:
    1. In the Network Operations app, set the filter to a group that contains at least one Branch Gateway.

      The dashboard context for the selected group is displayed.

    2. Under Manage, click Devices > Gateways.
    3. Click the Config icon.

      The tabs to configure gateways are displayed.

    4. Click Show Advanced, and click the Configuration Audit tab.

      The Configuration Audit details page is displayed.

Applying Configuration Changes

Aruba Central supports a two-staged configuration commit workflow for Instant APs and switches. Aruba Central now supports the auto commit feature at a group level. When auto commit state is enabled for a group, the configuration changes are instantly applied to all devices where auto commit state is enabled.

In the Configuration Audit page of the group, the Auto Commit State section allows administrators to switch their preference for committing configuration changes to the devices within the group.

  • To enable auto commit, click Change to Auto commit state ON. When auto commit state is enabled for a group, the configuration changes are instantly applied to all devices where auto commit state is enabled.
  • To disable auto commit, click Change to Auto commit state OFF. When auto commit state is disabled for a group, an administrator can build a candidate configuration, save it on cloud, review it, and then commit the configuration changes to all devices within the group.

Aruba Central resets the auto commit state, when a device moves to another group. The device inherits the auto commit state of the group to which the device is moved.
When auto commit state is disabled for a group, Aruba Central restricts modification to the auto commit state at a device level. When auto commit state is enabled for a group, Aruba Central allows modification to the auto commit state at a device level.
The auto commit at a group level is not applicable for Aruba MAS switches and Aruba gateways in the Configuration Audit page. Auto commit state is always enabled for Aruba MAS switches and Aruba gateways.

Viewing and Editing

To modify the auto commit state of devices within the group, when Auto Commit State for a group is enabled, complete the following steps:

  1. Click View & Edit under Auto Commit State: ON tile.
  2. Select a device name, click Disable Auto Commit, and then click OK.
  3. Click Yes in the Confirm Action dialog box.

To modify the auto commit state of devices within the group, when Auto Commit State for a group is disabled, complete the following steps:

  1. Click View & Edit under Auto Commit State: OFF tile.
  2. Select a device name, click Enable Auto Commit, and then click OK.
  3. Click Yes in the Confirm Action dialog box.

When auto commit state for a group is disabled, the View & Edit link is disabled to restrict modifications to the auto commit state of the devices within the group. When auto commit state for a group is enabled, the View & Edit link allows you to modify the auto commit state of the devices within the group.

Auto Commit Workflow

To enable Aruba Central to commit configuration changes instantly, complete the following steps:

  1. In the Network Operations app, set the filter to a group that contains at least one AP and a switch.

    The dashboard context for the selected group is displayed.

  2. Under Manage, click Devices > Access Points.

    In Aruba Central, the auto commit workflow for a group can be implemented either from the switch configuration audit page or Instant AP configuration audit page. Alternatively, you can navigate to Devices > Switches.

  3. Click the Config icon.

    The tabs to configure access points are displayed.

  4. Click Show Advanced, and click the Configuration Audit tab.

    The Configuration Audit details page is displayed.

  5. Ensure that the Auto Commit State for the group is set to ON.
  6. Based on configuration mode set for the devices in the group, use either the UI workflows or a configuration template to complete the configuration workflow and save the changes. Aruba Central automatically commits the configuration changes to all devices where auto commit state is enabled.
  7. View the Local Overrides and Configuration Sync Issues, if any.

Aruba Central does not support the two-staged configuration commit workflow for Aruba MAS switches and Aruba gateways.
The tenant accounts in the MSP deployments do not inherit the Auto Commit State configured at the MSP level. The tenant account users can enable or disable Auto Commit state for the devices in their respective accounts.

Manual Commit Workflow

To build configuration and review it before committing the configuration changes, complete the following steps:

  1. In the Network Operations app, set the filter to a group that contains at least one AP and a switch.

    The dashboard context for the selected group is displayed.

  2. Under Manage, click Devices > Access Points.

    In Aruba Central, the manual commit workflow for a group can be implemented either from the switch configuration audit page or Instant AP configuration audit page. Alternatively, you can navigate to Devices > Switches.

  3. Click the Config icon.

    The tabs to configure access points are displayed.

  4. Click Show Advanced, and click the Configuration Audit tab.

    The Configuration Audit details page is displayed.

  5. Ensure that the Auto Commit State for the group is set to OFF.
  6. Based on configuration mode set for the device, use either the UI workflows or a configuration template to complete the configuration workflow and save the changes. When you try to save the save changes, Aruba Central displays the following warning message:

  7. When the auto commit state for a group is set to OFF, and changes are configured to the devices at a group level, Aruba Central displays the following warning message when you try to save the changes:

  8. View the Local Overrides and Configuration Sync Issues, if any.
  9. Click Commit Now to commits the configuration changes to all devices within the group.

Viewing Configuration Overrides and Errors

The Configuration Audit page allows you to view the configuration push errors, template synchronization errors, configuration sync, and device level configuration overrides. Some of notable status indicators available on the page includes:

  • Configuration Status—Provides details of the number of devices with configuration sync errors. To view the devices with configuration sync errors, click View Details. The Config Difference window is displayed. You can view configuration differences for each device within the group.
  • Local Overrides—Provides details of the number of devices with local overrides. To view a complete list of overrides, click Manage Local Overrides. The Local Overrides window is displayed. You can view configuration differences for each device within the group. The overrides are grouped based on the features that are configured in the UI and are displayed as drop-down sections. For example, all overrides for IGMPInternet Group Management Protocol. Communications protocol used by hosts and adjacent routers on IP networks to establish multicast group memberships. are listed under a separate drop-down with the heading IGMP.

    To preserve the overrides, click Close. To remove the overrides, select the group name with local override, type REMOVE in the text box and click OK.

  • Configuration Conflicts—Provides details of the number of devices with configuration conflict errors. To view a complete list of configuration conflicts, click Manage Configuration Conflicts. The Configuration Conflict window is displayed. To resolve the configuration conflicts, enable the check box against each conflict, and then click Remove to remove the conflict.
  • Template Errors—Provides the details of the number of devices with template errors. To view a complete list of configuration template errors, click View Template Errors. The Template Errors window is displayed. You can view a list of templates with errors.
  • Move FailuresAruba Central supports moving a device from one group to another. If the move operation fails, Aruba Central logs such instances as Move Failures.

Viewing Configuration Status for Devices at the Group Level (Template Configuration Mode)

When you select a template group from the filter, the Configuration Audit page displays the following information:

Table 1: Configuration Audit Status for a Template Group

Data Pane Content

Description

Template Errors

Provides details of the number of devices with template errors for the selected template group.

Devices deployed in the template group are provisioned using configuration templates. If there are errors in the templates or variable definitions, the configuration push to the devices fails. Aruba Central records such failed instances as template errors and displays these errors on the Configuration Audit page.

To view a complete list of errors, click View Template Errors. The Template Errors window allows you to view and resolve the template errors issues if any.

Configuration Status

Provides details of the number of devices with configuration sync errors for the selected template group.

 

To view the configuration sync errors, click View Details. The Configuration Sync Issues window is displayed with the following tabs:

  • Not In Sync Configuration—Displays the configuration changes that are not synched with the switch.
  • Device Running Configuration—Displays the running configuration on the switch.

 

To resolve the configuration sync errors, click Re-Sync Configuration. Aruba Central will attempt to synchronize the configuration with the switch again. Click Yes in the confirmation window. To check whether the configuration was synchronized and pushed to the switch, see the Audit Trail page.

Configuration Backup & Restore

Allows you to create a backup of templates and variables applied to the devices in the template group. For more information, see Backing Up and Restoring Configuration Templates.

  • New Configuration Backup—Allows you to create a new backup of templates and variables applied to the devices in the template group.

All Devices

The All Devices table provides the following device information for the selected group:

  • Name—The name of the device.
  • Type—The type of the device.
  • Auto Commit—The status of the auto commit state for all the devices within the group.
  • Config Sync—Indicator showing configuration sync errors.
  • Template Errors—Indicator showing configuration template errors for the devices deployed in template groups.

Viewing Configuration Status for a Device (Template Configuration Mode)

When you select a device that is provisioned in a template group, the Configuration Audit page displays the following information:

Table 2: Configuration Audit Status for Devices in Template Groups

Data Pane Content

Description

Template Applied

Displays the template that is currently applied on the selected device.

Template Errors

Displays the number of template errors for the selected device. To view a complete list of errors, click View Template Errors.

Configuration Status

Displays the configuration sync errors for the selected device.

 

To view the configuration sync errors, click View Details. The Configuration Sync Issues window is displayed with the following tabs:

  • Not In Sync Configuration—Displays the configuration changes that are not synched with the switch.
  • Device Running Configuration—Displays the running configuration on the switch.

 

To resolve the configuration sync errors, click Re-Sync Configuration. Aruba Central will attempt to synchronize the configuration with the switch again. Click Yes in the confirmation window. To check whether the configuration was synchronized and pushed to the switch, see the Audit Trail page.

Config Comparison Tool

Allows you to view the difference between the current configuration (Device Running Configuration) and the configuration that is yet to be pushed to the device (Attempted Configuration).

To view the running and attempted configuration changes side by side, click View.

Viewing Configuration Status for Devices at the Group Level (UI-based Configuration Mode)

When you select an UI group, the Configuration Audit page displays the following information:

Table 3: Configuration Audit Status for a UI Group

Data Pane Content

Description

Configuration Status

Displays the number of devices with configuration sync errors for the selected UI group.

 

To view the configuration sync errors, click View Details. The Configuration Sync Issues window is displayed with the following tabs:

  • Not In Sync Configuration—Displays the configuration changes that are not synched with the switch.
  • Device Running Configuration—Displays the running configuration on the switch.

 

To resolve the configuration sync errors, click Re-Sync Configuration. Aruba Central will attempt to synchronize the configuration with the switch again. Click Yes in the confirmation window. To check whether the configuration was synchronized and pushed to the switch, see the Audit Trail page.

Local Overrides

Displays the number of devices with local overrides. To view a complete list of overrides, click Manage Local Overrides.

The Local Overrides window is displayed. The overrides are grouped based on the features that are configured in the UI and are displayed as drop-down sections. For example, all overrides for IGMP are listed under a separate drop-down with the heading IGMP.

  • To preserve the overrides, click Close.
  • To remove the overrides, select the group name with local override, type REMOVE in the text box and then click OK.

All Devices

The All Devices table provides the following device information for the selected group:

NOTE: The MAC Address, IP Address, Site, and Config Status columns are available only for groups in which Aruba gateways are provisioned (Manage > Device > Gateways, click the Config icon. The gateway configuration page is displayed. Navigate to Configuration Audit).

Viewing Configuration Status for a Device (UI-based Configuration Mode)

When you select a device assigned to a UI group, the Configuration Audit page displays the following information:

Table 4: Configuration Audit Status for a Device Assigned to a UI Group

Data Pane Content

Description

Configuration Status

Displays the number of devices with configuration sync errors for the selected device.

 

To view the configuration sync errors, click View Details. The Configuration Sync Issues window is displayed with the following tabs:

  • Not In Sync Configuration—Displays the configuration changes that are not synched with the switch.
  • Device Running Configuration—Displays the running configuration on the switch.

 

To resolve the configuration sync errors, click Re-Sync Configuration. Aruba Central will attempt to synchronize the configuration with the switch again. Click Yes in the confirmation window. To check whether the configuration was synchronized and pushed to the switch, see the Audit Trail page.

Local Overrides

Displays the number of local overrides. To view a complete list of overrides, click Manage Local Overrides.

The Local Overrides window is displayed. The overrides are grouped based on the features that are configured in the UI and are displayed as drop-down sections. For example, all overrides for IGMP are listed under a separate drop-down with the heading IGMP.

  • To preserve the overrides, click Close.
  • To remove the overrides, click Remove Local Overrides, type REMOVE in the text box and then click OK.

Backing up and Restoring Configuration Templates

Aruba Central allows you to back up configuration templates assigned to the devices deployed in a template group. The Configuration Audit pages for Instant AP, switch, and gateway configuration containers allow you to create and manage backed up files and restore these files when required. For more information, see Backing Up and Restoring Configuration Templates.

If monitor mode is enabled at the device level, the selected device functions in the monitor mode. If the monitor mode is enabled at the group level, all devices in the group inherit this setting.
If a device managed by Aruba Central displays a configuration sync issue and persistently fails to receive configuration updates from Aruba Central, contact Aruba Central Technical Support.