Aruba Switching Expert (Written) study guide
Aruba Switching Expert (Written) · Work through your exam, one topic at a time.
The Aruba Switching Expert (Written) is a written, multiple-choice examination intended to validate advanced, hands-on knowledge of Aruba wired switching in enterprise campus and branch networks. It suits network engineers, senior administrators, and design or operations staff who already work with Aruba switches and want independent evidence of depth beyond entry-level certification. The Aruba Switching Expert (Written) study guide has 9 sections and about 1,976 words.
01Switching Fundamentals and Network Design
A switching expert must reason from the frame up: MAC learning builds the forwarding table, unknown unicast is flooded within a VLAN, and broadcast/multicast are flooded to all ports in the VLAN except the ingress. Know the difference between store-and-forward and cut-through, and how oversubscription and buffer behavior affect real throughput.
243 words, about 1 min02VLANs, Trunking, and Layer 2 Segmentation
VLANs segment broadcast domains; 802.1Q tags frames with a 12-bit VLAN ID (1–4094 usable). Access ports carry one untagged VLAN; trunk ports carry multiple tagged VLANs.
256 words, about 1 min03Spanning Tree Protocols and Loop Prevention
Layer 2 loops cause broadcast storms and MAC flapping. STP builds a loop-free tree via root election (lowest bridge ID = priority + MAC), root port selection (lowest path cost to root), and designated port election per segment.
224 words, about 1 min04Link Aggregation and Redundancy
Link aggregation (LACP 802.3ad / static) bundles links into one logical interface for bandwidth and redundancy. LACP negotiates via LACPDUs; static (mode on) requires manual matching and offers no negotiation safety.
208 words, about 1 min05Stacking and Switch Virtualization
Stacking (e.g., Aruba VSF/backplane stacking) and switch virtualization (e.g., Cisco VSS, Aruba VSX) combine multiple physical switches into one logical device. Benefits: single management plane, simplified STP (one logical bridge), and multi-chassis link aggregation (MC-LAG) so servers dual-home without STP blocking.
230 words, about 1 min06Layer 3 Switching, Routing, and IP Services
Layer 3 switches route between VLANs using SVIs (VLAN interfaces) or routed ports. Know the packet path: frame arrives, L2 lookup to SVI MAC, L3 lookup in FIB, rewrite, forward.
218 words, about 1 min07Network Security and Access Control
Access-layer security centers on port authentication and traffic control: 802.1X (supplicant/authenticator/authentication server), MAC authentication, and RADIUS/AAA. Combine with port security (limit MACs, sticky learning, violation actions), DHCP snooping (block rogue servers), Dynamic ARP Inspection (validate ARP against the snooping table), and IP Source Guard.
193 words, under 1 min08Multicast, QoS, and Traffic Management
Multicast delivery uses IGMP snooping to constrain group traffic to interested ports; without it, multicast floods like broadcast. Know IGMP versions, querier election, and PIM (sparse/dense) for L3 multicast routing.
212 words, about 1 min09Monitoring, Troubleshooting, and Operations
Operational excellence means knowing the right tool for the symptom: interface counters, MAC/ARP tables, LLDP/CDP neighbors, syslog, SNMP, sFlow/NetFlow, and mirroring (SPAN/RSPAN). Troubleshoot methodically: physical (link/counters) → L2 (VLAN/MAC/STP) → L3 (ARP/route) → policy (ACL/QoS) → application.
192 words, under 1 min