Aruba Switching Expert (Written) study materials
Aruba Switching Expert (Written) study resources

Aruba Switching Expert (Written) study plan

Aruba Switching Expert (Written) · Give each week a clear focus.

8 weeks · About 7 hours per week

Week 1

Switching Fundamentals and Network Design & VLANs, Trunking, and Layer 2 Segmentation

  • Diagram a three-tier campus topology from scratch, labeling access, distribution, and core layers and the failure domains at each tier

  • Explain and contrast store-and-forward, cut-through, and fragment-free forwarding and state which use cases favor each

  • Build a VLAN plan for a multi-building network that assigns VLAN IDs, subnets, and gateway placement for at least six segments

  • Configure 802.1Q trunk links and an access port profile on a lab switch, then verify tagging with show commands

  • Differentiate native VLAN behavior, voice VLANs, and VLAN pruning and describe the risk each introduces

Your checkpoint

A one-page design document containing the topology diagram, VLAN/subnet table, and trunk/access port matrix for a six-segment campus

Week 2

Spanning Tree Protocols and Loop Prevention & Link Aggregation and Redundancy

  • Compare RSTP, MSTP, and PVST+ interoperability and predict which topology results when they are mixed

  • Configure MSTP regions with multiple instances and verify that instance-to-VLAN mappings match across all member switches

  • Trace a spanning-tree topology change and list the sequence of port state transitions for edge, root, and alternate ports

  • Configure root guard, BPDU guard, and loop guard on appropriate ports and explain the failure each prevents

  • Design a two-switch LACP bundle and explain the hashing inputs that determine which member link a flow uses

Your checkpoint

A lab report showing MSTP instance mappings, root bridge election results, and a working LACP bundle with verification output

Week 3

VLANs, Trunking, and Layer 2 Segmentation & Spanning Tree Protocols and Loop Prevention

  • Diagnose and resolve a simulated Layer 2 loop using storm-control, BPDU analysis, and MAC table inspection

  • Configure UDLD and describe how it interacts with spanning tree and link aggregation during unidirectional failures

  • Implement dynamic VLAN assignment concepts and compare VLAN-based segmentation against private VLAN and port isolation approaches

  • Write the exact verification command sequence you would run to prove a trunk is passing only the intended VLANs

  • Explain how a single misconfigured native VLAN can cause a cross-VLAN leak and describe the mitigation

Your checkpoint

A troubleshooting runbook covering loop detection, UDLD, and trunk verification with the command sequence for each scenario

Week 4

Stacking and Switch Virtualization & Switching Fundamentals and Network Design

  • Compare stacking, chassis virtualization, and standalone designs on convergence, management plane, and failure behavior

  • Explain how a virtual switching framework elects a commander and what happens during a commander failover

  • Plan an upgrade procedure for a stacked switch pair and identify the steps that minimize data-plane interruption

  • Describe split-brain risk in stacking and the safeguards that detect and contain it

  • Map a redundancy design decision (stack vs. MLAG-style peer link) to the business continuity requirement it satisfies

Your checkpoint

A decision matrix comparing stacking, virtualization, and standalone designs across at least six criteria with a recommendation for a stated scenario

Week 5

Layer 3 Switching, Routing, and IP Services

  • Configure inter-VLAN routing with SVIs and verify forwarding between segments with a routing table walkthrough

  • Contrast routed ports against SVIs and state when each is preferred in a distribution layer

  • Configure and verify a first-hop redundancy protocol and explain failover timing and preemption behavior

  • Explain ARP behavior in a routed and switched environment and identify proxy ARP and gratuitous ARP implications

  • Configure DHCP relay and describe the packet path from client to a remote server

Your checkpoint

A working multi-VLAN lab with inter-VLAN routing, first-hop redundancy, and DHCP relay, plus a captured routing table and failover test result

Week 6

Network Security and Access Control & Layer 3 Switching, Routing, and IP Services

  • Configure 802.1X port-based authentication with a RADIUS server concept and describe the supplicant, authenticator, and server roles

  • Compare MAC authentication, captive portal, and 802.1X and choose the right method for wired IoT and guest scenarios

  • Apply DHCP snooping, dynamic ARP inspection, and IP source guard together and explain the dependency order between them

  • Configure port security and describe the violation modes and their effect on the port

  • Explain management-plane hardening: SSH-only access, AAA, role-based accounts, and control-plane policing

Your checkpoint

A security configuration checklist with the exact settings for 802.1X, DHCP snooping, DAI, port security, and management access, plus a rationale line for each

Week 7

Multicast, QoS, and Traffic Management & Monitoring, Troubleshooting, and Operations

  • Explain IGMP snooping and querier election and describe how multicast group membership is pruned on a switched network

  • Design a QoS classification and marking scheme for voice, video, and bulk data and map it to queue scheduling

  • Describe how trust boundaries are set at the access edge and what happens to markings from an untrusted device

  • Build a monitoring plan covering syslog severity, SNMP polling, and sFlow or NetFlow sampling for a campus

  • Interpret interface counters and error statistics to distinguish physical, duplex, and congestion problems

Your checkpoint

A QoS policy table mapping traffic classes to DSCP, trust state, and queue treatment, plus a monitoring and alerting plan

Week 8

Link Aggregation and Redundancy & Monitoring, Troubleshooting, and Operations & Switching Fundamentals and Network Design

  • Complete a timed mixed-domain practice set and score each domain to identify weak areas

  • Re-derive the top ten facts you most often miss and write them as one-line recall triggers

  • Walk through two end-to-end troubleshooting scenarios that combine spanning tree, link aggregation, and routing

  • Review the design and security deliverables from earlier weeks and correct any gaps you find

  • Build a final one-page cheat sheet of commands and decision rules organized by exam domain

Your checkpoint

A scored practice exam summary with a per-domain weakness list and a completed one-page command and decision cheat sheet

Milestones

Week 2: Can configure and verify MSTP plus an LACP bundle in the lab without notes and explain the resulting topology

Week 4: Can defend a stacking versus virtualization design choice in writing against at least three failure scenarios

Week 6: Can configure a full Layer 2 security stack (802.1X, snooping, DAI, port security) end to end and explain dependency order

Week 8: Scores at least 80 percent overall on a timed mixed-domain practice set with no domain below 70 percent