Overview

Designed with the next generation of large-scale data centers in mind, the Aruba CX 10000 Switch Series delivers a flexible and innovative approach to address the security compliance, performance, agility, and scalability demands of the highly distributed, hybrid, multi-cloud application era.

In conjunction with Pensando, Aruba has defined a new market category of data center switches. The CX 10000 combines the best-of-breed network operating system, Aruba AOS-CX, for data center, campus, and edge in addition to the fully programmable Pensando DPU. This allows the

CX 10000 to deliver stateful software-defined services inline, at scale, with wire-rate performance and orders of magnitude scale and performance improvements over traditional L2/3 switches at a fraction of their TCO.

The Aruba CX 10000 allows operators to extend industry standard leaf-spine networking with distributed stateful segmentation, east-west firewalling, NAT¹, encryption¹, and telemetry services—all delivered inline, all the time, on every access port, closer to where critical enterprise applications run. The CX 10000 distributed services architecture is agnostic of network deployment architecture. This allows the flexibility to enable stateful services delivery, when deployed as access, leaf Top of Rack (ToR), or End of Row (EoR) in a datacenter, and potentially in the aggregation layer in campus or edge data center designs.

The CX 10000 offers 3.6Tbps of line-rate switching capacity with interface configurations supporting 1/10/25GbE (SFP/ SFP+/SFP28) and 40/100GbE (QSFP+/QSFP28) connectivity, in a compact 1U form factor. Consequently, these switches offer a fantastic investment for customers migrating from older 1GbE/10GbE to faster 25GbE, or from 10GbE/40GbE to 100GbE ports.

¹ Supported in future software release

Product Differentiators

AOS-CX—A modern software system

The Aruba CX 10000 Switch Series is based on AOS-CX, a modern, database-driven operating system that automates and simplifies many critical and complex network tasks.

A built-in time series database enables customers and developers to utilize software scripts for historical troubleshooting, as well as past trends analysis. This helps predict and avoid future problems due to scale, security, and performance bottlenecks.

Our AOS-CX software also includes Aruba Network Analytics Engine (NAE) and support for Aruba NetEdit. Because AOS- CX is built on a modular Linux architecture with a stateful database, our operating system provides the following unique features:

• Easy access to all network state information for unique visibility and analytics
• REST APIs and Python scripting for fine-grained programmability of network tasks
• A micro-services architecture that enables full integration with other workflow systems and services
• Continual state synchronization that provides superior fault tolerance and high availability
• Near real-time state and resiliency and the ability to independently upgrade individual software modules for higher availability

Pensando Stateful Software Services

Embedded natively in the Aruba CX 10000 Switch Series, the AOS-CX operating system is an industry unique, inline stateful software service, enabled through Pensando‘s programmable DPU, delivered at scale with wire-rate performance. The services include stateful firewalling

and secure segmentation, DDoS protection, and deep flow-based session-level telemetry, enabled natively in the fabric switching infrastructure without requiring host-based agents or dedicated appliances.

Stateful software benefits include:

• Improves security posture, limiting appliance sprawl
• Extends Zero Trust segmentation deeper into the data center for any type of host
• Delivers isolation and multi-tenancy for virtualized, bare- metal, or containerized workloads
• Optimizes network traffic flows, bandwidth, and performance, which reduces operational complexity associated with service stitching
• Overcomes centralized networking service layer chokepoints, which reduces downtime
• Simplifies operations via unified network and security automation and management with Aruba Fabric Composer
• Addresses deployments where security agents can’t be deployed into servers
• Accelerates infrastructure service provisioning
• Lowers capex/opex expenditure on security and services

Aruba Network Analytics Engine

For enhanced visibility and troubleshooting, Aruba’s Network Analytics Engine (NAE) automatically interrogates and analyzes events that can impact network health. Advanced telemetry and automation allow you to easily identify and troubleshoot network, system, application, and security issues using python agents and REST APIs.

The Time Series Database (TSDB) stores configuration and operational data to help quickly resolve network issues. You can also use the data to analyze trends, identify anomalies, and predict future capacity requirements.

Aruba NetEdit—Automated switch configuration and management

The entire Aruba CX portfolio empowers IT teams to orchestrate multiple switch configuration changes for smooth end-to-end service rollouts. Aruba NetEdit introduces automation that allows for rapid network-wide changes and ensures policy conformance after network updates. Intelligent capabilities include search, edit, validation (including conformance checking), deployment, and audit features. Capabilities include:

• Centralized configuration with validation for consistency and compliance
• Time savings via simultaneous viewing and editing of multiple configurations
• Customized validation tests for corporate compliance and network design
• Automated large scale configuration deployment without programming network health and topology visibility via Aruba NAE integration

Note: A separate software license is required to use Aruba NetEdit.

Aruba Virtual Switching Extension

The ability of AOS-CX to maintain synchronous state across dual control planes allows a unique high availability solution called Aruba Virtual Switching Extension (VSX).

VSX is delivered through redundancy gained by deploying two chassis with an inter-switch link, with each chassis maintaining its independent control.

Designed using the best features of existing HA technologies such as Multi-chassis Link Aggregation (MC-LAG) and Virtual Switching Framework (VSF), Aruba VSX enables a distributed architecture that is highly available during upgrades or control plane events.

Features include:

• Continuous configuration synchronization via AOS-CX
• Flexible active-active network designs at Layers 2 and 3
• Operational simplicity and usability for easy configuration
• High availability by design during upgrades including support for VSX Live Upgrade with LACP traffic draining.

Aruba Pro Care adds fast access to senior Aruba TAC engineers, who are assigned as a single point of contact for case management, reducing the time spent addressing and resolving issues.

Unified Security Policy Configuration

• Ease of deployment—Beyond traditional Zero Touch deployment approaches, which require significant up-front work, AFC user-friendly, guided wizards provide turnkey workflows that walk customers through the fabric deployment process, radically simplifying operations. AFC is agnostic of topology and can equally support standards based VXLAN EVPN fabric as well as traditional VSX deployments seamlessly. Any complexity of deploying the fabric is hidden, ensuring that network operators don’t need to understand the specific protocols and commands in AOS-CX in order to deploy best practice architectures.
• Service Orchestration—The operational benefits of AFC also extend to services because now, with the CX10000, you can orchestrate provisioning and securing tenants on the fabric in a simplified wizard driven workflow. This is enabled through an integration with Pensando Policy and Services Manager. The solution allows SecOps and NetOps teams to accelerate application rollouts, while ensuring strict compliance and secure segmentation requirements are met. From rapid and error-free fabric deployment to automation and security, we are truly delivering a cloud-like experience to our customers with AFC and Pensando across virtualized, bare-metal, and containerized deployments.
• Easy Integration—The event driven automation engine within AFC (StackStorm) supports Integration Packs that are easily installed and offer integrations with VMware Cloud Foundation, vCenter, vSAN, Nutanix, HPE SimpliVity, and HPE iLo Amplifier. Integrations allow customers to enjoy the benefits of automated fabric provisioning, event- based workflow automations, end-to-end network and host visibility, and automatic storage traffic optimization.
• Pervasive Visibility—Network and virtualization admins have complete, end-to-end network visibility of connective of hosts, virtual machines, VLANs, services, and workloads to simplify troubleshooting of connectivity and performance problems. Automatically detect and dynamically solve network issues before your business is impacted. Integration with Pensando provides not just visibility into the network and compute, but also extends to services allowing customers to utilize flow logging, to understand communication patterns in the data center, and to more accurately segment and firewall application tiers, workloads, and services.

Product Capabilities

Performance

High-speed fully distributed architecture

• Provides 3.6Tbps for bidirectional switching and 2,000 Mpps for forwarding. All switching and routing are wire- speed to meet the demands of bandwidth-intensive applications today and in the future
• 800G of stateful services performance through dual Pensando DPU’s

Scalable system design

• Provides investment protection to support future technologies and higher-speed connectivity

Connectivity

High density port options

Compact, high port density 1U switch with airflow direction flexibility include model with 48 ports of 1GbE/10GbE/25GbE (SFP/SFP+/SFP28) [1GBASE-T and 10GBASE-T transceiver support] + 6 ports of 40GbE/100GbE (QSFP+/QSFP28) [optional 4x10 and 4x25 breakout]

Jumbo frames

Allows high-performance backups and disaster-recovery systems; provides a maximum frame size of 9K bytes

Unsupported Transceiver Mode (UTM)

Allows ability to insert and enable unsupported 1G and 10G transceiver and cable

No warranty nor support for the transceiver/cable when used

Loopback

Supports internal loopback testing for maintenance purposes and increased availability. Loopback detection protects against incorrect cabling or network configurations and can be enabled on a per-port or per- VLAN basis for added flexibility.

Packet storm protection

Protects against unknown broadcast, multicast, or unicast

storms with user-defined thresholds

Quality of Service (QoS)

Strict priority (SP) queuing and Deficit Weighted Round Robin (DWRR)

Enables congestion avoidance

Resiliency and high availability

Redundant and load-sharing fans and power supplies

N+1 fans and power supplies provide redundancy

Hot swappable power supply and fan modules

Allows replacement of accessory modules without operationally impacting other modules or switch operations

Separate data and control paths

Separates control from services to keep service processing isolated and increases security and performance

Aruba Virtual Switching Extension (VSX)

VSX enables a distributed and redundant architecture by deploying two switches with each switch, maintaining independent control yet staying synchronized during upgrades or failover. Also supports upgrades during live operation.

Virtual Router Redundancy Protocol (VRRP)

VRRP allows a group of switches to dynamically back up each other to create highly available routed environments

Bidirectional Forward Detection (BFD)

Enables sub-second failure detection for rapid routing protocol re-balancing

Ethernet Ring Protection Switching (ERPS)

Supports rapid protection and recovery in a ring topology.

Unidirectional Link Detection (UDLD)

Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based networks

IEEE 802.3ad LACP

Supports up to 54 LAGs, with up to 16 members per LAG (32 for a VSX pair), with a user-selectable L1- 4 hashing algorithm

Management

In addition to the Aruba CX Mobile App, Aruba NetEdit and Aruba Network Analytics Engine, the CX 10000 series offers the following capabilities

REST API

Built-in programmable and easy to use

Management interface control

Enables or disables the console port or reset button, depending on security preferences

Industry-standard CLI with a hierarchical structure

Reduces training time and expenses, and increases productivity in multivendor installations

Management security

• Restricts access to critical configuration commands
• Offers multiple privilege levels with password protection
• Provides SNMP access with ACLs
• Local and remote Syslog capabilities allow access logging

IPSLA

• Monitors network for degradation of various services, including voice
• Enables monitoring via the NAE for history and for immediate automated gathering of additional information when anomalies are detected

SNMP v2c/v3

Provides SNMP read and trap support of industry standard Management Information Base (MIB) and private extensions

sFlow® (RFC 3176)

Provides scalable ASIC-based wire speed network monitoring and accounting with no impact on network performance, allowing network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes

Remote monitoring (RMON)

Uses standard SNMP to monitor essential network functions and supports events, alarms, history, and statistics groups as well as a private alarm extension group

TFTP and SFTP support

• Offers different mechanisms for configuration updates.
• Trivial FTP (TFTP) allows bidirectional transfers over a TCP/ IP network
• Secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security

Debug and sampler utility

Supports ping and trace route for IPv4 and IPv6

Network Time Protocol (NTP)

• Synchronizes timekeeping among distributed time servers and clients.
• Keeps timekeeping consistent among all clock-dependent devices within the network
• Can serve as the NTP server in a customer network

IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network management applications

Dual images

Provides independent primary and secondary operating system files for backup while upgrading

Multiple configuration files

Stores files easily to the flash image

Layer 2 Switching

VLAN

Supports up to 4,018 port-based or IEEE 802.1Q-based user configurable VLANs

VLAN Translation

Remaps VLANs during transit across a core network

Bridge Protocol Data Unit (BPDU) tunneling

Transmits STP BPDUs transparently, allowing correct tree calculations across service providers, WANs, or MANs

Port mirroring

• Duplicates port traffic (ingress and egress) to a local or remote monitoring port
• Supports 4 mirroring groups, with an unlimited number of ports per group

STP

Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

Rapid Per-VLAN spanning tree plus (RPVST+)

Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in network environments with multiple VLANs

Internet Group Management Protocol (IGMP)

Controls and manages the flooding of multicast packets in a Layer 2 network

Static VXLAN

Allows operators to manually connect two or more VXLAN tunnel endpoints (VTEP)

Dynamic VXLAN with BGP-EVPN

Deep segmentation for spine-leaf data center networks or Layer 3 campus designs with centralized gateway and symmetric Integrated Routing and Bridging (IRB) based distributed gateways VXLAN tunnels

IPv4 Multicast in VXLAN/EVPN Overlay

Enables PIM-SM/IGMP snooping in the VXLAN Overlay

IPv6 VXLAN/EVPN Overlay Support

Enables IPv6 traffic over the VXLAN overlay

VXLAN distributed anycast gateway

Addressing mechanism that enables the use of the same gateway IP addresses across all the leaf switches part of a VXLAN network

VXLAN ARP/ND suppression

Allows minimization of ARP and ND traffic flooding within individual VXLAN segments, thus optimizing the VXLAN network

Layer 3 Services

Address Resolution Protocol (ARP)

• Determines the MAC address of another IP host in the same subnet and supports static ARPs
• Gratuitous ARP allows detection of duplicate IP addresses
• Proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network

IP Directed Broadcast

Supports directed broadcast on configured network subnets

Dynamic Host Configuration Protocol (DHCP)

• DHCP services are offered within a client network to simplify network management
• DHCP Relay enables DHCP operation across subnets

DHCP Server

Supports DHCP Smart Relay services (for IPv4 and IPv6) in customer networks

Domain Name System (DNS)

• Provides a distributed database that translates domain names and IP addresses, which simplifies network design.
• Supports client and server

Generic Routing Encapsulation (GRE)

• Enables tunneling traffic from site to site over a Layer 3 path

Layer 3 Routing

Static IPv4 routing

Provides simple, manually configured IPv4 routing

Open shortest path first (OSPF)

• Delivers faster convergence
• Uses link-state routing Interior Gateway Protocol (IGP), which supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for faster failure recovery

Border Gateway Protocol 4 (BGP-4)

• Delivers an implementation of the Exterior Gateway Protocol (EGP) utilizing path vectors
• Uses TCP for enhanced reliability for the route discovery process
• Reduces bandwidth consumption by advertising only incremental updates
• Supports extensive policies for increased flexibility
• Scales to very large networks

Routing Information Protocol version 2 (RIPv2)

Easy to configure routing protocol for small networks relying on User Datagram Protocol (UDP)

Routing Information Protocol Next Generation (RIPng)

Extension of RIPv2 for support of IPv6 networking

Multiprotocol BGP (MP-BGP) with IPv6 Address Family

Enables sharing of IPv6 routes using BGP and connections to BGP peers using IPv6

Policy Based Routing (PBR)

Enables using a classifier to select traffic that can be forwarded based on policy set by the network administrator

6in4 tunnels

Supports the tunneling of IPv6 traffic in an IPv4 network

IP performance optimization

• Provides a set of tools to improve the performance of IPv4 networks
• Includes directed broadcasts, customization of TCP parameters, support of ICMP error packets, and extensive display capabilities

Static IPv6 routing

Provides simple, manually configured IPv6 routing

Dual IP stack

Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network to an IPv6-only network design

OSPFv3

Provides OSPF support for IPv6

Equal-Cost Multipath (ECMP)

• Enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
• 32 way ECMP

Generic Routing Encapsulation (GRE)

Enables tunneling traffic from site to site over a Layer 3 path

Security

TAA and FIPS 140-2 Compliance

The Aruba CX 10000 with AOS-CX, a TAA compliant product, uses FIPS 140-2 validated cryptography for protection of sensitive information

Access control list (ACL) Features

• Supports powerful ACLs for both IPv4 and IPv6.
• Supports creating object groups representing sets of devices
• Protects control plane services such as SSH, SNMP, NTP or web servers

Enrollment over Secure Transport (EST)

Enables secure certificate enrollment, allowing for easier enterprise management of PKI.

Remote Authentication Dial-In User Service (RADIUS)

Eases security access administration by using a password authentication server

Terminal Access Controller Access-Control System (TACACS+)

Delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security

RadSec

Enables RADIUS authentication and accounting data to be passed safely and reliably across insecure networks such as the internet

Management access security

• AOS-CX provides for both on-box as well as off- box authentication for administrative access.
• RADIUS or TACACS+ can be used to provide encrypted user authentication
• TACACS+ can also provide user authorization services

Secure shell (SSHv2)

• Uses external servers to securely log in to a remote device.
• With authentication and encryption, it protects against IP spoofing and plain-text password interception
• Increases the security of Secure FTP (SFTP) transfers

Multicast

Internet Group Management Protocol (IGMP)

• Enables establishing multicast group memberships in IPv4 networks
• Supports IGMPv1, v2, and v3

Multicast Listener Discovery (MLD)

• Enables discovery of IPv6 multicast listeners
• Supports MLDv1 and v2

PIM Multicast Boundary (v4)

• VSX Graceful shutdown for IGMP/MLD Multicast NSF

Multicast Service Delivery Protocol (MSDP) for Anycast RP

MSDP used for Anycast RP is an intradomain feature that provides redundancy and load-sharing capabilities.

MSDP Mesh Groups

Avoids SA messages flooding to other mesh group peers.

PIM-Dense Mode

• Floods multicast traffic to every corner of the network (push-model). Method is for delivering data to receivers without receivers requesting the data, which can be efficient in certain deployments in which there are active receivers on every subnet in the network.
• Branches without downstream receivers are pruned from the forwarding trees.

FastLeave (FL) and Forced-FastLeave (FFL)

• FL and FFL for IGMP/MLD speed up the process of blocking unnecessary Multicast traffic to a switch port that is connected to end nodes for IGMP. They help to eliminate the CPU overhead of having to generate an IGMP/MLD group-specific query message.

Support for Microsoft Network Load Balancer (NLB) for server applications

Microsoft Network Load Balancer (NLB)

• Supports server applications

Protocol Independent Multicast (PIM)

• Protocol Independent Multicast for IPv4 and IPv6 supports one-to-many and many-to-many media casting use cases such as IPTV over IPv4 and IPv6 networks
• Supports PIM Sparse Mode (PIM-SM, IPv4 and IPv6)

Additional information

• Green initiative support
• Provides support for RoHS (EN 50581:2012) regulations

Customer first, customer last support

When your network is important to your business, your business needs the backing of Aruba Support Services. Partner with Aruba product experts to increase team productivity and keep pace with technology advances, software releases, and break-fix support.

Foundation Care for Aruba support services include priority access to Aruba Technical Assistance Center (TAC) engineers 24x7x365, flexible hardware and onsite support options, and total coverage for Aruba products. Aruba switches with assigned Aruba Central subscriptions have the added benefit of additional hardware support only.

Aruba Pro Care adds fast access to senior Aruba TAC engineers, who are assigned as a single point of contact for case management, reducing the time spent addressing and resolving issues.

Technical Specifications

² Some of these scaling numbers assume shared tables.

Standards and Protocols (Applies to all products in series)

The following standards and protocols are supported.

• IEEE 802.1AB-2009
• IEEE 802.1ak-2007
• IEEE 802.1t-2001
• IEEE 802.1AX-2008 Link Aggregation
• IEEE 802.1p Traffic Class Expediting and Dynamic Multicast Filtering
• IEEE 802.1Q VLANs
• IEEE 802.1s Multiple Spanning Trees
• IEEE 802.1w Rapid Reconfiguration of Spanning Tree
• IEEE 802.3ad Link Aggregation Control Protocol (LACP)
• IEEE 802.3x Flow Control
• IEEE 802.3z Gigabit Ethernet
• IEEE 802.3ae 10 Gigabit Ethernet
• IEEE 802.3by 25 Gigabit Ethernet
• IEEE 802.3ba 40 and 100 Gigabit Ethernet Architecture
• RFC 768 UDP
• RFC 791 IP
• RFC 792 ICMP
• RFC 793 TCP
• RFC 826 ARP
• RFC 768 User Datagram Protocol
• RFC 813 Window and Acknowledgement Strategy in TCP
• RFC 815 IP datagram reassembly algorithms
• RFC 879 TCP maximum segment size and related topics
• RFC 896 Congestion control in IP/TCP internetworks
• RFC 917 Internet subnets
• RFC 919 Broadcasting Internet Datagrams
• RFC 922 Broadcasting Internet Datagrams in the Presence of Subnets (IP_BROAD)
• RFC 925 Multi-LAN address resolution
• RFC 1215 Convention for defining traps for use with the SNMP
• RFC 1256 ICMP Router Discovery Messages
• RFC 1393 Traceroute Using an IP Option
• RFC 1591 Domain Name System Structure and Delegation
• RFC 1657 Definitions of Managed Objects for BGP-4 using SMIv2
• RFC 1772 Application of the Border Gateway Protocol in the Internet
• RFC 1981 Path MTU Discovery for IP version 6
• RFC 1997 BGP Communities Attribute
• RFC 1998 An Application of the BGP Community Attribute in Multi-home Routing
• RFC 2385 Protection of BGP Sessions via the TCP MD5 Signature Option
• RFC 2401 Security Architecture for the Internet Protocol
• RFC 2402 IP Authentication Header
• RFC 2406 IP Encapsulating Security Payload (ESP)
• RFC 2460 Internet Protocol, Version 6 (IPv6) Specification
• RFC 2545 Use of BGP-4 Multiprotocol Extensions for IPv6 Inter-Domain Routing
• RFC 2710 Multicast Listener Discovery (MLD) for IPv6
• RFC 2787 Definitions of Managed Objects for the Virtual Router Redundancy Protocol
• RFC 2918 Route Refresh Capability for BGP-4
• RFC 2934 Protocol Independent Multicast MIB for IPv4
• RFC 3137 OSPF Stub Router Advertisement
• RFC 3176 InMon Corporation’s sFlow: A Method for Monitoring Traffic in Switched and Routed Networks
• RFC 3484: Default Address Selection for Internet Protocol version 6 (IPv6)
• RFC 3509 Alternative Implementations of OSPF Area Border Routers
• RFC 3623 Graceful OSPF Restart
• RFC 3810 Multicast Listener Discovery Version 2 (MLDv2) for IPv6
• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers
• RFC 4251 The Secure Shell (SSH) Protocol
• RFC 4271 A Border Gateway Protocol 4 (BGP-4)
• RFC 4273 Definitions of Managed Objects for BGP-4
• RFC 4291 IP Version 6 Addressing Architecture
• RFC 4292 IP Forwarding Table MIB
• RFC 4293 Management Information Base for the Internet Protocol (IP)
• RFC 4360 BGP Extended Communities Attribute
• RFC 4486 Subcodes for BGP Cease Notification Message
• RFC 4552 Authentication/Confidentiality for OSPFv3
• RFC 4724 Graceful Restart Mechanism for BGP
• RFC 4760 Multiprotocol Extensions for BGP-4
• RFC 4940 IANA Considerations for OSPF
• RFC 5095: Deprecation of Type 0 Routing Headers in IPv6
• RFC 5187 OSPFv3 Graceful Restart
• RFC 5701 IPv6 Address Specific BGP Extended Community Attribute
• RFC 6987 OSPF Stub Router Advertisement
• RFC 7047 The Open vSwitch Database Management Protocol
• RFC 7059 A Comparison of IPv6-over-IPv4 Tunnel Mechanisms
• RFC 7313 Enhanced Route Refresh Capability for BGP-4
• RFC 8201 Path MTU Discovery for IP version 6

Bundles and Accessories

Aruba CX 10000 Bundles

Note: 4-post mounting kit and console cable are not included in bundles. Order separately. Mounting kit is required.

• R8P13A Aruba 10000-48Y6C Bundle includes: 48 x 25Gb ports (SFP/+/28), 6 x 100Gb ports (QSFP+/28), 6 Front-to-Back Fans and 2 PSU’s
• R8P14A Aruba 10000-48Y6C Bundle includes: 48 x 25Gb ports (SFP/+/28), 6 x 100Gb ports (QSFP+/28), 6 Back-to-Front Fans and 2 PSU’s

CX 10000 License (1 required per switch)

• R9H25AAE Aruba CX 10000 Base Services License

Mounting kit (required when ordering a bundle)

• R8R55A Aruba CX 10000 1U 2p Rack Mount Kit
• R8R56A Aruba CX 10000 1U 4p Rack Mount Kit

Console Cable

• Aruba X2C2 RJ45 to DB9 Console Cable (JL448A)

Accessories

• R8R53A Aruba CX 10000 FB Fan
• R8R54A Aruba CX 10000 BF Fan

Power supply

• R8R51A Aruba CX 10000 FB AC PSU
• R8R52A Aruba CX 10000 BF AC PSU

1G Transceivers¹

• Aruba 1G SFP LC SX 500m MMF Transceiver (J4858D)
• Aruba 1G SFP LC LX 10km SMF Transceiver (J4859D)
• Aruba 1G SFP LC LH 70km SMF Transceiver (J4860D)
• Aruba 1G SFP RJ45 T 100m Cat5e Transceiver (J8177D)

10G Transceivers¹ and Cables

• Aruba 10G SFP+ LC SR 300m MMF Transceiver (J9150D)
• Aruba 10G SFP+ LC LR 10km SMF Transceiver (J9151E)⁴
• Aruba 10G SFP+ LC ER 40km SMF Transceiver (J9153D)
• Aruba 10G SFP+ to SFP+ 1m Direct Attach Copper Cable (J9281D)
• Aruba 10G SFP+ to SFP+ 3m Direct Attach Copper Cable (J9283D)

25G Transceivers¹ and Cables

• Aruba 25G SFP28 LC SR 100m MMF Transceiver (JL484A)
• Aruba 25G SFP28 LC eSR 400m MMF Transceiver (JL485A)
• Aruba 25G SFP28 LC LR 10km SMF Transceiver (JL486A)
• Aruba 25G SFP28 to SFP28 0.65m Direct Attach Copper Cable (JL487A)
• Aruba 25G SFP28 to SFP28 3m Direct Attach Copper Cable (JL488A)
• Aruba 25G SFP28 to SFP28 5m Direct Attach Copper Cable (JL489A)
• Aruba 25G SFP28 to SFP28 3m Active Optical Cable (R0M44A)
• Aruba 25G SFP28 to SFP28 7m Active Optical Cable (R0M45A)
• Aruba 25G SFP28 to SFP28 15m Active Optical Cable (R0Z21A)

40G Transceivers¹ and Cables

• Aruba 40G QSFP+ LC BiDi 150m MMF Transceiver (JL308A)
• HPE X142 40G QSFP+ MPO SR4 Transceiver (JH231A)
• HPE X142 40G QSFP+ MPO eSR4 300M Transceiver (JH233A)
• HPE X142 40G QSFP+ LC LR4 SM Transceiver (JH232A)
• Aruba 40G QSFP+ LC ER4 40km SMF Transceiver (Q9G82A)
• HPE X242 40G QSFP+ to QSFP+ 1m Direct Attach Copper Cable (JH234A)
• HPE X242 40G QSFP+ to QSFP+ 3m Direct Attach Copper Cable (JH235A)
• HPE X242 40G QSFP+ to QSFP+ 5m Direct Attach Copper Cable (JH236A)
• Aruba 40G QSFP+ to QSFP+ 7m Active Optical Cable (R0Z22A)
• Aruba 40G QSFP+ to QSFP+ 15m Active Optical Cable (R0Z23A)
• Aruba 40G QSFP+ to QSFP+ 30m Active Optical Cable (R0Z24A)
• HPE QSFP+ to 4xSFP+ 3m Breakout Direct Attach Cable (721064-B21)

100G Transceivers¹ and Cables

• Aruba 100G QSFP28 MPO SR4 MMF Transceiver (JL309A)
• Aruba 100G QSFP28 LC CWDM4 2km SMF Transceiver (R0Z30A)
• Aruba 100G QSFP28 to QSFP28 1m Direct Attach Copper Cable (R0Z25A)
• Aruba 100G QSFP28 to QSFP28 3m Direct Attach Copper Cable (JL307A)
• Aruba 100G QSFP28 to QSFP28 5m Direct Attach Copper Cable (R0Z26A)
• HPE (HIT) QSFP28 to 4xSFP28 3m Breakout Direct Attach Cable (845416-B21)

Description (SKUs for CX 6400, 8325, 8360, 8400, and 10000 Series Switches)

• Aruba Fabric Composer Device Management Service Tier 4 Switch 1 year Subscription E-STU R7G99AAE
• Aruba Fabric Composer Device Management Service Tier 4 Switch 3-year Subscription E-STU R7H00AAE
• Aruba Fabric Composer Device Management Service Tier 4 Switch 5-year Subscription E-STU R7H01AAE
• Aruba Fabric Composer Device Management Service Tier 4 Switch 7-year Subscription E-STU R7H02AAE
• Aruba Fabric Composer Device Management Service Tier 4 Switch 10-year Subscription E-STU R7H03AAE

¹ Consult the ArubaOS-Switch and AOS-CX Transceiver Guide in the Aruba Support Portal for the minimum required software releases to support these transceivers.

² 10G LR support only for Revision E part, J9151E (Note: Do not use J9151D)