Aruba 10000-48Y6C Back-To-Front Switch Bundle (R8P14A)
The Next Evolution of Switching Architecture

Overview:

Designed with the next generation of large-scale data centers in mind, the Aruba CX 10000 Switch Series delivers a flexible and innovative approach to address the security compliance, performance, agility, and scalability demands of the highly distributed, hybrid, multi-cloud application era.

In conjunction with Pensando, Aruba has defined a new market category of data center switches. The CX 10000 combines the best-of-breed network operating system, Aruba AOS-CX, for data center, campus, and edge in addition to the fully programmable Pensando DPU. This allows the CX 10000 to deliver stateful software-defined services inline, at scale, with wire-rate performance and orders of magnitude scale and performance improvements over traditional L2/3 switches at a fraction of their TCO.

The Aruba CX 10000 allows operators to extend industry standard leaf-spine networking with distributed stateful segmentation, east-west firewalling, NAT¹, encryption¹, and telemetry services—all delivered inline, all the time, on every access port, closer to where critical enterprise applications run. The CX 10000 distributed services architecture is agnostic of network deployment architecture. This allows the flexibility to enable stateful services delivery, when deployed as access, leaf Top of Rack (ToR), or End of Row (EoR) in a datacenter, and potentially in the aggregation layer in campus or edge data center designs.

The CX 10000 offers 3.6Tbps of line-rate switching capacity with interface configurations supporting 1/10/25GbE (SFP/ SFP+/SFP28) and 40/100GbE (QSFP+/QSFP28) connectivity, in a compact 1U form factor. Consequently, these switches offer a fantastic investment for customers migrating from older 1GbE/10GbE to faster 25GbE, or from 10GbE/40GbE to 100GbE ports.

What's New

• A category of Distributed Services Switch.
• Aruba CX with embedded Programmable DPU (Pensando Elba).
• Unified network and security policy via Aruba Fabric Composer.
• Security ecosystem integration with 3rd party vendors.
• Leverages existing Aruba AOS-CX Cloud Native Switching.

Notes:
1. Supported in future software release

Features:

Improves Network Bandwidth and Performance

Aruba CX 10000 Switch Series with Pensando offers a unique blend of performance and scale for distributing advanced networking and security services where it’s impractical and costly to force traffic back and forth across the network to a centralized policy enforcement point.

Simplify application of services at the services network access layer edge.

Limit Security Appliance Sprawl and Cost

Aruba CX 10000 Switch Series with Pensando improves network bandwidth and performance by not having to trombone local traffic to a centralized chokepoint, helping to improve security posture while limiting appliance sprawl complexity and cost.

The Aruba CX 10000 provides a compelling architectural alternative that distributes these advanced services to the data center edge, with unified network and security automation and policy management.

Extend Zero Trust and Micro Segmentation

Aruba CX 10000 Switch Series with Pensando allows operators to extend industry standard leaf-spine networking with 800G of distributed micro-segmentation, east-west firewalling, NAT, encryption and telemetry services—delivered inline, across every port, closer to critical enterprise applications.

Organizations with dedicated SecOps teams can leverage Policy and Services and Manager (PSM) based on specific security roles and responsibilities for increased scalability and fault tolerance.

Simplify Operations

Aruba CX 10000 Switch Series with Pensando is integrated with Aruba Fabric Composer which provides unified network and security management, automated switch and network configurations, and unified security policy and distributed firewalls across the entire switching fabric.

The Aruba CX 10000 integrates via a Rest API and provides flow data to security and network performance tools including Advanced Security ML (XDR), Application Dependency Mapping (ADM), Network Performance Management (NPM), SIEM/SOAR, firewall compliance rules, and identity group mapping tools.

Product Differentiators:

• AOS-CX - a modern software system
• Pensando Stateful Software Services
• Aruba Network Analytics Engine
• Aruba NetEdit—Automated switch configuration and management
• Aruba Virtual Switching Extension

---

Managing The Aruba CX 10000

Aruba Fabric Composer

Aruba Fabric Composer is an intelligent, API-driven, softwaredefined orchestration solution that simplifies and accelerates leaf-spine fabric provisioning and day-to-day operations across rack-scale compute and storage infrastructure. What makes Aruba Fabric Composer different from other solutions is that the software can orchestrate a discrete set of switches as a single entity, which significantly simplifies operations and troubleshooting. This solution is fully infrastructure and application aware, providing automation of various configuration and lifecycle events.

Aruba Fabric Composer also provides unified network and security management for the Aruba CX 10000 platform. This provides automated switch and network configurations, while also unifying security policy and distributed firewalls across the entire switching fabric. This unified network and security policy management significantly simplifies operations and troubleshooting. This solution is implemented to augment switch-by-switch configuration, so operators can access any device directly and make local changes, which means you get the best environment for both traditional network operators in addition to DevOps and SecOps automation.

Product Capabilities

Performance

High-speed fully distributed architecture

• Provides 3.6Tbps for bidirectional switching and 2,000 Mpps for forwarding. All switching and routing are wire- speed to meet the demands of bandwidth-intensive applications today and in the future
• 800G of stateful services performance through dual Pensando DPU’s

Scalable system design

• Provides investment protection to support future technologies and higher-speed connectivity

---

Connectivity

High density port options

Compact, high port density 1U switch with airflow direction flexibility include model with 48 ports of 1GbE/10GbE/25GbE (SFP/SFP+/SFP28) [1GBASE-T and 10GBASE-T transceiver support] + 6 ports of 40GbE/100GbE (QSFP+/QSFP28) [optional 4x10 and 4x25 breakout]

Jumbo frames

• Allows high-performance backups and disaster-recovery systems; provides a maximum frame size of 9K bytes

Unsupported Transceiver Mode (UTM)

•  Allows ability to insert and enable unsupported 1G and 10G transceiver and cable
• No warranty nor support for the transceiver/cable when used

Loopback

• Supports internal loopback testing for maintenance purposes and increased availability. Loopback detection protects against incorrect cabling or network configurations and can be enabled on a per-port or perVLAN basis for added flexibility.

Packet storm protection

• Protects against unknown broadcast, multicast, or unicast storms with user-defined thresholds

---

Quality of Service (QoS)

Strict priority (SP) queuing and Deficit Weighted Round Robin (DWRR)

• Enables congestion avoidance

---

Resiliency and high availability

Redundant and load-sharing fans and power supplies

• N+1 fans and power supplies provide redundancy

Hot swappable power supply and fan modules

• Allows replacement of accessory modules without operationally impacting other modules or switch operations

Separate data and control paths

• Separates control from services to keep service processing isolated and increases security and performance

Aruba Virtual Switching Extension (VSX)

• VSX enables a distributed and redundant architecture by deploying two switches with each switch, maintaining independent control yet staying synchronized during upgrades or failover. Also supports upgrades during live operation.

Virtual Router Redundancy Protocol (VRRP)

• VRRP allows a group of switches to dynamically back up each other to create highly available routed environments

Bidirectional Forward Detection (BFD)

• Enables sub-second failure detection for rapid routing protocol re-balancing

Ethernet Ring Protection Switching (ERPS)

• Supports rapid protection and recovery in a ring topology.

Unidirectional Link Detection (UDLD)

• Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based networks

IEEE 802.3ad LACP

• Supports up to 54 LAGs, with up to 16 members per LAG (32 for a VSX pair), with a user-selectable L1- 4 hashing algorithm

---

Management

In addition to the Aruba CX Mobile App, Aruba NetEdit and Aruba Network Analytics Engine, the CX 10000 series offers the following capabilities

REST API

•  Built-in programmable and easy to use

Management interface control

• Enables or disables the console port or reset button, depending on security preferences

Industry-standard CLI with a hierarchical structure

• Reduces training time and expenses, and increases productivity in multivendor installations

Management security

• Restricts access to critical configuration commands
• Offers multiple privilege levels with password protection
• Provides SNMP access with ACLs
• Local and remote Syslog capabilities allow access logging

IPSLA

•  Monitors network for degradation of various services, including voice
• Enables monitoring via the NAE for history and for immediate automated gathering of additional information when anomalies are detected

SNMP v2c/v3

• Provides SNMP read and trap support of industry standard Management Information Base (MIB) and private extensions

sFlow® (RFC 3176)

• Provides scalable ASIC-based wire speed network monitoring and accounting with no impact on network performance, allowing network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes

Remote monitoring (RMON)

• Uses standard SNMP to monitor essential network functions and supports events, alarms, history, and statistics groups as well as a private alarm extension group

Debug and sampler utility

•  Supports ping and trace route for IPv4 and IPv6

Network Time Protocol (NTP)

• Synchronizes timekeeping among distributed time servers and clients.
• Keeps timekeeping consistent among all clock-dependent devices within the network
• Can serve as the NTP server in a customer network

Dual images

• Provides independent primary and secondary operating system files for backup while upgrading

Multiple configuration files

• Stores files easily to the flash image

---

Security

TAA Compliance

• The Aruba CX 10000 with AOS-CX, a TAA compliant product, uses FIPS 140-2 validated cryptography for protection of sensitive information

Access control list (ACL) Features

• Supports powerful ACLs for both IPv4 and IPv6.
• Supports creating object groups representing sets of devices
• Protects control plane services such as SSH, SNMP, NTP or web servers

Enrollment over Secure Transport (EST)

• Enables secure certificate enrollment, allowing for easier enterprise management of PKI.

Remote Authentication Dial-In User Service (RADIUS)

• Eases security access administration by using a password authentication server

Terminal Access Controller Access-Control System (TACACS+)

• Terminal Access Controller Access-Control System (TACACS+)

RadSec

• Enables RADIUS authentication and accounting data to be passed safely and reliably across insecure networks such as the internet

Management access security

•  AOS-CX provides for both on-box as well as off- box authentication for administrative access.
• RADIUS or TACACS+ can be used to provide encrypted user authentication
• TACACS+ can also provide user authorization services

Secure shell (SSHv2)

• Uses external servers to securely log in to a remote device.
• With authentication and encryption, it protects against IP spoofing and plain-text password interception
• Increases the security of Secure FTP (SFTP) transfers

Specifications:

CX10000 Series Specifications
	R8P13A 10000-48Y6C Front-to-Back switch bundle	R8P14A 10000-48Y6C Back-to-Front switch bundle
Description	1 x R8P13A base 10000-48Y6C switch 6 x R8R53A Front-to- Back Fan 2 x R8R51A Front- to-Back 800W 100-240VAC Power Supply	1 x R8P14A base 10000-48Y6C switch 6 x R8R54A Back-to- Front Fan 2 x R8R52A Back-to- Front 800W 100- 240VAC Power Supply
	Supports 48 ports of 1G/10G/25GbE (SFP/SFP+/SFP28) and 6 ports of 40G/100GbE (QSFP+/QSFP28) [optional 1GBASE-T and 10GBASE-T transceivers, 4x10G and 4x25G breakout cables]	Supports 48 ports of 1G/10G/25GbE (SFP/SFP+/SFP28) andports of 40G/100GbE (QSFP+/QSFP28) [optional 1GBASE-T and 10GBASE-T transceivers, 4x10G and 4x25G breakout cables]
Power supplies	Field-replaceable, hot-swappable, and up to 2 power supplies.
Fans	Field-replaceable, hot-swappable, and up to 6 fans.
Physical characteristics
Dimensions	(H) 4.44 cm (W) 43.8.2 cm (D) 51.1 cm (1.75″ x 17.25″ x 12.12″)	(H) 4.44 cm (W) 43.8.2 cm (D) 51.1 cm (1.75″ x 17.25″ x 12.12″)
Full configuration weight	9.75 kg (21.45 lb)	9.75 kg (21.45 lb)
Additional Specifications
CPU	2.9GHz
Memory, Drive and Flash	32GB RAM, 64GB SSD
Packet Buffer	32MB
Performance2
Switching Capacity	3.6Tbps (bidirectional)
IPv4 Host Table	120,000
IPv6 Host Table	52,000
IPv4 Unicast Routes	131,072
IPv6 Unicast Routes	32,732
MAC Table Size	98,304
IGMP Groups	4,094
MLD Groups	4,094
IPv4 Multicast Routes	4,094
IPv6 Multicast Routes	4,094
Environment
Operating Temperature	0°C to 40°C (32°F to 104°F) up to 3.0 km (10,000 ft.)
Operating Relative Humidity	10% to 85% at 40°C (104°F) non-condensing
Non-Operating	-40°C to 70°C (-40°F to 158°F) up to 3.0 km (15,000 ft.)
Non-Operating/Storage Relative Humidity	5% to 95% @ 65°C (149°F)
Max Operating Altitude	Up to 10,000ft (3.048 km)
Max Non-Operating Altitude	Up to 15,000ft (4.6km)
Primary Airflow	Front-to-Back Port to PSU or Back-to-Front PSU to Port
Electrical Characteristics
Frequency	50 / 60 Hz
AC Voltage	100-240 volts
Current	6A (low voltage) – 3A (high voltage)
Typical Power consumption	Max: 750W	Max: 750W
Safety
	EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013 IEC 60950-1:2005 Ed.2; Am 1:2009+A2:2013 UL 60950-1, CSA 22.2 No 60950-1 EN 60825-1:2007/IEC 60825-1:2007 Class 1
EMC
	EN 55032:2012, Class A EN 55024:2010 EN 61000-3-2:2014, Class A EN 61000-3-3:2013 FCC CFR 47 Part 15:2010, Class A VCCI Class A CNS 13438
Lasers
	EN60825-1:2014/IEC 60825-1: 2014 Class 1 Class 1 Laser Products/Laser Klasse 1
Management
	CLI REST API SNMP Aruba Fabric Composer NetEdit Aruba Central RJ-45 serial USB micro USB console RJ-45 Ethernet port
Mounting and Enclosure
	Mounts in an EIA standard 19-inch rack or other equipment cabinet; horizontal surface mounting only; order 2-post or 4-post mounting kit separately

Note: 2. Some of these scaling numbers assume shared tables.

Documentation:

Download the Aruba CX10000 Series Datasheet (.PDF)