Aruba CX Switching
Cloud-managed AOS-CX switches from ruggedized edge access to 400G DPU-accelerated AI data center fabrics
Overview
HPE Aruba Networking CX is a family of managed switches, running one operating system (AOS-CX) from ruggedized IP30 industrial switches through 400G AI data center fabrics. It fits federal, SLED, healthcare, and enterprise buyers who need one switching platform across wiring closets, campus cores, and data centers instead of juggling separate hardware and management tools per tier.
The 2026 lineup has grown well beyond a single access/core/data-center split. Ruggedized CX 4100i switches handle substations and outdoor cabinets; CX 6000 through CX 6300 cover access closets with Smart Rate multi-gig and up to 90W PoE per port; the CX 5420 and CX 6400 chassis handle aggregation and enterprise core; and CX 8100, 8325, 8360 v2, 9300, and the newer CX 10040 distributed services switch cover campus core through AI-scale data center fabrics. That last one matters most for anyone modernizing a data center in 2026: the CX 10040 doubles the CX 10000's throughput to 8 Tbps of switching and 1.6 Tbps of L4 stateful inspection, running firewalling, segmentation, and encryption inline via embedded AMD Pensando DPUs instead of a bolt-on security appliance.
Every tier ships with a built-in Network Analytics Engine that watches its own state and manages from HPE Aruba Networking Central, whose AIOps layer now shares common automation with HPE Juniper Networking's Mist platform following the Juniper integration. HPE was named a Leader in the 2026 Gartner Magic Quadrant for Enterprise Wired and Wireless LAN Infrastructure for the 20th consecutive time, and Aruba CX configurations are TAA-compliant and available through GSA MAS (application in progress), SAP/FAR channels, and GPC direct for federal and public sector procurement.

A closer look




Why Aruba CX Switching
Switching is infrastructure nobody notices until it fails, so resilience and visibility directly drive uptime and IT workload. CX gives buyers one OS and one cloud console across every tier, which cuts training and turns hours of CLI troubleshooting into minutes with zero-touch provisioning. The newer DPU-accelerated tier also collapses a security appliance into the switch itself, so distributed firewalling and segmentation ship as a line-rate feature rather than a second box, second cable run, and second support contract to manage.
One OS from ruggedized edge to 400G data center core
AOS-CX runs unmodified across every tier, from the IP30 ruggedized CX 4100i to the 400G CX 9300 spine, so a team trains once and operates consistently everywhere instead of learning a different CLI per switch family.
DPU-accelerated distributed services switching
The CX 10000 and newer CX 10040 embed AMD Pensando DPUs directly in the switch, running stateful firewalling, microsegmentation, and encryption inline at up to 1.6 Tbps of L4 inspection, no separate security appliance in the data path.
Built-in Network Analytics Engine
Every CX switch watches its own state with on-box analytics and scripting, surfacing anomalies and root causes automatically instead of waiting for a help desk ticket to start the investigation.
Cloud or on-prem management with Aruba Central
Provision, configure, monitor, and update the entire switch estate from one console with zero-touch provisioning, now sharing an AIOps automation layer with HPE Juniper Networking's Mist platform for consistent self-driving operations.
20 consecutive years as a Gartner LAN Leader
HPE was named highest in Ability to Execute and furthest in Completeness of Vision in the 2026 Gartner Magic Quadrant for Enterprise Wired and Wireless LAN Infrastructure, its 20th straight year in the Leaders quadrant.
TAA-compliant configurations for federal procurement
Validated TAA-compliant Aruba CX configurations move through GSA MAS (application in progress), SAP/FAR channels, and GPC direct without a separate compliance review, which matters for federal, DoD, and SLED buyers on a deadline.
What it does
Power over Ethernet across every access tier
PoE, PoE+, and IEEE 802.3bt High Power PoE up to 90W per port run Wi-Fi 7 APs, PTZ cameras, badge readers, and IoT sensors straight from the switch, with per-model PoE budgets scaling from roughly 370W on compact CX 6100 units to nearly 29kW on a fully loaded CX 6400 chassis.
HPE Smart Rate multi-gigabit uplinks
Smart Rate copper ports auto-negotiate 1/2.5/5/10G to match the access point or endpoint, so a Wi-Fi 6E or 7 AP gets full throughput over existing Cat5e/Cat6 cabling without a cabling refresh.
Line-rate fiber from 10G to 400G
Aggregation and data center models scale fiber uplinks from 10/25G in the CX 8100 up to 400G on the CX 9300 and CX 10040, covering everything from a branch aggregation link to a leaf-spine AI fabric.
Dynamic Segmentation and role-based Zero Trust
User and device roles are enforced in hardware at the switch port, keeping IoT, guest, and corporate traffic separated without hand-built VLAN and ACL sprawl, and travel with the device as it roams.
DPU-accelerated distributed services (CX 10000 / CX 10040)
AMD Pensando DPUs embedded in the switch deliver stateful firewalling, microsegmentation, NAT, and encryption inline at wire rate, up to 1.6 Tbps of L4 stateful inspection on the CX 10040, without a separate appliance in the data path.
VSX high availability and live software upgrades
Virtual Switching Extension pairs two switches into an active-active pair with independent control planes, so firmware updates and hardware maintenance happen without taking the link down.
MACsec line-rate encryption
Hardware MACsec (including 256-bit on 8000-series and CX 10040 models) encrypts traffic between switches at full line rate, protecting data in motion across campus, WAN, and data center interconnects without a throughput tax.
EVPN-VXLAN fabric for modern data centers
CX 8325, 8360 v2, 9300, and 10000-series switches build EVPN-VXLAN leaf-spine fabrics with BGP-based control planes, giving data center teams a standards-based alternative to proprietary fabric protocols.
The Aruba CX Switching lineup
Aruba CX 4100i
Ruggedized IP30 switch for substations, factory floors, and outdoor cabinets in extreme temperature ranges.
12-port fanless DIN-rail and 24-port 1U models, 1/10G uplinks, up to 360W Class 4/6 PoE, -40C to 70C operation
Aruba CX 6000 / 6100
Entry Layer 2 access switches for branch offices, SMB, and IoT-density closets.
1G ports, 1/10G uplinks, up to 370W PoE budget (6100), fanless options
Aruba CX 6200 / 6300 (M/L/F)
Stackable Layer 3 access and aggregation switches with Smart Rate multi-gig and high-power PoE; 6300L is Layer 2-only.
Smart Rate 1/2.5/5/10G, up to 90W PoE (Class 8), 880-1760 Gbps switching, BGP/EVPN/VXLAN on 6300M
Aruba CX 5420 / 6400
Modular chassis switches for aggregation, small core, and enterprise campus core.
5420: 960 Gbps, 6-slot; 6400: up to 28 Tbps, 5/10-slot, ~29kW PoE budget fully loaded
Aruba CX 8100 / 8325
1U fixed switches for campus core and data center leaf/ToR roles.
8100: 1.76 Tbps, 1/10/40/100G; 8325: 6.4 Tbps, 1/10/25/40/100G, MACsec, VSX
Aruba CX 8360 v2 / 8400
High-performance enterprise campus and data center switches, fixed and chassis.
8360 v2: 4.8 Tbps, 1/10/25/40/50/100G; 8400: modular chassis, EVPN-VXLAN, carrier-class HA
Aruba CX 9300
Fixed 32-port switch for high-density leaf or spine roles in AI and cloud data centers.
25.6 Tbps switching, 32x 100/200/400G QSFP-DD, 5 Bpps forwarding, supports 6,000+ 25G server PODs
Aruba CX 10000 / CX 10040
DPU-accelerated distributed services switches running stateful security inline at wire rate.
10000: 3.6 Tbps, 48x10/25G + 6x40/100G; 10040: 8 Tbps, 32x100G + 6x400G, 1.6 Tbps L4 stateful inspection
At a glance
- Operating system
- AOS-CX, microservices-based, database-driven, with built-in Network Analytics Engine
- Switch tiers
- Ruggedized, access, aggregation, campus core, and data center (CX 4100i through CX 10040)
- Port speeds
- 100M/1G and Smart Rate 2.5/5/10G copper; 10/25/40/50/100/200/400G fiber uplinks
- PoE
- PoE, PoE+, and High Power PoE up to 90W per port (IEEE 802.3bt Class 8) on select models
- Form factors
- Fanless/fixed 1U, stackable, ruggedized DIN-rail, and modular chassis (5 to 12-slot)
- Management
- HPE Aruba Networking Central (cloud or on-prem) with zero-touch provisioning, APIs, and AIOps
- Resiliency
- VSX high availability, live software upgrades, redundant supervisors and power supplies
- Security
- Dynamic Segmentation, MACsec 256, and DPU-accelerated stateful firewalling on CX 10000/10040
8 Tbps switching / 1.6 Tbps L4 stateful inspection
CX 10040 distributed services switch capacity, roughly double the CX 10000(vendor-published figure)
20 consecutive years
HPE named a Leader in the Gartner Magic Quadrant for Enterprise Wired and Wireless LAN Infrastructure (2026 report)(vendor-published figure)
25.6 Tbps switching, 32x 100/200/400G
Aruba CX 9300 switch series capacity for high-density data center leaf/spine roles(vendor-published figure)
How to buy Aruba CX Switching
Aruba CX switches are sold as fixed 1U models or modular chassis, licensed for AOS-CX features by tier, and increasingly bought as part of GreenLake-managed networking rather than one-off hardware purchases. Federal, SLED, and healthcare buyers can transact through the same GSA/SAP/FAR channels/GPC direct vehicles used for the rest of the HPE portfolio, with TAA-compliant configurations validated for Trade Agreements Act procurement.
Perpetual hardware plus Aruba Central subscription
Buy the switch outright and attach an Aruba Central subscription (Foundation or Advanced tier) for cloud management, AIOps, and analytics. Foundation covers day-to-day config and monitoring; Advanced adds AI-driven client insights and expanded automation.
HPE GreenLake for Networking (as-a-service)
Consume CX switches on a pay-per-use or subscription model with HPE owning lifecycle management, so campus and data center refreshes shift from capex to a metered operating expense with built-in Central licensing.
TAA-compliant configurations for federal and public sector
HPE publishes validated TAA-compliant CX configurations so contracting officers can procure through GSA MAS (application in progress), SAP/FAR channels, and GPC direct without a separate compliance review cycle.
Trade-in and refresh programs
Aging Aruba, Cisco, or other vendor switches can be traded in toward a CX refresh, easing the budget math on multi-closet or data center modernization projects with defined end-of-support timelines.
Support and warranty attach
Foundation Care or Proactive Care support levels can be attached at purchase for next-business-day or 24x7 hardware replacement and software updates, which matters most on core and data center tiers where downtime cost is highest.
Where it fits
Frequently asked
What is the current Aruba CX switch lineup in 2026?
The lineup runs from ruggedized CX 4100i switches, through access models (CX 6000, 6100, 6200, 6300, 6300L), aggregation (CX 5420, CX 6400), campus core and data center (CX 8100, 8325, 8360 v2, 8400), to the CX 9300 fixed spine switch and the DPU-accelerated CX 10000 and CX 10040 distributed services switches. Every tier runs AOS-CX and is managed from HPE Aruba Networking Central.
What is the Aruba CX 10040 and how is it different from the CX 10000?
The CX 10040 is HPE's newer distributed services switch, built for AI and high-density data centers with 8 Tbps of non-blocking switching capacity and 1.6 Tbps of L4 stateful inspection, roughly double the CX 10000's throughput. Both integrate AMD Pensando DPUs to run firewalling, segmentation, and telemetry inline, but the CX 10040 targets larger fabrics with 32x100G and 6x400G interfaces.
How much PoE power does an Aruba CX switch deliver?
It depends on the model. Compact CX 6100 access switches deliver up to 370W of PoE budget total, CX 6300 models scale to 90W per port (IEEE 802.3bt Class 8) with up to 2,880W total budget, and a fully populated CX 6400 chassis can supply close to 29kW of PoE across its line cards for dense AP and camera deployments.
What is the difference between the CX 6300M and CX 6300L?
The CX 6300M is a Layer 3 stackable switch with BGP, EVPN-VXLAN, VRF, and OSPF routing plus hot-swappable redundant power supplies. The CX 6300L is a Layer 2-only variant built for cost-sensitive access and aggregation, and it only stacks with other CX 6300L units, not with 6300M switches.
Are Aruba CX switches TAA compliant and available on federal contract vehicles?
Yes. HPE publishes validated TAA-compliant Aruba CX configurations for Trade Agreements Act procurement, and the CX line is available through GSA MAS (application in progress), SAP/FAR channels, and GPC direct, the standard vehicles federal, DoD, and many SLED buyers already use for HPE and Aruba purchases.
Which Aruba CX switch fits a typical campus wiring closet?
For mainstream Layer 3 access, the CX 6200 or CX 6300 cover most wiring closets, with the CX 6300 adding Smart Rate multi-gig ports and up to 90W PoE for Wi-Fi 7 APs and power-hungry edge devices. Smaller sites or IoT-only closets often fit the CX 6000 or CX 6100 Layer 2 access models instead.
What switch should I use for a leaf-spine data center fabric?
CX 8325 or CX 8360 v2 switches typically serve as leaf/ToR, the CX 9300 serves as a fixed 32-port 100/200/400G spine, and CX 10000 or CX 10040 switches slot into either role when you need inline stateful security services running at wire rate inside the fabric itself.
How are Aruba CX switches managed and monitored?
Every CX switch is managed from HPE Aruba Networking Central, a cloud (or on-premises) console handling configuration, firmware, and monitoring across the whole estate, with zero-touch provisioning bringing new switches online automatically. Aruba Central's AIOps engine now shares a common automation layer with HPE Juniper Networking's Mist platform for consistent, self-driving operations.
Where do I get pricing and a quote for Aruba CX switches?
Uniqcli builds Aruba CX configurations, verifies part numbers and lead times against current HPE stock, and returns a formal quote through the /quote page, referencing GPC, SAP, FAR-based orders, or GSA eBuy pricing where the buyer qualifies. Add CX switches to a multi-line order with APs, controllers, or servers using the BOM builder at /bom.
Works with
CX switches rarely sit alone in a deployment. They pair with Aruba's wireless and access-control stack for a single-vendor wired/wireless estate, and with HPE's broader compute and cloud portfolio when the switch is feeding a data center rather than a wiring closet.
Compare before you buy
All comparisonsHPE Aruba Networking CX 6300 vs Cisco Catalyst 9300
Aruba CX 6300 vs Cisco Catalyst 9300: Access Switch Compare
Aruba CX 6300 vs Aruba CX 6200
Aruba CX 6300 vs CX 6200: AOS-CX Access Switch Compared
Aruba CX 8325 vs Aruba CX 8360
Aruba CX 8325 vs CX 8360: Data Center Switch Compared
HPE Aruba CX Switches vs HPE Juniper EX Switches
Aruba CX vs Juniper EX: HPE Campus Switch Guide
Related in Networking

Aruba Access Points & Wi-Fi
The full Aruba AP portfolio, from entry Wi-Fi 6 to flagship Wi-Fi 7, matched to your density, environment, and budget

Aruba Central
AI-native cloud management for the whole network, with agentic AIOps and a GreenLake Copilot that reasons and acts

Aruba ClearPass Policy Manager
The multivendor NAC engine behind Aruba's Zero Trust access, hardware, virtual, or GreenLake, sized from 100 to 100,000 endpoints
Shop Aruba CX Switching in the catalog
See all results
Aruba CX 5420 Switch Chassis
S0U65AR
Aruba CX 5420 Switch Chassis

S0U66AR
Aruba CX 5420 Switch Chassis

S0U71A
Aruba CX 5420 Switch Chassis

S0U75A
Aruba CX 5420 Switch Chassis

S0U66A
Aruba CX 5420 Switch Chassis

S0U65A
Aruba CX 5420 Switch Chassis

S0U70A
Aruba CX 5420 6-slot TAA Chassis

R9F70AR
Aruba Cooling Fan
Build your HPE bill of materials.
Send us the requirement, the project, or an existing quote to beat. We come back with a validated, TAA-compliant HPE configuration and a real price, often below list.
connect [at] getuniqcli.com · Chicago, IL