Skip to content
Uniqcli

Aruba CX Switching

Cloud-managed AOS-CX switches from ruggedized edge access to 400G DPU-accelerated AI data center fabrics

Overview

HPE Aruba Networking CX is a family of managed switches, running one operating system (AOS-CX) from ruggedized IP30 industrial switches through 400G AI data center fabrics. It fits federal, SLED, healthcare, and enterprise buyers who need one switching platform across wiring closets, campus cores, and data centers instead of juggling separate hardware and management tools per tier.

The 2026 lineup has grown well beyond a single access/core/data-center split. Ruggedized CX 4100i switches handle substations and outdoor cabinets; CX 6000 through CX 6300 cover access closets with Smart Rate multi-gig and up to 90W PoE per port; the CX 5420 and CX 6400 chassis handle aggregation and enterprise core; and CX 8100, 8325, 8360 v2, 9300, and the newer CX 10040 distributed services switch cover campus core through AI-scale data center fabrics. That last one matters most for anyone modernizing a data center in 2026: the CX 10040 doubles the CX 10000's throughput to 8 Tbps of switching and 1.6 Tbps of L4 stateful inspection, running firewalling, segmentation, and encryption inline via embedded AMD Pensando DPUs instead of a bolt-on security appliance.

Every tier ships with a built-in Network Analytics Engine that watches its own state and manages from HPE Aruba Networking Central, whose AIOps layer now shares common automation with HPE Juniper Networking's Mist platform following the Juniper integration. HPE was named a Leader in the 2026 Gartner Magic Quadrant for Enterprise Wired and Wireless LAN Infrastructure for the 20th consecutive time, and Aruba CX configurations are TAA-compliant and available through GSA MAS (application in progress), SAP/FAR channels, and GPC direct for federal and public sector procurement.

Request a quote
Aruba CX Switching

A closer look

Aruba CX Switching — view 1
Aruba CX Switching — view 2
Aruba CX Switching — view 3
Aruba CX Switching — view 4

Why Aruba CX Switching

Switching is infrastructure nobody notices until it fails, so resilience and visibility directly drive uptime and IT workload. CX gives buyers one OS and one cloud console across every tier, which cuts training and turns hours of CLI troubleshooting into minutes with zero-touch provisioning. The newer DPU-accelerated tier also collapses a security appliance into the switch itself, so distributed firewalling and segmentation ship as a line-rate feature rather than a second box, second cable run, and second support contract to manage.

One OS from ruggedized edge to 400G data center core

AOS-CX runs unmodified across every tier, from the IP30 ruggedized CX 4100i to the 400G CX 9300 spine, so a team trains once and operates consistently everywhere instead of learning a different CLI per switch family.

DPU-accelerated distributed services switching

The CX 10000 and newer CX 10040 embed AMD Pensando DPUs directly in the switch, running stateful firewalling, microsegmentation, and encryption inline at up to 1.6 Tbps of L4 inspection, no separate security appliance in the data path.

Built-in Network Analytics Engine

Every CX switch watches its own state with on-box analytics and scripting, surfacing anomalies and root causes automatically instead of waiting for a help desk ticket to start the investigation.

Cloud or on-prem management with Aruba Central

Provision, configure, monitor, and update the entire switch estate from one console with zero-touch provisioning, now sharing an AIOps automation layer with HPE Juniper Networking's Mist platform for consistent self-driving operations.

20 consecutive years as a Gartner LAN Leader

HPE was named highest in Ability to Execute and furthest in Completeness of Vision in the 2026 Gartner Magic Quadrant for Enterprise Wired and Wireless LAN Infrastructure, its 20th straight year in the Leaders quadrant.

TAA-compliant configurations for federal procurement

Validated TAA-compliant Aruba CX configurations move through GSA MAS (application in progress), SAP/FAR channels, and GPC direct without a separate compliance review, which matters for federal, DoD, and SLED buyers on a deadline.

What it does

Power over Ethernet across every access tier

PoE, PoE+, and IEEE 802.3bt High Power PoE up to 90W per port run Wi-Fi 7 APs, PTZ cameras, badge readers, and IoT sensors straight from the switch, with per-model PoE budgets scaling from roughly 370W on compact CX 6100 units to nearly 29kW on a fully loaded CX 6400 chassis.

HPE Smart Rate multi-gigabit uplinks

Smart Rate copper ports auto-negotiate 1/2.5/5/10G to match the access point or endpoint, so a Wi-Fi 6E or 7 AP gets full throughput over existing Cat5e/Cat6 cabling without a cabling refresh.

Line-rate fiber from 10G to 400G

Aggregation and data center models scale fiber uplinks from 10/25G in the CX 8100 up to 400G on the CX 9300 and CX 10040, covering everything from a branch aggregation link to a leaf-spine AI fabric.

Dynamic Segmentation and role-based Zero Trust

User and device roles are enforced in hardware at the switch port, keeping IoT, guest, and corporate traffic separated without hand-built VLAN and ACL sprawl, and travel with the device as it roams.

DPU-accelerated distributed services (CX 10000 / CX 10040)

AMD Pensando DPUs embedded in the switch deliver stateful firewalling, microsegmentation, NAT, and encryption inline at wire rate, up to 1.6 Tbps of L4 stateful inspection on the CX 10040, without a separate appliance in the data path.

VSX high availability and live software upgrades

Virtual Switching Extension pairs two switches into an active-active pair with independent control planes, so firmware updates and hardware maintenance happen without taking the link down.

MACsec line-rate encryption

Hardware MACsec (including 256-bit on 8000-series and CX 10040 models) encrypts traffic between switches at full line rate, protecting data in motion across campus, WAN, and data center interconnects without a throughput tax.

EVPN-VXLAN fabric for modern data centers

CX 8325, 8360 v2, 9300, and 10000-series switches build EVPN-VXLAN leaf-spine fabrics with BGP-based control planes, giving data center teams a standards-based alternative to proprietary fabric protocols.

The Aruba CX Switching lineup

Aruba CX 4100i

Ruggedized IP30 switch for substations, factory floors, and outdoor cabinets in extreme temperature ranges.

12-port fanless DIN-rail and 24-port 1U models, 1/10G uplinks, up to 360W Class 4/6 PoE, -40C to 70C operation

Aruba CX 6000 / 6100

Entry Layer 2 access switches for branch offices, SMB, and IoT-density closets.

1G ports, 1/10G uplinks, up to 370W PoE budget (6100), fanless options

Aruba CX 6200 / 6300 (M/L/F)

Stackable Layer 3 access and aggregation switches with Smart Rate multi-gig and high-power PoE; 6300L is Layer 2-only.

Smart Rate 1/2.5/5/10G, up to 90W PoE (Class 8), 880-1760 Gbps switching, BGP/EVPN/VXLAN on 6300M

Aruba CX 5420 / 6400

Modular chassis switches for aggregation, small core, and enterprise campus core.

5420: 960 Gbps, 6-slot; 6400: up to 28 Tbps, 5/10-slot, ~29kW PoE budget fully loaded

Aruba CX 8100 / 8325

1U fixed switches for campus core and data center leaf/ToR roles.

8100: 1.76 Tbps, 1/10/40/100G; 8325: 6.4 Tbps, 1/10/25/40/100G, MACsec, VSX

Aruba CX 8360 v2 / 8400

High-performance enterprise campus and data center switches, fixed and chassis.

8360 v2: 4.8 Tbps, 1/10/25/40/50/100G; 8400: modular chassis, EVPN-VXLAN, carrier-class HA

Aruba CX 9300

Fixed 32-port switch for high-density leaf or spine roles in AI and cloud data centers.

25.6 Tbps switching, 32x 100/200/400G QSFP-DD, 5 Bpps forwarding, supports 6,000+ 25G server PODs

Aruba CX 10000 / CX 10040

DPU-accelerated distributed services switches running stateful security inline at wire rate.

10000: 3.6 Tbps, 48x10/25G + 6x40/100G; 10040: 8 Tbps, 32x100G + 6x400G, 1.6 Tbps L4 stateful inspection

At a glance

Operating system
AOS-CX, microservices-based, database-driven, with built-in Network Analytics Engine
Switch tiers
Ruggedized, access, aggregation, campus core, and data center (CX 4100i through CX 10040)
Port speeds
100M/1G and Smart Rate 2.5/5/10G copper; 10/25/40/50/100/200/400G fiber uplinks
PoE
PoE, PoE+, and High Power PoE up to 90W per port (IEEE 802.3bt Class 8) on select models
Form factors
Fanless/fixed 1U, stackable, ruggedized DIN-rail, and modular chassis (5 to 12-slot)
Management
HPE Aruba Networking Central (cloud or on-prem) with zero-touch provisioning, APIs, and AIOps
Resiliency
VSX high availability, live software upgrades, redundant supervisors and power supplies
Security
Dynamic Segmentation, MACsec 256, and DPU-accelerated stateful firewalling on CX 10000/10040

8 Tbps switching / 1.6 Tbps L4 stateful inspection

CX 10040 distributed services switch capacity, roughly double the CX 10000(vendor-published figure)

20 consecutive years

HPE named a Leader in the Gartner Magic Quadrant for Enterprise Wired and Wireless LAN Infrastructure (2026 report)(vendor-published figure)

25.6 Tbps switching, 32x 100/200/400G

Aruba CX 9300 switch series capacity for high-density data center leaf/spine roles(vendor-published figure)

How to buy Aruba CX Switching

Aruba CX switches are sold as fixed 1U models or modular chassis, licensed for AOS-CX features by tier, and increasingly bought as part of GreenLake-managed networking rather than one-off hardware purchases. Federal, SLED, and healthcare buyers can transact through the same GSA/SAP/FAR channels/GPC direct vehicles used for the rest of the HPE portfolio, with TAA-compliant configurations validated for Trade Agreements Act procurement.

Perpetual hardware plus Aruba Central subscription

Buy the switch outright and attach an Aruba Central subscription (Foundation or Advanced tier) for cloud management, AIOps, and analytics. Foundation covers day-to-day config and monitoring; Advanced adds AI-driven client insights and expanded automation.

HPE GreenLake for Networking (as-a-service)

Consume CX switches on a pay-per-use or subscription model with HPE owning lifecycle management, so campus and data center refreshes shift from capex to a metered operating expense with built-in Central licensing.

TAA-compliant configurations for federal and public sector

HPE publishes validated TAA-compliant CX configurations so contracting officers can procure through GSA MAS (application in progress), SAP/FAR channels, and GPC direct without a separate compliance review cycle.

Trade-in and refresh programs

Aging Aruba, Cisco, or other vendor switches can be traded in toward a CX refresh, easing the budget math on multi-closet or data center modernization projects with defined end-of-support timelines.

Support and warranty attach

Foundation Care or Proactive Care support levels can be attached at purchase for next-business-day or 24x7 hardware replacement and software updates, which matters most on core and data center tiers where downtime cost is highest.

Where it fits

Refresh aging campus access closets with stackable, Smart Rate PoE switches that power Wi-Fi 7 APs, cameras, and badge readers without a cabling upgrade
Build a leaf-spine AI or cloud data center fabric on EVPN-VXLAN with CX 8325/8360 leaf switches and a CX 9300 fixed spine at 100-400G
Run distributed stateful firewalling, microsegmentation, and encryption inline with DPU-accelerated CX 10000 or CX 10040 switches instead of a separate security appliance
Deploy ruggedized CX 4100i switches in substations, rail cabinets, or outdoor enclosures where standard switches cannot survive the environment
Consolidate campus core and aggregation onto CX 5420 or CX 6400 chassis switches with VSX high availability and live software upgrades for zero-downtime maintenance
Segment dense IoT and OT device populations with role-based Dynamic Segmentation enforced at the switch port
Standardize federal, SLED, or healthcare network procurement on TAA-compliant CX configurations through GSA, SAP/FAR channels, or GPC direct

Frequently asked

What is the current Aruba CX switch lineup in 2026?

The lineup runs from ruggedized CX 4100i switches, through access models (CX 6000, 6100, 6200, 6300, 6300L), aggregation (CX 5420, CX 6400), campus core and data center (CX 8100, 8325, 8360 v2, 8400), to the CX 9300 fixed spine switch and the DPU-accelerated CX 10000 and CX 10040 distributed services switches. Every tier runs AOS-CX and is managed from HPE Aruba Networking Central.

What is the Aruba CX 10040 and how is it different from the CX 10000?

The CX 10040 is HPE's newer distributed services switch, built for AI and high-density data centers with 8 Tbps of non-blocking switching capacity and 1.6 Tbps of L4 stateful inspection, roughly double the CX 10000's throughput. Both integrate AMD Pensando DPUs to run firewalling, segmentation, and telemetry inline, but the CX 10040 targets larger fabrics with 32x100G and 6x400G interfaces.

How much PoE power does an Aruba CX switch deliver?

It depends on the model. Compact CX 6100 access switches deliver up to 370W of PoE budget total, CX 6300 models scale to 90W per port (IEEE 802.3bt Class 8) with up to 2,880W total budget, and a fully populated CX 6400 chassis can supply close to 29kW of PoE across its line cards for dense AP and camera deployments.

What is the difference between the CX 6300M and CX 6300L?

The CX 6300M is a Layer 3 stackable switch with BGP, EVPN-VXLAN, VRF, and OSPF routing plus hot-swappable redundant power supplies. The CX 6300L is a Layer 2-only variant built for cost-sensitive access and aggregation, and it only stacks with other CX 6300L units, not with 6300M switches.

Are Aruba CX switches TAA compliant and available on federal contract vehicles?

Yes. HPE publishes validated TAA-compliant Aruba CX configurations for Trade Agreements Act procurement, and the CX line is available through GSA MAS (application in progress), SAP/FAR channels, and GPC direct, the standard vehicles federal, DoD, and many SLED buyers already use for HPE and Aruba purchases.

Which Aruba CX switch fits a typical campus wiring closet?

For mainstream Layer 3 access, the CX 6200 or CX 6300 cover most wiring closets, with the CX 6300 adding Smart Rate multi-gig ports and up to 90W PoE for Wi-Fi 7 APs and power-hungry edge devices. Smaller sites or IoT-only closets often fit the CX 6000 or CX 6100 Layer 2 access models instead.

What switch should I use for a leaf-spine data center fabric?

CX 8325 or CX 8360 v2 switches typically serve as leaf/ToR, the CX 9300 serves as a fixed 32-port 100/200/400G spine, and CX 10000 or CX 10040 switches slot into either role when you need inline stateful security services running at wire rate inside the fabric itself.

How are Aruba CX switches managed and monitored?

Every CX switch is managed from HPE Aruba Networking Central, a cloud (or on-premises) console handling configuration, firmware, and monitoring across the whole estate, with zero-touch provisioning bringing new switches online automatically. Aruba Central's AIOps engine now shares a common automation layer with HPE Juniper Networking's Mist platform for consistent, self-driving operations.

Where do I get pricing and a quote for Aruba CX switches?

Uniqcli builds Aruba CX configurations, verifies part numbers and lead times against current HPE stock, and returns a formal quote through the /quote page, referencing GPC, SAP, FAR-based orders, or GSA eBuy pricing where the buyer qualifies. Add CX switches to a multi-line order with APs, controllers, or servers using the BOM builder at /bom.

Works with

CX switches rarely sit alone in a deployment. They pair with Aruba's wireless and access-control stack for a single-vendor wired/wireless estate, and with HPE's broader compute and cloud portfolio when the switch is feeding a data center rather than a wiring closet.

Build your HPE bill of materials.

Send us the requirement, the project, or an existing quote to beat. We come back with a validated, TAA-compliant HPE configuration and a real price, often below list.

connect [at] getuniqcli.com · Chicago, IL