HPE Aruba Networking CX switching is built to help IT teams deal with the growing pressure of cloud, mobility, and IoT without adding more complexity.

Key challenges it addresses include:

• Operational complexity – Many organizations run disparate network operating systems, oversubscribed hardware, and complex software licensing. CX uses a single, cloud-native OS from edge access to the data center to simplify design, operations, and management.
• Limited visibility and control – Traditional tools often rely on separate appliances and software, leading to fragmented data. With embedded, distributed analytics via the Network Analytics Engine (NAE), CX provides real-time, network-wide visibility to help detect, prioritize, and troubleshoot issues faster.
• Security and IoT growth – The rapid increase in IoT devices introduces new security risks. CX supports dynamic segmentation and role-based access across wired, wireless, and WAN, helping you apply least-privilege access and keep traffic properly segmented.
• Legacy network limitations – Aging, closed architectures with manual, hard-coded configurations struggle with 24x7 access and time-sensitive services. CX combines programmable ASICs (now in their 7th generation) with a modern OS to support high availability, live upgrades, and advanced telemetry.

In practice, this means IT can move from reactive, ticket-driven troubleshooting to a more proactive, analytics-driven operating model, while keeping pace with increasing traffic volumes and business-critical applications.

HPE Aruba Networking CX is designed to help IT teams rethink day-to-day network operations by combining a single OS, unified management, and built-in automation.

Key ways it simplifies operations:

• One operating system across the network
  HPE Aruba Networking CX Operating System runs from entry-level access switches to high-availability data center platforms. This delivers a consistent operator experience, reduces the need to learn multiple OSs, and simplifies network design.
• Unified, AI-powered management
  HPE Aruba Networking Central provides a single point of visibility and control across wired, wireless, and WAN – from branch to data center. It’s available as cloud-based or on-premises and supports:
  • Configuration and onboarding
  • Monitoring and reporting
  • Automated troubleshooting using AI-powered insights and NAE
  • Streamlined workflows (for example, virtual switch stack creation)
• Intelligent automation and multi-edit
  Using HPE Aruba Networking Central’s multi edit mode or the standalone Switch Multi-Edit Software, IT can orchestrate network-wide configuration changes with:
  • Search and bulk edit
  • Automated validation and conformance checking
  • Controlled deployment and audit trails
  This helps reduce manual tasks and supports safer, faster rollouts.
• Embedded analytics and time-series data
  NAE provides rules-based, real-time monitoring and intelligent notifications that correlate with configuration changes. A built-in Time Series Database (TSDB) stores configuration and operational state data so teams can:
  • Triage and resolve issues more quickly
  • Analyze historical trends
  • Identify anomalies and potential scale, security, or performance bottlenecks
• High availability without downtime windows
  Features like Virtual Switching Extension (VSX) and VSX Live Upgrade support 24x7 availability at the core, aggregation, and data center layers, allowing software upgrades and configuration changes with minimal disruption.

Together, these capabilities help IT teams move from manual, device-by-device management to a more automated, policy-driven, and analytics-informed approach.

HPE Aruba Networking CX helps organizations reimagine how they secure and segment traffic across campus, branch, and data center environments, especially as IoT and remote connectivity grow.

Core capabilities include:

• Dynamic segmentation with role-based access
  HPE Aruba Networking Dynamic Segmentation unifies role-based access and policy enforcement across LAN, WLAN, and SD-WAN. Policies are based on identity and role, not just IP or VLAN, which aligns with zero trust and SASE principles of least-privilege access.
• Colorless ports for easier onboarding
  Colorless ports let any wired client connect to any switch port, with configuration automated via RADIUS-based access control. This reduces manual onboarding effort, including for large numbers of IoT devices.
• Overlay-based automation with Central NetConductor
  HPE Aruba Networking Central NetConductor extends dynamic segmentation using a cloud-native, EVPN VXLAN-based overlay fabric. It provides:
  • A business-logic interface to define user and device groups
  • Automated creation of access enforcement rules and routing/segmentation policies
  • Support for VXLAN or VXLAN-GBP data plane and MP-BGP EVPN or static L2 control planes
  This helps reduce VLAN and subnet sprawl while scaling policy enforcement across distributed locations.
• In-line policy enforcement with GPID
  On CX switches supported by Central NetConductor (such as the CX 6300, CX 6400, CX 8325, and CX 8360 with Central 2.5.6 and CX OS 10.10), policy is enforced in-line using a Group Policy Identifier (GPID). This allows:
  • Precision traffic segmentation based on user role
  • Security inspection without sending traffic off its optimal path
• Flexible micro-segmentation options
  Organizations can choose between:
  • Centralized enforcement – Layer 7 stateful firewall on gateways
  • Distributed enforcement – Layer 4 role-role ACLs on switches
  This flexibility helps align security design with performance and architectural needs.
• Modernization at your own pace
  The EVPN VXLAN-based fabric can co-exist with existing management and security services, so you don’t need a full rip-and-replace. It can be consumed as-a-service via HPE Aruba Networking Central or on-premises via Central on Premises (CoP).

Overall, CX brings policy consistency, scalable segmentation, and automated enforcement to environments that need to support a mix of users, devices, and locations without adding unnecessary complexity.