Overview:
The past several decades in networking have been defined by static, closed networking solutions designed for the client- server era. Aruba is introducing the Aruba 8320 campus core and aggregation switch, a game-changing solution offering a flexible and innovative approach to dealing with the demands of the mobile, cloud and IoT era.
The 8320 provides industry-leading line rate 10GbE/40GbE in a compact 1U form factor. Together with the modular Aruba 8400 chassis, the 8320 rounds out Aruba’s Mobile First switching portfolio with an enterprise core and aggregation solution that ensures higher performance and higher uptime.
The 8320 is based on the new ArubaOS-CX, a modern software system for the enterprise core that automates and simplifies many critical and complex network tasks, delivers enhanced fault tolerance and facilitates zero-service disruption during planned or unplanned control-plane events. The key innovations in ArubaOS-CX are its micro-services style modular architecture, REST APIs, Python scripting capabilities and the Aruba Network Analytics Engine.
ArubaOS-CX is based on a modular architecture that allows individual process re-startability and upgrades. Its REST APIs and Python scripting enables fine-grained programmability of the switch functions and its unique Aruba Network Analytics Engine provides the ability to monitor and troubleshoot the network easily.
The Network Analytics Engine framework is made up of a time series database and associated REST APIs.
The time series database may be used to store configuration and operational state. Customers can use ArubaOS-CX REST APIs, Python scripting capabilities and time series data to write software modules for trouble shooting problems. The time series data may also be used to analyze trends, identify anomalies and predict future capacity requirements.
Key Features
- High performance 2.5Tbps with 1,905MPPS
- High availability with redundant power and fans
- ArubaOS-CX enables automation and programmability using built-in REST APIs and Python scripts
- Intelligent monitoring and visibility with Aruba Network Analytics Engine
- Advanced Layer 2/3 feature set includes BGP, OSPF, VRF, and IPv6
- 1U chassis with 48 ports of 10G and 6 ports of 40G
- Multi-chassis link aggregation
Features and Benefits:
Product architecture
- ArubaOS-CX
- Modular, Linux based and built with OVSDB to support a database-centric operating system.
- Distributed architecture with separation of data and control planes.
- Includes independent monitoring and restart of individual software modules, and enhanced software process serviceability functions.
- Allows individual software modules to be upgraded for higher availability.
- Network Analytics Engine
- Afirst of a kind built-in framework for monitoring, troubleshooting and capacity planning
Performance
- High-speed fully distributed architecture
Provides 2.5Tbps for switching and 1,905MPPS for forwarding. All switching and routing are wire-speed to meet the demands of bandwidth-intensive applications today and in the future.
- Scalable system design
Provides investment protection to support future technologies and higher-speed connectivity
Connectivity
- High-density port connectivity
Comes with 48 ports of 10G to support SFP and SFP+ transceivers, and 6 ports of 40G to support QSFP+ transceivers.
- Jumbo frames
Allows high-performance backups and disaster-recovery systems; provides a maximum frame size of 9K bytes
- Loopback
Supports internal loopback testing for maintenance purposes and an increase in availability; loopback detection protects against incorrect cabling or network configurations and can be enabled on a per-port or per- VLAN basis for added flexibility
- Flexible port selection
Provides a combination of fiber and copper transceiver to support 1000BASE-T and 10GBASE-T copper solution
- Packet storm protection
Protects against unknown broadcast, unknown multicast, or unicast storms with user-defined thresholds
Quality of Service (QoS)
- Powerful QoS feature
Supports the following congestion actions: strict priority (SP) queuing and weighted fair queuing
Resiliency and high availability
- Redundant and load-sharing fans, and power supplies
Increases total performance and power availability while providing hitless, stateful failover
- All hot-swappable modules
Allows replacement of modules without any impact on other modules
- Separate data and control paths
Separates control from services and keeps service processing isolated; increases security and performance
- VRRP
Allows groups of two routers to dynamically back each other up to create highly available routed environments
- Unidirectional Link Detection (UDLD)
Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based networks
- IEEE 802.3ad LACP
Supports up to 128 trunks, each with eight links per trunk; and provides support for static or dynamic groups and a user-selectable hashing algorithm
- Redundant power supplies
Provides N+1 high reliability with hot swappable, redundant power supplies
Virtual private network (VPN)
- Generic Routing Encapsulation (GRE)
Enables tunneling traffic from site to site over a Layer 3 path
Management
- Management interface control
Enables or disables each of the following interfaces depending on security preferences: console port, or reset button
- Industry-standard CLI with a hierarchical structure
Reduces training time and expenses, and increases productivity in multivendor installations
- Management security
Restricts access to critical configuration commands; offers multiple privilege levels with password protection; ACLs provide SNMP access; local and remote syslog capabilities allow logging of all access
- SNMP v2c/v3
Provides SNMP read and trap support of industry standard Management Information Base (MIB), and private extensions
- sFlow® (RFC 3176)
Provides scalable ASIC-based wire speed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes
- Remote monitoring (RMON)
Uses standard SNMP to monitor essential network functions and supports events, alarms, history, and statistics groups as well as a private alarm extension group
- TFTP and SFTP support
Offers different mechanisms for configuration updates; trivial FTP (TFTP) allows bidirectional transfers over a TCP/ IP network; Secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security
- Debug and sampler utility
Supports ping and traceroute for both IPv4 and IPv6
- Network Time Protocol (NTP)
Synchronizes timekeeping among distributed time servers and clients; keeps timekeeping consistent among all clock-dependent devices within the network so the devices can provide diverse applications based on the consistent time
- IEEE 802.1AB Link Layer Discovery Protocol (LLDP)
Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by network management applications
- Dual flash images
Provides independent primary and secondary operating system files for backup while upgrading
- Multiple configuration files
Stores easily to the flash image
Layer 2 switching
- VLAN
Supports up to 4,096 port-based or IEEE 802.1Q-based VLANs; and supports MAC-based VLANs, protocol-based VLANs, and IP-subnet-based VLANs for added flexibility
- Bridge Protocol Data Unit (BPDU) tunneling
Transmits STP BPDUs transparently, allowing correct tree calculations across service providers, WANs, or MANs
- Port mirroring
Duplicates port traffic (ingress and egress) to a local or remote monitoring port; supports 4 mirroring groups, with an unlimited number of ports per group
- STP
Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
- Internet Group Management Protocol (IGMP)
Controls and manages the flooding of multicast packets in a Layer 2 network
- Rapid Per-VLAN spanning tree plus (RPVST+)
Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in network environments with multiple VLANs
Layer 3 services
- Address Resolution Protocol (ARP)
Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network
- UDP helper
Redirects UDP broadcasts to specific IP subnets to prevent server spoofing
- Dynamic Host Configuration Protocol (DHCP)
Simplifies the management of large IP networks and supports client; DHCP Relay enables DHCP operation across subnets
- Domain Name System (DNS)
Provides a distributed database that translates domain names and IP addresses, which simplifies network design; supports client and server
Layer 3 routing
- Static IPv4 routing
Provides simple manually configured IPv4 routing
- Open shortest path first (OSPF)
Delivers faster convergence; uses link-state routing Interior Gateway Protocol (IGP), which supports ECMP, NSSA, and MD5 authentication for increased security and graceful restart for faster failure recovery
- Border Gateway Protocol 4 (BGP-4)
Delivers an implementation of the Exterior Gateway Protocol (EGP) utilizing path vectors; uses TCP for enhanced reliability for the route discovery process; reduces bandwidth consumption by advertising only incremental updates; supports extensive policies for increased flexibility; scales to very large networks
- IP performance optimization
Provides a set of tools to improve the performance of IPv4 networks; includes directed broadcasts, customization of TCP parameters, support of ICMP error packets, and extensive display capabilities
- Static IPv6 routing
Provides simple manually configured IPv6 routing
- Dual IP stack
Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network to an IPv6-only network design
- OSPFv3
Provides OSPF support for IPv6
- Equal-Cost Multipath (ECMP)
Enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth
Security
- TAA Compliance
The Aruba 8320, a TAA compliant product, with the ArubaOS-CX uses FIPS 140-2 validated cryptography for protection of sensitive information
- Access control list (ACL)
Supports powerful ACLs for both IPv4 and IPv6; ACLs are used for filtering traffic to prevent unauthorized users from accessing the network, or for controlling network traffic to save resources; rules can either deny or permit traffic to be forwarded; rules can be based on a Layer 2 header or a Layer 3 protocol header
- Remote Authentication Dial-In User Service (RADIUS)
Eases security access administration by using a password authentication server
- Terminal Access Controller Access-Control System (TACACS+)
Delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security
- Management access security
Aruba OS CX provides for both on-box as well as off- box authentication for administrative access. RADIUS or TACACS+ can be used to provide encrypted user authentication. Additionally, TACACS+ can also provide user authorization services
- Secure shell (SSHv2)
Uses external servers to securely log in to a remote device; with authentication and encryption, it protects against IP spoofing and plain-text password interception; increases the security of Secure FTP (SFTP) transfers
Multicast
- Multicast VLAN
Allows multiple VLANs to receive the same IPv4 or IPv6 multicast traffic, lessening network bandwidth demand by reducing multiple streams to each VLAN
- Protocol Independent Multicast (PIM)
Defines modes of IPv4 multicasting to allow one-to-many and many-to-many transmission of information; supports PIM, Sparse Mode (SM)
- Internet Group Management Protocol (IGMP)
Utilizes Any-Source Multicast (ASM) to manage IPv4 multicast networks; supports IGMPv1, v2, and v3
Additional information
- Green initiative support
Provides support for RoHS and WEEE regulations
Warranty and support
Specifications:
I/O ports and slots
- Supports 48 ports of 10G for use with SFP and SFP+ transceivers, and 6 ports of 40G for use with QSFP+ transceivers.
Module VoQ
Power supplies
- Field-replaceable, hot-swappable, and up to 2 power supplies. Bundle, JL479A, includes 2 power supplies.
- Field-replaceable, hot-swappable, and up to 5 fans. Bundle, JL749A, includes 5 fans.
Physical characteristics
- Dimensions: 17.4in (442mm) (w) x 19.9in (505.5mm) (d) x 1.7in (43.2mm) (h)
- Weight
- Full configuration weight: 20.7lb (9.4kg)
Mounting and enclosure
- Mounts in an EIA standard 19-inch rack or other equipment cabinet (hardware included); horizontal surface mounting only
Reliability
Environment
- Operating: 0°C to 40°C (32°F to 104°F) with 5% to 95%, non-condensing
- Non-Operating: -40°C to 70°C (-40°F to 158°F) with 5% to 95%, non-condensing
- Max Operating Altitude: Up to 10,000ft (3.048 Km)
- Max Non-Operating Altitude: Up to 15,000ft (4.6Km)
- Acoustics
- Sound Power (LWAd) 7.3 Bel
- Sound Pressure (LpAm) (Bystander) 61.1 dB
Electrical characteristics
- Frequency: 50-65 Hz
- AC voltage: 100-127 and 200-240 with either 50 or 60Hz VAC
- Current: 6A (low voltage) - 3A (high voltage)
- Power output: 320 W
Safety
- EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013 • IEC 60950-1:2005 Ed.2; Am 1:2009+A2:2013
- UL 60950-1, CSA 22.2 No 60950-1
- EN 60825-1:2007 / IEC 60825-1:2007 Class 1
Emissions
- EN 55032:2015 / CISPR 32, Class A
- VCCI Class A
- CNS 13438
- AS/NZS - CISPR 32 2015, Class A
- ICES-003 Issue 5
- FCC CFR 47 Part 15:2010, Class A
- EN 50581:2012 (RoHS)
Immunity
- Generic: Directive 2014/35/EU
- EN55024:2010 / CISPR 24
- ESD: EN 61000-4-2
- Radiated: EN 61000-4-3
- EFT/Burst: EN 61000-4-4
- Surge: EN 61000-4-5
- Conducted: EN 61000-4-6
- Power frequency magnetic field: IEC 61000-4-8
- Voltage dips and interruptions: EN 61000-4-11
- Harmonics: EN 61000-3-2, IEC 61000-3-2
- Flicker: EN 61000-3-3, IEC 61000-3-3
Management
- SNMP; RJ-45 serial; USB micro USB console; RJ-45 Ethernet port
