Aruba 9300-32D 32P Back-to-Front Switch Bundle (R9A30A)
High Performance Enterprise Data Center Switch

Key Features:

• High performance 25.6Tbps with 5Bpps
• High Density 32 x 400GbE connectivity in 1RU form factor
• High availability with industry-leading VSX redundancy, and redundant power supplies and fans
• Designed for Spine, Core/Aggregation, Top of Rack or Leaf, or End of Row in the data center
• AOS-CX automation and programmability using builtin REST APIs and Python scripts
• Advanced Layer 2/3 feature set includes BGP, OSPF, VRF-Lite, and IPv6
• Dynamic VXLAN with BGP-EVPN for deep segmentation in data center and campus networks
• Intelligent monitoring, visibility, and remediation with Aruba Network Analytics Engine
• HPE Storage Networking Optimized
• Aruba NetEdit support for automated configuration and verification

Product Differentiators:

• AOS-CX - a modern software system
• Aruba Central, Cloud-based network management
• Aruba Network Analytics Engine
• Aruba NetEdit – automated switch configuration and management
• HPE Ethernet Storage Fabric Optimized
• Aruba Virtual Switching Extension

Product Capabilities

Performance

High-speed fully distributed architecture

• Provides 25.6Tbps for bidirectional switching and 5Bpps for forwarding. All switching and routing are wire-speed to meet the demands of bandwidth-intensive applications today and in the future

Scalable system design

• Provides investment protection to support future technologies and higher-speed connectivity

---

Connectivity

High density port options

Choice of compact high density port 1U switches with airflow direction flexibility include model with:

• 32-ports of 100GbE, 200GbE or 400GbE. 400 Gbps Ports can be configured as 4x100GbE, 2x200GbE, or 1x400GbE.

Jumbo frames

• Allows high-performance backups and disaster-recovery systems; supports a maximum frame size of 9K bytes

Loopback

• Supports internal loopback testing for maintenance purposes and increased availability; loopback detection protects against incorrect cabling or network configurations and can be enabled on a per-port or perVLAN basis for added flexibility

Loopback

• Supports internal loopback testing for maintenance purposes and increased availability. Loopback detection protects against incorrect cabling or network configurations and can be enabled on a per-port or perVLAN basis for added flexibility.

Packet storm protection

• Protects against unknown broadcast, multicast, or unicast storms with user-defined thresholds

---

Quality of Service (QoS)

Strict priority (SP) queuing and Deficit Weighted Round Robin (DWRR)

• Enable congestion avoidance

Data Center Bridging (DCB)

• Supports lossless Ethernet networking standards to eliminate packet loss due to queue overflow
• Priority Flow Control (PFC) 7 priorities per port
• Enhanced Transmission Service (ETS)
• DCB Exchange Protocol (Pre-standard LLDP DCBX IEEE 1.01 version)

Flow-Control Guard

• Prevents accumulation of excessive congestion with periodic flushing. Avoids packets buffering for an extended time period.

ECN with slope

• Marks packets as ECN-CE (Congestion Experienced. Helps TCP to reduce receive window size during congestion

---

Advanced lossless pool configuration

Dynamic pool configuration

• Enables lossless pool configuration without switch reboot

---

Global buffering statistics

Storage Solution Support

• iSCSI, Lossless iSCSI, RDMA over Converged Ethernet version 2 (RoCE v1 and v2) and Non-Volatile Memory Express (NVMe over Fabrics)

---

Resiliency and high availability

Redundant and load-sharing fans and power supplies

• Increases total performance and power availability

Hot swappable power supply and fan modules

• Allows replacement of accessory modules without any operational impact on other modules or the switch operations

Separate data and control paths

• Separates control from services and keeps service processing isolated; increases security and performance

Aruba Virtual Switching Extension (VSX)

• VSX enables a distributed and redundant architecture by deploying two switches with each switch maintaining independent control yet staying synchronized during upgrades or failover. Also supports upgrades during live operation.

Virtual Router Redundancy Protocol (VRRP)

• VRRP allows a group of switches to dynamically back each other up to create highly available routed environments
• It also supports route-leaking to/from default VRF

Bidirectional Forward Detection (BFD)

• Enable sub-second failure detection for rapid routing protocol re-balancing

Ethernet Ring Protection Switching (ERPS)

• Supports rapid protection and recovery in a ring topology.

Unidirectional Link Detection (UDLD)

• Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP-based networks

IEEE 802.3ad LACP

• Supports up to 128 LAGs, with up to 16 members per LAG (32 for a VSX pair), with a user-selectable L1- 4 hashing algorithm

---

Management

In addition to the Aruba CX Mobile App, Aruba NetEdit and Aruba Network Analytics Engine, the Aruba CX 9300 series offers the following:

Built-in programmable and easy to use REST API interface

Industry-standard CLI with a hierarchical structure

• Reduces training time and expenses, and increases productivity in multivendor installations

Management security

• Restricts access to critical configuration commands; offers multiple privilege levels with password protection; ACLs provide SNMP access; local and remote Syslog capabilities allow logging of all access.
• Private VLAN (PVLAN) provides traffic isolation between users on the same VLAN. Typically a switch port can only communicate with other ports in the same community and/or an uplink port, regardless of VLAN ID or destination MAC address. This extends network security by restricting peer-peer communication to prevent variety of malicious attacks.

IPSLA

• Monitors the network for degradation of various services, including voice.
• Monitoring is enabled via the NAE for history and for immediate automated gathering of additional information when anomalies are detected.

SNMP v2c/v3

• Provides SNMP read and trap support of industry standard Management Information Base (MIB), and private extensions
• It supports STP TCN Trap, STP New Root and SNMP-WriteSet-Description on Interface.

sFlow® (RFC 3176)

• Provides scalable ASIC-based wire speed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes.

Remote monitoring (RMON)

• Uses standard SNMP to monitor essential network functions and supports events, alarms, history, and statistics groups as well as a private alarm extension group

Debug and sampler utility

• Supports ping and traceroute for IPv4 and IPv6

Network Time Protocol (NTP)

• Synchronizes timekeeping among distributed time servers and clients; keeps timekeeping consistent among all clockdependent devices within the network
• Can serve as the NTP server in a customer network

Dual flash images

• Provides independent primary and secondary operating system files for backup while upgrading

Multiple configuration files

• Stores files easily to the flash image.

---

Security

TAA Compliance

• TAA compliant product, uses FIPS 140-2 validated cryptography for protection of sensitive information

Access control list (ACL) Features

• Supports powerful ACLs for both IPv4 and IPv6. Supports creation of object groups representing sets of devices like IP addresses. For instance, IT management devices could be grouped in this way
• ACLs can also protect control plane services such as SSH, SNMP, NTP or web servers.

Enrollment over Secure Transport (EST)

• Enables secure certificate enrollment, allowing for easier enterprise management of PKI.

Remote Authentication Dial-In User Service (RADIUS)

• Eases security access administration by using a password authentication server

Terminal Access Controller Access-Control System (TACACS+)

• Delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security

RadSec

• Enable RADIUS authentication and accounting data to be passed safely and reliably across insecure networks such as the internet

Management access security

• AOS-CX provides for both on-box as well as off- box authentication for administrative access. RADIUS or TACACS+ can be used to provide encrypted user authentication.
• Additionally, TACACS+ can also provide user authorization services

Secure shell (SSHv2)

• Uses external servers to securely log in to a remote device; with authentication and encryption, it protects against IP spoofing and plain-text password interception; increases the security of Secure FTP (SFTP) transfers

Specifications:

CX9300 Series Specifications
	R9A29A Aruba 9300-32D 32p 100/200/400G QSFP-DD 2p 10G SFP+ Front-to-Back 6 Fans 2 AC PSU Bundle	R9A30A Aruba 9300-32D 32p 100/200/400G QSFP-DD 2p 10G SFP+ Back-to-Front 6 Fans 2 AC PSU Bundle
Description	The Aruba CX 9300-32D is a next-generation 25.6Tbps, 1U fixed configuration switch supporting 32-ports of 100GbE, 200GbE or 400GbE. The switch is an ideal solution for flexible, cost-effective, high-density networking for server, storage, and intra-fabric connectivity. This solution helps protect enterprises investment as they transition server farms from 10GbE and 25GbE to 100GbE/400GbE EVPN-VXLAN spine configurations at reduced power and a smaller footprint.
Power supplies	2 redundant power supplies, field-replaceable, hot-swappable
Fans	6 redundant fans, field-replaceable, hot-swappable
Physical characteristics
Dimensions	17.26″ x 23.23″ x 1.71″ (43.84 x 59 x 4.35 cm)
Full configuration weight	26.12 lb (11.85 kg)
Additional Specifications
CPU	x86
Memory, Drive and Flash	128GB m.2 SSD, 4GB mSATA, 16MB SPI Flash, 16GB x2 SODIMM
Packet Buffer	132MB
Performance1
Switching Capacity	25.6Tbps
IPv4 Host Table	163,840
IPv6 Host Table	81,920
IPv4 Unicast Routes	65,536 (1,269,760 Unidimensional for Spine)
IPv6 Unicast Routes	32,768 (624,640 Unidimensional for Spine)
MAC Table Size	81,920 (32,768 Unidimensional for Spine)
IGMP Groups	8,192
MLD Groups	8,192
IPv4 Multicast Routes	8,192
IPv6 Multicast Routes	4,096
Environment
Operating Temperature	32°F to 113°F (0°C to 45°C) at sea level. Derate -1°C for every 1,000 ft to 10,000 ft. (3.0 km)	32°F to 95°F (0°C to 35°C) at sea level. Derate -1°C for every 1,000 ft to 10,000 ft. (3.0 km)
Non-Operating / Storage Temperature	-40°C to 70°C (-40°F to 158°F) up to 4.6 km (15,000 ft.)
Operating Relative Humidity	15% to 95% @ 113°F (45°C) non-condensing	15% to 95% @ 95°F (35°C) non-condensing
Non-Operating/Storage Relative Humidity	15% to 90% @ 158°F (70°C) non-condensing
Max Operating Altitude	Up to 10,000ft (3.048 km)
Max Non-Operating Altitude	Up to 15,000ft (4.6km)
Primary Airflow	Front-to-Back	Back-to-Front
Acoustic 2	LWad = 8.1 Bel LpAm (Bystander) = 61 dB	LWad = 8.3 Bel LpAm (Bystander) = 62 dB
Electrical Characteristics
Frequency	50-60Hz
AC Voltage	100-127 / 220-240 VAC 200-240V required to support 8-32 port production configuration
Current	12A / 8A
Power consumption (230VAC)	100% Traffic Rate: 675W; Idle: 210W	100% Traffic Rate: 688W; Idle: 221W
Safety
	Safety-Worldwide IEC 60950-1:2005 (Second Edition) + Am 1:2009 + Am 2: 2013 IEC 62368-1:2014 (Second Edition) IEC 62368-1:2018 (Third Edition) Safety-North America UL 62368-1 3rd, Ed. CAN/CSA-C22.2 N. 62368-1.19 3rd. Ed. Environmental Drop, Vibration, Shock: IEC 17025, ISTA 3C
EMC
	Immunity EN55024:2015 / CISPR 24:2015 ESD: EN 61000-4-2 Radiated: EN 61000-4-3 EFT/Burst: EN 61000-4-4 Surge: EN 61000-4-5 Conducted: EN 61000-4-6 Power frequency magnetic field: IEC 61000-4-8 Voltage dips and interruptions: EN 61000-4-11 Harmonics: EN 61000-3-2, IEC 61000-3-2 Flicker: EN 61000-3-3, IEC 61000-3-3 Emissions EN 55032:2015 / CISPR 32:2015, Class A VCCI-32:2016 Class A CNS 13483 AS/NZS ICES-003 Issue 5 FCC CFR 47 Part 15:2010, Class A RoHS-6 Compliant (EN 50581:2012)
Lasers
	EN60825-1:2014/IEC 60825-1: 2014 Class 1 Class 1 Laser Products/Laser Klasse 1
Management
	SNMP REST RJ-45 serial Micro USB console port RJ-45 OOBM Port
Mounting and Enclosure
	Mounts in an EIA standard 19-inch rack or other equipment cabinet; horizontal surface mounting only; 2-post Rack Mount Kit included with switch, optional 4-post rack mount kit must be ordered separately - JL483C.

Note:
1. Some of these scaling numbers assume shared tables and uni-dimensional traffic.
2. Values presented are the Declared A-Weighted Sound Power Level (LWAd) and the mean Bystander A-Weighted Sound Pressure Level (LpAm).

Documentation:

Download the Aruba CX 9300 Series Datasheet (.PDF)