ARUBA JL625A User Guide

QuickSpecs

Aruba 8325 Switch Series

Overview

1

Aruba 8325 Switch Series

Models

Aruba 8325-48Y8C 48p 25G SFP/+/28 8p 100G QSFP+/28 Front-to-Back 6 Fans and 2 PSU Bundle

JL624A

Aruba 8325-48Y8C 48p 25G SFP/+/28 8p 100G QSFP+/28 Back-to-Front 6 Fans and 2 PSU Bundle

JL625A

Aruba 8325-32C 32-port 100G QSFP+/QSFP28 Front-to-Back 6 Fans and 2 Power Supply Bundle

JL626A

Aruba 8325-32C 32-port 100G QSFP+/QSFP28 Back-to-Front 6 Fans and 2 Power Supply Bundle

JL627A

Product overview

The past several decades in networking have been defined by static, closed networking solutions designed for the client- server era.
Aruba is introducing the Aruba 8325 campus core and aggregation switch series, a game
innovative approach to dealing with the demands of the mobile, cloud and IoT era.

The 8325 switch series provides industry
connectivity in a compact 1U form
and data center switching portfolio with an enterprise core and aggregation solution that ensures higher performance and high
uptime.

The 8325 switch series is based
simplifies many critical and complex network tasks, delivers enhanced fault tolerance and facilitates zero service disruption
planned or unplanned control
REST APIs, Python scripting capabilities and the Aruba Network Analytics Engine (NAE).

ArubaOS
Python scripting enables fine
troubleshoot the network easily.

The NAE framework is made up of a time series

The TSDB may be used to store configuration and operational state. Customers can use ArubaOS
capabilities and time series data to write software modules to trouble shoot problems. The
analyze trends, identify anomalies and predict future capacity requirements.

Key features

-changing solution offering a flexible and

-leading line rate 1/10/25GbE (SFP/SFP+/SFP28) and 40/100 GbE (QSFP+/QSFP28)

factor. Together with the modular Aruba 8400 chassis, the 8325 rounds out Aruba’s campus

-CX is based on a modular architecture that allows individual process restartability and upgrades. Its REST APIs and

on the ArubaOS-CX, a modern software system for the enterprise core that automates and

during

-plane events. The key innovations in ArubaOS-CX are its microservices style modular architecture,

-grained programmability of the switch functions; its unique NAE provides the ability to monitor and

database (TSDB) and associated REST APIs.

-CX REST APIs, Python scripting

time series data may also be used to

er

Page

QuickSpecs

Aruba 8325 Switch Series

Overview

2

•

Features and benefits

Product architecture

Performance

Connec

Quality of Service (QoS)

High performance 6.4Tbps with 1,905Mpps throughput

• High availability with redundant power supplies and fans

• Suitable for core/aggregation in the campus or Top of Rack (ToR) in the data center

• ArubaOS-CX enables automation and programmability using built-in REST APIs and Python scripts

• Intelligent monitoring and visibility with Aruba Network Analytics Engine

• Advanced Layer 2/3 feature set includes BGP, OSPF, VRF, and IPv6

• Compact 1U switches with 1/10/25GbE and 40/100GbE connectivity

• ArubaOS-CX.

• Network Analytics Engine

- Modular, Linux based and built with OVSDB to support a database-centric operating system.

- Distributed architecture with separation of data and control planes.

- Includes independent monitoring and restart of individual software modules, and enhanced software process

- Allows individual software modules to be upgraded for higher availability..

A first of a kind built-in framework for monitoring, troubleshooting and capacity plannin

serviceability functions.

• High-speed fully distributed architecture

• Scalable system design

• High-density port connectivity

• Jumbo frames

• Loopback

• Flexible port selection

• Packet storm protection

Provides 6.4Tbps for switching and 2,000MPPS for forwarding. All switching and routing are wire-speed to meet the
demands of bandwidth-intensive applications today and in the future.

Provides investment protection to support future technologies and higher-speed connectivity

tivity

Choice of compact 1U switches include a model with 32 ports of 40G/100GbE (QSFP+/QSFP28) and a model with 48
ports of 1G/10G/25GbE (SFP/SFP+/SFP28) and 6 ports of 40G/100GbE (QSFP+/QSFP28) SFP+ ports support an
optional 10GBASE-T Transceiver.

Allows high-performance backups and disaster-recovery systems; provides a maximum frame size of 9K bytes

Supports internal loopback testing for maintenance purposes and an increase in availability; loopback detection protects
against incorrect cabling or network configurations and can be enabled on a per-port or per- VLAN basis for added
flexibility

Provides connectivity for 10GbE (SFP/SFP+, 10GBASE-T) and 40GbE (QSFP+)

Protects against unknown broadcast, unknown multicast, or unicast storms with user-defined thresholds

• Powerful QoS feature

Supports the following congestion actions: strict priority (SP) queuing and weighted fair queuing

Page

QuickSpecs

Aruba 8325 Switch Series

Overview

3

Resiliency and high availability

Virtual private network (VPN)

Management

r degradation of various services, including monitoring voice. Monitoring is enabled via the NAE for

Restricts access to critical configuration commands; offers multiple privilege levels with password protection; ACLs provide

Uses standard SNMP to monitor essential network functions and supports events, alarms, history, and statistics groups as

• VRRP

Allows groups of two routers to dynamically back each other up to create highly available routed environments

• Unidirectional Link Detection (UDLD)

Monitors link connectivity and shuts down ports at both ends if unidirectional traffic is detected, preventing loops in STP­based networks

• IEEE 802.3ad LACP

Supports up to 47 trunks, each with eight links per trunk; and provides support for static or dynamic groups and a user­selectable hashing algorithm

• Redundant power supplies

Provides N+1 high reliability with hot swappable, redundant power supplies

• Generic Routing Encapsulation (GRE)

Enables tunneling traffic from site to site over a Layer 3 path

• IPSLA

Monitor the network fo
history and for automated gathering of additional information when anomalies are detected.

• Management interface control

Enables or disables each of the following interfaces depending on security preferences: console port, or reset button

• Industry-standard CLI with a hierarchical structure

Reduces training time and expenses, and increases productivity in multivendor installations

• Management security

SNMP access; local and remote Syslog capabilities allow logging of all access

• SNMP v2c/v3

Provides SNMP read and trap support of industry standard Management Information Base (MIB), and private extensions

• Redundant and load-sharing fans, and power supplies

• sFlow (RFC 3176)

Increases total performance and power availability while providing hitless, stateful failover

• Hot swappable power supply and fan modules

Allows replacement of modules without any impact on other modules

• Separate data and control paths

Separates control from services and keeps service processing isolated; increases security and performance

• Provides scalable ASIC-based wire speed network monitoring and accounting with no impact on network performance;

this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning
and real-time network monitoring purposes

• Remote monitoring (RMON)

• TFTP and SFTP support

• Debug and sampler utility

• Network Time Protocol (NTP)

well as a private alarm extension group

Offers different mechanisms for configuration updates; trivial FTP (TFTP) allows bidirectional transfers over a TCP/ IP
network; Secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security

Supports ping and traceroute for IPv4 and IPv6

Synchronizes timekeeping among distributed time servers and clients; keeps timekeeping consistent among all clock­dependent devices within the network. Can serve as the NTP server in a customer network.

Page

QuickSpecs

Aruba 8325 Switch Series

Overview

4

• IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

Layer 2 switching

Layer 3 services

Provides a distributed database that translates domain names and IP addresses, which simplifies network design; supports

Layer 3 routing

Delivers an implementation of the Exterior Gateway Protocol (EGP) utilizing path vectors; uses TCP for enhanced

Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by
network management applications

• Dual flash images

Provides independent primary and secondary operating system files for backup while upgrading

• Multiple configuration files

Stores easily to the flash image

• VLAN

• Supports up to 4,096 port-based or IEEE 802.1Q-based VLANs; and supports MAC-based VLANs, protocol-based

VLANs, and IP-subnet-based VLANs for added flexibility

• VXLAN

Supports static VXLAN. Allows you to manually connect two or more VXLAN tunnel endpoints (VTEP).

• Port mirroring

Duplicates port traffic (ingress and egress) to a local or remote monitoring port; supports 4 mirroring groups, with an
unlimited number of ports per group

• STP

Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and
IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

• Internet Group Management Protocol (IGMP)

Controls and manages the flooding of multicast packets in a Layer 2 network

• Rapid Per-VLAN spanning tree plus (RPVST+)

Allows each VLAN to build a separate spanning tree to improve link bandwidth usage in network environments with
multiple VLANs

• Address Resolution Protocol (ARP)

• IP Directed Broadcast

• Dynamic Host Configuration Protocol (DHCP)

• Domain Name System (DNS)

• Policy Based Routing (PBR)

• Static IPv4 routing

• Open shortest path first (OSPF)

• Border Gateway Protocol 4 (BGP-4)

Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows
detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are
separated by a Layer 2 network

Support directed broadcast on configured network subnets.

DHCP services are offered within a client network to simplify network management. DHCP Relay enables DHCP operation
across subnets

client and server

Enables using a classifier to select traffic that can be forwarded based on policy set by the network administrator.

Provides simple manually configured IPv4 routing

Delivers faster convergence; uses link-state routing Interior Gateway Protocol (IGP), which supports ECMP, NSSA, and
MD5 authentication for increased security and graceful restart for faster failure recovery

Page

QuickSpecs

Aruba 8325 Switch Series

Overview

5

reliability for the route discovery process; reduces bandwidth consumption by advertising only incremental updates;

Provides capability to enable routing of IPv6 multicast traffic. Supports multicast listener discovery (MLD), MLD Snooping,

Security

2 validated cryptography for protection

Multicast

supports extensive policies for increased flexibility; scales to very large networks

• Multiprotocol BGP (MP-BGP) with IPv6 Address Family

Enables sharing of IPv6 routes using BGP and connections to BGP peers using IPv6.

• IPv6 Multicast Routing

and PIM-SM IPv6 Routing.

• 6in4 tunnels

Supports the tunneling of IPv6 traffic in an IPv4 network.

• IP performance optimization

Provides a set of tools to improve the performance of IPv4 networks; includes directed broadcasts, customization of TCP
parameters, support of ICMP error packets, and extensive display capabilities

• Static IPv6 routing

Provides simple manually configured IPv6 routing

• Dual IP stack

Maintains separate stacks for IPv4 and IPv6 to ease the transition from an IPv4-only network to an IPv6-only network
design

• OSPFv3

Provides OSPF support for IPv6

• Equal-Cost Multipath (ECMP)

Enables multiple equal-cost links in a routing environment to increase link redundancy and scale bandwidth

• TAA Compliance

The Aruba 8325, a TAA-compliant product, with the ArubaOS-CX uses FIPS 140­of sensitive information

• Access control list (ACL) Features

Supports powerful ACLs for both IPv4 and IPv6. Supports creation of object groups representing sets of devices like IP
addresses. For instance, IT management devices could be grouped in this way. ACLs can also protect control plane
services such as SSH, SNMP, NTP or web servers.

• Remote Authentication Dial-In User Service (RADIUS)

Eases security access administration by using a password authentication server

• Terminal Access Controller Access-Control System (TACACS+)

Delivers an authentication tool using TCP with encryption of the full authentication request, providing additional security

• Management access security

Aruba OS CX provides for both on-box as well as off- box authentication for administrative access. RADIUS or TACACS+
can be used to provide encrypted user authentication. Additionally, TACACS+ can also provide user authorization services

• Secure shell (SSHv2)

Uses external servers to securely log in to a remote device; with authentication and encryption, it protects against IP
spoofing and plain-text password interception; increases the security of Secure FTP (SFTP) transfers

• IGMP Snooping

Allows multiple VLANs to receive the same IPv4 multicast traffic, lessening network bandwidth demand by reducing
multiple streams to each VLAN

• Protocol Independent Multicast (PIM)

Defines modes of IPv4 multicasting to allow one-to-many and many-to-many transmission of information; supports PIM,
Sparse Mode (SM)

• Internet Group Management Protocol (IGMP)

Utilizes Any-Source Multicast (ASM) to manage IPv4 multicast networks; supports IGMPv1, v2, and v3

Page

QuickSpecs

Aruba 8325 Switch Series

Overview

6

Additional information

Warranty and support

; for details on the software releases

• Green initiative support

Provides support for RoHS and WEEE regulations

• 5-year Warranty

See http://www.hpe.com/networking/warrantysummary
product purchase.

• Software releases

To find software for your product refer to http://www.hpe.com/networking/support
available with your product purchase, refer to http://www.hpe.com/networking/warrantysummary.

for warranty and support information included with your

Page