Interior Gateway Protocol (IGP), which supports ECMP,
NSSA, and MD5 authentication for increased security and
graceful restart for faster failure recovery
• Border Gateway Protocol 4 (BGP-4)
Delivers an implementation of the Exterior Gateway
Protocol (EGP) utilizing path vectors; uses TCP for
enhanced reliability for the route discovery process;
reduces bandwidth consumption by advertising only
incremental updates; supports extensive policies for
increased exibility; scales to very large networks
• Multiprotocol BGP (MP-BGP) with IPv6 Address Family
Enables sharing of IPv6 routes using BGP and connections
to BGP peers using IPv6
• 6in4 tunnels
Supports the tunneling of IPv6 trac in an IPv4 network
• IP performance optimization
Provides a set of tools to improve the performance of IPv4
networks; includes directed broadcasts, customization
of TCP parameters, support of ICMP error packets, and
extensive display capabilities
• Static IPv6 routing
Provides simple manually congured IPv6 routing
• Dual IP stack
Maintains separate stacks for IPv4 and IPv6 to ease the
transition from an IPv4-only network to an IPv6-only
network design
• OSPFv3
Provides OSPF support for IPv6
• Equal-Cost Multipath (ECMP)
Enables multiple equal-cost links in a routing environment
to increase link redundancy and scale bandwidth
• Generic Routing Encapsulation (GRE)
Enables tunneling trac from site to site over a
Layer 3 path
Security
• TAA Compliance
The Aruba CX 8325 with AOS-CX, a TAA compliant product,
uses FIPS 140-2 validated cryptography for protection of
sensitive information
DATA SHEET
ARUBA CX 8325 SWITCH SERIES
• Access control list (ACL) Features
- Supports powerful ACLs for both IPv4 and IPv6. Supports
creation of object groups representing sets of devices
like IP addresses. For instance, IT management devices
could be grouped in this way
- ACLs can also protect control plane services such as
SSH, SNMP, NTP or web servers
• Remote Authentication Dial-In User Service (RADIUS)
Eases security access administration by using a password
authentication server
• Terminal Access Controller Access-Control System
(TACACS+)
Delivers an authentication tool using TCP with
encryption of the full authentication request, providing
additional security
• Management access security
- AOS-CX provides for both on-box as well as
o- box authentication for administrative access.
RADIUS or TACACS+ can be used to provide encrypted
user authentication
- Additionally, TACACS+ can also provide user
authorization services
• Secure shell (SSHv2)
Uses external servers to securely log in to a remote
device; with authentication and encryption, it protects
against IP spoong and plain-text password interception;
increases the security of Secure FTP (SFTP) transfers
Multicast
• Internet Group Management Protocol (IGMP)
Enables establishing multicast group memberships in IPv4
networks; supports IGMPv1, v2, and v3
• Anycast RP
Two or more RPs congured with same /32 Host IP
address on loopback interfaces. All the downstream
routers will be congured to point to Anycast RP address
for multicast routes. Device will automatically select the
closest RP for each source and receiver. If equal costs
routes exist, the process of registering the sources will be
shared equally by all the RPs in the network.
• MSDP Mesh Groups
MSDP used for Anycast RP is an intradomain feature
that provides redundancy and load-sharing capabilities.
When MSDP mesh groups are used, SA messages are not
ooded to other mesh group peers. When MSDP peer in
group receives SA message from another MSDP peer in
the group, it assumes that this SA message was sent to all
the other MSDP peers in the group. It also eliminates RPF
checks on arriving SA messages. With MSDP mesh group
congured, SA messages are always accepted from mesh
group peer
• PIM-Dense Mode
Floods multicast trac to every corner of the network
(push-model). Method is for delivering data to receivers
without receivers requesting the data. Can be ecient in
certain deployments in which there are active receivers
on every subnet in the network. Branches without
downstream receivers are pruned from the forwarding
trees.
• FastLeave (FL) and Forced-FastLeave (FFL)
for IGMP FL and FFL for IGMP/MLD speed up the process
of blocking unnecessary Multicast trac to a switch port
that is connected to end nodes. They help to eliminate the
CPU overhead of having to generate an IGMP/MLD Group-
Specic Query message.
• Support for Microsoft Network Load Balancer (NLB)
for server applications
• Multicast Listener Discovery (MLD)
Enable discovery of IPv6 multicast listeners; supports
MLDv1 and v2
• Multicast Service Delivery Protocol (MSDP)
Eciently routes multicast trac through core networks
• IGMP/MLD Snooping
Prevent ooding of multicast trac to non-listening ports
• Protocol Independent Multicast (PIM)
Protocol Independent Multicast for IPv4 and IPv6 supports
one-to-many and many-to-many media casting use cases
such as IPTV over IPv4 and IPv6 networks. Support for PIM
Sparse Mode (PIM-SM, IPv4 and IPv6)
Additional information
• Green initiative support
Provides support for RoHS (EN 50581:2012) regulations
Warranty, services and support
• Limited Lifetime Warranty
See https://www.arubanetworks.com/support-
services/product-warranties/ for warranty and support
information included with your product purchase.
• For Software Releases and Documentation, refer to
https://asp.arubanetworks.com/downloads
• For support and services information, visit https://www.
arubanetworks.com/support-services/arubacare/
SPECIFICATIONS
DATA SHEET
ARUBA CX 8325 SWITCH SERIES
JL624A: 8325-48Y8C,
6 fans, front-to-back,
2 power supplies
Supports 48 ports of
1G/10G/25GbE
(SFP/SFP+/SFP28) and
8 ports of 40G/100GbE
(QSFP+/QSFP28) SFP+
ports (with an optional
10GBASE-T transceiver)
JL625A: 8325-48Y8C,
6 fans, back-to-front,
2 power supplies
Supports 48 ports of
1G/10G/25GbE
(SFP/SFP+/SFP28) and
8 ports of 40G/100GbE
(QSFP+/QSFP28) SFP+
ports (with an optional
10GBASE-T transceiver)
JL626A: 8325-32C,
6 fans, front-to-back,
2 power supplies
Supports 32 ports
of 40G/100GbE
(QSFP+/QSFP28)
JL627A: 8325-32C,
6 fans, back-to-front,
2 power supplies
Supports 32 ports
of 40G/100GbE
(QSFP+/QSFP28)
Power suppliesField-replaceable, hot-swappable, and up to 2 power supplies.
Bundles (JL624A, JL625A, JL626A, and JL627A) include 2 power supplies.
FansField-replaceable, hot-swappable, and up to 6 fans. Bundles (JL624A, JL625A, JL626A, and JL627A) include 6 fans.
Physical characteristics
Dimensions(H) 4.35 cm x
(W) 43.84 cm x
(D) 53.6 cm
(1.71” x 17.26” x 21.1”)
(H) 4.35 cm x
(W) 43.84 cm x
(D) 53.6 cm
(1.71” x 17.26” x 21.1”)
(H) 4.395 cm x
(W) 44.25 cm x
(D) 47.3 cm
(1.73” x 17.42” x 18.62”)
(H) 4.395 cm x
(W) 44.25 cm x
(D) 47.3 cm
(1.73” x 17.42” x 18.62”)
Full conguration weight10 kg (22.05 lb)10 kg (22.05 lb)10.87 kg (23.96 lb)10.87 kg (23.96 lb)
Additional specications
CPU2.2GHz
Memory, Drive and Flash16GB RAM, 64GB SSD, 8GB Flash
Packet Buer32MB
Performance*
Switching Capacity 6.4Tbps
IPv4 Host Table 120,000
IPv6 Host Table52,000
IPv4 Unicast Routes 131,072
IPv6 Unicast Routes 32,732
MAC Table Size 98,304
IGMP Groups 4,094
MLD Groups 4,094
IPv4 Multicast Routes4,094
IPv6 Multicast Routes 4,094
Environment
Operating temperature0°C to 40°C (32°F to 104°F) up to 3.0 km (10,000 ft.)
Operating relative humidity5% to 95% at 40°C (104°F) non-condensing
Non-Operating-40°C to 70°C (-40°F to 158°F) up to 4.6 km (15,000 ft.)
Non-Operating/Storage
5% to 95% @ 65°C (149°F)
relative humidity
Max operating altitudeUp to 10,000ft (3.048 km)
Max non-operatingUp to 15,000ft (4.6km)
Primary airowFront-to-Back or Back-to-Front
* Some of these scaling numbers assume shared tables.
SPECIFICATIONS
DATA SHEET
ARUBA CX 8325 SWITCH SERIES
JL624A: 8325-48Y8C,
6 fans, front-to-back,
2 power supplies
Electrical characteristics
Frequency50-60Hz
AC Voltage100-240 volts
Current6A (low voltage) – 3A (high voltage)
Power consumptionMax: 550WMax: 550WMax: 550WMax: 550W
Safety
EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
IEC 60950-1:2005 Ed.2; Am 1:2009+A2:2013
UL 60950-1, CSA 22.2 No 60950-1
EN 60825-1:2007/IEC 60825-1:2007 Class 1
EMC
EN 55032:2012, Class A
EN 55024:2010
EN 61000-3-2:2014, Class A
EN 61000-3-3:2013
FCC CFR 47 Part 15:2010, Class A
VCCI Class A
CNS 13438
Lasers
EN60825-1:2014/IEC 60825-1: 2014 Class 1
Class 1 Laser Products/Laser Klasse 1
Management
SNMP
RJ-45 serial
USB micro USB console
RJ-45 Ethernet port
Mounting and enclosure
Mounts in an EIA standard 19-inch rack or other equipment cabinet; horizontal surface mounting only; order
2-post or 4-post mounting kit separately
JL625A: 8325-48Y8C,
6 fans, back-to-front,
2 power supplies
JL626A: 8325-32C,
6 fans, front-to-back,
2 power supplies
JL627A: 8325-32C,
6 fans, back-to-front,
2 power supplies
DATA SHEET
ARUBA CX 8325 SWITCH SERIES
STANDARDS AND PROTOCOLS
The following standards and protocols are supported.
• IEEE 802.1AB-2009
• IEEE 802.1ak-2007
• IEEE 802.1t-2001
• IEEE 802.1AX-2008 Link Aggregation
• IEEE 802.1p Trac Class Expediting and Dynamic
Multicast Filtering
• IEEE 802.1Q VLANs
• IEEE 802.1s Multiple Spanning Trees
• IEEE 802.1w Rapid Reconguration of Spanning Tree
• IEEE 802.3ad Link Aggregation Control Protocol (LACP)
• IEEE 802.3x Flow Control
• IEEE 802.3z Gigabit Ethernet
• IEEE 802.3ae 10 Gigabit Ethernet
• IEEE 802.3by 25 Gigabit Ethernet
• IEEE 802.3ba 40 and 100 Gigabit Ethernet Architecture
• RFC 768 UDP
• RFC 791 IP
• RFC 792 ICMP
• RFC 793 TCP
• RFC 826 ARP
• RFC 768 User Datagram Protocol
• RFC 813 Window and Acknowledgement Strategy in TCP
• RFC 815 IP datagram reassembly algorithms
• RFC 879 TCP maximum segment size and related topics
• RFC 896 Congestion control in IP/TCP internetworks
• RFC 917 Internet subnets
• RFC 919 Broadcasting Internet Datagrams
• RFC 922 Broadcasting Internet Datagrams in the Presence
of Subnets (IP_BROAD)
• RFC 925 Multi-LAN address resolution
• RFC 1215 Convention for dening traps for use with
theSNMP
• RFC 1256 ICMP Router Discovery Messages
• RFC 1393 Traceroute Using an IP Option
• RFC 1591 Domain Name System Structure and Delegation
• RFC 1657 Denitions of Managed Objects for BGP-4
usingSMIv2
• RFC 1772 Application of the Border Gateway Protocol in
the Internet
• RFC 1981 Path MTU Discovery for IP version 6
• RFC 1997 BGP Communities Attribute
• RFC 1998 An Application of the BGP Community Attribute
in Multi-home Routing
• RFC 2385 Protection of BGP Sessions via the TCP MD5
Signature Option
• RFC 2401 Security Architecture for the Internet Protocol
• RFC 2402 IP Authentication Header
• RFC 2406 IP Encapsulating Security Payload (ESP)
• RFC 2460 Internet Protocol, Version 6 (IPv6) Specication
• RFC 2545 Use of BGP-4 Multiprotocol Extensions for IPv6
Inter-Domain Routing
• RFC 2710 Multicast Listener Discovery (MLD) for IPv6
• RFC 2787 Denitions of Managed Objects for the Virtual
Router Redundancy Protocol
• RFC 2918 Route Refresh Capability for BGP-4
• RFC 2934 Protocol Independent Multicast MIB for IPv4
• RFC 3137 OSPF Stub Router Advertisement
• RFC 3176 InMon Corporation’s sFlow: A Method for
Monitoring Trac in Switched and Routed Networks
• RFC 3509 Alternative Implementations of OSPF Area
Border Routers
• RFC 3623 Graceful OSPF Restart
• RFC 3810 Multicast Listener Discovery Version 2 (MLDv2)
for IPv6
• RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and
Routers
• RFC 4251 The Secure Shell (SSH) Protocol
• RFC 4271 A Border Gateway Protocol 4 (BGP-4)
• RFC 4273 Denitions of Managed Objects for BGP-4
• RFC 4291 IP Version 6 Addressing Architecture
• RFC 4292 IP Forwarding Table MIB
• RFC 4293 Management Information Base for the Internet
Protocol (IP)
• RFC 4360 BGP Extended Communities Attribute
• RFC 4486 Subcodes for BGP Cease Notication Message
• RFC 4552 Authentication/Condentiality for OSPFv3
• RFC 4724 Graceful Restart Mechanism for BGP
• RFC 4760 Multiprotocol Extensions for BGP-4
• RFC 4940 IANA Considerations for OSPF
• RFC 5187 OSPFv3 Graceful Restart
• RFC 5701 IPv6 Address Specic BGP Extended Community
Attribute
• RFC 6987 OSPF Stub Router Advertisement
• RFC 7047 The Open vSwitch Database Management
Protocol
• RFC 7059 A Comparison of IPv6-over-IPv4 Tunnel
Mechanisms
• RFC 7313 Enhanced Route Refresh Capability for BGP-4
• RFC 8201 Path MTU Discovery for IP version 6
DATA SHEET
ARUBA CX 8325 SWITCH SERIES
BUNDLES AND ACCESSORIES
Aruba CX 8325 Bundles
Note: Mounting kit and console cable are not included in
bundles. Order separately. Mounting kit is required.
• JL624A Aruba 8325-48Y8C Bundle includes: 48 x 25Gb
ports (SFP/+/28), 8 x 100Gb ports (QSFP+/28),
6 Front-to-Back Fans and 2 PSU’s
• JL625A Aruba 8325-48Y8C Bundle includes: 48 x 25Gb
ports (SFP/+/28), 8 x 100Gb ports (QSFP+/28),
6 Back-to-Front Fans and 2 PSU’s
• JL626A Aruba 8325-32C Bundle includes: 32 x 100Gb
ports (QSFP+/QSFP28), 6 Front-to-Back Fans and 2 PSU’s
• JL627A Aruba 8325-32C Bundle includes: 32 x 100Gb
ports (QSFP+/QSFP28), 6 Back-to-Front Fans, and 2 PSU’s
• Aruba 100G QSFP28 to QSFP28 1m Direct Attach Copper
Cable (R0Z25A)
• Aruba 100G QSFP28 to QSFP28 3m Direct Attach Copper
Cable (JL307A)
• Aruba 100G QSFP28 to QSFP28 5m Direct Attach Copper
Cable (R0Z26A)
Note: 8325 Series Switches do not support the use of 10G
LRM transceivers ( J9152D), nor 10G 7-meter Direct Attach
Copper Cables ( J9285D)
DATA SHEET
ARUBA CX 8325 SWITCH SERIES
1
Consult the ArubaOS-Switch and AOS-CX Transceiver Guide in the Aruba Support Portal for the minimum required software releases to support these transceivers.
2
10G LR support only for Revision E part, J9151E (Note: Do not use J9151D)
3
Maximum of twelve (12) 10GBASE-T (JL563A) in 8325-48Y8C models only allowed in ports 1-2, 4-5, 7-8, 10-11, 13-14, 16-17 (Not applicable to 8325-32C models)
4
Maximum of thir ty-two (32) 1G RJ45 ( J8177D) in 8325-48Y8C models only allowed in top t wo rows, not the third row (Not applicable to 8325 -32C models)