Future-ready Performance and Compact Modularity
Experience wire‑speed switching and routing with the HPE Aruba CX 5420 series, powered by the latest Gen7 ASICs for extremely low latency, larger packet buffers, and adaptive power efficiency. This compact 6‑slot (4 RU) chassis supports a flexible choice of line cards and redundant, half‑width management modules—perfect for integrating Wi‑Fi 6 and IoT with Smart Rate multi‑gigabit ports and high‑power PoE options.
High Availability and Resilient Design
Designed for continuous operation, the CX 5420 delivers enterprise‑grade uptime through HPE Aruba Virtual Switching Extension (VSX) Live Upgrade for non‑disruptive, fast software updates. The platform supports redundant power supplies and N+1 fan redundancy, ensuring reliable service for critical campus and branch deployments.
Enterprise-grade Security Built In
Protect sensitive traffic with MACsec‑capable line card modules that provide hardware‑based encryption and integrity for traffic across the network. These security capabilities meet the performance and protection needs of small and medium campus and branch networks.
Simplified Operations with Automated Intelligence
AOS‑CX, the modern, database‑driven operating system for the CX 5420 series, automates complex networking tasks and reduces operational overhead. Built‑in analytics and the Network Analytics Engine (NAE) provide real‑time monitoring and automated event analysis to speed troubleshooting and improve network health.
Rich Telemetry and Automation Tools
Streamline management with REST APIs, Python and CLI agents for advanced telemetry and automation. The integrated Time Series Database (TSDB) stores configuration and operational state data to accelerate fault diagnosis and historical analysis.
Network-wide Configuration and Policy Management
Switch Multi‑Edit Software enables safe, automated, network‑wide changes with search, edit, validation, deployment and audit capabilities to maintain policy conformance. The CX Mobile App simplifies initial setup, stacking and on‑the‑go management, and switch data can be imported into Multi‑Edit for continuous configuration validation.
Secure, Scalable Segmentation
Dynamic Segmentation enforces user, device and application‑aware policies across wired and wireless infrastructures, delivering role‑based access control, automated device profiling and Layer‑7 firewall capabilities for improved visibility and protection.
Flexible VXLAN and Edge Options for Scale
Design scalable networks with VXLAN overlay fabric and Group‑Based Policy tagging to stretch VLANs and subnets across the network while preserving source roles. Extended‑Edge VTEP (EE VTEP) static VXLAN support enables flexible L2 fabric designs, consistent architecture and role‑to‑role security enforcement across distributed environments.
