Customer Planning and Design

Bandwidth and Latency Considerations

For a cloud-based solution, bandwidth and latency requirements must be considered during the initial network design phase.
- As a best practice, choose a WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance. solution that offers high availability, adequate bandwidth, and reasonable latency to ensure a better user experience.
Bandwidth utilization varies across platforms and may average between 3 KBps Kilobytes per second. or higher per device. Factors impacting bandwidth utilization include, but are not limited to, device management overhead, features, telemetry data, and number of connected clients.
- For low bandwidth sites, contact your account manager or sales engineer to determine if there are options to reduce network management overhead.
Latency Latency is an expression of time that a data packet takes to travel from one designated point to another. Network latency can be measured by determining the round-trip time (RTT) for a packet of data to travel to a destination and back again. requirements are 500 milliseconds or less.
- High latency environments can pose challenges for cloud-dependent services and device management.
- An ISPs Service Level Agreement (SLA) comprises availability, latency, and jitter with internet circuits commonly classified as "Best Effort". For best WAN performance, it is recommended to inquire about the ISPs SLA.

Survivability

What happens if my devices lose connectivity to HPE Aruba Networking Central? Will this cause a network outage?

HPE Aruba Networking devices will continue operating even if there is a communication failure to the cloud. However, during this period, cloud-dependent services and UI device management (configuration, monitoring) will be unavailable until communication is restored to HPE Aruba Networking Central.
Devices will maintain last known configuration.
In an effort to maintain resiliency, HPE Aruba Networking offers cloud survivability features for certain cloud-dependent services. For more information, contact your account manager or sales engineer.

HPE Aruba Networking CentralCloud Native vs HPE Aruba Networking Central On-Premises

List the feature comparison between HPE Aruba Networking CentralCloud Native and HPE Aruba Networking Central On-Premises (COP)?

The feature comparison between COP and Central is shown in the following table:

Table 1: Feature Comparison between HPE Aruba Networking Central On-Premisesand HPE Aruba Networking Central

Category	Feature	HPE Aruba Networking Central On-Premises	HPE Aruba Networking Central
Operation	Scale	Up to 25000 devices per COP instance. Scale Limits: 1 Appliance - 2k Devices 3 Appliances - 8k Devices 5 Appliances - 16k Devices 7 Appliances - 25k Devices	Unlimited
	Single pane of Glass view of the network	ü	ü
	Available as VM Virtual Machine. A VM is an emulation of a computer system. VMs are based on computer architectures and provide functionality of a physical computer.	Ï	N/A
	Redundancy Model	In-built redundancy Can tolerate 1 Appliance Failure (needs at least 3 Appliances)	In-built redundancy (Cloud level availability)
	No Data Loss after Failover	ü	ü
	Airgapped Operation (No permanent Internet connectivity needed)	ü	Ï
		Note: Airgapped Operation is a roadmap item in COP	Ï
	MSP Managed Service Provider. The Managed Service Provider (MSP) mode is a multi-tenant operational mode that Aruba Central accounts can be converted into, provided these accounts have subscribed to the Aruba Central app. Mode	Ï	ü
	System upgrade via UI	ü	N/A
	System upgrade via UI	ü	Note: HPE Aruba Networking handles Central updates.
	System Performance Monitoring	ü	N/A
	System Performance Monitoring	ü	Note: HPE Aruba Networking monitors Central performance.
	SAML Security Assertion Markup Language. SAML is an XML-based framework for communicating user authentication, entitlement, and attribute information. SAML enables single sign-on by allowing users to authenticate at an identity provider and then access service providers without additional authentication. based Auth/SSO Single Sign-On. SSO is an access-control property that allows the users to log in once to access multiple related, but independent applications or systems to which they have privileges. The process authenticates the user across all allowed resources during their session, eliminating additional login prompts.	ü	ü
	RADIUS Remote Authentication Dial-In User Service. An Industry-standard network access protocol for remote authentication. It allows authentication, authorization, and accounting of remote users who want to access network resources. support	ü	Ï
	TACACS Terminal Access Controller Access Control System. TACACS is a family of protocols that handles remote authentication and related services for network access control through a centralized server. support	Ï	Ï
	LDAP Lightweight Directory Access Protocol. LDAP is a communication protocol that provides the ability to access and maintain distributed directory information services over a network. support	Ï	Ï
	System Backup and Restore	ü	N/A
	Who pays running costs? (Hardware maintenance, VM Licensing, electricity, cooling, infrastructure, administration)	Customer	HPE Aruba Networking
	1 yr Data Retention	Ï	Ï
	1 yr Data Retention	Note: COP & Central store data for three months. Client summary report works up to a year. There are also mechanisms to export the data out of NMS Network Management System. NMS is a set of hardware and/or software tools that allow an IT professional to supervise the individual components of a network within a larger network management framework. using webhooks, APIs Application Programming Interface. Refers to a set of functions, procedures, protocols, and tools that enable users to build application software., and reports.
	GDPR Compliance	ü	ü
	GDPR Compliance	Note: For more information, see Data Privacy.
Supported Devices	IAP Management & Monitoring	ü	ü
	AOS-S Switches Management & Monitoring	ü	ü
	AOS-CX Switches Management & Monitoring	ü	ü
	AOS-CX Switches Management & Monitoring	Note: CX management is Multi Editor piece of NetEdit in Central & COP.
	AOS 6 & 8 Monitoring	ü	Ï
	AOS 10 Support	Roadmap H2CY23	ü
	Third Party Monitoring (via SNMP Simple Network Management Protocol. SNMP is a TCP/IP standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more. It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention. )	Long term Roadmap for 3rd party switches	Ï
	Integration with UXI User Experience Insight. The Aruba UXI devices support Wi-Fi Easy Connect and can be deployed and onboarded easily and securely.	ü	ü
	HPE Aruba Networking HPE Aruba Networking EdgeConnect SD-Branch Support	Ï	ü
	ClearPass ClearPass is an access management system for creating and enforcing policies across a network to all devices and applications. The ClearPass integrated platform includes applications such as Policy Manager, Guest, Onboard, OnGuard, Insight, Profile, QuickConnect, and so on. Device Insight	Ï	ü
API	API GW - REST Representational State Transfer. REST is a simple and stateless architecture that the web services use for providing interoperability between computer systems on the Internet. In a RESTful web service, requests made to the URI of a resource will elicit a response that may be in XML, HTML, JSON or some other defined format. Based	Available Note: API Support in COP needs at least 3-Appliance implementation.	ü
	Webhooks
	Streaming API
AIOps	AI Artificial intelligence (AI) is the simulation of human intelligence processes by machines, especially computer systems. AI reduces trouble tickets by identifying the network entity that is facing problems through event correlation and root cause analysis. Insights related to Connectivity	Available (see comments) Note: AI Insight in COP is called AI Connectivity, This needs at least 5 Appliances	ü
	Comparing customer environment with other similar environments (Class Baseline)	Ï	ü
	Full AI Insight Feature-Set	Ï	ü
	Full AI Insight Feature-Set	Note: Some AI Insights might require Advanced Subscription.
	AI Search	Global Search Available Note: Global search for COP (IP, MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. , NAME only)	ü
	AI Assist	Ï	ü
	AI Assist	Note: Needs Advanced AP Subscription.
Monitoring & Troubleshooting	Network Map	ü	ü
	Network Health	ü	ü
	RAPIDS	Available Note: Not available for 1 node COP implementation.	ü
	UCC Unified Communications and Collaboration. UCC is a term used to describe the integration of various communications methods with collaboration tools such as virtual whiteboards, real-time audio and video conferencing, and enhanced call control capabilities. Monitoring	Available	ü
		Note: Not available for 1 node COP implementation Requires Advanced AP Subscription for Central.
	Go Live - Noise Floor, 802.11 802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. Frames, Channel Quality	ü	ü
	Reboot AP/Switch/Controller from Device Monitoring Page	ü	ü
	Reboot Cluster from Device Monitoring Page	ü	ü
	Console into the AP from Device Monitoring Page	ü	ü
	Network Check - Ping, Traceroute, HTTP Hypertext Transfer Protocol. The HTTP is an application protocol to transfer data over the web. The HTTP protocol defines how messages are formatted and transmitted, and the actions that the w servers and browsers should take in response to various commands., HTTPS Hypertext Transfer Protocol Secure. HTTPS is a variant of the HTTP that adds a layer of security on the data in transit through a secure socket layer or transport layer security protocol connection., TCP Transmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data. , Speed Test	ü	ü
	Go Live - Client Throughput	ü	ü
	Disconnect Client from AP	ü	ü
	Live Events	Available Note: Not available for 1 node implementation.	ü
	Dynamic Packet Capture	Available Note: Not available for 1 node implementation.	ü
	Provide Syslog	ü	Ï
Miscellaneous	Central-like GUI	ü	ü
	Central-like GUI	Note: The look and feel in COP & Central is almost identical. The goal is to make the migration from one platform to another as seamless as possible.
	Client Profiling (Integration with ClearPass Device Insight)	Ï	ü
		Ï	Note: Client Profiling is included in the Central Foundation Subscription.
Licensing Model	Licensing Model	Foundation Subscription AP Foundation Subscription Gateway Foundation Subscription 25xx/61xx Foundation Subscription 29xx/62xx Foundation Subscription 38xx/63xx Foundation Subscription 54xx/8xxx	Foundation Subscription AP Advanced Subscription AP Foundation Subscription 25xx/61xx Foundation Subscription 29xx/62xx Foundation Subscription 38xx/63xx Foundation Subscription 54xx/8xxx HPE Aruba Networking EdgeConnect SD-Branch Foundation Subscription 70xx/9xxx HPE Aruba Networking EdgeConnect SD-Branch Foundation Subscription 72xx
	Licensing Model		Note: Gateway Subscription in Central starting with Central 2.5.4 only applicable in AOS 10.
	Licenses Needed for Controller BOM (AOS8)	LIC-AP LIC-PEF Policy Enforcement Firewall. PEF also known as PEFNG provides context-based controls to enforce application-layer security and prioritization. The customers using Aruba mobility controllers can avail PEF features and services by obtaining a PEF license. PEF for VPN users—Customers with PEF for VPN license can apply firewall policies to the user traffic routed to a controller through a VPN tunnel. (recommended) LIC-RFP (recommended) WebCC (recommended) Mobility Conductor License Foundation Subscription AP (License Support is included) Foundation Gateway Subscription Hardware-Only Support Controller	N/A Central does not support AOS-8 Controller-based implementations
	Licenses Needed for AOS-S Switch	Foundation Subscription Switch (based on Switch Family) Note: In case hardware replacement within SLA is needed, then hardware-only Switch Support is required.
	Licenses Needed for AOS-CX Switch	Foundation Subscription Switch (based on Switch Family) Note: If hardware replacement is needed within SLA, then hardware-only Switch Support is required.
	Licenses needed for AOS 10 (APs, Switches, Gateways)	Foundation Subscription AP Foundation Subscription Switch (based on Switch Family) Foundation Subscription Gateway (Expect AOS10 support in H1CY22)	Foundation or Advanced Subscription AP Foundation Subscription Switch (based on Switch Family) Foundation Subscription Gateway (Status is Early Access, Expect General Available in Q3CY21)
	Licenses needed for AOS 10 (APs, Switches, Gateways)	Note: If hardware replacement is needed within SLA, then hardware-only support is required.

What are the key differences between Central Cloud Native vs. Central On-Premise (COP)?

The key differences between Central Cloud Native and Central On-Premise is shown in this figure:

Figure 1 Central On-Premise vs Central Cloud Native

HPE Aruba Networking Fabric Composer vs Central

HPE Aruba NetworkingFabric Fabric is a group of AOS-CX Switches that are part of the BGP-EVPN VXLAN overlay. The overlay fabric is created by configuring VXLAN tunnels between stub and edge Switches. This is in context to Aruba Central NetConductor. Composer (AFC) has significant feature overlap with the NetConductor features of HPE Aruba Networking Central. It provides a complete solution for deploying underlays and overlays well suited for datacenter environments. AFC also features an extensive list of integrations with VMware ESX and NSX, Pensando PSM, Nutanix, and more, that are not currently supported in HPE Aruba Networking Central. One notable current limitation of AFC is that in-band switch management is not supported, OOBM Out Of Band Management. Out-of-band (OOB) management is a nodegrid net services method of remotely controlling and managing critical IT assets and network equipment using a secure protocol connection through a secondary interface that is physically separate from the primary network connection. management must be used with AFC. Also, AFC is only available as an on-premise product.

If you require external product integrations or use CX10000 switches in the data center and do not require a cloud-native solution, then AFC is the best fit as long as OOBM switch management is possible.

If you require a cloud-native solution, a single point of management for wireless, campus, and data center networking, and/or in-band switch management then HPE Aruba Networking Central is likely to be the best option.

For more information or if you have any queries regarding the best solution for your needs, contact your HPE Aruba Networking or partner sales engineer.

Floor Plan Manager

What is the floor plan support on HPE Aruba Networking Central?

For more information about the floor plan support, see About Floor plan.

What is the support for importing a floor plan on HPE Aruba Networking Central?

For more information about importing a floor plan on HPE Aruba Networking Central, see Importing a Floor Plan.

Client Insights - Telemetry

What is Client Insights?

The network management solution of HPE Aruba Networking Central cloud now includes AI-powered Client Insights which offer the most granular profiling and visibility in the industry. Client Insights leverages native infrastructure telemetry from access points, switches, and gateways, as well as clients without requiring installation of physical collectors or agents.

Machine Language-based classification models are used to fingerprint, identify, and accurately profile a wide variety of clients across the entire wired and wireless networks.