All Blogs

From Reactive Troubleshooting to Self-Driving Network Operations

By LR-e0f3c9 posted 12 hours ago
Highlights from “ Self-Driving Network Operations with Aruba Central & CX Switches” On September 22, the HPE Networking Community hosted “Self-Driving Network Operations with Aruba Central & CX Switches,” presented by George Isaac. The session explored how Aruba Central and Aruba CX switches can help network teams move beyond reactive monitoring toward faster root-cause analysis, proactive recommendations, and , ultimately, more autonomous operations. For community members responsible for wired and wireless environments, the message was practical: rich telemetry becomes far more valuable when it is correlated across ...

Webinar Recap: What’s New in Aruba Central: Smarter Operations with AI-Native Innovations

By LR-e0f3c9 posted 8 days ago
Highlights from the September 9 webinar How can AI help network teams move from finding problems faster to preventing them and eventually taking trusted action? That question was at the center of the September 9 webinar , “ What’s New in Aruba Central – Smarter operations with AI-native innovations ,” presented by Ishani Chakraborty and Divya Rajpal. The session combined a strategic overview with a hands-on demonstration of how Aruba Central brings together unified visibility, intelligent troubleshooting, predictive insights, and conversational operations. For HPE Networking Community members, the takeaway is practical: ...

Unified SASE: From Two Consoles to One Operational Model

By MY-cf21d9 posted 10 days ago
The hardest part of SASE is not getting SD-WAN and SSE to work. It is getting the teams and tools behind them to work together. Unified SASE is not a third technology. It is what happens when SD-WAN and SSE stop living in separate management planes and start sharing one operational model. Here is what actually changes operationally when that happens. Key Takeaways One management experience: configure and operate SD-WAN and SSE from the same SASE Orchestrator portal, a single pane of glass. One operational view: see networking and security context together instead of switching ...

Port Mirroring on the ACX7000 Series

By amin posted 10 days ago
Introduction Port mirroring sends a copy of network packets seen on one port to a network monitoring connection on another port. The goal is simple: mirror traffic for a given port, bridge domain, or flow in a specified direction (ingress or egress) to a destination connected to a sniffer or analyzer, without disturbing the original forwarding path. Every mirroring deployment has exactly two components: Source of mirror — the input to the mirror, i.e., the point from which traffic needs to be copied. Destination of mirror — the output of the mirror, i.e., where the copied traffic is sent (a local analyzer port, or a remote collector reachable ...

AP-7xx and Wi-Fi 7 support on AOS-8

By JS-d3d5bc posted 13 days ago
AP-7xx and Wi-Fi 7 support on AOS-8 AOS-10 is the latest operating system for HPE Aruba Networking Wi-Fi products, but established AOS-8 deployments may still rely on Mobility Conductors, controllers, or Instant AP (IAP) clusters. If your environment needs Wi-Fi 7 hardware before migrating, AOS-8.13.3.0 adds basic Wi-Fi 7 functionality and hardware support for most currently released AP-7xx models. AP-7xx support on AOS-8 was not part of the original plan. Earlier guidance therefore stated that Wi-Fi 7 support was not coming to AOS-8. That position has since changed, and AOS-8 now supports AP-7xx hardware; readers who encountered ...

Webinar recap - Post-Quantum Cryptography: Why Network Teams Should Start Preparing Now

By LR-e0f3c9 posted 15 days ago
Key takeaways from the August 25 webinar , “ Post-Quantum Cryptography: What is PQC? Is it an issue? What can be done? ” Quantum computing promises major advances in areas such as materials science, logistics , and drug discovery. It also introduces a serious security challenge: a sufficiently capable quantum computer could break many of the public-key cryptographic methods that protect today’s digital communications, software, devices, and data. That was the focus of the August 25 webinar Post-Quantum Cryptography: What is PQC? Is it an issue? What can be done? , presented by Mike Spanbauer ...

Multicast Forwarding Optimization in Collapsed Core Deployments: Implementation and Migration Strategies

By kumar.inet posted 15 days ago
Scenario 1: IGMP Reports Missing at the Core Switches - Multicast Juniper Mist-Managed Collapsed Core Campus Deployment Issue Summary In customer deployments, the following issue may occur due to misconfiguration of the Protect RE filter on Mist-managed switches. The test result, root cause, fix, and recommendation for this issue are documented below. IGMPv3 reports were not being learned by IGMP snooping on the EX4400 Virtual Chassis operating as Access switch in a Juniper Mist-managed Collapsed Core campus deployment, resulting in failure of multicast traffic delivery to end hosts. Investigation traced the root cause to the Protect RE firewall ...

Benchmarking LLMs against Networking Certification Exams

By Julian Lucek posted 16 days ago
Introduction LLMs have improved greatly over the last few months with the advent of reasoning models. An off-the-shelf LLM that has had no specialised networking training is nevertheless very good at networking tasks. This is because during its general training on internet content and other sources, it gets exposed to networking-related material, such as blogs, discussion forums, networking vendor documentation, and IETF drafts and RFCs. We are now at the point where an LLM can do large chunks of network-related work unaided , saving valuable time for network operations. You’ve probably seen how people have benchmarked LLMs against medical school and law ...

Role-Based Microsegmentation from Campus to Branch

By MY-cf21d9 posted 17 days ago
Consider three employees connected to the same network: an engineer, an HR manager, and a finance analyst. They share the same VLAN, subnet, and IP address range. From a traditional IP-based policy perspective, the network primarily sees where they are connected, not who they are. But these users should not necessarily have the same access. Engineering may need access to lab resources, HR to personnel systems, and Finance to ERP applications. This is where role-based microsegmentation adds another dimension: identity. The network can distinguish Engineering from HR and Finance and apply policy based on who the user is, not simply where the user is connected. ...

Demystifying SASE: Follow the Traffic

By MY-cf21d9 posted 19 days ago
SASE (Secure Access Service Edge) is often described as the convergence of networking and security. That definition is accurate, but it can also make SASE sound more complicated than it needs to be. SASE = SD-WAN + SSE SD-WAN provides resilient connectivity between sites, applications, and cloud services, and secures that traffic directly at the WAN edge. SSE adds cloud-delivered security for Internet, SaaS, and private application access. But the important part is not simply putting SD-WAN and SSE next to each other. It is understanding which traffic needs SD-WAN, which traffic needs SSE, and when they work together. This article takes a traffic-flow ...

Webinar recap: HPE Self-Driving Network and What the Latest CX Innovations Mean for Network Teams

By LR-e0f3c9 posted 19 days ago
On August 12, the Community hosted the webinar HPE Self-Driving Network - Innovating with HPE Networking CX Series , presented by Abhi Shamsundar, Anup Mehta, and Deepti Ganesh. The session explored how HPE is bringing cloud management, AI-native operations, and greater automation to the HPE Networking CX switching portfolio. T he takeaway is straightforward: HPE is working toward network operations that are easier to deploy, simpler to scale, and more proactive to troubleshoot . Here are the highlights. Moving toward a self-driving network The presenters described HPE’s self-driving network vision ...

Post-Quantum Cryptography: What Actually Changes in the Network?

By MY-cf21d9 posted 21 days ago
Why PQC Matters Now Quantum computing is often described as a future problem. That makes it easy to think we can deal with post-quantum cryptography, or PQC, later. But some of the data we protect today needs to remain confidential for many years. An attacker can capture encrypted traffic now, store it, and try to decrypt it later when sufficiently powerful quantum computers become available. This is often called Harvest Now, Decrypt Later, or HNDL. A better question is not only “When will quantum computers arrive?” It is “How long does my sensitive data need to remain confidential?” If the answer is five, ten, or twenty years, waiting until a powerful ...

Welcome to the new HPE Networking Community

By LR-e0f3c9 posted 21 days ago
Two communities. One powerful new destination. Airheads and Elevate have come together as the new HPE Networking Community , uniting our collective expertise , energy, and passion for networking. Here, you can build connections, sharpen your skills, exchange ideas, and explore the innovations shaping AI-native networking, wireless, switching, security, data center, cloud management, and emerging technologies. This is more than a support forum. It ' s where networking experts come together to learn, contribute, and move what’s possible forward. T ap into the expanded global network ...

Understanding SSE: Beyond the Acronyms

By MY-cf21d9 posted 23 days ago
SSE (Security Service Edge) comes with a lot of acronyms: SWG, CASB, DLP, ZTNA, FWaaS . But most of the underlying security concepts are familiar. A useful way to understand SSE is to start with what each service actually does, then look at what changes when those controls are delivered from the cloud. This article explains SSE in practical terms, providing a foundation before going deeper into the architecture. Key Takeaways · Familiar Security Concepts: SSE brings familiar security controls into a cloud-delivered architecture, applying them at different layers of the connection. · Complementary ...

Secure Active/Active Multivendor Fabrics with MNHA

By James Rathbun posted 29 days ago
Modern data center IP fabrics are built on VXLAN and EVPN. The technology is genuinely powerful: a decoupled underlay and overlay with multi-protocol BGP, Type-2 and Type-5 routes, distributed anycast gateways, etc. Getting it right rewards you with a fabric that is resilient, programmable, and scales cleanly from dozens to thousands of endpoints. Get any piece wrong, and you'll document an unfortunate discovery during an outage window. Adding a firewall into that fabric raises the stakes further — now the firewall itself has to participate in a control plane it wasn't originally designed for. Layer in a requirement for fast, stateful failover, and the complexity ...

🚀 A New Chapter for Enterprise Networking: CX Meets Mist

By YN-3193cf posted Sep 03, 2026
CX Meets Mist Yesterday marked an exciting milestone as we shared the next step in the evolution of enterprise networking. The networking industry is undergoing one of its biggest transformations in decades. Networks are no longer just about connectivity. They are becoming intelligent platforms that can understand, automate, secure, and optimise business operations at scale. That is why the convergence of AOS-CX switching and Mist AI is so exciting. Why This Matters For years, network teams have struggled with complexity: Managing multiple tools Troubleshooting across domains Reducing operational overhead Scaling securely while supporting ...

Long-Distance Lossless Scale-Across

By Kashif Nawaz posted Sep 02, 2026
Introduction Artificial Intelligence (AI) and Machine Learning (ML) training clusters can easily outgrow a single data hall. Power and cooling limits decide how many AI accelerators (XPUs) can be hosted in one building, and once that limit is reached, then the clusters need to be deployed across data halls. The network that provides connectivity among AI accelerator (XPU) backend fabrics is now commonly called Scale-Across [1,10,11]. Scale-Across is not a Wide Area Network (WAN) problem in the traditional sense, because traditional WANs are generally designed to tolerate packet loss, including tail drops, as Transmission Control Protocol (TCP) retransmits ...

HPE SRX-SSE Link

By Karel Hendrych posted Sep 01, 2026
This TechPost provides an example of how to connect unmanaged users and systems behind an HPE SRX Firewall to HPE Security Services Edge (SSE) for security policy enforcement in the cloud. This facilitates a common cloud based policy for these systems as well as system with the SSE agent installed. In addition to connectivity itself, a deployed production setup is explored to provide a resilient connection to local and backup SSE POPs. Introduction In certain use cases, although the SRX is a fully capable NGFW, it may be desirable to enforce advanced security in the HPE SSE service using ZTNA principles beyond a single site context. This could be to unify ...

Elevate Community Registration Closing Soon

By LR-e0f3c9 posted Aug 31, 2026
Dear Community Members, We’re bringing the Juniper Elevate Community and HPE Airheads Community together as one unified HPE Networking Community—a stronger, more connected hub where members can find product information, share best practices, and learn from peers across the HPE Networking portfolio. What this means for members: One destination for content and conversations: Access discussions, documentation, blogs, and product information in one place. Broader visibility and peer knowledge sharing: Engage with the full community, discover answers faster, and share best practices across a larger network. Simpler access and more ways ...

Juniper Elevate Community and HPE Airheads Community are coming together

By LR-e0f3c9 posted Aug 31, 2026
Hey everyone. As you know, w e’re bringing the Juniper Elevate Community and HPE Airheads Community together as one unified HPE Networking Community —a stronger, more connected hub where members can find product information, share best practices, and learn from peers across the HPE Networking portfolio. What does this mean for members? One destination for content and conversations : Access discussions, documentation, blogs, and product information in one place. Broader visibility and peer knowledge sharing: Engage with the full community, discover answers ...