Aruba CX (AOS-CX) — Management

Day-2 inventory, facts and config management for Aruba CX (AOS-CX) data center fabrics (VXLAN/EVPN). Part of the multi-vendor Data Center automation guide.

Repository

Aruba

AOS-CX

REST API

VXLAN / EVPN

Model the fabric once in a vendor-neutral inventory

Collect facts from Aruba via API/SSH

Push config from intent, never hand-edit per box

Setup, key commands & run examples

inventory/fabric.yml

Inventory

Describe each Aruba device once — role, mgmt IP and VTEP — so the same workflow targets it and every other vendor in the fabric.

inventory/fabric.yml

yaml

leaf21:
  role: leaf
  vendor: aruba
  mgmt: 10.0.0.21
  vtep: 10.255.0.21
  napalm: aoscx

connect.py

Connect

Open a session to a Aruba CX (AOS-CX) device. NAPALM normalizes facts across vendors using driver "aoscx".

connect.py

python

import napalm

# Aruba CX (AOS-CX) — NAPALM driver "aoscx"
driver = napalm.get_network_driver("aoscx")
dev = driver(hostname="10.0.0.21", username="admin", password="secret")
dev.open()

facts.sh

Day-2 facts

The day-2 management read-outs you will automate on Aruba: version, EVPN peers and interface state.

facts.sh

bash

# inventory & health snapshot — Aruba CX (AOS-CX)
show version
show interface brief
show bgp l2vpn evpn summary

Best practices

One intent model, many renderers
Keep a single fabric description and render Aruba config from it — never SSH in to edit CLI by hand.
Prefer structured APIs
Use NAPALM getters (get_facts, get_interfaces, get_bgp_neighbors) so Aruba returns the same shapes as the rest of the fleet.
Version your inventory
Treat fabric.yml as the source of truth in git; every change is a reviewable PR.
Idempotent runs
Management scripts should be safe to re-run — collect, compare, only change what drifted.

Hands-on exercises

Guided practice tasks — copy the starter snippet, run it against a lab device, and extend it to meet the goal.

Exercise 1

Aruba inventory report

Goal: Connect to the leaf, pull version + model and print one inventory row.

exercise_1

python

import napalm

# Aruba CX (AOS-CX) — NAPALM driver "aoscx"
driver = napalm.get_network_driver("aoscx")
dev = driver(hostname="10.0.0.21", username="admin", password="secret")
dev.open()
# TODO: print hostname, model and OS version

Exercise 2

Interface drift check

Goal: Compare live interface admin/oper state against the intended list and report mismatches.

exercise_2

python

intended = {"Ethernet1", "Ethernet2"}
# TODO: read live interfaces and report any intended port that is down

Curated videos & guides

Checklist — pitfalls, gotchas & verification

Common pitfalls

•Screen-scraping Aruba CLI when a structured API exists — output formats change between releases.
•Storing credentials in the script instead of a vault / env vars.
•Editing boxes by hand so the inventory no longer matches reality.

Gotchas to watch

•NAPALM driver "aoscx" must match transport — confirm SSH/API is enabled on the device.
•Management VRF: make sure your reachability is over the mgmt VRF, not the data plane.

Verify it works

•Re-run the report and confirm every device returns facts.
•Confirm the inventory row matches the physical device (model, serial, OS).