# HPE Aruba CX DSS

## Overview

The HPE Aruba CX DSS plugin brings advanced networking features to HPE Morpheus Enterprise Software by leveraging Aruba CX 10000 series switches. It supports both micro-segmentation and macro-segmentation, integrating seamlessly with HPE and Aruba technologies to improve user experience and operational efficiency.

Implemented as a HPE Morpheus Enterprise `NetworkProvider` in Groovy, the plugin is purpose-built for the HPE Aruba Networking Distributed Services Switch network type (HPE ANW DSS Port Group) and optimized for HPE Morpheus Enterprise environments. It automates the creation and management of networks for HPE ANW DSS Port Groups, connecting servers to Aruba CX 10000 switches within a HVM Cluster.

On each host, the plugin creates Linux bridge interfaces and associates them with VLANs for streamlined network management and configuration. HPE Morpheus Enterprise integrates directly with Aruba Fabric Composer (AFC) to automatically create or delete networks for HPE ANW DSS Port Groups as they are added to or removed from a configured cluster. Adding or removing HVM Hosts in the HVM Cluster triggers the corresponding network changes in AFC, ensuring the network configurations are always up to date.

The plugin also enables the creation of networks with specific VLAN IDs, supporting flexible segmentation and isolation. When a network is created, the plugin provisions the required VLANs on the Aruba CX 10000 switches, ensuring networks are ready for use by Instances within the HVM Cluster.

Additionally, the plugin creates a Libvirt network of type Private. When an Instance is created on the host and associated with this network, a macvtap interface is generated and mapped to the corresponding Linux Interface VLAN ID, ensuring seamless connectivity and isolation.

## Features

- Create and delete networks of type `HPE ANW DSS Port Group` directly from the integration
- Automatically create and delete networks in Aruba Fabric Composer (AFC) when HVM Hosts are added or removed from the HVM Cluster
- Manage network configurations through seamless integration with AFC
- Enable both micro-segmentation and macro-segmentation for flexible network isolation
- View detailed summaries and status of Aruba CX 10000 switches
- Ensure automatic, realtime synchronization of network configurations with Aruba CX 10000 switches

## Prerequisites

The following requirements must be met to deploy and configure the HPE Aruba CX DSS Network plugin in HPE Morpheus Enterprise

- Aruba CX 10000 series switches

  - At least two Aruba CX 10000 switches are configured
  - VSX and KeepAlive are configured
  - Switches are connected to the upstream network
- Pre-existing HVM Cluster

  - Ensure all hosts within the HVM Cluster are physically connected to the CX 10000 switches for optimal network integration and redundancy
- HPE Morpheus Enterprise appliance version 8.0.6 or higher

  - AFC and PSM are deployed and reachable from the
- Aruba Fabric Composer (AFC) version 7.2 or higher, deployed as a VM
- AMD Pensando PSM (Policy and Services Manager), deployed as a VM

NOTE

- Download AFC and PSM from the [HPE Networking Support portal](https://networkingsupport.hpe.com/downloads/software/RmlsZTo0YzQ2MzIyYS0xOTU2LTExZjAtYTMzNS0yZmRkN2QyMjdhOTY%253D)
- For more information on deploying AFC and PSM, refer to the official documentation
- The AFC and PSM must have network connectivity to the CX 10000 switches
- Making full use of the HPE Morpheus Enterprise Aruba CX 10000 integration requires credentials for AFC with API access granted and read/write access to AFC configuration

## Adding HPE Aruba CX DSS Network Integration

### Procedure

1. Navigate to Infrastructure > Network > Integrations
2. Select + Add > Networking > HPEAruba CX DSS 

   ![../../_images/addIntegration.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-61F5952F-CDFE-43E1-8A2B-445824B876A5-high.png)
3. Enter the following details in the ADD NETWORK INTEGRATION form: 

   NAME
   :   Name of the integration in HPE Morpheus Enterprise

   AFC ADDRESS
   :   Enter the network address of the AFC

   AFC USERNAME
   :   Enter the username

   AFC PASSWORD
   :   Enter the password

   FABRIC NAME
   :   Enter the fabric name from the AFC

       ![../../_images/2_create_network_integration.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-5A349FA9-6B14-494D-B218-9F082BE5E18A-high.png)
4. Click Add Network Integration

### Results

Upon add, the HPE Aruba CX DSS Network integration will be created.

NOTE

All fields can be edited after saving.

## Manage Security Groups and Rules in Morpheus

To manage security groups and rules in Morpheus, follow these steps:

1. Navigate to Infrastructure > Network > Security Groups
2. Select + ADD

   ![](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-7883AC52-480A-4E33-AB01-6703E3A41809-high.png)
3. Select Save Changes

   ![](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-2145D633-F35B-41FC-950C-363353E38E8B-high.png)
4. Within the new Security Group, select + Add Rule

   ![](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-2BA30350-BAC9-420C-90A3-381E66B9AF9D-high.png)
5. Select Save Changes

   ![](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-CA593188-8380-492C-AAA7-08766D278427-high.png)

## Create HPE ANW DSS Port Group Network

### About this task

To create an HPE ANW DSS Port Group network, follow these steps:

### Procedure

1. Navigate to Infrastructure > Network > Networks
2. Select + Add Network > HPE ANW DSS Port Group 

   ![../../_images/3.1_add_network.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-3CE7AFEC-D544-4E9A-9277-1343D8DCD7BE-high.png)
3. Select the Network Service in the CREATE NETWORK form: 

   ![../../_images/3.2_add_network.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-3A253CC3-F827-4CA3-A2C5-58F8FEC8C30D-high.png)
4. Enter the following details in the CREATE NETWORK form. Note that the values in the screenshot are reference examples. Input only the values intended for the actual network: 

   ![../../_images/3.2_add_network.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-34B08F15-1A6E-4E91-97C0-59D865049E4A-high.png)
5. Save the network by clicking on Save changes. 

   ![../../_images/3.3_add_network.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-02143765-1935-4568-A755-9A6B134CA122-high.png)![../../_images/3.3_add_network.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-BF4B2385-7813-4CB8-912B-DCF724834F47-high.png)
6. The network will be created and displayed in the list of networks. 

   ![../../_images/3.4_network_created.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-2ABDBDC9-8594-4248-B7F8-056488423C77-high.png)

## Delete HPE ANW DSS Port Group Network

### About this task

To delete a HPE ANW DSS Port Group network, follow these steps:

### Procedure

1. Navigate to
2. Select the network you want to delete from the list.
3. Click on the delete icon (🗑) next to the network name. 

   ![../../_images/4_delete_network.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-5DFCE9ED-5DDA-469D-B118-24F0B3AC0429-high.png)

## View HPE Aruba CX DSS Network Integration

To view the HPE Aruba CX DSS Network integration, follow these steps:
:   1. Navigate to Infrastructure > Network > Integrations
    2. Select the HPE Aruba CX DSS integration from the list.

       ![../../_images/5.1_list_network_integrations.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-5F56F425-47AA-4B32-9A7B-48C69C82CFAB-high.png)
       - `Summary` - Click on the Summary tab to view the summary of the integration.

         ![../../_images/5.2_view_integration_summary.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-0B2B766C-E581-4C17-BE5D-C95F72BDCB20-high.png)
       - `Switches` - Click the Switches tab to view detailed information about all Aruba CX 10000 switches managed by the integration.

         ![../../_images/5.3_view_integration_details.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-A5481BCF-8C48-4106-B3C2-F0AD92CEFEE3-high.png)
       - `Networks` - Click on the Networks tab to view the networks associated with the integration.

         ![../../_images/5.4_view_integration_networks.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-C93D74CC-3795-4FA8-A12A-BADF901EB1AB-high.png)
       - `Firewalls` - Click on the Firewall tab to view firewall policies associated with the integration.

         ![../../_images/5.4_view_integration_networks.png](https://support.hpe.com/hpesc/public/api/document/sd00008014en_us/GUID-FC71FD7B-012A-4291-9519-0AFD8374D65C-high.png)
