Aruba Cx Switching

Aruba CX Switching Operations

View VLANs, MAC address tables, and manage Layer 2 operations on HPE Aruba CX switches. Includes read-only operations for viewing network segmentation and write operations (ITSM-gated) for VLAN management.

When to Use

• Viewing VLAN configurations and port assignments
• Tracking MAC addresses across the switching fabric
• Finding which port a specific endpoint is connected to
• Creating, modifying, or deleting VLANs (with ITSM approval)
• Auditing network segmentation
• Troubleshooting Layer 2 connectivity

MCP Server

• Server: aruba-cx-mcp (community MCP from slientnight)
• Command: python3 -u mcp-servers/aruba-cx-mcp/aruba_cx_mcp_server.py (stdio transport)
• Auth: REST API via ARUBA_CX_TARGETS (JSON array) or ARUBA_CX_CONFIG (file path)
• ITSM: Write operations require CR when ITSM_ENABLED=true

Available Tools

Workflow Examples

VLAN Discovery

# View all VLANs
"Show all VLANs on core-sw-1"

# Check specific VLAN
"What ports are in VLAN 100 on core-sw-1?"

# List VLAN names
"Show me the VLAN names configured on core-sw-1"

# Find untagged ports
"Which ports are untagged in VLAN 100?"

MAC Address Tracking

# View full MAC table
"Show the MAC address table for core-sw-1"

# Filter by VLAN
"Show MAC addresses in VLAN 100 on core-sw-1"

# Find specific MAC
"Find MAC address aa:bb:cc:dd:ee:ff on core-sw-1"

# Locate endpoint
"Which port is MAC aa:bb:cc:dd:ee:ff learned on?"

# Count MACs per VLAN
"How many MAC addresses are in each VLAN on core-sw-1?"

VLAN Management (ITSM-Gated)

# Create VLAN (requires CR when ITSM enabled)
"Create VLAN 200 named 'Guest_Network' on core-sw-1 with CR CHG0001234"

# Modify VLAN (requires CR when ITSM enabled)
"Add port 1/1/10 as untagged to VLAN 200 on core-sw-1 with CR CHG0001234"

# Rename VLAN
"Rename VLAN 200 to 'Visitor_Network' on core-sw-1 with CR CHG0001234"

# Delete VLAN (requires CR when ITSM enabled)
"Delete VLAN 200 on core-sw-1 with CR CHG0001234"

ITSM Integration

Write operations (create_vlan, configure_vlan, delete_vlan) require change management approval:

CR Format: Must match ServiceNow pattern (e.g., CHG0001234)

Integration with Other Skills

• aruba-cx-system: First discover switches, then view their VLANs
• aruba-cx-interfaces: Check which interfaces are in which VLANs
• aruba-cx-config: View full running configuration including VLANs

Response Examples

VLAN List Response

[
  {
    "id": 1,
    "name": "default",
    "admin_state": "up",
    "tagged_ports": [],
    "untagged_ports": ["1/1/1", "1/1/2"],
    "voice": false
  },
  {
    "id": 100,
    "name": "Management",
    "admin_state": "up",
    "tagged_ports": ["1/1/49", "1/1/50"],
    "untagged_ports": ["1/1/3", "1/1/4"],
    "voice": false
  }
]

MAC Table Response

[
  {
    "mac_address": "aa:bb:cc:dd:ee:ff",
    "vlan_id": 100,
    "port": "1/1/3",
    "type": "dynamic",
    "age": 300
  },
  {
    "mac_address": "11:22:33:44:55:66",
    "vlan_id": 100,
    "port": "1/1/4",
    "type": "dynamic",
    "age": 120
  }
]

VLAN Create Response

{
  "success": true,
  "message": "VLAN 200 created",
  "vlan": {
    "id": 200,
    "name": "Guest_Network"
  }
}

Error Handling

Notes

• Read operations (get_vlans, get_mac_table): No ITSM gating required
• Write operations: Require ServiceNow CR when ITSM_ENABLED=true
• Lab mode (ITSM_LAB_MODE=true): Validates CR format without ServiceNow call
• MAC addresses use format: aa:bb:cc:dd:ee:ff
• VLAN IDs: 1-4094 (1 is typically reserved for default)
• All operations logged to GAIT audit trail