Network visibility, management, and operation tools for this series include Web GUI, standard CLI and the switch embedded CW Dashboard at no additional cost. Other management options include HPE Intelligent Management Center (IMC), SNMP manager, Aruba Airwave, and REST API for seamless integration into third party dashboards.

Key features

• – Fully managed, stackable Layer 2 switch with 24 and 48 1 GbE access ports and four (4) 1G/2.5G SFP uplinks
• – Deliver up to 116 Gbps in nonblocking bandwidth and 86.3 Mpps in forwarding
• – Up to 2-member Intelligent Resilient Fabric (IRF) stacking for reliable connectivity and simplified management
• – Class 4 PoE (802.3at) provides 35W per port and up to 420W per system
• – 24port PoE model has four (4) PoE++ ports at 100W per port
• – Support fast PoE and perpetual PoE for continued power delivery during equipment power cycle
• – 24-port non-PoE model includes four (4) HPE Smart Rate 1G/2.5G ports
• – Fanless design in the 24-port non PoE model for noise sensitive environments
• – Comprehensive security support including multi-layer access protection with granular ACLs, secure boot, encrypted access, and threat prevention features
• – Advanced Quality of Service (QoS) and IPv6 support for reliable connectivity
• – Simplified management with Web GUI, CLI and embedded CW Dashboard included free of charge
• – Additional management choices include HPE Intelligent Management Center (IMC), Airwave, SNMP, and REST APIs
• – Built-in 6 kV surge protection reduces the risk of power strikes in demanding environments such as construction sites

Enterprise-class Access Connectivity

The HPE Networking CW 2050 Switch Series delivers up to 116 Gbps of non-blocking bandwidth and 86.9Mpps in forwarding. It supports two (2) switch Intelligent Resilient Fabric (IRF) stacking for resilient and availability.

The 1U switch family features 4 switches, two (2) 24 port and two (2) 48 port in PoE and non-PoE configurations. Each switch has four (4) 1G/2.5G SFP uplinks for improved connectivity. The 24-port PoE model includes four (4) 1G/2.5G PoE++ ports at 100W per port for connecting wireless APs, IP phones, cameras and IoT devices. The 24 port non PoE models is fanless, makes it ideal for noise sensitive environments.

The switch series supports Layer 3 static routing and IPv6. Additional highlights include the built-in 6 kV surge protection to reduce the risk of power strikes, especially for demanding settings such as construction sites.

Powerful PoE Capabilities

The CW 2150 switch series deliver 420W and 410W Class 4 PoE at 35W per port in the 24 and 48 port models. It supports advanced PoE features including fast PoE to deliver power within seconds of system startup, perpetual PoE to maintain power during a power‑source reboot, and PoE watchdog function to automatically removes power when the connected device is no longer active.

Comprehensive Security Control

The switch family provides comprehensive security features to protect your business data and keep unauthorized access for modern SMB environments:

• – Secure boot verifies digital signatures to prevent unauthorized or malicious software from loading at startup
• – Multi‑layer access protection with granular ACLs (IPv4/IPv6, VLAN, port‑based), identity‑driven policies, and authentication options including 802.1X, MAC, Web, RADIUS, TACACS+
• – Encrypted access using SSHv2, SSL, SNMPv3, and TLS, along with role‑based privileges and audit logging
• – Threat‑prevention features include Control Plane Policing (DoS protection), ARP and DHCP protection, ICMP throttling, port security, and source‑port filtering

Performance

Nonblocking architecture

Up to 116 Gbps of nonblocking wire speed switching with up to 86.3 Mpps throughput

Hardware-based wire speed access control lists (ACLs)

Help provide high levels of security and ease of administration without impacting network performance with a feature-rich TCAM-based ACL implementation

Resiliency and High Availability

Separate Data and Control Paths

Separate control from services and keeps service processing isolated; increases security and performance

Intelligent Resilient Fabric (IRF)

Creates virtual resilient switching fabrics, where up to two (2) switches perform as a single logical device; switches do not have to be co-located and can be part of a disaster-recovery system; servers or switches can be attached using standard LACP for automatic load balancing and high availability; can eliminate the need for complex protocols like Spanning Tree Protocol, thereby simplifying network operation.

Smart Link

Provides easy-to-configure link redundancy of active and standby links allowing 100ms failover between links, supports 48 groups and 64 instances

Quality of Service

Broadcast control

Allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic

Advanced classifier-based QoS

Classifies traffic using multiple match criteria based on Layer 2, 3, and 4 information; apply QoS policies such as setting priority level and rate limit to selected traffic on a port, VLAN, or whole switch

Powerful Queuing and Scheduling

Supports the following congestion actions: strict priority (SP) queuing, weighted round robin (WRR), and SP+WRR hybrid scheduling for latency sensitive traffic

Traffic policing

Supports Committed Access Rate (CAR) and line rate

ACL Logging

Enables detailed monitoring of packet flows that match QoS-related ACL entries, improving traffic visibility and assisting in troubleshooting and policy validation

Buffer Configuration

Supports flexible queue buffer allocation to accommodate bursty traffic patterns, enhance congestion management and improve overall forwarding performance

Connectivity

Auto-MDIX

Automatically adjusts for straight-through or crossover cables on all 10/100/1000 ports

Flow Control

Provides back pressure using standard IEEE 802.3x, reducing congestion in heavy traffic situations

High-density Connectivity

Provides up to 48 fixed 10/100/1000BASE-T ports in a Layer 2 switch

IEEE 802.3at Power over Ethernet (PoE+)

Simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying local power at each access point location

Ethernet Operations, Administration and Maintenance (OAM)

Detects data link layer problems that occurred in the "last mile" using the IEEE 802.3ah OAM standard; monitors the status of the link between two devices

3rd Party Transceiver support

Allows to enable non-HPE 1G and 10G transceivers and cables. Note that there is no warranty nor support for the transceiver/cable when this feature is used

Layer 2 switching

16K MAC Address Table

Provides access to many Layer 2 devices

1G/2.5G Port Aggregation

Allows grouping of ports to increase overall data throughput to a remote device

VLAN Support and Tagging

Supports IEEE 802.1Q with 4,094 VLAN IDs and 512 VLANs simultaneously

Jumbo Frame Support

Improves the performance of large data transfers; supports frame size of up to 9K-bytes

IEEE 802.1ad QinQ and Selective QinQ

Increase the scalability of an Ethernet network by providing a hierarchical structure; connect multiple LANs on a high-speed campus or metro network

STP, MSTP, RSTP, PVST+, RPVST+, MVRP

Supports standard IEEE 802.1D STP, IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), Per-VLAN Spanning Tree (PVST+), Rapid Per-VLAN Spanning Tree (RPVST+) for improved bandwidth and faster convergence. MVRP allows automatic learning and dynamic assignment of VLANs

Bridge Protocol Data Unit (BPDU) Tunneling

Transmits STP BPDUs transparently, allowing correct tree calculations across service providers, WANs, or MANs

Port Mirroring and RSPAN

Duplicates port traffic (ingress and egress) to a monitoring port; supports 4 mirroring groups; RSPAN mirrors traffic from source ports or VLANs across multiple, physically distributed switches to a centralized destination device remotely

Internet Group Management Protocol (IGMP)

Controls and manages the flooding of multicast packets in a Layer 2 network

Layer 3 services

Address Resolution Protocol (ARP)

Determines the MAC address of another IP host in the same subnet; supports static ARPs; gratuitous ARP allows detection of duplicate IP addresses; proxy ARP allows normal ARP operation between subnets or when subnets are separated by a Layer 2 network

Domain Name System (DNS)

Provides a distributed database that translates domain names and IP addresses, which simplifies network design; supports client and server

Dynamic Host Configuration Protocol (DHCP)

Simplifies the management of large IP networks; supports DHCP Client

Loopback Interface Address

Defines an address that can always be reachable, improving diagnostic capability

User Datagram Protocol (UDP) Helper Function

Allows UDP broadcasts to be directed across router interfaces to specific IP unicast or subnet broadcast addresses and prevents server spoofing for UDP services such as DHCP

Layer 3 routing

IPv4 and IPv6 Static IP Routing

Provides manually configured routing for both IPv4 and IPv6 networks

Multicast

Internet Group Management Protocol (IGMP)

Utilizes Any-Source Multicast (ASM) to manage IPv4 multicast networks; supports IGMPv1, v2, and v3

IGMP Snooping and PIM snooping

Allow multiple VLANs to receive the same IPv4 multicast traffic and prevent unnecessary flooding between host and switch as well as between the switches

Multicast Listener Discovery (MLD)

Enables discovery of IPv6 multicast listeners; support MLD v1 and v2

Multicast VLAN Registration (MVR), MVR+, MVRP

Used to efficiently manage and distribute multicast traffic—typically IPTV or video services—across a network without needing complex Layer 3 routing. MVR+ allows for advanced or enhanced implementations of MVR, which provides improved control over how multicast traffic is delivered, filtered, and managed

IPv6

IPv6 Host

Enables switches to be managed in an IPv6 network

Dual Stack (IPv4 and IPv6)

Transitions from IPv4 to IPv6, supporting connectivity for both protocols

MLD Snooping

Forwards IPv6 multicast traffic to the appropriate interface

IPv6 ACL/QoS

Supports ACL and QoS for IPv6 network traffic

IPv6 static routing

Supports static IPv6 routing

Management

Secure Web GUI

Provides a secure, easy-to-use graphical interface for configuring the module via HTTPS

Industry-standard CLI

with a hierarchical structure for reduced training time and expense. Delivers increased productivity in multivendor environments

Remote Configuration and Management

Enable configuration and management through a secure Web browser or a CLI located on a remote device

CW Dashboard

Embedded network management tool with a web-based GUI to simplify operations and facilitate centralized management. It is made available at no additional cost and offers centralized configuration backup, software version management and seamless switch replacement.

HPE Intelligent Management Center (IMC)

Integrates fault management, element configuration, and network monitoring from a central vantage point; built-in support for third-party devices enables network administrators to centrally manage all network elements with a variety of automated tasks, including discovery, categorization, baseline configurations, and software images; the software also provides configuration comparison tools, version tracking, change alerts, and more

Network Management

SNMP v1/v2c/v3, MIB-II with Traps, and RADIUS Authentication Client MIB (RFC 2618); embedded HTML management tool with secure access

REST API interface

Programmable interface for seamless integration into 3rd party dashboards

sFlow (RFC 3176)

Provides scalable ASIC-based wirespeed network monitoring and accounting with no impact on network performance; this allows network operators to gather a variety of sophisticated network statistics and information for capacity planning and real-time network monitoring purposes

TFTP and SFTP

support offers different mechanisms for configuration updates; trivial FTP (TFTP) allows bidirectional transfers over a TCP/IP network; Secure File Transfer Protocol (SFTP) runs over an SSH tunnel to provide additional security

Manager and Operator Privilege Levels

Provides read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces

Command Authorization

Leverages HWTACACS to link a custom list of CLI commands to an individual network administrator's login; also provides an audit trail

Multiple Configuration Files

Stores easily to the flash image

Session Logging

Provides detailed information for problem identification and resolution

Remote Monitoring (RMON)

Uses standard SNMP to monitor essential network functions; supports events, alarm, history, and statistics group plus a private alarm extension group; supports RMON1 and RMON2

IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

Advertises and receives management information from adjacent devices on a network, facilitating easy mapping by

network management applications

Management VLAN

Segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP

Remote Intelligent Mirroring

Mirrors ingress ACL-selected traffic from a switch port or VLAN to a local or remote switch port anywhere on the network

Device Link Detection Protocol (DLDP)

Monitors a cable between two compatible switches and shuts down the ports on both ends if the cable is broken, which prevents network problems such as loops

IPv6 Management

Provides future-proof networking because the switch is capable of being managed whether the attached network is running IPv4 or IPv6; supports pingv6, tracertv6, Telnetv6, TFTPv6, DNSv6, syslogv6, FTPv6, SNMPv6, DHCPv6, and RADIUS for IPv6

Troubleshooting

Ingress and egress port monitoring enables network problem-solving; Virtual Cable Tests (VTC) provide visibility into cable problems

Security

Secure Boot

Verifies digital signatures to help prevent unauthorized or malicious software from loading at startup

Access Control Lists (ACLs)

Provides IP Layer 2 to Layer 4 traffic filtering; supports global ACL, VLAN ACL, port ACL, and IPv6 ACL

IEEE 802.1X

Industry-standard method of user authentication using an IEEE 802.1X supplicant on the client in conjunction with a RADIUS server

Remote Authentication Dial-In User Service (RADIUS)/HWTACACS

Eases switch management security administration by using a password authentication server

MAC-based Authentication

Client is authenticated with the RADIUS server based on the client's MAC address

Identity-driven Security and Access Control

• – Per-user ACLs
• Permits or denies user access to specific network resources based on user identity and time of day, allowing multiple types of users on the same network to access specific network services without risking network security or providing unauthorized access to sensitive data
• – Automatic VLAN assignment
• Automatically assigns users to the appropriate VLAN based on their identities

Secure Management Access

Delivers secure encryption of all access methods (CLI, GUI, or MIB) through SSHv2, SSL, HTTPS, TLS, and/or . SNMPv3

Secure FTP/ SCP

Allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file

Guest VLAN

Provides a browser-based environment to authenticated clients similar to IEEE 802.1X

Private VLAN (PVLAN)

Improves network security by allowing virtual organization of devices regardless of their physical location and enhances performance by reducing traffic congestion

Super VLAN

Allow multiple sub-VLANs to share a single IP subnet (subnet address/default gateway), reducing IP address exhaustion and broadcast traffic.

Port Security

Allows access only to specified MAC addresses, which can be learned or specified by the administrator

Port Isolation

Secures and adds privacy, and prevents malicious attackers from obtaining user information

STP BPDU Port Protection

Blocks Bridge Protocol Data Units (BPDUs) on ports that do not require BPDUs, preventing forged BPDU attacks

STP Root Guard

Protects the root bridge from malicious attacks or configuration mistakes

Dynamic ARP Protection and Rate Limiting

Blocks ARP broadcasts from unauthorized hosts and preventing eavesdropping or theft of network data

DHCP Snooping

Prevent malicious denial-of-service attacks by acting as a firewall between untrusted hosts and trusted DHCP servers. Support DHCP snooping option 82, DHCP snooping trust, DHCP snooping item backup

IP Source Guard

Prevent IP spoofing attacks

Device support

Prestandard PoE Support

Detects and provides power to prestandard PoE devices such as wireless LAN access points and IP phones

Convergence

IEEE 802.1AB Link Layer Discovery Protocol (LLDP)

Facilitates easy mapping using network management applications with LLDP automated device discovery protocol

LLDP-MED

Is a standard extension that automatically configures network devices, including LLDP-capable IP phones

LLDP-CDP compatibility

Receives and recognizes CDP packets from Cisco's IP phones for seamless interoperation

IEEE 802.3at Power over Ethernet (PoE+)

Provides up to 35 W per port on all models, and the 24 port model has four (4) ports delivering 100W per port for devices such as IP phones, wireless APs, security cameras; eliminates the cost of additional electrical cabling and circuits

Auto PoE Power Configuration and Allocations

Assigns the required power to a port for a PD device based on Link Layer Discovery Protocol (LLDP); supports multiple methods (automatic, IEEE 802.3af class, LLDP-MED, or user-specified) to allocate PoE power

IP Multicast Snooping (data-driven IGMP)

Prevents flooding of IP multicast traffic

Additional information

Green initiative support

Provides support for RoHS and WEEE regulations

Built-in 6KV surge protection technology

Reduce the risk of power strikes in demanding environments such as construction sites

Warranty and support

Limited Lifetime Warranty

See the HPE Aruba Networking Product Warranty Quick Reference Guide for warranty information included with your product purchase.

Software releases

To find software for your product, refer to http://www.hpe.com/networking/support; for details on the software releases available with your product purchase, refer to https://www.hpe.com/us/en/networking/hpe-aruba-networking-support-services.html