August 11th 2025
This release includes:
-
Issue Updates
New Capabilities
This section highlights new features and functionalities introduced in this release.
Alerts and Events
AP Alerts
HPE Aruba Networking Central now supports the following alerts for APs:
-
New VC Connected—Generates an alert when a new virtual controller is connected.
-
AP Rebooted—Generates an alert when AP has rebooted.
-
AP Process Failure—Generates an alert when a critical process or service running on a wireless access point fails or becomes unresponsive.
-
Authentication Delay Detected—Generates an alert when there is a delay or timeout event occurs during the client authentication process with the AP in the network.
-
Authentication Failure Detected—Generates an alert when there are high number of client authentication failures in the network.
-
Association Delay Detected—Generates an alert when client association delay or timeout event is detected in the network.
-
Association Failure Detected—Generates an alert when client association failure is detected in the network.
-
DHCP Delay Detected—Generates an alert when there is a DHCP delay or timeout event occurs from client to AP in the network.
-
DHCP Failure Detected—Generates an alert when there is high number of DHCP failures observed from client to AP in the network.
-
DNS Delay Detected—Generates an alert when clients experience delay or timeout event occurs in response from the DNS server.
-
DNS Failure Detected—Generates an alert when wireless clients experience a high number of connection failures with the DNS server.
-
802.1X Authentication Delay Detected—Generates an alert when there is a delay or timeout event occurs during the 802.1X authentication process in the network.
-
802.1X Authentication Failure Detected—Generates an alert when there are high number of 802.1X authentication failures in the network.
-
MAC Authentication Delay Detected—Generates an alert when there is a delay or timeout event occurs during the MAC authentication process in the network.
-
MAC Authentication Failure Detected—Generates an alert when there are high number of MAC authentication failures in the network.
-
Captive Delay Detected—Generates an alert when there is a delay or timeout event occurs during the captive portal authentication process in the network.
-
Captive Failure Detected—Generates an alert when there are high number of captive portal failures in the network.
-
Wi-Fi Security Key-Exchange Delay Detected—Generates an alert when there is a delay or timeout event occurs during the client authentication (Wi-Fi Security Key-Exchange) with the AP in the network.
-
Wi-Fi Security Key-Exchange Failure Detected—Generates an alert when there are high number of client authentication failures (Wi-Fi Security Key-Exchange) in the network.
-
Enable AP Connected 10/100 Mbps—Generates an alert when an AP is operating below expected speeds (for example, stuck at 10 Mbps or 100 Mbps instead of 1000 Mbps) due to misconfiguration, hardware limitations, or cable issues.
Gateway Alerts
HPE Aruba Networking Central now supports the following alerts for gateways:
-
Gateway Tunnel Flap Detected—This alert is generated when tunnel flapping is detected on gateways. The severity of this alert is critical, and the IPsec tunnel status is displayed as down in the WAN Tunnels and LAN Tunnels card.
-
Gateway Uplink Flap Detected—This alert is generated when uplink flapping is detected on gateways. The severity of this alert is critical, and the uplink status and the health status of the device are displayed as down in the WAN Interfaces card.
For more information, see the following topics:
Switch Alerts
HPE Aruba Networking Central now supports the following alerts for switches:
-
Excessive Unknown Multicast Packets—Generates an alert when the switch experiences unknown multicast CoPP drops.
-
Excessive IP-Exceptions Packets—Generates an alert when the switch experiences excessive IP-exceptions packets.
-
Excessive Unresolved IP-Unicast Packets—Generates an alert when the switch experiences unresolved IP-unicast CoPP drop
-
IP-Exceptions CoPP Drop—Generates an alert when the switch experiences IP-exceptions CoPP drop.
-
Unresolved IP Unicast CoPP Drop—Generates an alert when the switch has unresolved IP unicast CoPP drop.
-
RADIUS Server Status—Generates an alert when the RADIUS server configured on the switch is not reachable.
-
Duplicate IP Detected—Generates an alert when the client device on the network is detected using the same IP address as the switch.
-
Rogue DHCP Server—Generates an alert when the switch detects an unauthorized DHCP server.
-
Rogue IPv6 Router—Generates an alert when the switch drops a RA/RR packet from a rouge IPv6 router.
-
Client Limit Exceeded—Generates an alert when the switch disconnects a client after the port exceeds the maximum allowed client limit.
-
Sticky MAC Move Violation—Generates an alert when the switch detects a MAC move violation.
-
ARP Security Packet Drop—Generates an alert when a network device, such as a switch or router, detects and drops suspicious or malicious ARP (Address Resolution Protocol) packets to protect the network from ARP-based attacks or misconfigurations.
-
ARP Security MAC Mismatch—Generates an alert when the switch disconnects a client because of a MAC address mismatch.
-
Hardware Diagnostics Test—Generates an alert when a hardware diagnostics test detects an issue or abnormality in one or more components of a device, such as switches, routers, access points, or servers.
Configuration
Licenses Card and Subscription Keys
HPE Aruba Networking Central now supports the Licenses card in the Global dashboard that provides an overview of license usage for both assigned devices and those that are currently unassigned (available). The Subscription Keys page details the distribution and status of subscription keys, including license distribution for each device type. It also provides information about the expiration of subscription keys and licenses.
For more information, see Licenses Card.
RBAC Support for Switch Device Functions
Role-Based Access Control (RBAC) support is now available for switch device functions, including Access Switch, Core Switch, and Aggregate Switch. This enhancement allows administrators to assign permissions at a more granular level.
For more information, see Multi-Level Hierarchy.
Monitoring
Location Analytics
HPE Aruba Networking Central introduces Location Analytics, a powerful tool that leverages WLAN signals to capture data points and deliver actionable insights into client behavior and movement patterns. It enables a deeper understanding of client personas and behavioral trends with advanced data collection, processing, and analysis powered by Access Points. With real-time and historical data insights, customers can now optimize operations, enhance customer experiences, and make smarter, data-driven decisions.
The Location Analytics page provides a statistical analysis of the Visitors, Visit Duration, and Passerby in a graphical representation at site level.
For more information, see Location Analytics and Viewing Location Analytics Data.
Match and Replace APs
While placing planned APs on the floor or migrating sites from third party, if there are APs with the same name, MAC address, or serial number the planned APs can now be converted to real APs on the floorplan. To convert a planned AP to a real AP, click Match and Replace Access Points from the Action drop-down list at the floorplan manager level.
For more information, see Convert Planned APs to Real APs on the Floorplan.
MSP
In the MSP account, you can now navigate from the tenant Network Overview page to the MSP Global Overview page.
For more information, see Navigating to the Tenant's Network Overview Page.
Reports
The following new features are added to Reports:
-
The Exclude Device option is now available under Additional Filters for RF Health reports.
-
The Send Email option is now available for generated reports in the Find Reports table. The option supports both CVS and PDF formats. For more information, see Finding Generated Reports.
Improvements
This section highlights enhancements made to existing features and workflows.
Enhancements to Alerts
The following enhancements are added to the Alerts module:
-
Performing Cable Test—For alerts such as Interface CRC Errors, Port Flaps, and AP Connected at 10/100 Mbps, you can perform a cable test to determine if a faulty cable is causing the issue. For more information, see Alerts Dashboard.
-
Alerts Card on the Network Overview Page—The card is now enhanced to display the total count of active alerts aggregated into five categories. For more information, see Alerts Card.
-
Health support is added for the following alerts:
-
Stack Member Down
-
Storage Utilization
-
Input Power Lost
-
Interface Self Test
-
Enhancements to Asset Tagging
The Last Seen parameter in the Asset Tag Inventory table is now updated whenever a new location is received for the asset tag.
For more information, see Asset Tracking.
Enhancements to Central NAC
The following enhancements are added to Central NAC:
-
The Cloud Auth Okta Integration Network (OIN) applications were named as Central NAC OIDC and Central NAC API Service. These are now changed back to the Cloud Auth OIDC and Cloud Auth API Service as this is how they are referred to in the OIN. For more information, see Getting Information from Okta Workforce Identity Cloud and Configuring Okta Workforce Identity Cloud.
-
Central NAC now supports the premium subscription license which serves as the primary control mechanism for enabling or disabling all premium features within Central NAC. For more information, see Licensing and Override Profiles.
-
The Session Limits and Daily Limits parameters are required while configuring the captive portal profile. This is added under the Default Policy settings in Configuring Captive Portal Profile.
The authentication profile is updated so that the administrator can view the web portal at the preview URL provided by Cloud Guest. For more information, see Portal Customization in Configuring Captive Portal Profile and Editing an Authentication Profile.
Enhancements to Floorplan Boundary
While creating boundaries on the floorplan, you can now delete boundaries from the floorplan as required.
For more information, see Floorplan Boundary.
Enhancement to Insights
-
AP Country Code Misconfigured Insight—The insight is now enhanced to support 6GHz 320MHz Set 2 Bandwidth. For more information, see AP Health Insights.
Enhancements to Switch Configuration
The following enhancements are added to the Switch Configuration module:
-
You can now configure the Multicast Static Route profile for AOS-CX switches. This profile allows you to define a static multicast flow and program it directly into the IP multicast forwarding table, without relying on multicast routing protocols. For more information, see Multicast Static Route Profile.
-
You can now add Control Plane Policy when configuring a VRF profile. For more information, see VRF Profile
Enhancements to Troubleshooting Tools
-
Users can add notes for each session by clicking the note
icon. -
Session IDs are now updated to user-readable format instead of ordered numbers.

-
Users can now Export or Email the session details from the History tab by clicking the Actions button. Up to 100 email IDs can be added by comma-separated input.

-
The following enhancements and support are available for Commands tab:
-
Select and run commands on multiple devices simultaneously.
-
Save commands to save and retrieve a list of commands per customerId.
-
Support to run custom commands (not applicable to AOS-CX).
-
Real time preview of commands being constructed in filter dialog box.
-
Edit button to edit inputs and delete selected commands.
-
For more information, see Troubleshooting Tools.