Aruba 9004 Gateway
Versatile, cost-effective branch networking, SD‑WAN, and security
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
The Aruba 9000 Series Gateways are ideally suited for branch deployments both large and small, and serve as network appliances for SD-WAN and security. Cellular connectivity is also available. Multiple gateways can be grouped as a cluster in each branch for high availability and resiliency.
The 9000 Series is configured and managed via Aruba Central, a simple-to-use cloud-based network operations, assurance and security platform. An optional mobile installer app simplifies on-site deployments to optimize IT resources.
Designed with the flexibility to support the most demanding branch environments - the 9000 Series Gateways provide connectivity for up to 80 times the maximum client density and up to 10 times the maximum throughput of typical SD-WAN appliances.
Key Features
- Cloud-managed and purpose-built for branch SDWAN requirements
- Up to 10 times the performance and 80 times the client density of typical SD-WAN appliances
- Unified policy enforcement for wired and wireless traffic through Aruba Dynamic Segmentation
- Visibility into over 3,000 applications with no added hardware
- Integrated LTE option available
Simple SD-WAN management with great scalability
Deploy SD-WAN using a simple mobile app and provide up to 10 times the performance of typical SD-WAN appliances with a maximum 6Gbps of throughput.
Dynamic Segmentation for network traffic enforcement
Supports simple to use mobile and IoT device policy enforcement for wired and wireless.
Built for IoT and the cloud
Supports up to 2,048 devices using cloud access, which is up to 80 times greater density than average SD-WAN appliances.
Features
HIGH PERFORMANCE AND RELIABILITY
For distributed enterprises with increasing performance and bandwidth needs, the 9000 Series is designed with scale and flexibility, and equipped with plenty of horsepower at a competitive price-point.
The 9000 Series provides connectivity for up to 2,048 users or client devices at up to 6 Gbps of firewall throughput. These capabilities are up to 80 times the client density and 10 times the maximum throughput of typical SD-WAN appliances.
For enhanced resiliency and high availability, the multiple 9000 Series can be clustered together at each branch.
IOT AND INTEGRATION READY
The 9000 Series includes flexible connectivity options:
- 4xGbE - 9004
- 12xGbE (6xPoE+) - 9012
- USB 3.0 ports
- IoT Radio that supports BLE technologies
- Integrated LTE connectivity - 9004-LTE
The gateway also uses integrated device profiling to improve client visibility, and works with Aruba Central, ClearPass Policy Manager or ClearPass Device Insight to provide advanced user, device and IoT policy management and insights.
SD-WAN DEPLOYMENT
For organizations that are now managing multiple WAN connections, 9000 Series Gateways can be connected to Aruba's SD-WAN fabric right out of the box. SD-WAN is a rich WAN management solution that is used to simplify management of traffic entering and exiting branch sites. Role-based intrusion detection and prevention (IDS/IPS), Dynamic Segmentation, and stateful firewall deliver integrated security requirements. Please refer to the SD-WAN datasheet for more information.
BRANCH AND CAMPUS DEPLOYMENT
9000 Series Gateways can also be re-purposed as Mobility Controllers to provide WLAN and LAN services such as Dynamic Segmentation, stateful firewall and Live Upgrades. In this mode, the 9000 Series cannot simultaneously be used for SD-WAN.
UNIFIED POLICY ENFORCEMENT
To simplify and secure wired and wireless network access, the 9000 Series Gateways are a pivotal component of Aruba Dynamic Segmentation. Wired and wireless traffic can be tunneled to a Gateway, which then consistently provides policy enforcement based on user role (e.g. guest, contractor, employee), device type, application and network location.
MICROSOFT FEATURES
Aruba's integration with Microsoft enables unique application intelligence that detects Microsoft 365 (Office 365), Teams, and Skype for Business traffic and then prioritizes them over less critical applications. Through management interfaces on Aruba Central, ArubaOS, and Aruba AirWave, IT can visualize call quality metrics such as MOS, latency, jitter, and packet loss for additional insights.
ENHANCED CAPABILITIES
Policy Enforcement Firewall
The 9000 Series includes a Layer 4-7 stateful firewall with PEF to deliver a consistent user, device, and application awareness across WLAN, LAN, and WAN. When deployed alongside Aruba ClearPass Policy Manager, policies are automatically enforced to simplify SSID, VLAN and policy management.
Threat Defense with IDS/IPS
To improve security against a growing attack surface, gateways deployed in SD-WAN mode add role and identitybased intrusion detection and prevention capabilities (IDS/IPS) on top of existing security features
Application visibility and control
Deep Packet Inspection (DPI) technology, which is a component of PEF, consistently evaluates and optimizes performance and usage policies for over 3,000 applications. This ensures the highest possible Quality of Service (QoS) - even for encrypted traffic.
High Availability
The 9000 Series can be deployed with N+1 or NxN redundancy, and can also join a controller cluster when deployed as a Mobility Controller managed by Mobility Master. This increases performance and scale for enhanced resiliency.
Simple to use, mobile provisioning
Allows on-site personnel to use a mobile app to onboard gateways. A central IT team can verify device location, licenses, and status with no additional steps required. Available for iOS and Android.
Unified Communications and Collaboration (UCC)
Visualize and troubleshoot networks based on call quality metrics such as MOS, latency jitter and packet loss. Supported applications include: Teams, Skype for Business, Wi-Fi Calling, FaceTime, SIP, Jabber, Spark and more.
Technical Specifications:
| PERFORMANCE AND CAPACITY | ||
|---|---|---|
| SD-WAN Deployment Mode* | 9004/9004-LTE | 9012 |
| Sizing | Small site | Medium site |
| Maximum clients | Up to 2,048* | Up to 2,048* |
| Firewall throughput (Gbps) | 4 | 6 |
| Encrypted throughput AES-CCM (Gbps) | 2 | 2 |
| Encrypted throughput AES-CBC-256 (Gbps) | 4 | 4 |
| Active firewall sessions | 64K | 64K |
| Mobility Controller Deployment Mode* | ||
| Maximum campus or remote Access Points | 32 | 32 |
| Maximum concurrent users/devices | 2,048 | 2,048 |
| Maximum VLANs | 4,096 | 4,096 |
| Active firewall sessions | 64K | 64K |
| Concurrent GRE tunnels | 544 | 544 |
| Concurrent IPsec sessions | 2,048 | 2,048 |
| Concurrent SSL sessions | 2,048 | 2,048 |
| Concurrent tunneled ports | 2,048 | 2,048 |
| Firewall throughput (Gbps) | 4 | 6 |
| Wired bridged throughput (Gbps) | 4 | 6 |
| Encrypted throughput 3DES (Gbps) | 4 | 4 |
| Encrypted throughput AES-CBC-256 (Gbps) | 4 | 4 |
| Encrypted throughput AES-CCM (Gbps) | 2 | 2 |
| Encrypted throughput AES-GCM-256 (Gbps) | 4 | 6 |
| INTERFACES AND INDICATORS | ||
| Features | ||
| Form factor/footprint | Desktop/Fanless2 Optional Mount Rack Tray |
Rack mount |
| 100/1000BASE-T | 4 | 12 (6x PoE+ ports) |
| 10G SFP+ Ports (SFP also supported) | — | — |
| Bluetooth 5 | Yes | Yes |
| USB 3.0 Type-A | 1 | 2 |
| System status LED | Yes | Yes |
| WAN ports status LED | Yes | Yes |
| LAN ports status LED | Yes | Yes |
| Gateway mode LED | Yes | Yes |
| Central connectivity status LED1 | Yes | Yes |
| Cellular (LTE) status LED | Yes | Yes |
| Console port | micro USB, RJ45 | micro USB, RJ45 |
| PHYSICAL | ||
| Dimensions (H x W x D) |
3.82 cm x 19.85 cm x 15.31 cm (1.5” x 7.815” x 6.03”) |
4.37 cm x 39.5 cm x 26.00 cm (1.72” x 15.55” x 10.24”) |
| Weight | 1.143 kg (2.519 lbs) | 3.42 kg (7.54 lbs) |
| ENVIRONMENTAL RANGE | ||
| Specification | ||
| Operating Temperature | 0° C to 40° C (32° C to 104° F) | 0° C to 40° C (32° C to 104° F) |
| Storage Temperature | -40° C to 70° C (-40° F to 158° F) | -40° C to 70° C (-40° F to 158° F) |
| Operating Humidity | 10% to 90% (RH), non-condensing | 10% to 90% (RH), non-condensing |
| Storage Humidity | 10% to 95% (RH), non-condensing | 10% to 95% (RH), non-condensing |
| Operating Altitude | 10,000 feet | 10,000 feet |
| Acoustic Noise | 0 dBA (fan less) | 29.1 - 63.5 dBA |
| Cooling | Conduction cooling | Forced cooling |
| Maximum Power Consumption | 25W (with USB) | 160W (with 120W of PoE) |
| Power Source | 12v DC, 2.5A AC-to-DC power adapter | Internal Power Supply 90VAC - 264VAC 47-63Hz 3A at 100Vrms |
| REGULATORY AND SAFETY COMPLIANCE | ||
| Description | ||
| Regulatory SKU information | ARCN9004 / ARCN9004LTE | ARCN9012 |
| Minimum Software Versions | 9004: SD-WAN R1.7 (default) and
Aruba Central 2.5.x in SD-WAN
mode, or support started with
8.5.0.5 in Mobility Controller mode. 9004-LTE: SD-WAN R2.1 (default) and Aruba Central 2.5.1 in SD-WAN mode |
SD-WAN R2.0 (default) and Aruba Central 2.5.x in SD-WAN mode, ArubaOS (Future) in Mobility Controller mode. |
| Safety certifications | UL 60950-1 Second Edition | UL 60950-1 Second Edition |
| CAN/CSA-C22.2 No. 60950-1 Second Edition | CAN/CSA-C22.2 No. 60950-1 Second Edition | |
| EN 60950-1 Second Edition | EN 60950-1 Second Edition | |
| EN 60950:2005 | EN 60950:2005 | |
| IEC 60950-1 Second Edition | IEC 60950-1 Second Edition | |
| EN/IEC 62368-1 2nd Edition | EN/IEC 62368-1 2nd Edition | |
| NOM (obtained by partners and distributors) | NOM (obtained by partners and distributors) | |
| Electromagnetic emissions certifications | FCC Part 15 Class B | FCC Part 15 Class A |
| CISPR32 Class B | CISPR32 Class A | |
| EN55032 Class B | EN55032 Class A | |
| ICES-003 Class B | ICES-003 Class A | |
| VCCI Class B | VCCI Class A | |
| EN61000-3-2 | EN61000-3-2 | |
| EN61000-3-3 | EN61000-3-3 | |
| EN55024, EN301 489-1/-17, EN301 489-52 (9004-LTE) | EN55024, EN301 489-1/-17 | |
| KN32 Class B , KN35, KN301 489-1/-17, KN301 489-52 (9004-LTE) | KN32 Class A, KN35, KN301 489-1/-17 | |
| CNS13438 Class B | CNS13438 Class A | |
| Telco | Common Language Equipment Identifier (CLEI) Code | Common Language Equipment Identifier (CLEI) Code |
| Wireless certifications | FCC/ISED | FCC/ISED |
| RED Directive 2014/53/EU | RED Directive 2014/53/EU | |
| Others: MIC, NCC, ANATEL, COFTEL, CCC | Others: MIC, NCC, ANATEL, COFTEL, CCC | |
| SERVICE AND WARRANTY INFORMATION | ||
|
||
*These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:
- SD-WAN Mode - Aruba Central Foundation, Foundation Base, or Advanced Licenses
- Controller Mode - ArubaOS Licenses
1. LED utilized by the SD-WAN solution
2. 1RU can support two 9004 gateways side-by-side using an optional mount kit
Documentation:
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing and product availability subject to change without notice.
1RU can support two 9004 gateways side-by-side using an optional mount kit