Aruba 9000 Series Gateways
Perfect for branch and small campus networks, the next generation 9000 Series Gateways can be used for SD-WAN capabilities in the branch or for enhanced Wi-Fi scalability and security.
Versatile, cost-effective branch networking, SD‑WAN, and security
Flexible use cases
The 9000 Series can be deployed as an SD-Branch gateway to support data center, public cloud, and SaaS routing. Or alternately, it can be used as a Wi-Fi gateway for greater scalability.
Scales to 2,048 users or client devices
Delivering 10x throughput and 80x the client density of typical SD-WAN devices, the 9000 Series is purpose-built to support high density and 6 Gbps of firewall throughput.
Integrated LTE connectivity
The 9004-LTE can use high-speed LTE as a dedicated or redundant WAN uplink for business continuity and greater flexibility.
Threat defense with IDS/IPS
To improve security, gateways deployed add role- and identity-based intrusion detection and prevention capabilities (IDS/IPS) on top of existing security features.
Policy Enforcement Firewall
A Layer 4-7 stateful firewall delivers a consistent user, device, and application awareness across WLAN, LAN, and WAN. When deployed alongside Aruba ClearPass Policy Manager, policies are automatically enforced to simplify SSID, VLAN, and policy management.
Details and specifications for the Aruba 9000 Series Gateways
Performance and capacity 9004 9004-LTE 9012 SD-Branch *1.1 Supported Supported Supported WLAN Gateway *1.2 Supported Not Supported Supported Sizing Small site Small site Medium Site Interfaces 4x GbE 2 4x GbE
12x GbE Power over Ethernet x x x (120W) Maximum campus or remote Access Points 32 N/A 32 Maximum clients Up to 2,048* Up to 2,048* Up to 2,048* Active Firewall sessions 64K (128K on SD-Branch 2.3+) 3 64K (128K on SD-Branch 2.3+) 3 64K (128K on SD-Branch 2.3+) 3 Maximum concurrent users/devices 2,048 2,048 2,048 Maximum VLANs 4,096 4,096 4,096 Concurrent GRE tunnels 544 544 544 Concurrent IPsec sessions 2,048 2,048 2,048 Concurrent SSL sessions 2,048 2,048 2,048 Concurrent tunneled ports 2,048 2,048 2,048 Firewall throughput (Gbps) 4 4 6 Wired bridged throughput (Gbps) 4 4 6 Encrypted throughput 3DES (Gbps) 4 4 4 Encrypted throughput AES-CBC-256 (Gbps) 4 4 4 Encrypted throughput AES-CCM (Gbps) 2 2 2 Encrypted throughput AES-GCM-256 (Gbps) 2 2 2
*1 These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:
- 1.1 SD-WAN Mode – Aruba Central Foundation, Foundation Base, or Advanced Licenses
- 1.2 Controller Mode – ArubaOS Licenses
*2 The 9004 was originally released (8.5) to operate in an Auto/Auto configuration. A software fix was introduced in 22.214.171.124, 126.96.36.199, 10.2.0.3, and SDWAN-188.8.131.52, which allows users to configure the speed and duplex of the interfaces on the 9004 to: Auto/Auto, 1000/Full, or 100/Full.
The 9004 Interface speed can now be set to Auto/1000/100.
Full Duplex Configuration
9004 Interface = Auto
Partnering Device Duplex Configuration = Full
Partnering Device Auto Negotiation = Enabled
*3 Prior to 8.6, the active number of firewall sessions was set to 32K.
Interfaces and indicators Features 9004/9004-LTE 9012 Form factor/footprint Desktop/Fanless2 Optional Mount Rack Tray Rack mount 100/1000BASE-T 4 12 (6x PoE+ ports) 10G SFP+ Ports (SFP also supported) - - Bluetooth 5 Yes Yes USB 3.0 Type-A 1 2 System status LED Yes Yes WAN ports status LED Yes Yes LAN ports status LED Yes Yes Gateway mode LED Yes Yes Central connectivity status LED1 Yes Yes LTE status LED Yes Yes Console port micro USB, RJ45 micro USB, RJ45
1LED utilized by the SD-WAN Gateway solution
21RU can support two 9004 gateways side-by-side using an optional mount kit
Integrated LTE Available on the 9004-LTE only Downlink/Uplink Speed 600/150 Mbps LTE Category 12 Connectors 2xSMA connectors for Main and Diversity Antenna
1xSMA connector for GPS Antenna
Bands Supported Regions Supported Global LTE-FDD B1/B2/B3/B4/B5/B7/B8/B9/B12/B13/B14/B17/B18/B19/B20/B21/B25/B26/B28/B29/B30/B32/B66 LTE-TDD B38/39/B40/B41 2 x CA B1+B3/B5/B18/B19/B20/B21/B26; B2+B2/B4/B5/B12/B13/B17/B29/B30/B66; B3+B3/B5/B7/B8/B19/B20/B28; B4+B4/B5/B12/B13/B17/B29/B30; B5+B7/B25/B30/B66; B7+B7/B20/B28; B12+B25/B30; B13+B66; B20+B32; B25+B25/B26/B41; B29+B30; B38+B38; B40+B40; B41+B41; B66+B66 3 x CA DL inter-band 3CA:
B1+B3+B7; B1+B3+B19; B1+B3+B20; B1+B19+B21; B2+B4+B5; B2+B4+B13; B2+B5+B30; B2+B12+B30; B2+B29+B30; B3+B7+B20; B3+B7+B28; B4+B5+B30; B4+B12+B30; B4+B29+B30; B5+B66+B2; B13+B66+B2
DL 2 contiguous plus inter-band 3CA:
B2+B2+B5; B2+B2+B13; B3+B3+B7; B3+B7+B7; B3+B3+B20; B4+B4+B5; B4+B4+B13; B5+B66+B66; B13+B66+B66; B66+B66+B2; B66+B66+B66
UMTS B1/B2/B3/B4/B5/B8/B19 Certifications CE/ FCC/ IC/ NCC/ RCM/ GCF*/ PTCRB*/ ICASA* / WHQL ATT & VZW
|Power adapter specifications|
|Regulatory and safety compliance|
|Service and warranty information|
Find information on Aruba products that complement the 9000 Series Gateways or another solution better suited to your needs.
Delivering industry-leading network services, the 7200 Series maximizes Wi-Fi performance to ensure seamless roaming. It’s perfect for campus WLAN scalability or branch SD-WAN, and VPN Concentrator capabilities.
Perfect for mid-size campuses and branches, the 7000 Series enhances WLAN performance to improve wireless access, security, and client roaming.
Mobility Controller Virtual Appliances (VMCs) offer the same functionality as the physical Aruba Mobility Controllers. For higher scale and full ArubaOS features, they can be easily managed by the Aruba Mobility Conductor.
9000 Series Gateways serve a key role within Aruba’s SD-Branch solution. Ideal for distributed enterprises, they unify WLAN, LAN, SD-WAN, and security.