Aruba 9000 Series Gateways

Perfect for branch and small campus networks, the next generation 9000 Series Gateways can be used for SD-WAN capabilities in the branch or for enhanced Wi-Fi scalability and security.

Cost-effective gateways for greater flexibility

Ideally suited for branch and small campus networks, the Aruba 9000 Series Gateways provide high-performance networking, SD-WAN, and security functionality in compact and cost-effective form factors.

High performance, greater scale

High performance, greater scale

Ensuring the highest levels of performance and availability for small campuses and large branches, the 9000 Series delivers seamless L2/L3 roaming for thousands of users or client devices.

Simplify secure access

Simplify secure access

Easily centralize the configuration of role-based access controls with Aruba’s built-in Policy Enforcement Firewall for Dynamic Segmentation.

Eliminate branch complexity

Eliminate branch complexity

Deploying with SD-Branch software is an affordable way to support multiple WAN connections, including the internet, MPLS, cellular, software-defined role-based policy enforcement, and path optimization.

Leverage cloud-based network management

Leverage cloud-based network management

With AI-powered insights, workflow automation, and robust security, Aruba Central enables IT to manage and optimize campus, branch, remote, and data center networks. Deploy the 9000 Series with this powerful, cloud-native platform to make management and orchestration simpler.

Versatile, cost-effective branch networking, SD‑WAN, and security

Flexible use cases

The 9000 Series can be deployed as an SD-Branch gateway to support data center, public cloud, and SaaS routing. Or alternately, it can be used as a Wi-Fi gateway for greater scalability.

Scales to 2,048 users or client devices

Delivering 10x throughput and 80x the client density of typical SD-WAN devices, the 9000 Series is purpose-built to support high density and 6 Gbps of firewall throughput.

Integrated LTE connectivity

The 9004-LTE can use high-speed LTE as a dedicated or redundant WAN uplink for business continuity and greater flexibility.

Threat defense with IDS/IPS

To improve security, gateways deployed add role- and identity-based intrusion detection and prevention capabilities (IDS/IPS) on top of existing security features.

Policy Enforcement Firewall

A Layer 4-7 stateful firewall delivers a consistent user, device, and application awareness across WLAN, LAN, and WAN. When deployed alongside Aruba ClearPass Policy Manager, policies are automatically enforced to simplify SSID, VLAN, and policy management.

Details and specifications for the Aruba 9000 Series Gateways

  • Performance and capacity
    SD-Branch *1.1SupportedSupportedSupported
    WLAN Gateway *1.2SupportedNot SupportedSupported
    SizingSmall siteSmall siteMedium Site
    Interfaces4x GbE 24x GbE
    4G Cellular
    12x GbE
    Power over Ethernetxxx (120W)
    Maximum campus or remote Access Points32N/A32
    Maximum clientsUp to 2,048*Up to 2,048*Up to 2,048*
    Active Firewall sessions64K (128K on SD-Branch 2.3+) 364K (128K on SD-Branch 2.3+) 364K (128K on SD-Branch 2.3+) 3
    Maximum concurrent users/devices2,0482,0482,048
    Maximum VLANs4,0964,0964,096
    Concurrent GRE tunnels544544544
    Concurrent IPsec sessions2,0482,0482,048
    Concurrent SSL sessions2,0482,0482,048
    Concurrent tunneled ports2,0482,0482,048
    Firewall throughput (Gbps)446
    Wired bridged throughput (Gbps)446
    Encrypted throughput 3DES (Gbps)444
    Encrypted throughput AES-CBC-256 (Gbps)444
    Encrypted throughput AES-CCM (Gbps)222
    Encrypted throughput AES-GCM-256 (Gbps)222

    *1 These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:

    • 1.1 SD-WAN Mode – Aruba Central Foundation, Foundation Base, or Advanced Licenses
    • 1.2 Controller Mode – ArubaOS Licenses

    *2 The 9004 was originally released (8.5) to operate in an Auto/Auto configuration. A software fix was introduced in,,, and SDWAN-, which allows users to configure the speed and duplex of the interfaces on the 9004 to: Auto/Auto, 1000/Full, or 100/Full.

    Speed Configuration
    The 9004 Interface speed can now be set to Auto/1000/100.

    Full Duplex Configuration
    9004 Interface = Auto
    Partnering Device Duplex Configuration = Full
    Partnering Device Auto Negotiation = Enabled

    *3 Prior to 8.6, the active number of firewall sessions was set to 32K.

    Interfaces and indicators
    Form factor/footprintDesktop/Fanless2 Optional Mount Rack TrayRack mount
    100/1000BASE-T412 (6x PoE+ ports)
    10G SFP+ Ports (SFP also supported)--
    Bluetooth 5YesYes
    USB 3.0 Type-A12
    System status LEDYesYes
    WAN ports status LEDYesYes
    LAN ports status LEDYesYes
    Gateway mode LEDYesYes
    Central connectivity status LED1YesYes
    LTE status LEDYesYes
    Console portmicro USB, RJ45micro USB, RJ45

    1LED utilized by the SD-WAN Gateway solution
    21RU can support two 9004 gateways side-by-side using an optional mount kit

    Integrated LTE
    Available on the 9004-LTE only 
    Downlink/Uplink Speed600/150 Mbps
    LTE Category12
    Connectors2xSMA connectors for Main and Diversity Antenna
    1xSMA connector for GPS Antenna
    Bands Supported 
    Regions SupportedGlobal
    2 x CAB1+B3/B5/B18/B19/B20/B21/B26; B2+B2/B4/B5/B12/B13/B17/B29/B30/B66; B3+B3/B5/B7/B8/B19/B20/B28; B4+B4/B5/B12/B13/B17/B29/B30; B5+B7/B25/B30/B66; B7+B7/B20/B28; B12+B25/B30; B13+B66; B20+B32; B25+B25/B26/B41; B29+B30; B38+B38; B40+B40; B41+B41; B66+B66
    3 x CADL inter-band 3CA:
    B1+B3+B7; B1+B3+B19; B1+B3+B20; B1+B19+B21; B2+B4+B5; B2+B4+B13; B2+B5+B30; B2+B12+B30; B2+B29+B30; B3+B7+B20; B3+B7+B28; B4+B5+B30; B4+B12+B30; B4+B29+B30; B5+B66+B2; B13+B66+B2
    DL 2 contiguous plus inter-band 3CA:
    B2+B2+B5; B2+B2+B13; B3+B3+B7; B3+B7+B7; B3+B3+B20; B4+B4+B5; B4+B4+B13; B5+B66+B66; B13+B66+B66; B66+B66+B2; B66+B66+B66
    CertificationsCE/ FCC/ IC/ NCC/ RCM/ GCF*/ PTCRB*/ ICASA* / WHQL ATT & VZW
Dimensions (HxWxD)3.82 cm x 19.85 cm x 15.31 cm
(1.5" x 7.815" x 6.03")
4.37 cm x 39.5 cm x 26.00 cm (1.72" x 15.55" x 10.24")
Weight1.143 kg (2.519 lbs)3.42 kg (7.54 lbs)
Environmental range
Operating Temperature0° C to 40° C (32° C to 104° F)0° C to 40° C (32° C to 104° F)
Storage Temperature-40° C to 70° C (-40° F to 158° F)-40° C to 70° C (-40° F to 158° F)
Operating Humidity10% to 90% (RH), non-condensing10% to 90% (RH), non-condensing
Storage Humidity10% to 95% (RH), non-condensing10% to 95% (RH), non-condensing
Operating Altitude10,000 feet10,000 feet
Acoustic Noise0 dBA (fanless)29.1 – 63.5 dBA
CoolingConduction coolingForced cooling
Maximum Power Consumption25W (with USB)160W (with 120W of PoE)
Power Source12v DC, 2.5A AC-to-DC power adapterInternal Power Supply 90VAC – 264VAC 47-63Hz 3A at 100Vrms
Power adapter specifications
Input voltage range90 VAC to 264 VAC 
Output voltage+12VDC, 2.5A
Input frequency47-63 Hz 
AC line input current (steady state)1.0A 
Operating temperature-0° to +40° C
Weight.28 kg (.61 lbs) 
Regulatory and safety compliance
Minimum Software VersionsSD-WAN R1.7 (default) and Aruba Central 2.5.x in SD-WAN mode, or ArubaOS in Mobility Controller mode.
Wi-Fi 6 (802.11ax), AOS 8.5; Wi-Fi CERTIFIED WPA3™, AOS 8.5; Wi-Fi CERTIFIED Enhanced Open™, AOS 8.5
SD-WAN R2.0 (default) and Aruba Central 2.5.x in SD-WAN mode,ArubaOS (Future) in Mobility Controller mode.
AOS 8 (WLAN Gateway Mode)9004:
9004-LTE: Not Supported or
SD-Branch9004: SD-WAN R1.7 and Aruba Central 2.5.x in SD-WAN mode
9004-LTE: SD-WAN R2.2.0.2 or R2.3.0.0 and Aruba Central 2.51.x in SD-WAN mode
SD-WAN R2.2.0.2 or R2.3.0.0 and Aruba Central 2.5.x in SD-WAN mode
Regulatory SKU informationARCN9004ARCN9012
Safety certificationsUL 60950-1 Second Edition
CAN/CSA-C22.2 No. 60950-1 Second Edition
EN 60950-1 Second Edition
EN 60950:2005
IEC 60950-1 Second Edition
EN/IEC 62368-1 2nd Edition
NOM (obtained by partners and distributors)
UL 60950-1 Second Edition
CAN/CSA-C22.2 No. 60950-1 Second Edition
EN 60950-1 Second Edition
EN 60950:2005
IEC 60950-1 Second Edition
EN/IEC 62368-1 2nd Edition
NOM (obtained by partners and distributors)
Electromagnetic emissions certificationsFCC Part 15 Class B
CISPR32 Class B
EN55022 Class B
ICES-003 Class B
EN55024, EN301 489-1/-17
KN32 Class B (9004), KN35, KN301 489-1/-17
CNS13438 Class B
FCC Part 15 Class A
CISPR32 Class A
EN55032 Class A
ICES-003 Class A
EN55024, EN301 489-1/-17
KN32 Class A, KN35, KN301 489-1/-17
CNS13438 Class A
TelcoCommon Language Equipment Identifier (CLEI) CodeCommon Language Equipment Identifier (CLEI) Code
Wireless certificationsFCC/ISED
RED Directive 2014/53/EU
RED Directive 2014/53/EU
Service and warranty information
Hardware: 1 year parts/labor, can be extended with support contract
Mobility Controller Software: 90 days, can be extended with support contract
SD-WAN Gateway Software: 1, 3, 5, 7, or 10 year subscription licenses
Wi-Fi 6E

Wi-Fi 6E

Extending Wi-Fi 6 to the 6 GHz band, Wi-Fi 6E provides more contiguous spectrum and less interference while supporting multi-gigabit speeds and extremely low latency.

Related products

Find information on Aruba products that complement the 9000 Series Gateways or another solution better suited to your needs.

Detail of Aruba 7200 Gateway

7200 Series Mobility Controllers and Gateways

Delivering industry-leading network services, the 7200 Series maximizes Wi-Fi performance to ensure seamless roaming. It’s perfect for campus WLAN scalability or branch SD-WAN, and VPN Concentrator capabilities.

Stack of Aruba 7000 controllers and gateways

7000 Series Mobility Controllers and Gateways

Perfect for mid-size campuses and branches, the 7000 Series enhances WLAN performance to improve wireless access, security, and client roaming.

Computer monitor with the Aruba Dashboard on the screen

Mobility Controller Virtual Appliance

Mobility Controller Virtual Appliances (VMCs) offer the same functionality as the physical Aruba Mobility Controllers. For higher scale and full ArubaOS features, they can be easily managed by the Aruba Mobility Conductor.

Aruba products and solutions for SD-Branch


9000 Series Gateways serve a key role within Aruba’s SD-Branch solution. Ideal for distributed enterprises, they unify WLAN, LAN, SD-WAN, and security.

Aruba Operations Support

Our around-the-clock service will keep your network operating smoothly. Simplifying the entire network technology lifecycle, Aruba Service enables a cost-effective network that is able to scale globally.

Ready to get started?