Aruba 9000 Series Gateways

Perfect for branch and small campus networks, the next generation 9000 Series Gateways can be used for SD-WAN capabilities in the branch or for enhanced Wi-Fi scalability and security.

Cost-effective gateways for greater flexibility

Ideally suited for branch and small campus networks, the Aruba 9000 Series Gateways provide high-performance networking, SD-WAN, and security functionality in compact and cost-effective form factors.

Drawn icon of a trophy with an upward pointing arrow coming out of it High performance, greater scale

High performance, greater scale

Ensuring the highest levels of performance and availability for small campuses and large branches, the 9000 Series delivers seamless L2/L3 roaming for thousands of users or client devices.

Drawn icon of a lock with a keyhole Simplify secure access

Simplify secure access

Easily centralize the configuration of role-based access controls with Aruba’s built-in Policy Enforcement Firewall for Dynamic Segmentation.

Drawn icon of an arrow shooting horizontally through a bending path Eliminate branch complexity

Eliminate branch complexity

Deploying with SD-Branch software is an affordable way to support multiple WAN connections, including the internet, MPLS, cellular, software-defined role-based policy enforcement, and path optimization.

Icon of a cloud with a moving gear in front Leverage cloud-based network management

Leverage cloud-based network management

With AI-powered insights, workflow automation, and robust security, Aruba Central enables IT to manage and optimize campus, branch, remote, and data center networks. Deploy the 9000 Series with this powerful, cloud-native platform to make management and orchestration simpler.

Versatile, cost-effective branch networking, SD‑WAN, and security

Flexible use cases

The 9000 Series can be deployed as an SD-Branch gateway to support data center, public cloud, and SaaS routing. Or alternately, it can be used as a Wi-Fi gateway for greater scalability.

Scales to 2,048 users or client devices

Delivering 10x throughput and 80x the client density of typical SD-WAN devices, the 9000 Series is purpose-built to support high density and 6 Gbps of firewall throughput.

Integrated LTE connectivity

The 9004-LTE can use high-speed LTE as a dedicated or redundant WAN uplink for business continuity and greater flexibility.

Threat defense with IDS/IPS

To improve security, gateways deployed add role- and identity-based intrusion detection and prevention capabilities (IDS/IPS) on top of existing security features.

Policy Enforcement Firewall

A Layer 4-7 stateful firewall delivers a consistent user, device, and application awareness across WLAN, LAN, and WAN. When deployed alongside Aruba ClearPass Policy Manager, policies are automatically enforced to simplify SSID, VLAN, and policy management.

Details and specifications for the Aruba 9000 Series Gateways

Small form factor

Designed to support branch environments

WAN, LAN, Gateway, Central Status Lights

Built in support for Central with visual status for WAN, LAN, Gateway Mode, Central connectivity

Diversity and GPS antennas

支持多样性和GPS天线+选项for antenna extender kit (LTE model only)

LTE-support

Includes dual SIMs for failover and remote connectivity (LTE model only)

Details and specifications for the Aruba 9000 Series Gateways

Specifications

  • Performance and capacity
    9004 9004-LTE 9012
    SD-Branch*1.1 Supported Supported Supported
    WLAN Gateway*1.2 Supported Not Supported Supported
    Sizing Small site Small site Medium Site
    Interfaces 4x GbE2 4x GbE
    4G Cellular
    12x GbE
    Power over Ethernet x x x (120W)
    最大的校园或远程访问点 32 N/A 32
    Maximum clients Up to 2,048* Up to 2,048* Up to 2,048*
    Active Firewall sessions 64K (128K on SD-Branch 2.3+)3 64K (128K on SD-Branch 2.3+)3 64K (128K on SD-Branch 2.3+)3
    Maximum concurrent users/devices 2,048 2,048 2,048
    Maximum VLANs 4,096 4,096 4,096
    Concurrent GRE tunnels 544 544 544
    Concurrent IPsec sessions 2,048 2,048 2,048
    Concurrent SSL sessions 2,048 2,048 2,048
    Concurrent tunneled ports 2,048 2,048 2,048
    Firewall throughput (Gbps) 4 4 6
    Wired bridged throughput (Gbps) 4 4 6
    Encrypted throughput 3DES (Gbps) 4 4 4
    Encrypted throughput AES-CBC-256 (Gbps) 4 4 4
    Encrypted throughput AES-CCM (Gbps) 2 2 2
    Encrypted throughput AES-GCM-256 (Gbps) 2 2 2

    *1These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:

    • 1.1SD-WAN Mode – Aruba Central Foundation, Foundation Base, or Advanced Licenses
    • 1.2Controller Mode – ArubaOS Licenses

    *2The 9004 was originally released (8.5) to operate in an Auto/Auto configuration. A software fix was introduced in 8.7.1.5, 8.8.0.2, 10.2.0.3, and SDWAN-2.3.0.2, which allows users to configure the speed and duplex of the interfaces on the 9004 to:Auto/Auto, 1000/Full, or 100/Full.

    Speed Configuration
    The 9004 Interface speed can now be set toAuto/1000/100.

    Full Duplex Configuration
    9004 Interface =Auto
    Partnering Device Duplex Configuration =Full
    Partnering Device Auto Negotiation =Enabled

    *3Prior to 8.6, the active number of firewall sessions was set to 32K.

    Interfaces and indicators
    Features 9004/9004-LTE 9012
    Form factor/footprint Desktop/Fanless2Optional Mount Rack Tray Rack mount
    100/1000BASE-T 4 12 (6x PoE+ ports)
    10G SFP+ Ports (SFP also supported) - -
    Bluetooth 5 Yes Yes
    USB 3.0 Type-A 1 2
    System status LED Yes Yes
    WAN ports status LED Yes Yes
    LAN ports status LED Yes Yes
    Gateway mode LED Yes Yes
    Central connectivity status LED1 Yes Yes
    LTE status LED Yes Yes
    Console port micro USB, RJ45 micro USB, RJ45


    1LED utilized by the SD-WAN Gateway solution
    21RU can support two 9004 gateways side-by-side using an optional mount kit

    Integrated LTE
    Available on the 9004-LTE only
    Downlink/Uplink Speed 600/150 Mbps
    LTE Category 12
    Connectors 2xSMA connectors for Main and Diversity Antenna
    1xSMA connector for GPS
    Antenna
    Bands Supported
    Regions Supported Global
    LTE-FDD B1/B2/B3/B4/B5/B7/B8/B9/B12/B13/B14/B17/B18/B19/B20/B21/B25/B26/B28/B29/B30/B32/B66
    LTE-TDD B38/39/B40/B41
    2 x CA B1+B3/B5/B18/B19/B20/B21/B26; B2+B2/B4/B5/B12/B13/B17/B29/B30/B66;
    B3 + B3 / B5 / B7/B8/B19/B20/B28; B4+B4/B5/B12/B13/B17/B29/B30; B5+B7/B25/B30/B66;
    B7 + B7 / B20 / B28;B12 + B25 / B30;十三区最+ B66;B20 + B32;B25 +B25/B26/B41; B29+B30; B38+B38;
    B40+B40; B41+B41; B66+B66
    3 x CA DL inter-band 3CA:
    B1+B3+B7; B1+B3+B19; B1+B3+B20; B1+B19+B21; B2+B4+B5;
    B2+B4+B13; B2+B5+B30; B2+B12+B30; B2+B29+B30; B3+B7+B20; B3+B7+B28; B4+B5+B30;
    B4+B12+B30; B4+B29+B30; B5+B66+B2; B13+B66+B2
    DL 2 contiguous plus inter-band
    3CA:
    B2+B2+B5; B2+B2+B13; B3+B3+B7; B3+B7+B7; B3+B3+B20; B4+B4+B5; B4+B4+B13;
    B5+B66+B66; B13+B66+B66; B66+B66+B2; B66+B66+B66
    UMTS B1/B2/B3/B4/B5/B8/B19
    Certifications CE/ FCC/ IC/ NCC/ RCM/ GCF*/ PTCRB*/ ICASA* / WHQL ATT & VZW
    Physical
    9004/9004-LTE 9012
    Dimensions (HxWxD) 3.82 cm x 19.85 cm x 15.31 cm
    (1.5" x 7.815" x 6.03")
    4.37 cm x 39.5 cm x 26.00 cm (1.72" x 15.55" x 10.24")
    Weight 1.143 kg (2.519 lbs) 3.42 kg (7.54 lbs)
    Environmental range
    Specification 9004/9004-LTE 9012
    Operating Temperature 0° C to 40° C (32° C to 104° F) 0° C to 40° C (32° C to 104° F)
    Storage Temperature -40° C to 70° C (-40° F to 158° F) -40° C to 70° C (-40° F to 158° F)
    Operating Humidity 10% to 90% (RH), non-condensing 10% to 90% (RH), non-condensing
    Storage Humidity 10% to 95% (RH), non-condensing 10% to 95% (RH), non-condensing
    Operating Altitude 10,000 feet 10,000 feet
    Acoustic Noise 0 dBA (fanless) 29.1 – 63.5 dBA
    Cooling Conduction cooling Forced cooling
    Maximum Power Consumption 25W (with USB) 160W (with 120W of PoE)
    Power Source 12v DC, 2.5A AC-to-DC power adapter Internal Power Supply 90VAC – 264VAC 47-63Hz 3A at 100Vrms
    Power adapter specifications
    Features 9004/9004-LTE
    Input voltage range 90 VAC to 264 VAC
    Output voltage +12VDC, 2.5A
    Input frequency 47-63 Hz
    AC line input current (steady state) 1.0A
    Operating temperature -0° to +40° C
    Cooling -
    Weight .28 kg (.61 lbs)
    Regulatory and safety compliance
    Description 9004/9004-LTE 9012
    Minimum Software Versions SD-WAN R1.7 (default) and Aruba Central 2.5.x in SD-WAN mode, or ArubaOS 8.5.0.0 in Mobility
    Controller mode.
    Wi-Fi 6 (802.11ax), AOS 8.5; Wi-Fi CERTIFIED WPA3™, AOS 8.5; Wi-Fi
    CERTIFIED Enhanced Open™, AOS 8.5
    SD-WAN R2.0 (default) and Aruba Central 2.5.x in SD-WAN mode,ArubaOS (Future) in Mobility
    Controller mode.
    AOS 8 (WLAN Gateway Mode) 9004: 8.5.0.5
    9004-LTE: Not Supported
    8.7.1.1 or 8.8.0.0
    SD-Branch 9004: SD-WAN R1.7 and Aruba Central 2.5.x in SD-WAN mode
    9004-LTE: SD-WAN R2.2.0.2 or R2.3.0.0 and Aruba Central 2.51.x in SD-WAN mode
    SD-WAN R2.2.0.2 or R2.3.0.0 and Aruba Central 2.5.x in SD-WAN mode
    Regulatory SKU information ARCN9004 ARCN9012
    Safety certifications UL 60950-1 Second Edition
    CAN/CSA-C22.2 No. 60950-1 Second Edition
    EN 60950-1 Second Edition
    EN 60950:2005
    IEC 60950 - 1第二版
    EN/IEC 62368-1 2nd Edition
    NOM (obtained by partners and distributors)
    UL 60950-1 Second Edition
    CAN/CSA-C22.2 No. 60950-1 Second Edition
    EN 60950-1 Second Edition
    EN 60950:2005
    IEC 60950 - 1第二版
    EN/IEC 62368-1 2nd Edition
    NOM (obtained by partners and distributors)
    Electromagnetic emissions certifications FCC Part 15 Class B
    CISPR32 Class B
    EN55022 Class B
    ICES-003 Class B
    VCCI Class B
    EN61000-3-2
    EN61000-3-3
    EN55024, EN301 489-1/-17
    KN32 Class B (9004), KN35, KN301 489-1/-17
    CNS13438 Class B
    FCC Part 15 Class A
    CISPR32 Class A
    EN55032 Class A
    ICES-003 Class A
    VCCI Class A
    EN61000-3-2
    EN61000-3-3
    EN55024, EN301 489-1/-17
    KN32 Class A, KN35, KN301 489-1/-17
    CNS13438 Class A
    Telco Common Language Equipment Identifier (CLEI) Code Common Language Equipment Identifier (CLEI) Code
    Wireless certifications FCC/ISED
    RED Directive 2014/53/EU
    Others:  MIC, NCC, ANATEL, COFTEL, CCC
    FCC/ISED
    RED Directive 2014/53/EU
    Others:  MIC, NCC, ANATEL, COFTEL, CCC
    Service and warranty information
    Hardware: 1 year parts/labor, can be extended with support contract
    Mobility Controller Software: 90 days, can be extended with support contract
    SD-WAN Gateway Software: 1, 3, 5, 7, or 10 year subscription licenses

Wi-Fi 6E

Extending Wi-Fi 6 to the 6 GHz band, Wi-Fi 6E provides more contiguous spectrum and less interference while supporting multi-gigabit speeds and extremely low latency.

Related products

Find information on Aruba products that complement the 9000 Series Gateways or another solution better suited to your needs.

7200 Series Mobility Controllers and Gateways

Delivering industry-leading network services, the 7200 Series maximizes Wi-Fi performance to ensure seamless roaming. It’s perfect for campus WLAN scalability or branch SD-WAN, and VPN Concentrator capabilities.

7000 Series Mobility Controllers and Gateways

Perfect for mid-size campuses and branches, the 7000 Series enhances WLAN performance to improve wireless access, security, and client roaming.

流动控制器梵tual Appliance

流动控制器梵tual Appliances (VMCs) offer the same functionality as the physical Aruba Mobility Controllers. For higher scale and full ArubaOS features, they can be easily managed by the Aruba Mobility Conductor.

SD-Branch

9000 Series Gateways serve a key role within Aruba’s SD-Branch solution. Ideal for distributed enterprises, they unify WLAN, LAN, SD-WAN, and security.

Aruba Operations Support

Our around-the-clock service will keep your network operating smoothly. Simplifying the entire network technology lifecycle, Aruba Service enables a cost-effective network that is able to scale globally.

Ready to get started?