Aruba 9004 Gateway
Versatile, cost-effective branch networking, SD‑WAN, and security

Overview:

The Aruba 9000 Series Gateways are ideally suited for branch deployments both large and small, and serve as network appliances for SD-WAN and security. Cellular connectivity is also available. Multiple gateways can be grouped as a cluster in each branch for high availability and resiliency.

The 9000 Series is configured and managed via Aruba Central, a simple-to-use cloud-based network operations, assurance and security platform. An optional mobile installer app simplifies on-site deployments to optimize IT resources.

Designed with the flexibility to support the most demanding branch environments – the 9000 Series Gateways provide connectivity for up to 80 times the maximum client density and up to 10 times the maximum throughput of typical SD-WAN appliances.

Features

HIGH PERFORMANCE AND RELIABILITY

For distributed enterprises with increasing performance and bandwidth needs, the 9000 Series is designed with scale and flexibility, and equipped with plenty of horsepower at a competitive price-point.

The 9000 Series provides connectivity for up to 2,048 users or client devices at up to 6 Gbps of firewall throughput. These capabilities are up to 80 times the client density and 10 times the maximum throughput of typical SD-WAN appliances.

For enhanced resiliency and high availability, the multiple 9000 Series can be clustered together at each branch.

IOT AND INTEGRATION READY

The 9000 Series includes flexible connectivity options:

• 4xGbE – 9004
• 12xGbE (6xPoE+) – 9012
• USB 3.0 ports
• IoT Radio that supports BLE technologies
• Integrated LTE connectivity – 9004-LTE

The gateway also uses integrated device profiling to improve client visibility, and works with Aruba Central, ClearPass Policy Manager or ClearPass Device Insight to provide advanced user, device and IoT policy management and insights.

SD-WAN DEPLOYMENT

For organizations that are now managing multiple WAN connections, 9000 Series Gateways can be connected to Aruba’s SD-WAN fabric right out of the box. SD-WAN is a rich WAN management solution that is used to simplify management of traffic entering and exiting branch sites. Role-based intrusion detection and prevention (IDS/IPS), Dynamic Segmentation, and stateful firewall deliver integrated security requirements. Please refer to the SD-WAN datasheet for more information.

BRANCH AND CAMPUS DEPLOYMENT

9000 Series Gateways can also be re-purposed as Mobility Controllers to provide WLAN and LAN services such as Dynamic Segmentation, stateful firewall and Live Upgrades. In this mode, the 9000 Series cannot simultaneously be used for SD-WAN.

UNIFIED POLICY ENFORCEMENT

To simplify and secure wired and wireless network access, the 9000 Series Gateways are a pivotal component of Aruba Dynamic Segmentation. Wired and wireless traffic can be tunneled to a Gateway, which then consistently provides policy enforcement based on user role (e.g. guest, contractor, employee), device type, application and network location.

MICROSOFT FEATURES

Aruba’s integration with Microsoft enables unique application intelligence that detects Microsoft 365 (Office 365), Teams, and Skype for Business traffic and then prioritizes them over less critical applications. Through management interfaces on Aruba Central, ArubaOS, and Aruba AirWave, IT can visualize call quality metrics such as MOS, latency, jitter, and packet loss for additional insights.

ENHANCED CAPABILITIES

Technical Specifications:

PERFORMANCE AND CAPACITY
SD-WAN Deployment Mode*	9004/9004-LTE	9012
Sizing	Small site	Medium site
Maximum clients	Up to 2,048*	Up to 2,048*
Firewall throughput (Gbps)	4	6
Encrypted throughput AES-CCM (Gbps)	2	2
Encrypted throughput AES-CBC-256 (Gbps)	4	4
Active firewall sessions	64K	64K
Mobility Controller Deployment Mode*
Maximum campus or remote Access Points	32	32
Maximum concurrent users/devices	2,048	2,048
Maximum VLANs	4,096	4,096
Active firewall sessions	64K	64K
Concurrent GRE tunnels	544	544
Concurrent IPsec sessions	2,048	2,048
Concurrent SSL sessions	2,048	2,048
Concurrent tunneled ports	2,048	2,048
Firewall throughput (Gbps)	4	6
Wired bridged throughput (Gbps)	4	6
Encrypted throughput 3DES (Gbps)	4	4
Encrypted throughput AES-CBC-256 (Gbps)	4	4
Encrypted throughput AES-CCM (Gbps)	2	2
Encrypted throughput AES-GCM-256 (Gbps)	4	6
INTERFACES AND INDICATORS
Features
Form factor/footprint	Desktop/Fanless2 Optional Mount Rack Tray	Rack mount
100/1000BASE-T	4	12 (6x PoE+ ports)
10G SFP+ Ports (SFP also supported)	—	—
Bluetooth 5	Yes	Yes
USB 3.0 Type-A	1	2
System status LED	Yes	Yes
WAN ports status LED	Yes	Yes
LAN ports status LED	Yes	Yes
Gateway mode LED	Yes	Yes
Central connectivity status LED1	Yes	Yes
Cellular (LTE) status LED	Yes	Yes
Console port	micro USB, RJ45	micro USB, RJ45
PHYSICAL
Dimensions (H x W x D)	3.82 cm x 19.85 cm x 15.31 cm (1.5” x 7.815” x 6.03”)	4.37 cm x 39.5 cm x 26.00 cm (1.72” x 15.55” x 10.24”)
Weight	1.143 kg (2.519 lbs)	3.42 kg (7.54 lbs)
ENVIRONMENTAL RANGE
Specification
Operating Temperature	0° C to 40° C (32° C to 104° F)	0° C to 40° C (32° C to 104° F)
Storage Temperature	-40° C to 70° C (-40° F to 158° F)	-40° C to 70° C (-40° F to 158° F)
Operating Humidity	10% to 90% (RH), non-condensing	10% to 90% (RH), non-condensing
Storage Humidity	10% to 95% (RH), non-condensing	10% to 95% (RH), non-condensing
Operating Altitude	10,000 feet	10,000 feet
Acoustic Noise	0 dBA (fan less)	29.1 – 63.5 dBA
Cooling	Conduction cooling	Forced cooling
Maximum Power Consumption	25W (with USB)	160W (with 120W of PoE)
Power Source	12v DC, 2.5A AC-to-DC power adapter	Internal Power Supply 90VAC – 264VAC 47-63Hz 3A at 100Vrms
REGULATORY AND SAFETY COMPLIANCE
Description
Regulatory SKU information	ARCN9004 / ARCN9004LTE	ARCN9012
Minimum Software Versions	9004: SD-WAN R1.7 (default) and Aruba Central 2.5.x in SD-WAN mode, or support started with 8.5.0.5 in Mobility Controller mode. 9004-LTE: SD-WAN R2.1 (default) and Aruba Central 2.5.1 in SD-WAN mode	SD-WAN R2.0 (default) and Aruba Central 2.5.x in SD-WAN mode, ArubaOS (Future) in Mobility Controller mode.
Safety certifications	UL 60950-1 Second Edition	UL 60950-1 Second Edition
	CAN/CSA-C22.2 No. 60950-1 Second Edition	CAN/CSA-C22.2 No. 60950-1 Second Edition
	EN 60950-1 Second Edition	EN 60950-1 Second Edition
	EN 60950:2005	EN 60950:2005
	IEC 60950-1 Second Edition	IEC 60950-1 Second Edition
	EN/IEC 62368-1 2nd Edition	EN/IEC 62368-1 2nd Edition
	NOM (obtained by partners and distributors)	NOM (obtained by partners and distributors)
Electromagnetic emissions certifications	FCC Part 15 Class B	FCC Part 15 Class A
	CISPR32 Class B	CISPR32 Class A
	EN55032 Class B	EN55032 Class A
	ICES-003 Class B	ICES-003 Class A
	VCCI Class B	VCCI Class A
	EN61000-3-2	EN61000-3-2
	EN61000-3-3	EN61000-3-3
	EN55024, EN301 489-1/-17, EN301 489-52 (9004-LTE)	EN55024, EN301 489-1/-17
	KN32 Class B , KN35, KN301 489-1/-17, KN301 489–52 (9004-LTE)	KN32 Class A, KN35, KN301 489-1/-17
	CNS13438 Class B	CNS13438 Class A
Telco	Common Language Equipment Identifier (CLEI) Code	Common Language Equipment Identifier (CLEI) Code
Wireless certifications	FCC/ISED	FCC/ISED
	RED Directive 2014/53/EU	RED Directive 2014/53/EU
	Others: MIC, NCC, ANATEL, COFTEL, CCC	Others: MIC, NCC, ANATEL, COFTEL, CCC
SERVICE AND WARRANTY INFORMATION
Hardware: 1 year parts/labor, can be extended with support contract Mobility Controller Software: 90 days, can be extended with support contract SD-WAN Gateway Software: 1, 3, 5, 7, or 10 year subscription licenses

*These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:

• SD-WAN Mode – Aruba Central Foundation, Foundation Base, or Advanced Licenses
• Controller Mode – ArubaOS Licenses

1. LED utilized by the SD-WAN solution
2. 1RU can support two 9004 gateways side-by-side using an optional mount kit

Documentation:

Aruba 9000 Series Gateway Datasheet (.PDF)