ARUBA 7000 SERIES MOBILITY CONTROLLERS

Improved network performance, visibility, and control

KEY FEATURES

• Support for new Wi-Fi 6 (802.11ax), WPA3 and Enhanced Open – and existing standards
• Patented ClientMatch technology can now group together Wi-Fi 6 capable devices
• Dynamic Segmentation enforces wired and wireless access policies to simplify and secure the network
• Application awareness for 3,000+ applications without additional hardware
• Built-in AI-powered wireless/RF optimization
• 8 Gbps of maximum firewall throughput

Overview

Aruba 7000 Series Mobility Controllers enhance WLAN performance by centralizing all control functionality for individual Aruba access points (APs) to improve AP utilization, security, and client roaming. Ideally suited for midsize campuses and branches, the 7000 Series can be deployed using Zero Touch Provisioning (ZTP) to simplify deployment.

Key Benefits

SIMPLE AND SECURE ACCESS
The 7000 Series serves a key role in Dynamic Segmentation, providing Aruba’s Policy Enforcement Firewall (PEF) to enforce policies based on user role, device type, application, and network location - and simplifying and securing wired and wireless network access. Traffic is encapsulated in GRE tunnels for complete encryption all the way from an AP or switch. This feature can be enabled with the ArubaOS PEF license and eliminates the need to manually configure SSIDs, VLANs or ACLs for each new client on the network.

HIGH PERFORMANCE AND RELIABILITY
Each 7000 Series provides connectivity for up to 4,096 concurrent users or client devices, 64 access points and include up to 24 Ethernet ports and multiple WAN uplinks. With 8Gbps of maximum throughput to perform Policy Enforcement Firewall (PEF) features, the 7000 Series delvers plenty of horsepower for the most demanding enterprise environments. These capabilities are over 40 times the client density and 10 times the maximum throughput of typical network appliances.

For enhanced resiliency and availability, the 7000 Series can be clustered together in a network.

24/7 MISSION-CRITICAL NETWORKING
Aruba’s unique patented wireless technologies are based on AI-powered machine learning algorithms and integrated directly into ArubaOS. Adaptive Radio Management, AirMatch and ClientMatch (now enhanced with Wi-Fi 6 grouping) provide RF optimization techniques to improve user experience and network health based on changing environmental conditions, correct for noisy or congested RF and resolve sticky client issues during user roaming.

RFProtect provides advanced spectrum analysis and wireless intrusion protection (WIPS/WIDS) to help identify and mitigate Wi-Fi and non-Wi-Fi sources of interference, as well as containment of potential security risks. Learn more about Aruba’s software features on the ArubaOS datasheet.

When deployed with Aruba Mobility Conductor, the 7000 Series can be joined to a controller cluster to increase scale, improve reliability using High Availability (HA), adopt configurations seamlessly based on hierarchy, support Live Upgrades to reduce maintenance windows, and share licenses from a global licensing pool. The 7000 Series also serves a key policy enforcement role in Aruba’s 360 Secure Fabric. Aruba AirWave provides real-time monitoring, reporting and Wi-Fi planning and visibility services.

SD-WAN DEPLOYMENT
For organizations that are now managing multiple WAN connections, the 7000 Series can be connected to Aruba’s SD-WAN fabric right out of the box. SD-WAN is a rich WAN management solutions that is used to simplify management of traffic entering and exiting branch sites. Please refer to the SD-WAN datasheet for more information.

Enhanced Capabilities

Wi-Fi 6 (802.11ax) enhanced with ClientMatch
The latest Wi-Fi standard brings enhanced performance, speed, and efficiency with key features such as OFDMA, 1024-QAM, and bidirectional MU-MIMO. Combined with Aruba’s patented ClientMatch technology, 802.11ax clients will now be grouped together to optimize the multi-user experience.

Enhanced wireless security
Support for WPA3 brings stronger encryption and authentication methods, while Enhanced Open brings automatic security to open networks. New WPA2-MPSK feature enables simpler passkey management for WPA2 devices – should the Wi-Fi password on one device need to be changed, no additional key changes are needed for other devices on the network.

Dynamic Segmentation
To simplify and better secure wired and wireless network access, the 7000 Series can enforce per-user and device roles across wired and wireless networks by integrating with ClearPass Policy Manager. This ensures consistent policy regardless of user role and device type, and eliminates the need to configure unnecessary SSIDs, ACLs, VLANs and subnets at every node in the network.

Policy Enforcement Firewall
Enabled by the PEF license, wired and wireless user and application traffic can be tunneled to a stateful firewall on the 7000 Series through GRE tunnels for inspection. Policies are then enforced based on user role, device type, application and location - as described in Dynamic Segmentation.

Application visibility and control
As part of the PEF license, application visibility with Deep Packet Inspection (DPI) technology evaluates and optimizes performance and Quality of Service policies for over 3,000 applications - even for encrypted or hidden traffic.

Web content filtering
WebCC is an add-on subscription-based feature that classifies websites by content category and rates them by reputation. It can also block, apply QoS, bandwidth-limit, mirror, and log web content.

Unified Communications and Collaboration (UCC)
Visualize and troubleshoot networks based on call quality metrics such as MOS, latency, jitter and packet loss. Supported applications include: Teams, Skype for Business®, Wi-Fi Calling, Facetime, SIP, Jabber, Spark and more.

Zero Touch Provisioning
The 7000 Series can be factory-shipped and deployed onsite with cloud-based Aruba Activate. For network-specific requirements, settings can be applied based on hierarchical configuration.

Integrated VPN services
With support for IPSec/SSL VPNs, Aruba remote APs (RAPs) and Aruba VIA VPN users can establish encrypted sessions without any additional hardware required.

Third-party security integration
For advanced malware or antivirus protection, the 7000 Series can assume the role of an on-premises agent of centrally-hosted firewalls such as those provided by Palo Alto Networks and Check Point Software. Dedicated firewall appliances are no longer needed at each branch.

Product Image

Technical Specifications

¹ PoE: 802.3af, up to 15.4W from the PSE and up to 12.95W at the PD, not to exceed the total PoE Power Budget.

² PoE+: 802.3at, up to 30W per port from the PSE and up to 25.5W at the PD, not to exceed the total PoE Power Budget.

³ Sound power per ETSI 300 753 in accordance with ISO 7779

Service and Warranty Information

• Hardware: 1 year parts/labor, can be extended with support contract
• Software: 90 days, can be extended with support contract

Ordering Information

X: Supported transceiver
¹Default minimum ArubaOS software version is 6.5.3.0 and 8.1.0.0
²Minimum ArubaOS software version is 6.5.4.7 and 8.4.0.0
³Minimum ArubaOS software version is 8.1.0.0