ARUBA 9000 SERIES GATEWAY

Versatile, cost-effective branch networking, SD‑WAN, and security

KEY FEATURES

• Cloud-managed and purpose-built for branch SDWAN requirements
• Unified policy enforcement for wired and wireless traffic through Aruba Dynamic Segmentation
• Visibility into over 3,000 applications with no added hardware
• Integrated LTE option available

Overview

Aruba 9000 Series Gateways provide high-performance networking, SD-WAN and security functionality in compact and cost-effective form factors. Ideally suited for branch and small campus networks, the 9000 Series Gateways serve a key role within Aruba’s SD-Branch solution, which unifies WLAN, LAN, SD-WAN and security for distributed enterprises.

The 9000 Series can be easily configured and managed using Aruba Central, a cloud-based network operations, assurance and security platform. Onsite deployment is accomplished with a simple mobile installer application.

Key Benefits

HIGH PERFORMANCE AND RELIABILITY
For distributed enterprises with increasing performance and bandwidth needs, the 9000 Series is designed with scale and flexibility, and equipped with plenty of horsepower at a competitive price-point.

The 9000 Series provides connectivity for up to 2,048 users or client devices at up to 6 Gbps of firewall throughput.

For enhanced resiliency and high availability, the multiple 9000 Series can be clustered together at each branch.

IOT AND INTEGRATION READY
The 9000 Series includes flexible connectivity options:

• 4xGbE - 9004 / 9004-LTE
• 12xGbE (6xPoE+) – 9012
• USB 3.0 ports
• IoT Radio that supports BLE technologies
• Integrated LTE connectivity – 9004-LTE

The gateway also uses integrated device profiling to improve client visibility, and works with Aruba Central, ClearPass Policy Manager or ClearPass Device Insight to provide advanced user, device and IoT policy management and insights.

SD-WAN DEPLOYMENT
For organizations that are now managing multiple WAN connections, 9000 Series Gateways can be connected to Aruba’s SD-WAN fabric right out of the box. SD-WAN is a rich WAN management solution that is used to simplify management of traffic entering and exiting branch sites. Role-based intrusion detection and prevention (IDS/IPS), Dynamic Segmentation, and stateful firewall deliver integrated security requirements. Please refer to the SD-WAN datasheet for more information.

BRANCH AND CAMPUS DEPLOYMENT
9000 Series Gateways can also be re-purposed as Mobility Controllers to provide WLAN and LAN services such as Dynamic Segmentation, stateful firewall and Live Upgrades. In this mode, the 9000 Series cannot simultaneously be used for SD-WAN.

INTEGRATED LTE
The 9004-LTE is a Gateway with an integrated LTE module that can use high speed LTE as a dedicated or redundant WAN uplink. The LTE operations are managed via Aruba Central.

UNIFIED POLICY ENFORCEMENT
To simplify and secure wired and wireless network access, the 9000 Series Gateways are a pivotal component of Aruba Dynamic Segmentation. Wired and wireless traffic can be tunneled to a Gateway, which then consistently provides policy enforcement based on user role (e.g. guest, contractor, employee), device type, application and network location. Learn about Dynamic Segmentation in this guide.

Enhanced Capabilities

Policy Enforcement Firewall
The 9000 Series includes a Layer 4-7 stateful firewall with PEF to deliver a consistent user, device, and application awareness across WLAN, LAN, and WAN. When deployed alongside Aruba ClearPass Policy Manager, policies are automatically enforced to simplify SSID, VLAN and policy management. This is the foundation of Dynamic Segmentation, and is included within the Foundation, Foundation Base Capacity, and PEF licenses.

Threat Defense with IDS/IPS
To improve security against a growing attack surface, gateways deployed in SD-WAN mode add role and identity-based intrusion detection and prevention capabilities (IDS/ IPS) on top of existing security features. The threat defense function is further augmented with one-click integration with third-party cloud-based security solutions. This feature requires the appropriate Aruba Central subscription license.

Application visibility and control
Deep Packet Inspection (DPI) technology, which is a component of PEF, consistently evaluates and optimizes performance and usage policies for over 3,000 applications. This ensures the highest possible Quality of Service (QoS) – even for encrypted traffic.

High Availability
The 9000 Series can be deployed with N+1 or NxN redundancy, and can also join a controller cluster when deployed as a Mobility Controller managed by Mobility Conductor. This increases performance and scale for enhanced resiliency.

Simple to use, mobile provisioning
Allows on-site personnel to use a mobile app to onboard gateways. A central IT team can verify device location, licenses, and status with no additional steps required. Available for iOS and Android.

Unified Communications and Collaboration (UCC)
Visualize and troubleshoot networks based on call quality metrics such as MOS, latency jitter and packet loss. Supported applications include: Teams, Skype for Business, Wi-Fi Calling, FaceTime, SIP, Jabber, Spark and more.

Product Image

Technical Specifications

^*1 These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:

• ¹ SD-WAN Mode – Aruba Central Foundation, Foundation Base, or Advanced Licenses
• ² WLAN Gateway Mode – ArubaOS Licenses

^*2 The 9004 was originally released (8.5) to operate in an Auto/Auto configuration. A software fix was introduced in 8.7.1.5, 8.8.0.2, 10.2.0.3, and SDWAN-2.3.0.2, which allows users to configure the speed and duplex of the interfaces on the 9004 to: Auto/Auto, 1000/Full, or 100/Full.

Speed Configuration

The 9004 Interface speed can now be set to Auto/1000/100.

Full Duplex Configuration

9004 Interface = Auto

Partnering Device Duplex Configuration = Full

Partnering Device Auto Negotiation = Enabled

^*3 Prior to 8.6, the active number of firewall sessions was set to 32K.

¹ LED utilized by the SD-WAN solution

² 1RU can support two 9004 gateways side-by-side using an optional mount kit.

Service and Warranty Information

• Hardware: 1 year parts/labor, can be extended with support contract
• WLAN Gateway Software: 90 days, can be extended with support contract
• SD-WAN Gateway Software: 1, 3, 5, 7, or 10 year subscription licenses

Ordering Information

³ 1RU can support two 9004 gateways side-by-side using an optional mount kit.