Aruba SD-
WAN Software and Gateways for the Aruba 7000
and 7200 Series Controllers
Overview
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Simplify branch networks at the edge
Aruba Software-defined Wide Area Network (SD-WAN) technology simplifies branch operations and optimizes WAN
management.
Ideally suited for distributed enterprises undergoing digital transformations, Aruba Central-managed SD-WAN provides simplified
operations and increased visibility and control for the branch.
size offices, retail stores and medical clinics can benefit from the
transition to more agile, open and cloud-hosted environments.
With flexible policy, configuration and monitoring capabilities, organizations can simplify network operations by providing zerotouch provisioning and customizable templates to quickly deploy branch networks, centralize management for Aruba SD
Gateways, provide historical data reports, monitor for PCI compliance, and troubleshoot regional and global
into WAN health and optimization help IT determine the best link and routes to send traffic to corporate data centers or to t
Internet. Path selection can be based on per
Aruba Central offers a flexible subscription option that ranges from 1, 3, 5, 7, and 10 year offers. A base capacity license
limits total clients to 75 is also available for the Aruba 7005 Branch Gateway only. Features will continue to grow with
cloud updates.
Mid-
-WAN
locations. Key insight
-user, per-device, or per-application policies.
mary
which
successive
he
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
The Aruba 7000 Series is a versatile family of hardware that can operate as an SD-WAN gateway at the branch to optimize and
control WAN, LAN, and cloud security services. The
filtering, and compression.
With support for multiple WAN connection types, the
routes traffic over the most efficient link based on availability,
application, user
supplement or replace traditional WAN links such as MPLS.
Aruba offers a wide portfolio of
level platform for small branch or headend locations with additional switch requirements.
end deployments with up to 4 Gbps of throughput, 12 PoE/PoE+ gigabit
The Aruba 7200 Series acts as a headend gateway, or VPN concentrator (VPNC) for all branch offices. Branch gateways establish
IPSec tunnels to one or more
either multiple
availability.
The
the dual hub
the hub site data center, and can be deployed in active/standby or active/active configurations. Any of the
perform the function of VPNC at
performance and high tunnel scale to aggregate data traffic
from hundreds to thousands of branches.
branch gateway provides features such as routing, firewall, security, URL
branch gateway
-role, and link health. This allows organizations to take advantage of high-speed, lower-cost broadband links to
branch gateway to meet the WAN and security requirements for small and large branches:
• 7005 is a compact, fanless entry-level platform for small branch or headend locations. Provides up to 2 Gbps of
throughput, 4 gigabit switch ports, dual uplink capabilities, and can be powered by a Power over Ethernet (PoE) switch.
• 7008 is a compact, fanless entry-
Includes all of the features of the 7005 plus up to 8 PoE/PoE+ gigabit switch ports.
• 7010 is designed for mid-sized branch and head
switch ports and 2 SFP ports.
• 7024 is designed for mid-sized branch and headend deployments and includes all of the features of the 7010 plus up to
24 PoE/PoE+ gigabit switch ports and 2 SFP/SFP+ ports.
• 7030 is ideal for large branch or mid-size headend deployments with up to 8 Gbps of throughput and 8 dual-personality
headend gateways deployed at a single site or headend gateways deployed in pairs at multiple sites for the highest
headend gateways over the Internet or other untrusted networks. High availability options support
headend gateways support active/standby or active/active uplinks out of the branch. The most widely deployed topology is
-and-spoke where branches are multi-homed to a primary and backup data center. The headend gateway would sit at
headend gateways can
the hub site. These devices offer high-
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
SFP+ ports, 2 40G QSFP+ ports, hot-swappable redundant power supplies and field-replaceable fan trays.
Stateful firewall
Introduces contextual, role
wide users, devices, applications
and WAN state enhances visibility and security end
With centralized policy for WAN, WLAN, and LAN, IT can extend consistent policies across the entire distributed branch
This provides a simple and secure way to configure network devices and onboard IoT endpoints without additional overhead.
Gain rich application awareness into over 2,600 applications across 21 categories. WebCC provides protect
unauthorized web URLs.
Monitors application usage and performance while optimizing bandwidth, priority and network paths in real time, including app
that are encrypted or appear as web traffic. DPI is
design and capacity.
Simplify on
customizable mobile app.
headend gateways for VPN concentration and routing functions for corporate data center locations:
• 7210 provides higher performance and availability with up to 20 Gbps of throughput, 2 dual-personality ports, 4 10G
SFP+ ports, hot-swappable redundant power supplies and field-replaceable fan trays.
• 7220/7240/7240XM provides scale, performance, and availability with up to 40 Gbps of throughput, 2 dualpersonality
ports, 4 10G SFP+ ports, hot-swappable redundant power supplies and field-replaceable fan trays.
• 7280 provides unprecedented scale, performance, and maximum availability with up to 80 Gbps of throughput, 8 10G
-based awareness across WLAN, LAN, and WAN. Information on branch-
-to-end.
footprint.
ion from malicious or
DPI)
vital to understanding usage patterns that may require changes to network
-touch provisioning (ZTP) and Install Manager with Installer App
-site deployment with ZTP through cloud-based Aruba Central, and deploy new branches more efficiently with a
s
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Adaptive Quality of Service (QoS)
Broadband may not provide consistent bandwidth, so adaptive QoS monitors the uplink throughput and adjusts QoS policy based
on measured throughput.
ateway can actively and passively monitor established TCP connections for latency, jitter, packet loss, and throughput.
Policy
Traffic can be routed across private or public WAN uplinks based on application or user role (e.g. guest or employee), in addition to
traditional destination
When multiple WAN links exist,
characteristi
To improve overall bandwidth efficiency, the
branch and headend gateways. Compression efficiency varies depe
world scenarios typically show
40
The
multiple transport overlays
center can be routed either over MPLS or any available Internet path.
To reduce local branch complexity, integration with
Networks, CheckPoint and UCC applications such as Microsoft Skype for Business make extending security and
easier and more reliable across the distributed enterprise.
quality monitoring
branch g
-based routing
-based routing.
dynamic path selection (DPS) will help choose the best available path for an application based on
cs like throughput, latency, jitter, and packet loss.
branch gateway can enable data compression on the IPsec sessions between the
nding on the traffic type, but real-
-60% bandwidth savings.
branch gateway can support multiple uplinks, such as Internet broadband, existing MPLS, and cellular connectivity, with
across uplinks. Traffic destined for the Internet can be routed locally, while traffic destined for the data
-party integration
cloud services provided by firewall vendors such as ZScaler, Palo Alto
quality of service
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Configuration
Software-Defined WAN Gateway Ordering Guide
The SD-WAN Gateway utilizes the 70xx and 72xx Mobility Controller platforms. For a SD-WAN Gateway, you should use existing
Mobility Controller SKU’s and GPL pricing for the 70xx Branch Gateway and 72xx Headend Gateway/Concentrator.
not currently supported as a headend gateway.
SD-WAN Subscription Pricing
The SD-WAN solution is comprised of a SD-WAN software subscription license per 70xx Branch Gateway and 72xx Headend
Gateway/Concentrator. The SD
For all 70xx and 72xx Gateways, the licenses do not have a capacity limit (e.g. client device limit)
Gateway does include a Base Capacity license option that limits a 7005 Branch Gateway to 75 client devices.
70xx Branch GW Gateway, 72xx Headend Gateway
• Gateway and VPNC ViA support
The 7205 is
-WAN subscription is managed in Aruba Central.
; however, the 7005 Branch
Gateway and VPNC management
• Role and application based policies
• LAN segmentation (tunneled node)
• Routing: static and dynamic, load balancing
• WAN Services: NAT, DHCP
• L7 DPI
• Stateful firewall
• Content filtering
• Extensive WAN visibility
• VPN overlay, hub spoke
• Dynamic path selection
• High-availability (HA): active-standby, active-active
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Aruba Branch Gateway (7005)
1. Select the appropriate 7005 branch gateway
Aruba 7005 (RW) 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (US) 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (IL) 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (JP) 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (EG) 4x 10/100/1000BASE-T Ports 16 AP Branch Controller
Aruba 7005 (RW) FIPS/TAA-compliant 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (US) FIPS/TAA-compliant 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (IL) FIPS/TAA-compliant 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7005 (JP) FIPS/TAA-compliant 4-port 10/100/1000BASE-T 16 AP and 1K Client Controller
2. Select power supply (optional)
AP-AC-12V30A 12V/30W AC/DC Desktop Style 1.7/4.0/9.5mm Circular 90 Deg Plug DoE Level VI
Adapter
NOTE: 7005 is normally powered by 802.3at complaint PoE+
3. Power cord for optional supply (JX989A)
PC-AC-ARG Argentina 220V AC 10A 2-meter AC Power Cord
PC-AC-AUS Australian AC Power Cord
PC-AC-BR Brazil AC Power Cord
PC-AC-CHN China AC Power Cord
PC-AC-DEN Denmark 220V AC 10A 2-meter AC Power Cord
PC-AC-EC Continental European/Schuko AC Power Cord
PC-AC-IN India AC Power Cord
PC-AC-IL Israel 250V AC 10A 2-meter AC Power Cord
PC-AC-IT Italian AC Power Cord
PC-AC-JP Japanese AC Power Cord
PC-AC-KOR Korea AC Power Cord
PC-AC-NA North America AC Power Cord
PC-AC-SWI Switzerland 220V AC 10A 2-meter AC Power Cord
PC-AC-UK UK AC Power Cord
PC-AC-ZA South Africa 250V AC 10A 2-meter AC Power Cord
4. Shelf mount kit (optional)
Aruba 7005-MNT-19 7005 Series 19-inch Rack Mount Kit
5.Available Aruba Central SD-WAN licenses
Aruba 70xx Gateway Foundation 1yr Subscription E-STU
Aruba 70xx Gateway Foundation 3yr Subscription E-STU
Aruba 70xx Gateway Foundation 5yr Subscription E-STU
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Aruba 70xx Gateway Foundation 7yr Subscription E-STU
Aruba 70xx Gateway Foundation 10yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 1yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 3yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 5yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 7yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 10yr Subscription E-STU
NOTE: Foundation Base Capacity license is limited to 75 clients.
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Aruba Branch Gateway (7008)
1. Select the appropriate 7008 branch gateway
Aruba 7008 (IL) 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (JP) 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (RW) 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (US) 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (IL) FIPS/TAA 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (JP) FIPS/TAA 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (RW) FIPS/TAA 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
Aruba 7008 (US) FIPS/TAA 8p 100W PoE+ 10/100/1000BASE-T 16 AP and 1K Client Controller
2. Select AC power cord for main power supply
PC-AC-ARG Argentina 220V AC 10A 2-meter AC Power Cord
PC-AC-AUS Australian AC Power Cord
PC-AC-BR Brazil AC Power Cord
PC-AC-CHN China AC Power Cord
PC-AC-DEN Denmark 220V AC 10A 2-meter AC Power Cord
PC-AC-EC Continental European/Schuko AC Power Cord
PC-AC-IN India AC Power Cord
PC-AC-IL Israel 250V AC 10A 2-meter AC Power Cord
PC-AC-IT Italian AC Power Cord
PC-AC-JP Japanese AC Power Cord
PC-AC-KOR Korea AC Power Cord
PC-AC-NA North America AC Power Cord
PC-AC-SWI Switzerland 220V AC 10A 2-meter AC Power Cord
PC-AC-UK UK AC Power Cord
PC-AC-ZA South Africa 250V AC 10A 2-meter AC Power Cord
3. Spare power supply (optional)
Aruba PSU-150-AC 7008 Series 150W AC Spare Power Supply
4. Select AC power cord for ppare power supply
PC-AC-ARG Argentina 220V AC 10A 2-meter AC Power Cord
PC-AC-AUS Australian AC Power Cord
PC-AC-BR Brazil AC Power Cord
PC-AC-CHN China AC Power Cord
PC-AC-DEN Denmark 220V AC 10A 2-meter AC Power Cord
PC-AC-EC Continental European/Schuko AC Power Cord
PC-AC-IN India AC Power Cord
PC-AC-IL Israel 250V AC 10A 2-meter AC Power Cord
PC-AC-IT Italian AC Power Cord
PC-AC-JP Japanese AC Power Cord
PC-AC-KOR Korea AC Power Cord
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
PC-AC-NA North America AC Power Cord
PC-AC-SWI Switzerland 220V AC 10A 2-meter AC Power Cord
PC-AC-UK UK AC Power Cord
PC-AC-ZA South Africa 250V AC 10A 2-meter AC Power Cord
5. Shelf mount kit (optional)
Aruba 7008-MNT-19 7008 Series 19-inch Rack Mount Kit
6. Available Aruba Central SD-WAN licenses
Aruba 70xx Gateway Foundation 1yr Subscription E-STU
Aruba 70xx Gateway Foundation 3yr Subscription E-STU
Aruba 70xx Gateway Foundation 5yr Subscription E-STU
Aruba 70xx Gateway Foundation 7yr Subscription E-STU
Aruba 70xx Gateway Foundation 10yr Subscription E-STU
Page
Aruba SD-WAN Software and Gateways for the Aruba 7000 and 7200 Series Controllers
Aruba Branch Gateway (7010)
1. Select the appropriate 7010 branch gateway
Aruba 7010 (RW) 16p 150W PoE+ 10/100/1000BASE-T 1G BASE-X SFP 32 AP and 2K Clients
Controller
Aruba 7010 (US) 16p 150W PoE+ 10/100/1000BASE-T 1G BASE-X SFP 32 AP and 2K Clients
Controller
Aruba 7010(IL) 16p 150W PoE+ 10/100/1000BASE-T 1G BASE-X SFP 32 for AP and 2K Clients
Controller
Aruba 7010 (JP) 16p 150W PoE+ 10/100/1000BASE-T 1G BASE-X SFP for 32 AP and 2K Clients
Controller
Aruba 7010 (EG) 16x 1000BASE-T + 2x SFP Ports 32 AP Branch Controller
Aruba 7010 (RW) FIPS/TAA 16p 150W PoE+ 10/100/1000BASE-T 1GBASE-X SFP 32 AP and 2K
Clients Controller
Aruba 7010 (US) FIPS/TAA 16p 150W PoE+ 10/100/1000BASE-T 1GBASE-X SFP 32 AP and 2K
Clients Controller
Aruba 7010 (IL) FIPS/TAA 16p 150W PoE+ 10/100/1000BASE-T 1G BASE-X SFP 32 AP and 2K
Clients Controller
Aruba 7010 (JP) FIPS/TAA 16p 150W PoE+ 10/100/1000BASE-T 1GBASE-X SFP 32 AP and 2K
Clients Controller
PC-AC-ARG Argentina 220V AC 10A 2-meter AC Power Cord
PC-AC-AUS Australian AC Power Cord
PC-AC-BR Brazil AC Power Cord
PC-AC-CHN China AC Power Cord
PC-AC-DEN Denmark 220V AC 10A 2-meter AC Power Cord
PC-AC-EC Continental European/Schuko AC Power Cord
PC-AC-IN India AC Power Cord
PC-AC-IL Israel 250V AC 10A 2-meter AC Power Cord
PC-AC-IT Italian AC Power Cord
PC-AC-JP Japanese AC Power Cord
PC-AC-KOR Korea AC Power Cord
PC-AC-NA North America AC Power Cord
PC-AC-SWI Switzerland 220V AC 10A 2-meter AC Power Cord
PC-AC-UK UK AC Power Cord
PC-AC-ZA South Africa 250V AC 10A 2-meter AC Power Cord
3. Select transceivers for SFP ports
SFP-LX 1000BASE-LX SFP 1310nm LC Connector Pluggable GbE XCVR
SFP-SX 1000BASE-SX SFP 850nm LC Connector Pluggable GbE XCVR
Aruba 7010-MNT-19 7010 Series Replacement 19-inch Rack Mounting Kit
Page