
Overview
Improved network performance, visibility, and control
Aruba 9004 Series Gateways provide high
effective form
factor. Ideally suited for branch and small
Branch
solution, which unifies WLAN, LAN, SD
based network operations, assurance and
security platform. Onsite deployment is accomplished with a simple mobile installer application.
-performance SD-WAN and security functionality in a compact and cost-
campus networks, the 9004 Series Gateways serve a key role within Aruba’s SD-
-WAN and security for distributed enterprises.
easily configured and managed using Aruba Central, a cloud-
• Cloud-managed and purpose-built for branch SDWAN requirements.
• Up to 10 times the performance and 40 times the client density of typical SD-WAN appliances.
• Unified policy enforcement for wired and wireless traffic through Aruba Dynamic Segmentation.
• Visibility into over 3,000 applications with no added hardware.
Page

Standard Features
High Performance and Reliability
For distributed enterprises with increasing performance and bandwidth needs, the 9004 is designed with scale and flexibility, and
equipped with plenty of horsepower.
The 9004 provides connectivity for up to 2,048 users or client devices at up to 2 Gbps of firewall throughput or up to 4 Gbps of
wired bridged throughput. These capabilities are up to 40 times the client density and 10 times the maximum throughput of typical
SD
For enhanced resiliency and high availability, the 9004 can be clustered together with multiple gateways at each branch.
Unrestricted Bandwidth
Unlike other SD
WAN provides unrestricted bandwidth on every gateway license. This means you have
access to full
IoT and Integration Ready
The 9004 includes flexible connectivity options, with four Ethernet ports that can be used as access/WAN uplinks, a USB 3.0 port
for cel
party connectivity, and an integrated IoT radio that supports Bluetooth 5, Zigbee, and Near Field Communication
(NFC) wireless protocols.
The gateway also uses integrated device profiling to improve client visibility, and works with Aruba ClearPass Policy Manager or
ClearPass Device Insight to provide advanced user, device and IoT policy management and insights..
SD-WAN Deployment
For organizations that are now managing multiple WAN connections, 9004 Gateways can be connected to
WAN fabric
right out of the box. SD-WAN is a rich WAN management solution that is used to simplify management of traffic entering and exiting
branch sites. Please refer to the SD-WAN datasheet for more information.
Optional Mobility Controller Mode
9004 Gateways can also be re-purposed as Mobility Controllers with ArubaOS 8.5 software to provide wireless LAN services. In this
mode, the 9004 cannot simultaneously be used for SD-WAN. For more information, refer to the ArubaOS datasheet.
Unified Policy Enforcement
To simplify and better secure wired and wireless network access, the 9004 Series Gateways are a pivotal component in
Aruba
Dynamic Segmentation framework. Wired and wireless traffic can be tunneled to a gateway, which then provides consistent policy
enforcement based on user role (e.g. guest, contractor, departmental employee), device type, application or network location. Learn
about Dynamic Segmentation in this guide.
-WAN appliances.
-WAN vendors, Aruba SD-
hardware performance capabilities right out of the box - no upgrade purchases required.
lular third-
the Aruba SD-
the
Page

Features
Policy Enforcement Firewall
The 9004 includes a Layer 4
firewall with PEF to deliver a consistent user, device, and application awareness across WLAN,
LAN, and WAN. When deployed alongside Aruba ClearPass Policy Manager, policies are automatically enforced to simplify SSID,
VLAN and policy management. This is
Base Capacity, and PEF licenses.
Application Visibility and Control
Deep Packet Inspection (DPI) technology, which is a component of PEF, consistently evaluates and optimizes performance and usage
policies for over 3,000 applications. This ensures the highest possible Quality of Service (QoS) – even for encrypted traffic.
High Availablity
The 9004 can be deployed with N+1 or NxN redundancy, and can also join a controller cluster when deployed as a Mobility Controller
managed by Mobility Master. This increases performance and scale for enhanced resiliency.
Simple to use, mobile provisioning
Allows on
central IT team can verify device location, licenses, and status
with no additional steps required.
Available for iOS and Android..
Office365, Teams and Skype for Business
The
cts Office365, Teams and Skype for Business traffic
and then prioritizes them over less critical applications. Aruba Central also includes specific call quality heuristics for additional
visibility.
Service and Warranty Information
-7 stateful
the foundation of Dynamic Segmentation, and is included within the Foundation, Foundation
-site personnel to use a mobile app to onboard gateways. A
Aruba integration with Microsoft enable unique application insight that dete
• Hardware: 1 year parts/ labor, can be extended with support contract
• Mobility Controller Software: 90 days, can be extended with support contract
• SD-WAN Gateway Software: 1, 3, 5, 7, or 10 year subscription licenses
Page

Information
Build To Order:
BTO is a standalone unit with no integration. BTO products ship standalone are not part of a CTO or
Select the appropriate 9004 model
Aruba 9004 (US) 4-Port GbE RJ45 Gateway
Aruba 9004 (RW) 4-Port GbE RJ45 Gateway
Aruba 9004 (JP) 4-Port GbE RJ45 Gateway
Aruba 9004 (IL) 4-Port GbE RJ45 Gateway
Aruba 9004 (EG) 4-Port GbE RJ45 Gateway
Aruba 9004 (US) TAA 4-Port GbE RJ45 Gateway
Aruba 9004 (RW) TAA 4-Port GbE RJ45 Gateway
Aruba 9004 (JP) TAA 4-Port GbE RJ45 Gateway
Aruba 9004 (IL) TAA 4-Port GbE RJ45 Gateway
Aruba 9004 (EG) TAA 4-Port GbE RJ45 Gateway
Each 9004 model includes a JX990A power adapter supply and Power Cord included in the box.
Available everywhere except, US, Israel, Egypt, and Japan.
Bring in (Min 1 // Max 1) Localized power cord based on the Aruba Localization Menu
OCA Only Model Selection Form -Aruba > Wireless > Mobility Controllers > Gateway > 9000 Series
Power Cord for Power Supply (JX990A)
PC-AC-ARG Argentina 220V AC 10A 2-meter AC Power Cord
PC-AC-AUS Australian AC Power Cord
PC-AC-BR Brazil AC Power Cord
PC-AC-CHN China AC Power Cord
PC-AC-DEN Denmark 220V AC 10A 2-meter AC Power Cord
PC-AC-EC Continental European/Schuko AC Power Cord
PC-AC-IN India AC Power Cord
PC-AC-IL Israel 250V AC 10A 2-meter AC Power Cord
PC-AC-IT Italian AC Power Cord
PC-AC-JP Japanese AC Power Cord
PC-AC-KOR Korea AC Power Cord
PC-AC-NA North America AC Power Cord
Rack-Shippable solution.
Page

Information
Shelf Mount Kit (Optional or spare)
Std (Min 0 // max 99) User Selection (min 0 // max 99)
Aruba 9004-MNT-19 9004 Series 19-inch Rack Mount Kit
1RU can support two 9004 gateways side-by-side using an optional mount kit
AP-AC-12V30B 12V/30W AC/DC Desktop Style 2.1/5.5/9.5mm Circular 90 Deg Plug DoE Level VI
Adapter
Two 9004 models can be mounted side-by-side using the optional rack mount kit.
AP
12V30B 12V/30W AC/DC Desktop Style 2.1/5.5/9.5mm Circular 90 Deg Plug DoE Level VI
Adapter
Bring in (Min 1 // Max 1) Localized power cord based on the Aruba Localization Menu
Qty 1 Power Adapter is included with Aruba Gateway
Cloud-Managed SD-WAN Deployment
R
WAN use cases guide for more information on how the gateway can be used. Each gateway requires an Aruba
Central
WAN
license also enables the use of the entire bandwidth capacity stated in the data sheet for each gateway.
04 (and 7005 or 7008) gateway can be ordered with a base capacity license that
, each primary and backup gateway needs to have a separate subscription license applied.
Each SD
-
WAN hardware replacement support, order hardware-only support SKUs through your Aruba value-added reseller (VAR)..
SD-WAN Gateway Licenses
Foundation
• All features above, limited to 75 concurrent endpoints
-AC-
efer to the SD-
software subscription license to enable SD-WAN software features and the use of cloud-based management. The SD-
• For micro-branch deployments, the 90
supports up to 75 client devices each.
• In high availability deployments
-WAN Foundation and Foundation Base Capacity subscription includes software support and TAC/phone support. For SD
Features:
• Management for each 9004 Series
• User role-based access policies
• Dynamic Segmentation: Policy Enforcement Firewall, Layer 7 DPI
• Web content filtering
• Dynamic path steering, policy-based routing
• Routing: Static, dynamic, load-balancing, BGP
• WAN Services: NAT, DHCP
• Extensive WAN visibility
• VPN overlay, hub-spoke
• VIA VPN support
• HA: Active-standby, active-active
Features:
Page

Information
SD-WAN Cloud Subscription Licenses
Aruba 70xx Gateway Foundation 1yr Subscription E-STU
Aruba 70xx Gateway Foundation 3yr Subscription E-STU
Aruba 70xx Gateway Foundation 5yr Subscription E-STU
Aruba 70xx Gateway Foundation 7yr Subscription E-STU
Aruba 70xx Gateway Foundation 10yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 1yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 3yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 5yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 7yr Subscription E-STU
Aruba 70xx Gateway Foundation Base Capacity 10yr Subscription E-STU
NOTE: A single 9004 Gateway cannot be simultaneously used for SD-WAN and Mobility Controller functionality.
Foundation Base Capacity licenses are limited to 75 clients.
Cloud-Managed SD-WAN Deployment
The Aruba 9004 Series can alternatively be deployed using Aruba Mobility Controller software licenses, where the 9004 will perform
just like a 7000 Series or 7200 Series Mobility Controller in a campus or branch access layer deployment. In this mode, the gateway
cannot be simultaneously used for SD
Aruba Dynamic
Segmentation framework, with, at minimum, an access point (AP) license and a Policy Enforcement Firewall (PEF) license for each
Aruba access point and switch in the network..
Mobility Controller Licenses (Alternate)
Aruba LIC-AP Controller per AP Capacity License E-LTU
Aruba LIC-PEF Controller Policy Enforcement Firewall Per AP License E-LTU
Aruba LIC-RFP Controller RFProtect Per AP License E-LTU
Aruba LIC-ENT Enterprise (LIC-AP LIC-PEF LIC-RFP and LIC-AW) Licence Bundle E-LTU
Aruba LIC-ACR Controller Advanced Cryptography 1 Session License E-LTU
Aruba Controller Web Content Classification 1 Year Subscription E-STU
Aruba Controller Web Content Classification 3 Year Subscription E-STU
Aruba Controller Web Content Classification 5 Year Subscription E-STU
Aruba Controller Web Content Classification 7 Year Subscription E-STU
Aruba Controller Web Content Classification 10 Year Subscription E-STU
NOTE: A single 9004 Gateway cannot be simultaneously used for SD-WAN and Mobility Controller functionality.
For
LIC
For Dynamic Segmentation, the per
tunneling traffic. For
virtual switch stacks, one AP license will be consumed per stack.
LIC
LIC
by Mobility Master or a master controller in an ArubaOS 8
deployment.
-WAN. In Mobility Controller mode, the 9004 can also participate in the
each AP attached to the gateway, the minimal configuration is 1 x LIC-AP per AP.
-AW is a device license for the AirWave network management system.
-AP license count must equal the sum of APs and switches that are
-VIA license is a per-user session license that can be transferred from one gateway/controller to another.
-VIA supports centralized licensing and can be managed
Page

Technical Specifications
Firewall throughput (Gbps)
Encrypted throughput AES-CCM (Gbps)
Encrypted throughput (AES-CBC-256) (Gbps)
Mobility Controller Deployment Mode1
Maximum campus or remote Access Points
Maximum concurrent users/devices
Concurrent IPsec sessions
Concurrent tunneled ports
Firewall throughput (Gbps)
Wired bridged throughput (Gbps)
Encrypted throughput 3DES (Gbps)
Encrypted throughput AES-CBC-256 (Gbps)
Encrypted throughput AES-CCM (Gbps)
Encrypted throughput AES-GCM-256 (Gbps)
• Controller Mode – AP License
Desktop/Fanless4 Optional Mount Rack Tray
10G SFP+ Ports (SFP also supported)
Bluetooth 5, NFC and Zigbee/15.4 integrated radio2
• 8dBm transmit power (class 1)
3.82 cm x 19.85 cm x 15.31 cm
(1.5” x 7.815” x 6.03”)
4
1RU can support two 9004 gateways side-by-side using an optional mount kit.
These modes are only enabled when the appropriate minimum licenses and ArubaOS firmware are deployed:
• SD-WAN Mode – Aruba Central Foundation or Foundation Base Licenses
Central connectivity status LED3
PoE: 802.3af, 15.4W from the PSE and 12.95W at the PD
PoE+: 802.3at, 30W from the PSE and 25.5W at the PD
BLE enabled with the initial release, NFC and 15.4 enabled in a future release
LED utilized by the SD-WAN Gateway solution
Page

0° C to 40° C (32° C to 104° F)
-40° C to 70° C (-40° F to 158° F)
10% to 90% (RH), non-condensing
10% to 95% (RH), non-condensing
Maximum power consumption
12v DC, 2.5A AC-to-DC power adapter
AC line input current (steady state)
Regulatory and Safety Compliance
Description
Regulatory SKU information
Minimum software versions
WI-FI CERTIFIED Enhanced Open™, AOS 8.5
• NOM (obtained by partners and distributors)
Electromagnetic emissions certifications
• Common Language Equipment Identifier (CLEI) Code
• Others: MIC, NCC, ANATEL, COFTEL, CCC
ARCN9004
SD-WAN R1.7 (default) and Aruba Central 2.5.x in SD-WAN
mode, or ArubaOS 8.5.0.0 in Mobility Controller mode.
• Wi-Fi 6 (802.11ax), AOS 8.5; Wi-Fi CERTIFIED WPA3™, AOS 8.5;
UL 60950-1 Second Edition
• CAN/CSA-C22.2 No. 60950-1 Second Edition
• EN 60950-1 Second Edition
• EN 60950:2005
• IEC 60950-1 Second Edition
• EN/IEC 62368-1 2nd Edition
FCC Part 15 Class
• CISPR32 Class B
• EN55032 Class B
• ICES-003 Class B
• VCCI Class B
• EN61000-3-2
• EN61000-3-3
• EN55024, EN301 489-1/-17
• KN32 Class B
FCC/ISED
• RED Directive 2014/53/EU
Page

Summary of Changes
© Copyright 2019 Hewlett Packard Enterprise Development LP. The information contained herein is subject to
change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in
the express warranty statements a
as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors
or omissions contained herein.
ccompanying such products and services. Nothing herein should be construed
: http://www.hpe.com/networking
- 16380 - Worldwide - V1 - 3-September-2019
Page