目录

• SD-Branch Components
  • 网关组件
    • 头端网关
    • Virtual Gateway
    • 分支网关
    • Micro Branch
  • 有线组件
    • Access Switches
    • Aggregation Switches
  • Wireless Components
    • Access Points
      • Aruba 5xx Series Access Point Options
      • Aruba 3xx系列访问点选项

SD-Branch Components

本节讨论推荐组件for an SD-Branch solution. Not every component is required for a valid SD-Branch deployment. The only hard requirements are a branch location with multiple WAN paths and Aruba Central for the management.

网关组件

The gateway offers organizations a reliable, high performance option with support for multiple WAN connections. From a routing standpoint, this provides IT with insight into the traffic flowing in and out of a site, regardless of the uplink. A headend gateway is needed for VPN tunnel termination in private data center and campus routing scenarios. A virtual gateway is needed for network deployments using cloud providers. A branch gateway provides direct access to the Internet at a remote site, as well as secure tunnel access to corporate resources at the headend location.

头端网关

The headend gateway acts as a VPN concentrator terminating VPN tunnels, and it provides routing into the data center or campus environments using OSPF or BGP. The headend gateway participates in the SD-WAN fabric overlay topology by terminating the tunnels from the BGWs. The headend gateway is a software function that runs on the Aruba 7200 series appliances, the 9000 series appliances, and some of the Aruba 7000 series appliances. The following table details the headend gateway scaling.

请参阅Aruba产品数据表，以获取本指南中未包括的详细规范：Aruba Gateways

Virtual Gateway

The virtual gateway extends the SD-WAN overlay services to the public cloud infrastructure. Virtual gateways function as VPN concentrators and terminate tunnels from branch gateways, Instant APs and, VIA clients. Like the hardware VPN concentrators, virtual gateways support routing, security, and tunneling features. Virtual gateways are supported in Amazon Web Services and in Microsoft Azure. The following table details the virtual gateway scaling.

分支网关

分支网关是每个远程站点的设备，该设备连接到WAN UPLINKS，并作为SD-WAN覆盖面料的端点参与。分支网关通过充当有线，无线，安全性和WAN政策在内的政策执行点来提供动态分割，包括路由。网关功能包括已有状态的防火墙，Web内容分类，混合WAN连接，IPSEC VPN，QOS和WAN路径监视和选择。分支网关是在Aruba 7200、9000和7000系列设备上运行的软件函数。下表详细介绍了分支网关缩放。

Note:有关Aruba Central支持网关的完整列表，请参见Aruba Central Supported Gateways.

Micro Branch

For very small and micro branch deployments, Aruba does not require a traditional branch gateway. You can deploy an AP at a small branch or home office location without a gateway. In this design, the AP establishes secure connections with the VPN concentrators at each headend or data center location. The AP provides Wi-Fi connectivity to the end devices and secure WAN access to corporate resources.

Note:For a complete list of Aruba Central-supported APs, seeAruba Central Supported APs.

有线组件

The wired LAN in the SD-Branch uses a layer-2 or layer-3 design. Although there are many hardware choices that work at the access layer in the network, this design focuses on products that are the most common and easily supported options in each layer of the network, with general guidance on which option to choose.

Access Switches

The access layer connects wired devices to the network, such as APs, workstations, multi-function printers, and other devices that don’t support Wi-Fi or need higher performance than a wireless connection can provide. The access layer also provides PoE to devices such as APs, IP phones, and IP cameras.

请参阅Aruba产品数据表，以获取本指南中未包括的详细规范：阿鲁巴校园访问开关

Aggregation Switches

The aggregation layer provides connectivity for all access layer switches and connects to the branch gateways. The aggregation layer is responsible for layer-3 routing in this design, and it handles all traffic between networks on the LAN and traffic leaving the LAN for the WAN or the Internet. For high availability, the aggregation layer consists of a pair of switches acting as a single switch. If a switch fails or needs to be taken out of service for maintenance, the other switch continues forwarding traffic without interruption to the LAN services.

请参阅Aruba产品数据表，以获取本指南中未包括的详细规范：Aruba Campus Aggregation switches

Note:For a complete list of Aruba Central-supported AOS-CX switches, seeAruba Central Supported AOS-CX switches.

Wireless Components

With Aruba’s standalone AP, the controller functions are in Central. Standalone APs are typically used in smaller networks or branch sites and scale up to 512 APs per site. In this design, we recommend deploying up to 350 APs. If you are planning to install more than 350 APs, please contact an Aruba or partner SE/CSE for verification of your design.

请参阅Aruba产品数据表，以获取本指南中未包括的详细规范：Aruba Indoor Access Points

Access Points

当前有两个系列的Aruba接入点：最新一代5XX系列802.11ax AP和3XX系列802.11ac Wave 2 AP。有关当前可用模型的详细信息如下列出；他们支持不同的吞吐量和客户端负载，以满足不同的部署需求。

型号中的最后一个数字表示天线类型。如果数字为4，则AP具有用于外部天线的连接器。如果数字为5，则AP具有内部天线。例如，IAP-334具有外部天线，IAP-335具有内部天线。在大多数办公室部署中，首选内部天线模型。

以下功能在当前的Aruba 5xx和3xx AP中很常见：

• 基于控制器或无控制器部署模式的统一AP

• 两个以太网端口之间的无POE故障转移（仅对以太网模型）

• 内置蓝牙低能电台

• Advanced Cellular Coexistence to minimize interference from cellular networks

• Support for security and network management with Aruba ClearPass and Aruba Central

• Application visibility for QoS and traffic control

• Enhanced security with WPA3 and Enhanced Open

Aruba 5xx Series Access Point Options

The Aruba 5xx Series of campus access points support 802.11ax to efficiently and simultaneously serve multiple clients and traffic types in dense environments. These APs offer increased data rates for both individual device and overall system while delivering high performance and throughput in environments where mobile and IoT density is a growing concern.

Aruba 5xx common capabilities:

• 双重上行链路端口，并支持冗余和增加容量

• 蓝牙5和Zigbee收音机，用于位置和物联网用例

• 绿色AP模式可节省70％的能源

Aruba 550系列访问点：The Aruba 550 Series APs are ideal for extreme high-density environments, such as public venues, higher education, hotels, and enterprise offices. The 550 series supports maximum data rates of 4.8Gbps in the 5GHz band and 1,150Mbps in the 2.4GHz band (for an aggregate peak rate of 5.95Gbps). The Aruba 550 series requires ArubaOS and Aruba InstantOS 8.5 software, and its features include:

• Dual-radio (8x8 + 4x4 MIMO)

• 可选的Tri-Radio模式*，带有两个5GHz和一个2.4GHz无线电（全部4x4 Mimo）

• 双5G HPE智能率端口

• AI-powered features for wireless RF and client connectivity optimization

• Up to 1024 associated client devices per radio (recommended active 200)

阿鲁巴岛530系列Access Points:The Aruba 530 Series APs are ideal for very high-density environments, such as higher education, K12, retail branches, hotels, and digital workplaces. The 530 series supports maximum data rates of 2.4Gbps in the 5GHz band and 1,150Mbps in the 2.4GHz band (for an aggregate peak rate of 3.55Gbps). The Aruba 530 series requires ArubaOS and Aruba InstantOS 8.5 software, and its features include:

• Dual-Radio（双4x4 Mimo）

• 双5G HPE智能率端口

• AI-powered features for wireless RF and client connectivity optimization

• Up to 1024 associated client devices per radio (recommended active 200)

Aruba 510系列访问点：The Aruba 510 Series APs are ideal for high-density environments, such as schools, retail branches, hotels, and enterprise offices. The 510 series supports maximum data rates of 2.4Gbps in the 5GHz band and 575Mbps in the 2.4GHz band (for an aggregate peak data rate of 2.975Gbps). The Aruba 510 series requires ArubaOS and Aruba InstantOS 8.4 software, and its features include:

• Dual-radio (4x4 + 2x2 MIMO)

• Single 2.5G HPE Smart Rate and Gigabit Ethernet uplink ports

• Up to 256 associated client devices per radio

Aruba 3xx系列访问点选项

Aruba 340 Series Access Points:Aruba 340系列是最高的性能AP，并支持HPE智能速率上行链路，因此它可以在两个5-GHz频段上使用3.5 Gbps的全部性能或5-GHz频段中的1.7 Gbps，在2.4-GHz频段中使用800Mbps，对于2.5 Gbps的组合带宽。该模型非常适合为礼堂，高密度办公环境或公共场所需要非常高密度和下一代性能的组织。Aruba 340系列需要Arubaos和Aruba Instantos 8.3软件。

• 双收音机4x4 802.11ac ap with Mu-mimo

• Optional dual 5-GHz mode supported, where the 2.4-GHz radio is converted to a second 5-GHz radio

• 天线极化多样性，以优化RF性能

• HPE智能率和带有链接聚合控制协议（LACP）支持增加容量的智能率和千兆以太网上行链路端口

• Hitless PoE failover between both Ethernet ports

Aruba 330 Series Access Points:Aruba 330系列是高性能的AP，并支持HPE智能速率上行链路，因此它可以在5-GHz频段中使用1.7 Gbps的完整性能，而2.4-GHz频段中的600Mbps则可以使用2.3 GBP的带宽。该模型非常适合为礼堂，高密度办公环境或公共场所需要高密度和下一代绩效的组织。

• 天线极化多样性，以优化RF性能

• HPE Smart Rate and Gigabit Ethernet uplink ports with LACP support for increased capacity

• Hitless PoE failover between both Ethernet ports

Aruba 310系列访问点：Aruba 310系列是一种中等性能的AP，在5GHz频段中支持1.7 Gbps，在2.4 GHz频段中具有300 Mbps，具有单个千兆以太网上行链路。该模型非常适合需要支持中等密度环境的组织，例如学校，零售分支机构，酒店和企业办公室，这些办公室不需要多Gigabit绩效。

Aruba 300 Series Access Points:Aruba 300系列是一个入门级AP，在5-GHz频段中支持1.3 Gbps和2.4 GHz频段中的300 Mbps，具有单个千兆以太网上行链路。该模型非常适合具有中等密度环境的组织，想要最新技术但不需要更高绩效水平的组织。

Note:For a complete list of Aruba Central-supported APs, seeAruba Central Supported APs.

---