BR100 Branch Router

The Aerohive BR100 packs “work anywhere” mobility, enterprise routing, and security into one compact device.

Administrators need only set up a single configuration for remote devices via the familiar HiveManager interface; when the BR100 branch router is plugged in, it discovers the HiveManager automatically, and configuration is pushed to it. The BR100 enables administrators to run a thousand remote office VPNs as easily as a single deployment.

In addition to 802.11n WiFi, the BR100 features up to 8 SSIDs and 16 VLANs shared across wired and wireless interfaces, which can be configured in a number of ways to handle any small office/teleworker requirements. One SSID can be dedicated for employee access using 802.1X, for example, while another is used for guest access where devices are using a pre-shared key. Four 10/100 LAN ports are also configurable to share a VLAN with a wireless SSID, as well as be protected by a Captive Web Portal.

The BR100 can be provisioned in several different ways, for maximum convenience and cost effectiveness. Organizations may choose to purchase the BR100 outright, and deploy/manage the devices as usual. Or the BR100 can be enabled via the innovative Branch on Demand. This subscription includes the BR100 and a subscription to Aerohive’s HiveManager Online, for the ultimate in flexibility.

Since most of the traffic generated at branch or remote locations is destined for the Internet, Aerohive’s patent-pending Cloud Proxy automatically diverts that traffic through a cloud-based web security service, vastly reducing bandwidth costs by eliminating the need to route branch, remote office or mobile-user traffic back to a central location for filtering.

Features & Benefits

Layer 3 IPSec VPN

  • Enables remote users to connect authenticated devices to corporate resources
  • Eliminates the need for IPSec or SSL VPN software on each device

Wired/Wireless Access and Control

  • Single centralized management console guarantees identical security, identity, and network access policy across wireless or wired ports

Cloud Proxy

  • Patent-pending Cloud Proxy automatically diverts Internet-bound traffic through cloud-based web security service
  • Reduces bandwidth cost

Network Flow-based Stateful Firewall

  • Enforces policy at the network level via a combination of user identity and very granular mobile device management.
  • Access based on who they are and the type of device that they are using.

Network-as-a-Service Offering

  • One year subscription enables flexible deployment of branch routers without CAPEX



  • Desktop
  • Keyhole Wall Mounts


  • 1×1 Single Band 802.11b/g/n

Data Rates

  • 802.11b: 1,2,5.5 and 11Mbps
  • 802.11g: 6,9,12,18,24,36,48, and 54 Mbps
  • 802.11n (HT20/HT40): MCS0-MCS7

Frequency Band

  • 2412MHz – 2472MHz Frequency Band




  • WEP, AES and TKIP


  • 2x embedded antenna with diversity function


  • 1x IEEE 802.3 (10BASE-T) and IEEE 802.3u(100BASE-TX) Compliant 10/100 Mbps RJ45 Fast Ethernet WAN Port
  • 4x IEEE 802.3(10Base-T) and IEEE802.3u(100BASE-TX) Compliant 10/100 Mbps RJ45 LAN Ports with auto-sensing and auto-MDI/MDI-X. IEEE 802.3x PAUSE frame flow controle in full duplex
  • 1x Type-A USB2.0 port backward compatible with USB1.1
  • 1x Reset button to reset (on press) and load factory default settings (when pressed for more than 5 seconds)

3G Backhaul

  • Verizon Pantech
  • AT&T Shockwave


  • Power/Status
  • WAN Port
  • LAN Ports (1-4)


  • 134 x 109 x 30 mm
  • 4.3 lbs, 6.05 lbs w/antennas and brackets


  • 1 Kensington Lock Connector


  • Operating: 0 to +40°C, Storage: -20 to +70°C
  • Humidity: 5 to 95% RH (non-condensing)


  • >200,000 hours based on Telecordia SR-332, Issue 2 at +25°C ambient temperature


  • DC 12V/1A Input