Wireless LAN Controller WX4400 and 3Com Wireless LAN ... · Networking to deliver network services....
6
1 3Com ® Wireless LAN Controller WX4400 and 3Com Wireless LAN Switch WX1200 • Connect users securely to wireless LANs, enabling users to roam the network • Provides comprehensive MAP control for airspace optimization and enhanced security • Delivers enhanced management, seamless security, and planning ease to wireless networks of all sizes • Strengthens wireless security implementations and management, from network to user DATA SHEET Key Benefits Centralized Visibility, Management, and Control of the Wireless Environment The 3Com ® Wireless LAN Mobility system consists of a 3Com Wireless LAN Controller (WX4400), 3Com Wireless LAN Switch (WX1200), and 3Com Wireless LAN Switch Manager software. The Wireless LAN system centrally manages and controls 3Com or third party wireless LAN Managed Access Points (MAPs). It is ideal for demanding, complex deployments with multiple offices or with highly secure LAN requirements. Comprehensive Control of MAPs for RF Optimization and Enhanced Security Control MAP configuration and optimize radio-frequency (RF) coverage and performance using 3Com wireless controllers and switches, which are all managed from the 3Com Wireless Switch Manager, and can be accessed anywhere on the network. With a few keystrokes, param- eters can be changed for multiple MAPs, eliminating the time-consuming task of indi- vidually configuring each device, and providing simple setup. The result simplifies initial deployment as well as easing long- term management. Enhanced Control for Seamless Security and Mobility Because wireless clients are mobile, 3Com uses innovative Identity-Based Networking to deliver network services. This approach is based on user identity instead of ports or devices. Multiple controllers and switches, grouped into a Mobility Domain share user databases to support mobility and security across the entire network infrastructure, including remote offices. Through this WLAN-wide information exchange, the 3Com Wireless LAN Mobility System enforces consistent network-wide access and security policies as users roam the network. No longer connection-dependent, user location, security and access details are quickly transferred between switches and/or controllers. This enables fast roaming with seamless security and session integrity without the need for re-authentication or IT intervention. Fast roaming with session integrity also enables interoperability with voice-over-Wi-Fi phones. Strong Wireless Security Implementations and Management The wireless switching solution builds on 3Com’s already strong wireless security features to fortify network protection. 3Com’s existing foundation of wireless security includes AES, TKIP, and WEP encryption combined with WPA and 802.1X authentication. The 3Com Wireless LAN Mobility System significantly enhances wireless security with centralized security management. The exchange of user-based information within the Mobility Domain adds an entirely new level of control for user and group access to network resources. Once more, sharing user-specific security policies between WLAN controllers and switches results in a consistent enforcement of user and group attributes across the WLAN as the user roams.
Transcript of Wireless LAN Controller WX4400 and 3Com Wireless LAN ... · Networking to deliver network services....
1
3Com® Wireless LAN Controller WX4400and 3Com Wireless LAN Switch WX1200
• Connect users securely towireless LANs, enabling users toroam the network
• Provides comprehensive MAPcontrol for airspace optimizationand enhanced security
• Delivers enhanced management,seamless security, and planningease to wireless networks of all sizes
• Strengthens wireless securityimplementations andmanagement, from network to user
DATA SHEET
Key Benefits
Centralized Visibility, Management,and Control of the WirelessEnvironment The 3Com® Wireless LAN Mobility systemconsists of a 3Com Wireless LANController (WX4400), 3Com Wireless LANSwitch (WX1200), and 3Com Wireless LANSwitch Manager software. The WirelessLAN system centrally manages andcontrols 3Com or third party wireless LANManaged Access Points (MAPs). It is idealfor demanding, complex deployments withmultiple offices or with highly secure LANrequirements.
Comprehensive Control of MAPs for RFOptimization and Enhanced Security Control MAP configuration and optimizeradio-frequency (RF) coverage andperformance using 3Com wirelesscontrollers and switches, which are allmanaged from the 3Com Wireless SwitchManager, and can be accessed anywhere onthe network. With a few keystrokes, param-eters can be changed for multiple MAPs,eliminating the time-consuming task of indi-vidually configuring each device, andproviding simple setup. The result simplifiesinitial deployment as well as easing long-term management.
Enhanced Control for SeamlessSecurity and Mobility Because wireless clients are mobile, 3Comuses innovative Identity-BasedNetworking to deliver network services.This approach is based on user identityinstead of ports or devices. Multiplecontrollers and switches, grouped into aMobility Domain share user databases tosupport mobility and security across theentire network infrastructure, includingremote offices.
Through this WLAN-wide informationexchange, the 3Com Wireless LANMobility System enforces consistentnetwork-wide access and security policiesas users roam the network. No longerconnection-dependent, user location, security and access details are quicklytransferred between switches and/orcontrollers. This enables fast roaming withseamless security and session integritywithout the need for re-authentication orIT intervention. Fast roaming with sessionintegrity also enables interoperability withvoice-over-Wi-Fi phones.
Strong Wireless SecurityImplementations and ManagementThe wireless switching solution builds on3Com’s already strong wireless securityfeatures to fortify network protection.3Com’s existing foundation of wirelesssecurity includes AES, TKIP, and WEPencryption combined with WPA and802.1X authentication.
The 3Com Wireless LAN Mobility Systemsignificantly enhances wireless securitywith centralized security management. The exchange of user-based informationwithin the Mobility Domain adds anentirely new level of control for user andgroup access to network resources. Oncemore, sharing user-specific security policiesbetween WLAN controllers and switchesresults in a consistent enforcement of userand group attributes across the WLAN asthe user roams.
3COM® WIRELESS LAN CONTROLLER WX4400 AND 3COM WIRELESS LAN SWITCH WX1200 DATA SHEET
2
Description
FLEXIBLE, SCALABLE MOBILITY ARCHITECTURE
Mobility Domains Groups of 3Com wireless controllers and/or switches that share user information and authorizations as usersroam to support mobility and enforce security across the entire wireless network.
Topology independence By providing a Layer 2 path for Layer 3 traffic, 3Com wireless controllers, switches and MAPs operate as anintegrated infrastructure separated by L2/L3 devices even in distributed remote networks, making it easy toexpand or modify the WLAN as needed.
Fast roaming Quick handoff of user information and authorizations within the Mobility Domain enables seamless roamingwith session integrity and mobility robust enough to support voice traffic.
Multiple per-user queues Class-based traffic queuing at the MAP helps ensure that voice and other real-time applications receive theclass of service and quality of service they need over the WLAN.
Pay-as you-go scalability Upgrade licenses in 24-MAP increments for the WX4400 increase support to a total of 96 MAPs (3Com Wireless LAN Controller WX4400) per controller for flexible expansion.
PoE support The WX1200 supplies both data and power to MAPs over Ethernet cabling for installation flexibility.(3Com Wireless LAN Controller WX1200)
ENCRYPTION
Multiple encryption schemes Advanced Encryption Standard (AES), Temporal Key Interchange Protocol (TKIP), and Wired Equivalent Privacy(WEP) encryption performed at the MAP help protect all communications.
Per-user encryption assignment Enforces different security policies on a per-user or per-group basis for flexible, in-depth security control and management.
AAA SECURITY
Local or RADIUS server 802.1X authentication Helps ensure that only authorized users access the network. Centralizes authentication control and management of all network users.
Virtual Private Group™ support Enables IT staff to assign policies that control per-user or per-group network access throughout the WLAN for secure seamless roaming, and keeps user traffic separate and secure.
Mobility Profile™ Specifies which MAP or LAN authentication ports a user or group can use, allowing IT staff to dynamicallyapply access permissions based on attributes returned by the AAA server.
AAA integration and RADIUS offloading Wireless controllers and switches can shoulder backend encryption key generation and authentication tasks,reducing the processing load and increasing the scale and efficiency of central AAA RADIUS servers whilereducing AAA traffic over the WLAN.
User, MAC, and VLAN “globbing” Allows IT staff to assign AAA policies to user, subnet, or device groups for convenient, efficient, cost-effective WLAN administration.
Bonded authentication Makes sure only trusted users and client devices access the network, by bonding 802.1X machine authentication with 802.1X user authentication.
Time-of-day/Day-of-week access Lets IT staff control and restrict network resource access at predetermined times on an hourly, daily, or weekly basis.
Location policy enforcement Allows IT staff to assign to add or override AAA-defined access permissions based on user location, providing a choice of centralized and location-specific policy implementation.
Features
Contains Equipment Expense andManagement Complexity, Adds Cost-Effective Scalability3Com’s versatile solution can be deployed on any existing Layer 2 or Layer 3 LANtopology with no backbone or hardwarereconfiguration required. Wirelesscontrollers or switches and associated MAPscan reside anywhere in the network, sepa-rated by L2/L3 devices, and can operate asan integrated infrastructure, making it easyto scale or change as business needs dictate.
The WX1200 supports up to 12 MAPs whilethe WX4400 comes configured to support 24 MAPs and is expandable in increments of24 MAPS to support up to 96 MAPs percontroller for “pay-as-you-grow” flexibility.WX4400s and WX1200s can be mixed andmatched together within a Mobility Domainto manage and control thousands of MAPsfor unparalleled scalability. 3Com wirelesscontrollers and switches already supportfuture wireless LAN capabilities, such aswireless IP Telephony (VoIP), today, anddownloadable firmware upgrades will keepyour network current with developing standards releases.
Key Benefits, continued
3
3COM® WIRELESS LAN CONTROLLER WX4400 AND 3COM WIRELESS LAN SWITCH WX1200 DATA SHEET
Description
RF SECURITY & CONTROL
SentrySweep™ rogue AP detection Scheduled or on-demand RF scans identify unauthorized APs and ad-hoc networks and alert the central ITstaff. Dedicated APs can continually sweep the airspace for 24x7 protection in environments that requirehigher security.
Dual band RF scans A single AP radio can sweep both 802.11a and 802.11b/g frequency bands and associated channels whilethe WLAN stays up and running.
Real-time RF monitoring and control RF scans measure signal strength and usage; software tools dynamically adjust traffic loads, power, RF footprint, or channel assignments to maximize coverage with capacity.
Managed access point control Centrally maintains and distributes MAP settings, eliminating the need to individually configure each device.
CENTRAL CONTROL AND MANAGEMENT
Identity-Based Networking Provides all services based on user identity so things like virtual private group membership, access control lists (ACLs), authentication, roaming policies and history, location tracking, bandwidth usage, and otherauthorizations all stay with users as they roam. Also tells the IT manager who’s connected, where they are,where they’ve been, what services they’re using, and what services they’ve used.
3Com Wireless Switch Manager Wireless network management suite enables IT staff to successfully and cost-effectively plan, deploy, monitor, and manage WLANs from a central point. Separately purchased required product.
Remote Management Use the 3Com’s Wireless Switch Manager to securely manage from anywhere. Use the built-in Web browser via SSL or HTTPS, or command line interface via SSHv2 or Telnet. 3Com’s Wireless Switch Manager is interoperable with enterprise management tools such as 3Com Network Director (3ND) and HP OpenView.
NETWORK RESILIENCY
Enterprise-grade resiliency features Location-independent self-healing topology, Per-VLAN Spanning Tree (PVST+), and redundant MAP configurations add network resiliency for demanding networks.
RADIUS server load-sharing Distributing user authentication processing across multiple AAA servers increases network resiliency; serverscan be set up to track specified user session and accounting information for chargeback purposes.
Hot-swappable power supply A second, optional power supply can be installed for hot-swappable redundacy. (3Com Wireless LAN Controller WX4400)
Four dual-purpose Gigabit ports Support 1000 Mbps copper, or fiber with GBIC modules, for flexible Gigabit Ethernet backbone and (3Com Wireless LAN Controller WX4400) server connections.
Features, continued
4
3COM® WIRELESS LAN CONTROLLER WX4400 AND 3COM WIRELESS LAN SWITCH WX1200 DATA SHEET
Corporate Bakbone
3Com Wireless LAN
Managed Access Point
2750 devices
LAN Clients
Authentication
Server
3Com SuperStack 3
Switch 4400 PWR
3C17203 SuperStack 3
3C17203 SuperStack 3
3C17203 SuperStack 3
Aggregation Switch
Switch 4007
3Com Wireless LAN
Managed Access Point
2750 devices
LAN Clients
3Com® SuperStack® 3
Switch 4400 PWR
Wireless Clients
3C17203 SuperStack 3
3C17203 SuperStack 3
3C17203 SuperStack 3
3Com Wireless
LAN Controller WX4400
3Com Wireless
LAN Controller WX4400
Floor 1
Floor 2
Data Center
3CRWX440095A Wireless LAN Controller WX4400
3CRWX440095A Wireless LAN Controller WX4400
3Com Wireless LAN
Switch Manager
Wireless LAN
Switch Manager
Corporate Bakbone
3Com Wireless LAN
Managed Access Point
2750 devices
LAN Clients
Authentication
Server
3Com SuperStack 3
Switch 4400 PWR
3C17203 SuperStack 3
3C17203 SuperStack 3
3C17203 SuperStack 3
Aggregation Switch
Switch 4007
3Com Wireless
LAN Controller WX4400
LAN Clients
3Com® SuperStack® 3
Switch 4400 PWR
Wireless Clients
3C17203 SuperStack 3
3C17203 SuperStack 3
3C17203 SuperStack 3
Floor 1
Floor 2
Data Center
3CRWX440095A Wireless LAN Controller WX4400
3Com Wireless LAN
Managed Access Point
2750 devices
3Com Wireless LAN
Switch Manager
Wireless LAN
Switch Manager
Key Applications
Decentralized Application3Com Wireless LAN controller WX4400devices are deployed at the edge of theenterprise network, in the wiring closet oneach floor.
Centralized ApplicationThe 3Com Wireless LAN Controller WX4400 isdeployed at or near the core of the enterprisenetwork, in the data center.
3COM® WIRELESS LAN CONTROLLER WX4400 AND 3COM WIRELESS LAN SWITCH WX1200 DATA SHEET
5
Specifications
HARDWARETotal Ports3Com Wireless LAN Controller WX4400Four dual-purpose 1000BASE-T ports will accommodate1000BASE-SX and 1000BASE-LX GBICs (sold separately,see Ordering Information)
Serial console port 3Com Wireless LAN Controller WX1200Six 10BASE-T/100BASE-TX integrated PoE ports, two 10BASE-T/100BASE-TX ports; auto-negotiationon all ports
Serial console port
MAP Support3Com Wireless LAN Controller WX4400Ships with support for up to 24 MAPs per controllerdepending on the capacity and coverage requirementsof the wireless installation. MAP support can beincreased by purchasing individual 24-MAP upgradelicenses; three 24-MAP licenses support a total of 96 MAPs per WX4400 (see Ordering Information)3Com Wireless LAN Controller WX1200Ships with support for up to 12 MAPs per switch,depending on the capacity and coverage requirementsof the wireless installation
Aggregate Switching Capacity3Com Wireless LAN Controller WX4400Up to 3.6 Gbps3Com Wireless LAN Controller WX1200Up to 200 Mbps
MAC Address Support3Com Wireless LAN Controller WX44001024 addresses3Com Wireless LAN Controller WX1200128 addresses
Power 3Com Wireless LAN Controller WX4400350W max. power supply
Operating voltage: 90-250VAC, 47-63 Hz
Amperage draw maximum: 8 Arms at 120 Vrms ; 3.5 Arms at 230 Vrms
Spare hot-swappable 350W power supply available(see Ordering Information)3Com Wireless LAN Controller WX1200200W max. power supply
Operating voltage: 90-132/180-264V, 47-63 Hz
Amperage draw maximum: 4 Arms at 120 Vrms ; 2 Arms at 230 Vrms
Power over Ethernet: Voltage output: 48 VDC, 15.4Wper port
LEDs 3Com Wireless LAN Controller WX4400Port status and traffic (Ethernet and GBIC),Management, Power3Com Wireless LAN Controller WX1200Link status (10 Mbps and 100 Mbps), AP/ PoE, Power
Dimensions and Weight 3Com Wireless LAN Controller WX4400Height: 8.8 cm (2.4 in), or 2U
Width: 44.1 cm (17.4 in)
Depth: 25.6 cm (10.8 in)
Weight: 3.6 kg (8.0 lbs) one power supply; 4.1 kg (9.0 lbs) two power supplies
3Com Wireless LAN Controller WX1200Height: 4.4 cm (1.7 in), or 1U
Width: 44.1 cm (17.4 in)
Depth: 25.6 cm (10.8 in)
Weight: 3.8 kg (8.5 lbs)
Environmental Ranges Operating temperature: -10 to 50°C (14 to 122 °F)
Storage temperature: -20 to 70°C (-4 to 158 °F)
Humidity: 10 to 95% non-condensing
Regulatory/Agency Approvals Safety: UL 60950 2000 +ZB & ZC deviations; EN60950 1999 and all national deviations,; CSA 22.2No. #60950 3rd Edition, 1995; UL 60950 3rd edition;NOM-119 SCFI; AS/NZS 60950 2000
EMC/EMI: EN55024 1998, EN 61000 (4-2 to 4-6, and4-11), EN 61000-3-2 1195+A14, ICES-003 Class A,FCC Part 15 Class A, EN55022 1998 Class A, VCCI Class A, CISPR 22 Class A, Korean EMI Class A
3CRWX120695A Wireless LAN Switch WX1200
3CRWX120695A Wireless LAN Switch WX1200
Corporate Bakbone
PublicNetwork
3Com Wireless LAN
Managed Access Point
2750 devices
LAN Clients
Authentication
Server
3Com Wireless LAN
Switch WX1200
Core Switch
Switch 4007
Wireless Clients
Brnch Office
Data Center
Corporate Firewall
IP Phones
3Com Wireless LAN
Switch Manager
Wireless LAN
Switch Manager
Key Applications
Remote/Branch OfficeApplicationThe 3Com Wireless LAN Switch WX1200 isdeployed in the remote office, connected tocorporate office datacenter resources.
3Com Corporation, Corporate Headquarters, 350 Campus Drive, Marlborough, MA 01752-3064
To learn more about 3Com solutions, visit www.3com.com. 3Com is publicly traded on NASDAQ under the symbol COMS.
Copyright © 2004 3Com Corporation. All rights reserved. 3Com, SuperStack, and the 3Com logo are registered trademarks of 3ComCorporation. Exercise Choice is a trademark of 3Com Corporation. All other company and product names may be trademarks of theirrespective companies. While every effort is made to ensure the information given is accurate, 3Com does not accept liability for anyerrors or mistakes which may arise. Specifications and other information in this document may be subject to change without notice.
400879-002 10/04
3COM® WIRELESS LAN CONTROLLER WX4400 AND 3COM WIRELESS LAN SWITCH WX1200 DATA SHEET
Ordering Information PRODUCT DESCRIPTION 3COM SKU
3Com Wireless LAN Controller WX4400
3Com® Wireless LAN Controller WX4400 1,2 3CRWX440095A
Options for the Wireless LAN Controller WX4400
3Com Wireless LAN Controller WX4400 24 MAP License Upgrade 3 3CWX4400L24A
3Com Wireless LAN Controller WX4400 Spare Power Supply 3CWX4400RPSA
3Com 1000BASE-SX GBIC 3CGBIC91
3Com 1000BASE-LX GBIC 3CGBIC92
3Com Wireless LAN Switch WX1200
3Com Wireless LAN Switch WX1200 1,2 3CRWX120695A
3Com Wireless LAN Switch Manager
3Com Wireless LAN Switch Manager 2 3CWXM10ASupports up to 10 3Com wireless LAN controllers and/or switches
3Com Wireless LAN Switch Manager Unlimited Upgrade 4 3CWXMUPA
3Com Wireless LAN Managed Access Points
3Com Wireless LAN Managed Access Point AP2750 1,5 3CRWX275075A
Related 3Com Wireless LAN Mobility System Products
3Com SuperStack® 3 Switch 4400 PWR 3C17205Note 1: Not available in all countries – please check with your local reseller or 3Com office for local availability.Note 2: Software upgrades are only available to customers with 3Com maintenance agreements. Note 3: Up to three 24-MAP licenses can be purchased per WX4400 wireless controller, supporting a total of up to 96 MAPs per
WX4400 wireless controller.Note 4: Upgrades 3CWXM10A to support an unlimited number of wireless switches and/or controllers.Note 5: Operates only with a 3Com Wireless LAN Switch WX1200 or 3Com Wireless LAN Controller WX4400.
SOFTWAREManagement Web interface management via access via localconsole or remotely over SSL or HTTPS; commandline interface access via local console or remotely viaSSH v2 or Telnet; SNMP MIB II; 3Com® WirelessSwitch Manager (separately ordered requiredproduct) ; interoperates with 3ND and HP OpenView
Security and AAA RFC 2246 - Transport Layer Security (TLS) RFC 2284 - EAP RFC 2315 - PKCS #7: Cryptographic Message Syntax
Version 1.5 RFC 2548 - Microsoft RADIUS VSAs RFC 2716 - PPP EAP-TLS Authentication Protocol RFC 2759 - Microsoft PPP CHAP Extensions, Version 2 RFC 2865 - RADIUS Authentication RFC 2866 - RADIUS Accounting RFC 2869 - RADIUS Extensions RFC 2986 - PKCS #10: Certification Request Syntax
Specification Version 1.7 RFC 3580 - IEEE 802.1X RADIUS Guidelines
IEEE Security StandardsIEEE Std 802.1X-2001 (port-based network accesscontrol)
IEEE Std 802.11i (enhanced security for 802.11)
IEEE Std 802.11h
IEEE Std 802.11d
EncryptionAES (CCMP): 128-bit (FIPS-197)WEP and TKIP: RC4 40-bit and 104-bit SSL and TLS: RC4 128-bit and RSA 1024-bit and 2048-bit
General Networking RFC 1122 Host requirements RFC 1393 Traceroute RFC 1519 CIDR RFC 1591 DNS (client) RFC 1769 SNTP RFC 768 UDP RFC 783 TFTP RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 826 ARP IEEE 802.1D Spanning Tree IEEE 802.1Q VLAN tagging IEEE 802.3ad (static config)
Management and Control: RFC 854 Telnet (server and client) SSHv2 – SecureShell V2 RFC 1157 SNMP v1/v2c RFC 1213 MIB-II RFC 1866 HTML
RFC 1907 SNMPv2 RFC 2068 HTTP RFC 3164 Syslog CAPWAP (IETF pre-standard)
IP Multicast: RFC 1112 IGMP v1 RFC 2236 IGMP v2
Quality of Service: RFC 2472 DiffServ precedence RFC 2597 DiffServ Assured Forwarding RFC 2598 DiffServ Expedited Forwarding
Package Contents3Com Wireless LAN Controller WX4400 or 3ComWireless LAN Switch 1200Rack mounting kitFour stick-on rubber feetDB-9 serial console cable User guide CD-ROM with user documentationWarranty booklet
Warranty One year hardware warranty with 90 days free technical support. Refer to www3com.com/warrantyfor details.
Specifications, continued
