Оборудование / WiFI контроллеры / Motorola RFS4000

PACKET FORWARDING

802.1D-1999 Ethernet bridging; 802.11-.802.3 bridging; 802.1Q VLAN tagging and trunking; proxy ARP; IP packet steering-redirection

Wireless LAN

Supports 24 WLANs; multi-ESS/BSSID traffic segmentation; VLAN to ESSID mapping; auto assignment of VLANs (on RADIUS authentication); power save protocol polling; pre-emptive roaming; VLAN Pooling and dynamic VLAN adjustment; IGMP Snooping

Bandwidth management

Congestion control per WLAN; per user based on user count or bandwidth utilization; bandwidth provisioning via AAA server

Layer 2 or Layer 3 deployment of access points

Layer 3 Mobility (Inter-Subnet Roaming)

IPv6 client support

Thin Access Ports

Supports 6 802.11a/b/g AP 300 thin access points for L2 or L3 deployment per; 6*/ 36** AP 650s per controller **; Legacy support*: AP100 for L2 deployments only

Adaptive AP

Supports adoption of 6 adaptive AP 51X1 802.11a/b/g and 36** 802.11a/b/g/n access points in adaptive mode per RFS 4000 Integrated Services Controller; multiple country configuration support; Legacy support*: AP 4131 Access Point conversion for L2 deployments only

NETWORK SECURITY

Role-based wired/wireless firewall (L2-L7) with stateful inspection for wired and wireless traffic; Active firewall sessions — 50,000 per RFS 4000 Integrated Services Controller; protects against IP Spoofing and ARP Cache Poisoning

Access Control Lists (ACLs)

L2/L3/L4 ACLs

Wireless IDS/IPS

Multi-mode rogue AP detection, Rogue AP Containment, 802.11n Rogue Detection, Ad-Hoc Network Detection, Denial of Service protection against wireless attacks, client blacklisting, excessive authentication/ association; excessive probes; excessive disassociation/ deauthentication; excessive decryption errors; excessive authentication failures; excessive 802.11 replay; excessive crypto IV failures (TKIP/CCMP replay); Suspicious AP, Authorized device in ad-hoc mode, unauthorized AP using authorized SSID, EAP Flood, Fake AP Flood, ID theft, ad-hoc advertising Authorized SSID

Geofencing

Add location of users as a parameter that defines access control to the network

WIPS sensor conversion

Supported on all dependent and Independent/ Adaptive Access Points

Anomaly Analysis

Source Media Access Control (MAC) = Dest MAC; Illegal frame sizes; Source MAC is multicast; TKIP countermeasures; all zero addresses

Authentication

Access Control Lists (ACLS); pre-shared keys (PSK); 802.1x/EAP—transport layer security (TLS), tunneled transport layer security (TTLS), protected EAP (PEAP); Kerberos Integrated AAA/RADIUS Server with native support for EAP-TTLS, EAP-PEAP (includes a built in user name/password database; supports LDAP), and EAP-SIM

Transport encryption

WEP 40/128 (RC4), KeyGuard, WPA—TKIP, WPA2-CCMP (AES), WPA2-TKIP

802.11w*

Provides origin authentication, integrity, confidentiality

and replay protection of management frames for

Motorola’s AP 300 access point

IPSec VPN gateway

Supports DES, 3DES and AES-128 and AES-256 encryption, with site-to-site and client-to-site

VPN capabilities

Secure guest access (Hotspot provisioning)

Provides secure guest access for wired and wireless clients. built-in captive portal, customizable login/ welcome pages, URL redirection for user login, usage-based charging, dynamic VLAN assignment of clients, DNS white list, GRE tunneling of traffic to central site*, API support for interoperabilty with custom web portals* support for external authentication and billing systems

Wireless RADIUS Support (Standard and Motorola Vendor Specific Attributes)

User Based VLANs (Standard) MAC Based Authentication (Standard) User Based QoS (Motorola VSA) Location Based Authentication (Motorola VSA) Allowed ESSIDs (Motorola VSA)

NAC support with third party systems from Microsoft, Symantec and Bradford

REAL TIME LOCATIONING SYSTEM (RTLS)*

RSSI based triangulation for Wi-Fi assets

Tags supported

Ekahau, Aeroscout, Gen 2 Tags

QUALITY OF SERVICE

Wi-Fi Multimedia extensions

WMM-power save with TSPEC Admission Control; WMM U-APSD

IGMP snooping

Optimizes network performance by preventing flooding of the broadcast domain

SIP Call Admission Control

Controls the number of active SIP sessions initiated by a wireless VoIP phone

802.11k

Provides radio resource management to improve client

throughput (11k client required)

Classification and marking

Layer 1-4 packet classification; 802.1p VLAN priority; DiffServ/TOS

SYSTEM RESILIENCY AND REDUNDANCY

Active:Standby; Active:Active and N+1 redundancy with access port and Wireless Clients load balancing; Critical resource monitoring

Virtual IP*: Single virtual IP (per VLAN) for a switch/contoller cluster to use as the default gateway by mobile devices or wired infrastructure. Seamless fail-over of associated services e.g. DHCP Server.

SMART RF: Network optimization to ensure user quality of experience at all times by dynamic adjustments to channel and power (on detection of RF interference or loss of RF coverage/neighbor recovery). Available for both thin APs and Adaptive APs.

Dual Firmware bank supports Image Failover capability

SYSTEM EXTENSIBILITY

ExpressCard™ Slot: Driver support for 3G wireless cards for WAN backhaul

• AT&T (NALA) – HYPERLINK “http://www.wireless.att.com/businesscenter/ sierra-wireless-aircard-890/index.jsp?skuId=sku9557600025” Sierra Wireless AirCard® 890, Option GT Ultra Express

• Verizon (NALA) – V770 Express Card

• Sprint (NALA) - Sprint Novatel Merlin C777 Express card

• Rogers Wireless (Canada) – Sierra Wireless AirCard® 503

• Vodaphone (EMEA) – Novatel Merlin XU870

• Vodaphone (EMEA) – Vodaphone E3730 3G Expresscard

• Telstra (Australia) – Sierra Wireless AirCard® 503, Telstra Turbo 7 series Expresscard (Aircard 880E)

• General Use – Novatel Merlin XU870, Option GE 0302, Sierra Wireless AirCard® 504

MANAGEMENT

Command line interface (serial, telnet, SSH); secure Web-based GUI (SSL) for the wireless switch and the cluster; SNMP v1/v2/v3; SNMP traps—40+ user configu­rable options; Syslog; Firmware, Config upgrade via TFTP, FTP & SFTP (clients); simple network time protocol (SNTP); text-based switch configuration files; DHCP (client/server/relay), switch auto-configuration and firmware updates with DHCP options; multiple user roles (for switch access); MIBs (MIB-II, Etherstats, wireless switch specific monitoring and configuration); Email notifications for critical alarms; MU naming capability

PHYSICAL CHARACTERISTICS

Form factor

1U Rack Mount Tray available for the RFS4010

2U Rack Mount Tray available for the RFS4011

Dimensions

RFS 4010: 1.75 in. H x 12 in. W x 10 in. D

44.45 mm H x 304.8 mm W x 254.0 mm D

Antenna facade: 289.2mm x 340mm x 20.5mm

Weight

RFS 4010: 4.75 lbs./2.15 kg

RFS 4011: 4.9lbs

Antenna facade: 1.45lb

Physical interfaces

1x Uplink Port -10/100/1000 Cu/ Gigabit SFP interface

5x 10/100/1000 Cu Ethernet Ports, 802.3af and 802.3at Draft

1x USB 2.0 Host

1x ExpressCard™ Slot 1x Serial Port (RJ45 style)

Antenna Connections

RFS 4011: RP-SMA

MTBF

>65,000 Hours

POWER REQUIREMENTS

AC input voltage

100-240 VAC 50/60Hz

Operating Voltage

44 to 57 VDC

Operating Current

2.5A(max) @48 VDC or 2.2A(max) @ 54 VDC

Max Power Consumption

120W for RFS 4010, 150W for RFS 4011

USER ENVIRONMENT

Operating temperature

32° F to 104° F /0° C to 40° C

Storage temperature

-40° F to 158° F/-40° C to 70° C

Operating humidity

5% to 85% (w/o condensation)

Storage humidity

5% to 85% (w/o condensation)

Heat dissipation

95 BTU/hr for RFS 4010, 190 BTU/hr for RFS 4011

Max Operating Altitude

3000m

REGULATORY

Product safety

UL / cUL 60950-1, IEC / EN60950-1

EMC compliance

FCC (USA), Industry Canada, CE (Europe), VCCI (Japan), C-Tick (Australia/New Zealand)

RECOMMENDED ENTERPRISE MOBILITY SERVICES

Customer Services

Service from the Start Advance Exchange Support