Top Banner
Overview Enterprise-class wireless user access control and management provide wireless networks with expanded system capacity, enhanced performance and powerful control capabilities. H3C ® Wireless Access Controllers are ideal for deployment in branch offices and campus networks where centralized management of wired and wireless resources is critical. They provide redundancy, quality of service (QoS), and enhanced authentication and security features that surpass those of standalone wireless networks. Featured controllers include the H3C WX5002, H3C WX5004, H3C WX3008, H3C WX3010, H3C WX3024 and H3C Wireless Access Controller Module for the S7500E, S9500E and S5800 Chassis The access controller (AC) below includes both the AC modules and AC box if series name is not mentioned specifically. Key Benefits Expands Wireless Control over the Growing Enterprise H3C employs an innovative authentication mechanism based on user identities, rather than ports or devices to guarantee network mobility and security. During authentication, an authentication server assigns a user profile to a device. If the user passes authentication, the device uses the configuration contents in the user profile to restrict the accessible resources of the user. When this user goes offline, the device disables the user profile. As a result, user profiles are applicable to online users rather than offline users. This includes users who did not pass authentication. User authentication exchanged through ACs in the wireless LAN (WLAN) network enables consistent access and security policies across the entire network. In addition, Advanced Encryption Standard (AES), Temporal Key Integrity Protocol (TKIP) and Wired Equivalency Protocol (WEP) encryption functions based on a combination of Wi-Fi Protected Access (WPA )/(WPA2 ) and 802.1X authentication enhance network security. Centralizes Management of 802.11n APs H3C Wireless Controllers can be used to manage 802.11a/b/g/n access points (APs). In 802.11n mode, the H3C 802.11n-based AP can provide wireless access rates equivalent to six times the wireless access rates provided by a conventional 802.11a/b/g network, expanding coverage and capably deploying wireless multimedia applications. All H3C WX series have an embedded portal server and can also work with external Intelligent Management Center (IMC) portal servers to provide security authentication for users in places where clients cannot be installed. Provides Advanced Wireless User Management Using MAC-based authentication and access control, a user can configure and modify the rights of user groups on the AAA server, and can configure the rights of specific users. This fine user rights control method greatly enhances the availability of the wireless network and enables network administrators to easily allocate access rights to various levels of users or user groups. Enables Flexible Data Forwarding Modes To ensure the seamless transmission of data, H3C Wireless Controllers support both centralized and distributed data forwarding. Combining their mutual advantages, users can configure local forwarding for data traffic from clients with a specified service-set identifier (SSID), virtual LAN (VLAN), or SSID+VLAN and centralized forwarding for data traffic from other clients. This architecture, which effectively separates control traffic from data traffic, reduces or eliminates potential access controller (AC) processing performance bottlenecks. H3C WIRELESS ACCESS CONTROLLERS H3C Wireless Unified LAN Controller WX3010 H3C Wireless LAN Controller WX5002 H3C Wireless LAN Controller WX5004 H3C Wireless Unified LAN Controller WX3008 H3C Wireless Unified LAN Controller WX3024 DATA SHEET WIRELESS
12

H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

Jun 30, 2018

Download

Documents

nguyennhi
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

OverviewEnterprise-class wireless user access control andmanagement provide wireless networks with expandedsystem capacity, enhanced performance and powerful controlcapabilities. H3C®Wireless Access Controllers are ideal fordeployment in branch offices and campus networks wherecentralized management of wired and wireless resources iscritical. They provide redundancy, quality of service (QoS), andenhanced authentication and security features that surpassthose of standalone wireless networks. Featured controllersinclude the H3C WX5002, H3C WX5004, H3C WX3008, H3CWX3010, H3C WX3024 and H3C Wireless Access ControllerModule for the S7500E, S9500E and S5800 ChassisThe access controller (AC) below includes both the AC modulesand AC box if series name is not mentioned specifically.

Key BenefitsExpands Wireless Control over the Growing EnterpriseH3C employs an innovative authentication mechanism basedon user identities, rather than ports or devices to guaranteenetwork mobility and security. During authentication, anauthentication server assigns a user profile to a device. If theuser passes authentication, the device uses the configurationcontents in the user profile to restrict the accessible resources ofthe user. When this user goes offline, the device disables theuser profile. As a result, user profiles are applicable to onlineusers rather than offline users. This includes users who didnot pass authentication.

User authentication exchanged through ACs in the wireless LAN(WLAN) network enables consistent access and security policiesacross the entire network. In addition, Advanced EncryptionStandard (AES), Temporal Key Integrity Protocol (TKIP) andWired Equivalency Protocol (WEP) encryption functions basedon a combination of Wi-Fi Protected Access (WPA™)/(WPA2™)and 802.1X authentication enhance network security.

Centralizes Management of 802.11n APs H3C Wireless Controllers can be used to manage802.11a/b/g/n access points (APs). In 802.11n mode, the H3C802.11n-based AP can provide wireless access ratesequivalent to six times the wireless access rates provided by aconventional 802.11a/b/g network, expanding coverage andcapably deploying wireless multimedia applications.

All H3C WX series have an embedded portal server and canalso work with external Intelligent Management Center (IMC)portal servers to provide security authentication for users inplaces where clients cannot be installed.

Provides Advanced Wireless User ManagementUsing MAC-based authentication and access control, a usercan configure and modify the rights of user groups on the AAAserver, and can configure the rights of specific users. This fineuser rights control method greatly enhances the availability ofthe wireless network and enables network administrators toeasily allocate access rights to various levels of users or user groups.

Enables Flexible Data Forwarding ModesTo ensure the seamless transmission of data, H3C WirelessControllers support both centralized and distributed dataforwarding. Combining their mutual advantages, users canconfigure local forwarding for data traffic from clients with aspecified service-set identifier (SSID), virtual LAN (VLAN), orSSID+VLAN and centralized forwarding for data traffic fromother clients. This architecture, which effectively separatescontrol traffic from data traffic, reduces or eliminates potentialaccess controller (AC) processing performance bottlenecks.

H3C WIRELESS ACCESS CONTROLLERS

H3C Wireless Unified LANController WX3010

H3C Wireless LANController WX5002

H3C Wireless LANController WX5004

H3C Wireless Unified LANController WX3008

H3C Wireless Unified LANController WX3024

DATA SHEET WIRELESS

Page 2: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

2 H3C WIRELESS ACCESS CONTROLLERS

Supports Location-Based User Access ControlH3C Wireless Controllers supports AP-based user accesscontrol, enabling administrators to control the location awireless user can access in the network. When a wirelessuser attempts to access the network, the authenticationserver forwards a list of APs that the user can access to theAC, ensuring that the wireless user can access only specifiedand pre-determined APs.

Applies QoS Policies on a Per-User BasisFor networks based on user authorization, a user isauthenticated before accessing a network. This authorizationcontrols the network areas that a user can access as well asthe network QoS (such as the access bandwidth and accesspriority) the user can obtain.

Administrators configuring a group of policies based on a usergroup or a group of customized polices in the profile of eachuser allocate a profile in advance to each user group or eachspecific user. When the user has passed authentication and isonline, the port through which the user accesses the networkdynamically forwards the profile data, complete with theaccess priority and bandwidth associated with their profile.When the user is offline, the configuration data of the user isremoved from this port and the special access rights of theuser is disabled on this port. The QoS profile can carry thefollowing configuration data:

› access control list (ACL) data; › QoS data (priority, bandwidth control, 802.1p and Differentiated Services Code Point (DSCP) mark); and,

› VLAN data.In a network where users are often on the move, the QoSprofile provides a more modularized, simpler means offacilitating routine management tasks.

Provides Intelligent Load BalancingThis H3C wireless AC supports intelligent load balancingtechnology that optimizes wireless capacity. When an ACdiscovers that the load of the AP exceeds its present thresholdvalue, the AC will automatically calculate whether a new userhas another AP with a light load in the surrounding area. Ifthere is, the AP will reject the request of the user forassociation. The user will then access the AP with the lighterload. However, if the wireless user is not within theoverlapping area of the AP, the traditional load balancingmode will usually result in network connection failure and,eventually, mistaken balancing. H3C load balancingtechnology ensures that the AP load balancing function isenabled only for the wireless user within the AP overlappingarea, effectively avoiding mistaken load balancing altogether.

Controlled, Secure Access to Mission-Critical DataTo ensure users accessing a network comply with its securitypolicies—minimizing the risk of security breaches or networkdowntime caused by poorly protected devices—H3C WirelessAccess Controllers provide an Endpoint Admission Defense(EAD) solution. EAD integrates secure clients, security policyservers, network access devices and existing IT resources,and forcibly applies enterprise security policies toterminals accessing the network, controlling networkbehavior and proactively defending the network frommalicious, external attacks.

Exceptional Reliability Ensures Optimum UptimeH3C Wireless Access Controllers support a range ofredundancy options to ensure uptime and availability.

N+N RedundancyWhen N WX Series ACs are deployed in a WLAN, the N+Nredundancy feature enables an AP to choose an optimal ACfor access. This mechanism implements both AC redundancyand load sharing. Users can configure the AP to select theoptimal AC according to the loads or predefined priorities ofthe AC. To implement N+N redundancy, the N-1 ACs must becapable of managing all the deployed APs.

N+1 RedundancyN+1 redundancy is the best solution in terms of reliability andeconomy in which N ACs (WX5000 Series and/or AC modules)operate independently and another AC WX5000 and/or ACmodules) operates as a standby AC. When one of the N ACsfails, the standby AC will replace it. When the active ACrecovers, APs will again associate with it. In N+1 mode, Ncannot exceed 4.

1+1 RedundancyThe WX5004 or AC module supports fast handover-capable1+1 redundancy and can be deployed in scenarios requiringhigh reliability. In such a deployment, one AC is the active AC,and the other is the standby AC. FIT APs establish CAPWAPlinks with both the ACs, but only the links to the active AC areactive. When the active AC fails, the heartbeat mechanismbetween the two ACs ensures that the standby AC can sensethe failure within 300 ms and then inform APs to use links toit, thus ensuring service continuity.

Robust AP SupportA standard WX5002 wireless AC can support up to 32 APs and,through license upgrades, can support up to 64 APs and 2,048wireless users for medium-sized deployments. A standardWX5004 wireless AC can support up to 64 APs and, throughlicense upgrades, can support up to 256 APs and 4,096wireless users for large-sized WLAN deployments.

Key Benefits (continued)

Page 3: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

Mobility ArchitectureNetwork and Mobility DomainsGroups of H3C wireless controllers share user informationand authorizations as users roam, supporting uninterruptedmobility and enforcing security across the entire wirelessnetwork.

Distributed ForwardingOptimize traffic flow, reducing latency and improvingperformance.

Topology IndependenceBy providing a Layer 2 path for Layer 3 traffic, H3C wirelesscontrollers, switches and managed access points (MAPs)operate as an integrated infrastructure separated by L2/L3devices even in distributed remote networks, making it easy toexpand or modify the WLAN as needed.

Fast RoamingQuick handoff of user information and authorizations withinthe Network and Mobility Domain enables seamless roamingwith session integrity and mobility robust enough to supportvoice traffic.

Multiple Per-User QueuesClass-based traffic queuing at the MAP helps ensure thatvoice and other real-time applications receive the class ofservice (CoS) and QoS they need over the WLAN.

Pay-as-You-Grow ScalabilityAs the customer network grows and higher performance isneeded, customers simply order the existing Wireless LANAccess Controller MAP (or FIT AP) License Upgrade (LIS-WX-12,LIS-WX-32 or LIS-WX-128).

EncryptionEnterprise-Class EncryptionWi-Fi Protected Access 2 (WPA2™), Advanced EncryptionStandard (AES), Temporal Key Integrity Protocol (TKIP) andWired Equivalent Protocol (WEP) encryption performed at theMAP help protect and secure all communications.

Per-User Encryption AssignmentDifferent security policies are enforced on a per-user or per-group basis for flexible, in-depth security control and management.

AAA SecurityLocal or RADIUS Server IEEE 802.1X AuthenticationCentralized authentication control and management of allnetwork users helps ensure that only authorized users accessthe network.

Virtual Private Group SupportIT staff can assign policies that control per-user or per-groupnetwork access throughout the WLAN for secure seamlessroaming and to keep user traffic separate and secure.

Mobility ProfileIT staff can dynamically apply access permissions based onattributes returned by the AAA server indicating which MAP or LAN authentication ports a user or group can use.

AAA Integration and RADIUS OffloadingWireless ACs can shoulder back-end encryption key generationand authentication tasks, reducing the processing load andincreasing the scale and efficiency of central AAA RADIUSservers while reducing AAA traffic over the WLAN.

3 H3C WIRELESS ACCESS CONTROLLERS

Wireless Features

H3C Wireless LAN Controller WX5004

Page 4: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

4 H3C WIRELESS ACCESS CONTROLLERS

User, MAC and VLAN “Globbing”IT staff can assign AAA policies to user, subnet or devicegroups for convenient, efficient, cost-effectiveWLAN administration.

Bonded AuthenticationBy bonding 802.1X machine authentication with 802.1X userauthentication, only trusted users and client devices areprovided network access.

Time-of-Day/Day-of-Week/Location AccessIT staff can control and restrict network resource accessbased on building location and/or on an hourly, daily, orweekly basis.

Location Policy EnforcementIT staff can add or override AAA-defined access permissionsbased on user location, providing a choice of centralized orlocation-specific policy implementation.

RF Security and ControlRogue AP DetectionScheduled or on-demand RF scans identify unauthorized APsand ad-hoc networks and alert central IT staff; dedicated APscan continually sweep the airspace for 24x7 protection inenvironments that require higher security.

Dual-Band RF ScansBoth dual- and single-radio APs can sweep both 2.4 GHz and5 GHz 802.11n bands and associated channels while the WLANremains up and running.

Real-time RF Monitoring and ControlRF scans measure signal strength and usage; software toolsdynamically adjust traffic loads, power, RF footprint orchannel assignments to maximize coverage with capacity.

Managed Access Point ControlCentrally maintained and distributed MAP settings eliminatethe need to individually configure each device. The MAPs alsoenable granular bandwidth management on a per-user orSSID basis, as well as load balancing features that vastlyimprove network performance and the end-user experience.

Central Control and ManagementIdentity-Based NetworkingProvides all services based on user identity so attributes likevirtual private group membership, ACLs, authentication,roaming policies and history, location tracking, bandwidthusage and other authorizations remain with users as theyroam; also indicates to IT managers who is connected to thenetwork, where they are, where they have been, what servicesthey are using and what services they’ve used.

Wireless Features (continued)

Page 5: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

5 H3C WIRELESS ACCESS CONTROLLERS

Advanced Gigabit SwitchingIntegrated 10/100/1000 switching ports give high-speedconnections for Access Points or wired users. Achieve up to a10-times performance improvement with Gigabit switchingover Fast Ethernet. Tri-speed operation provides fullbackward compatibility for desktops not yet upgraded toGigabit Ethernet.

Available 10 Gigabit Ethernet UplinksThe H3C Wireless Unified LAN Controller WX3024 modelsupports 10 Gigabit Ethernet uplinks to tie into an evolvingcore network infrastructure. They are XENPAK transceiver-ready and require no additional module for 10 GigabitEthernet XENPAK support. A module for 10 Gigabit EthernetXFP support is also available. In either case, the propertransceiver—XENPAK or XFP—must be separately ordered.

Common Operating SystemH3C Wireless Unified LAN Controller WX3000 models use thesame proven H3C Comware® Operating System software uponwhich H3C premium enterprise switches, routers and securityproducts are built to ensure an easily integrated rich networkingfeature set that lowers a network's total cost of ownership.

Advanced Convergence FeaturesH3C Wireless Unified LAN Controller WX3000 models combineunified wireless management, high-performance GigabitEthernet switching, QoS and traffic management features toensure essential applications get the appropriate priority forefficient utilization of network resources.

With available Power over Ethernet (PoE), these modelsprepare your organization to run converged applications suchas wireless, voice and video surveillance over the network.

Flexible Basic Layer 3 RoutingLayer 3 static routing, with 32 definable static routes, providesthis unified switch with added flexibility to handle morecomplex networking needs.

Redundant Power System SupportThe H3C Wireless Unified LAN Controller WX3024 modelsupports a redundant power system (RPS) connection. Forthis model, the RPS unit delivers redundant power so thereis continued operation should the switch unit power supplyfail; this enables continuous operation of advancedenterprise networks. H3C RPS solutions are enterprise-class power redundancy systems that work with manyH3C and 3Com devices.

The H3C RPS 1000 is 1U high and provides multiple poweroutput connections to support multiple switch units at thesame time. Two power rectifiers can be installed for 1+1 loadsharing and power redundancy. This RPS supports switcheswith -54V RPS connections, and delivers sufficient powerto fully provision all PoE ports of a switch with fullpower redundancy.

Advanced SecuritySwitch-level security features include:

› 802.1X network access control, a standards-based security combined with RADIUS authentication;

› RADIUS Authenticated Device Access (RADA), which authenti-cates attached devices via MAC addresses for an additionallevel of endpoint security; and,

› Access control lists (ACLs) that enable usage policies at eachpoint of access to the network via the switch.

Other Switching FeaturesThe H3C Wireless Unified LAN Controller WX3000models support:

› Multicast filtering using Internet Group Management Protocol(IGMP) snooping v1/2/3 eliminates non-mission critical net-work traffic to improve network efficiency; and,

› Spanning Tree, Rapid Spanning Tree, and Multiple SpanningTree improve network resilience and availability.

Switch Features (WX3000 Only)

H3C Wireless Unified LAN Controller WX3024

Page 6: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

6 H3C WIRELESS ACCESS CONTROLLERS

Networking ApplicationMobile Network Solution for Headquarters of Large EnterprisesA mobile network solution integrating wired and wireless access for headquarters of large enterprises is a typical application forWX5000 Series integrated switches.

WX5000 Series integrated switches can be used with WX3000 Series and/or S7500E Series AC cards to provide a perfect solutionfor networking between the headquarters and branches of a large enterprise.

WX5000 Series or S7500E Series AC cards provide large capacity and high processing performance. Their support for largenumbers of APs ensures wireless coverage to almost anywhere a signal can reach.

With this solution, the headquarters of a large enterprise can easilyconstruct a large-capacity wireless IT network.

TunnelTunnel

WX5004 S9500

S3600 S3600 S3600S7500E +AC

S5500 EI

WX3010 WX3024

Branch

Headquarters

Branch

NMS

CAMS

SIP Server

Application Server

DHCP Server

IP Phone IP Phone

Laptop

Laptop

PC

AP

PC PC PC PCAP AP AP AP AP. . .

PC

AP

Mobile PhoneMobile Phone

Page 7: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

PSTN

WAN

IP Network

Fit AP

Fit AP

Fit AP

Fit AP

Fit AP

Fit AP

Fit AP

Router

Router

Voice ServerVoice Gateway

Fit AP

User

Wi-Fi PhoneUser

User

User

User

EnterpriseHeadquarters

EnterpriseBranch

Access Controller

AccessController

Wireless NetworkManagement IMC

7 H3C WIRELESS ACCESS CONTROLLERS

Networking Application (continued)Enterprise-Level Wireless Data and Voice Access Integrated Solution. Further applications include: 1) Data services for fixed-access wireless users to access wired networks at high speed, or for wireless users to communicatewith one another. For instance, employees of an enterprise using wireless terminals (such as wireless computer terminals,wireless communication terminals and wireless locators) to access the wired network resources of the enterprise through a wireless network, or two laptops communicating with each other through a wireless network.

2) Multimedia services for fixed-access wireless users enabling users to receive multimedia training through awireless network.

3) Voice services of low-speed moving wireless users enabling users to make phone calls through Wi-Fi® phones.

4) Data services for low-speed moving wireless users to access wired networks. For instance, a doctor uses a mobile terminalto access the hospital’s wired network to view and edit electronic cases.

To implement wireless voice and data services, WX5000 Series wireless ACs must be deployed together with Ethernet switchesand routers to construct a wireless-enabled network for the services, as shown below.

Enterprise-level wireless data andvoice access integrated solution

Page 8: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

8 H3C WIRELESS ACCESS CONTROLLERS

H3C Global Services offers the resources and talents of amajor corporation plus more than two decades of experiencein resolving network challenges and delivering businessbenefits to enterprises around the world.

Global support with a personalized, local focus in the locallanguage helps drive productivity and minimize expenses.Because H3C understands both the technology and thebusiness, we’re the partner you need to remain strongand competitive.

Suggested Service, Support and Training OfferingsH3C GuardianSM Maintenance Service This service provides comprehensive on-site support and includes advance hardware replacement,

expedited telephone technical support and software upgrades

H3C ExpressSM Maintenance Service This service provides speedy access to H3C shipment of advance hardware replacements (including a four-hour option), expedited telephone technical support and software upgrades

Network Health Check An activity-auditing service focused on improving network performance and productivity

Includes traffic monitoring, utilization analysis, problem identification, and asset deploymentrecommendations

Extensive report provides blueprint for action

Network Installation and Experts set up and configure equipment and integrate technologies to maximize functionality Implementation Services and minimize business disruption

For large and complex sites, implementation services include personalized configuration, project management, extended testing and coaching on network administration

Project Management Provides extra focus and resources that special projects demand

H3C engineers manage entire process from initial specifications to post-project review

Using structured methodology, requirements are identified, projects planned and progress ofimplementation activities tracked

Global Education and Training Self-paced and instructor-led technology and product courses, plus certification programs

For additional information, please visit www.h3cnetworks.com/services

Service and Support

Product WarrantyThe H3C Wireless Access Controllers have a one-year hardware warranty that includes the power supply and fan assembly.

Page 9: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

Specifications (Specifications apply to all models, unless otherwise noted)

9 H3C WIRELESS ACCESS CONTROLLERS

Features WX5002 WX5004 WX3008 WX3010 WX3024

Total Ports 2 combo ports willaccommodate1000BASE-SX or1000BASE-LX SFPs(purchased separately); RJ-45 management andserial console ports

4 combo ports willaccommodate1000BASE-SX or 100BASE-LX SFPS(purchased separately), RJ-45 management andserial console port

8 10/100/1000BASE-Tports, and serial consoleport

8 10/100/1000BASE-Tports, Two SFP ports willaccommodate either ofthe following SFP:1000BASE-SX or1000BASE-LX or1000BASE-LX BIDI or1000BASE-LX BIDIBX10-D or 1000BASE-LXBIDI BX10-U or1000BASE-LX BIDIBX10-U or 100BASE-FXor 100BASE-LX SFP, andserial console port.

24 10/100/1000BASE-Tports, in which four arecombo ports, willaccommodate either ofthe following SFP: 1000BASE-SX or1000BASE-LX or1000BASE-LX BIDI or1000BASE-LX BIDIBX10-D or 1000BASE-LXBIDI BX10-U or1000BASE-LX BIDIBX10-U or 100BASE-FXor 100BASE-LX SFP, andserial console port.

MAP Support Ships with support for upto 32 MAPs percontroller depending onthe capacity andcoverage requirementsof the wirelessinstallation. MAPsupport can beincreased by purchasingindividual 32-MAPupgrade license; one 32-MAP licenses support atotal of 64 MAPs percontroller

Ships with support for upto 64 MAPs percontroller depending onthe capacity andcoverage requirementsof the wirelessinstallation. MAPsupport can beincreased by purchasingindividual 32-MAPupgrade license; six 32-MAP licenses support atotal of 256 MAPs percontroller

Ships with support for upto 8 MAPs per switchdepending on thecapacity and coveragerequirements of thewireless installation.

Ships with support for upto 8 MAPs per switchdepending on thecapacity and coveragerequirements of thewireless installation.MAP support can beincreased by purchasingindividual 12-MAPupgrade licenses; one12-MAP license supportsa total of 24 MAPs percontroller

Ships with support for upto 24 MAPs per switchdepending on thecapacity and coveragerequirements of thewireless installation.MAP support can beincreased by purchasingindividual 12-MAPupgrade license; two 12-MAP licenses support atotal of 48 MAPs percontroller

Power

Power supply: 50 W max.(x2 power supplies)

50 W max. 185W max. 185W max. AC input: 470WDC input: 700W

Operating voltage: 90-132/180-264 VAC, 50-60 Hz

90-132/180-264 VAC 50-60 Hz

100-240 VAC, 47-63 Hz 100-240 VAC, 47-63 Hz 100-240 VAC, 47-63 Hz

Amperage draw:(Note: Without PoEdevices attached)

0.4 A at 120 V; 0.2 A at 230 V; max.

0.6 A at 120 V;0.3 A at 230 V; max

1.6 A at 115 V,0.8 A at 230 V; max.

1.6 A at 115 V,0.8 A at 230 V; max.

4.0 A at 115 V,2.0 A at 230 V; max.

Power over Ethernetvoltage output:

N/A N/A 48 VDC, 25 W per port 48 VDC, 25 W per port4 of 8 ports supportPoE+

48 VDC, 25 W per port

LEDs Port status and traffic,management, power andalarm

Port status and traffic,management, power

Port status and traffic,management,PoE/POE+, power

Port status and trafficmanagement,PoE/POE+, power, RPSLED (RPS),Extension slot LED

Dimensions and weight

Height: 4.4 cm (1.7 in), or 1U 4.4 cm (1.7 in), or 1U 4.4 cm (1.7 in), or 1U 4.4 cm (1.7 in), or 1U 4.4 cm (1.7 in), or 1UWidth: 44.1 cm (17.4 in) 44.1 cm (17.4 in) 26.9 cm (10.5 in) 26.9 cm (10.5 in) 42.9 cm (17.0 in)Depth: 30.74 cm (12.1 in) 43.0 cm (17.0 in) 30.0 cm (11.8 in) 30.0 cm (11.8 in) 40.0 cm (15.8 in)

Weight: 4.1 kg (9.0 lbs) 7.4 kg (16.3 lbs) 3.0 kg (7.0 lbs) 3.0 kg (7.0 lbs) 7.2 kg (16.0 lbs)EnvironmentalOperating temperature: 0 to 45°C (32 to 113°F)Storage temperature: -40 to 70°C (-40 to 158°F)Humidity: 5 to 95% non-condensing

Page 10: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

Specifications (continued)

10 H3C WIRELESS ACCESS CONTROLLERS

Features WX5002 WX5004 WX3008 WX3010 WX3024

MTBF 40 yrs (350,000 hrs) 40 yrs (350,000 hrs) 40 yrs (350,000 hrs) 40 yrs (350,000 hrs) 40 yrs (350,000 hrs)

Regulatory/Agency ApprovalsSafety UL 60950 2000 +ZB & ZC deviations EN 61000-3-2 1195+A14 NOM-119 SCFI

EN 60950 1999 and all national deviations EN 55024 1998 AS/NZS 60950 2000CSA 22.2 No. #60950 3rd Edition, 1995 EN 61000 (4-2 to 4-6 and 4-11) VCCI Class AICES-003 Class A FCC Part 15 Class A CISPR 22 Class AUL 60950 3rd edition EN 55022 1998 Class A EMC/EMI

ManagementWeb interface management remotely over HTTPS secure connectionCommand line interface access via local console or remotely via SSHv2 or Telnet on all modelsLocal Ethernet managementSNMP MIB IIH3C Wireless Service Manager (separately ordered recommended product); interoperates with H3C IMC

Security and AAARFC 2246 Transport Layer Security (TLS) RFC 2865 RADIUS AuthenticationRFC 2284 EAP RFC 2866 RADIUS AccountingRFC 2315 PKCS #7: Cryptographic Message Syntax, RFC 2869 RADIUS ExtensionsVersion 1.5 RFC 2548 Microsoft RADIUS VSAsRFC 2716 PPP EAP-TLS Authentication Protocol RFC 2986 PKCS #10: Certification Request SyntaxRFC 2759 Microsoft PPP CHAP Extensions, Version 2 Specification Version 1.7RFC 3580 IEEE 802.1X RADIUS Guidelines

Security Standards IEEE 802.1X IEEE 802.11d IEEE 802.11h IEEE 802.11iEncryption WPA and WPA2 WEP 40/64 and 104/128-bit; TKIP: RC4 40-bit AES (CCMP): 128-bit (FIPS-197)

SSL and TLS: RC4 128-bit and RSA 1024-bit and 2048-bitPower over Ethernet IEEE 802.3af The WX3010 and 3024 support 802.3af+ or pre-802.3at.General Networking IEEE 802.1Q (VLAN tagging IEEE 802.1D (Spanning Tree) RFC 1393 Traceroute RFC 1122Host requirements RFC 1519 CIDR RFC 1591 DNS (client) RFC 1769 SNTP RFC 768 UDP

RFC 783 TFTP RFC 791 IP RFC 792 ICMP RFC 793 TCPRFC 826 ARP IEEE 802.3ad (static config) RFC 2131 DHCP

Management and ControlRFC 854 Telnet (server and client) SSHv2 – Secure Shell v2 RFC 2068 HTTP IP MulticastRFC 1157 SNMP v1/v2c RFC 1213 MIB-II RFC 1866 HTML RFC 1112 IGMP v1RFC 1907 SNMP v2 RFC 2660 HTTPS RFC 3164 Syslog RFC 2236 IGMP v2

Quality of Service RFC 2597 DiffServ Assured Forwarding RFC 2472 DiffServ Precedence RFC 2598 DiffServ Expedited Forwarding Wi-Fi Multimedia (WMM)

Page 11: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

11 H3C WIRELESS ACCESS CONTROLLERS

H3C Wireless Access Controller and Service Manager Licenses

H3C Wireless Access Controller

SKU No. Product Name Description

3130A0E0 H3C Wireless Access Controller License, Additional 12 Managed APs For WX3010 and WX30243130A0E1 H3C Wireless Access Controller License, Additional 32 Managed APs For WX5000 and S5800 Module3130A0E2 H3C Wireless Access Controller License, Additional 128 Managed APs For the S7500E/S9500 Module

Ordering Information

Modules and Transceivers

H3C Wireless LAN Managed Access Points

SKU No. Product Name Description

0235A34B H3C Wireless LAN Controller WX5002 Supports 32 to 64 APs0235A35J H3C Wireless LAN Controller WX5004† Supports 64 to 256 APs0235A0AS H3C Wireless Unified LAN Controller WX3008 Supports 8 APs0235A37U H3C Wireless Unified LAN Controller WX3010 Supports 12 to 24 APs0235A37T H3C Wireless Unified LAN Controller WX3024 Supports 24 to 48 APs0231A81K H3C Wireless LAN Controller Module for the S7500E Chassis Supports 128 to 640 APs0231A66A H3C 150W AC Power Supply Module For WX5004 (1 required; 2 for redundancy)0231A73P H3C 150W DC Power Supply Module For WX5004 (1required; 2 for redundancy)0213A01S H3C RPS 1000-A3 Redundant Power System Redundant Power Supply for WX3024

SKU No. Product Name Description

0235A0CD H3C Wireless WA2612-AGN Single-Radio 11a/b/g/n Access Point 802.11a/b/g/n(Embedded Antennas)

0235A42L H3C Wireless WA2610E-AGN Single-Radio 11a/b/g/n Access Point 802.11a/b/g/n(External Antennas)

9801A0AA H3C Wireless WA2620-AGN Dual-Radio 11a/b/g/n Access Point 802.11a/b/g/n(Embedded Antennas)

0235A42M H3C Wireless WA2620E-AGN Dual-Radio 11a/b/g/n Access Point 802.11a/b/g/n(External Antennas)

0235A22W H3C Wireless WA2110-AG Single-Radio 11a/b/g Access Point 802.11a/b/g(External Antennas)

0235A40N H3C Wireless WA2220-AG Dual-Radio 11a/b/g Access Point 802.11a/b/g(External Antennas)

SKU No. Product Name Description

0231A39S H3C S5100 1-Port 10GE XFP Module XFP0231A085 H3C 1-Port GE SFP Module SFP0231A12T H3C 100BASE-LX BIDI SFP Transceiver, Single Mode TX1310/RX1550, 15km, LC0231A12U H3C 100BASE-LX BIDI SFP Transceiver, Single Mode TX1550/RX1310, 15km, LC0231A320 H3C 100BASE-FX SFP Transceiver, Multi-Mode 1310nm, 2km, LC0231A564 H3C 100BASE-LX SFP Transceiver, Single Mode 1310nm, 15km, LC0231A562 H3C 1000BASE-SX SFP Transceiver, Multi-Mode 850nm, 550m, LC0231A563 H3C 1000BASE-LX SFP Transceiver, Single Mode 1310nm, 10km, LC0231A11U H3C 1000BASE-LX BIDI SFP Transceiver, Single Mode TX1310/RX1490, 10km, LC0231A11V H3C 1000BASE-LX BIDI SFP Transceiver, Single Mode TX1490/RX1310, 10km, LC0231A363 H3C 10GBASE-SR XENPAK, Multi-Mode 850nm, 300m, SC0231A323 H3C 10GBASE-LR XENPAK, Single Mode 1310nm, 10km, SC0231A494 H3C 10GBASE-SR XFP, Multi-Mode 850nm, 300m, LC0231A438 H3C 10GBASE-LR/LW XFP, Single Mode 1310nm, 10km, LC

† Power supply not included. Order 0231A66A or 0231A73P

Page 12: H3C Wireless Access Controllers - GfK Etilizecontent.etilize.com/Manufacturer-Brochure/1018114080.pdf · authentication server assigns a user profile to a device. If the user passes

12 H3C WIRELESS ACCESS CONTROLLERS

Visit www.H3Cnetworks.com for more information about H3C enterprise solutions.

Copyright © 2010 H3C Technologies, Co., Ltd. All rights reserved. H3C and the H3C logo are in various countries worldwide registeredtrademarks of H3C Technologies Co., Ltd., a subsidiary of 3Com Corporation. Wi-Fi and WMM are registered trademarks, and WPA and WPA2are trademarks, of the Wi-Fi Alliance. All other company and product names may be trademarks of their respective companies. While every effort ismade to ensure the information given is accurate, neither H3C or 3Com accepts liability for any errors or mistakes which may arise. All specificationsare subject to change without notice. 401182-006 03/10