3com Wireless LAN Switch Manager Upgrade 3CWXMUPA Data Sheet
Product codes
3CWXMUPA
3
3COM
®
WIRELESS LAN MOBILITY SYSTEM
FEATURES
MOBILITY ARCHITECTURE
Network and Mobility Domains
Groups of 3Com wireless controllers and/or switches share user
information and authorizations as users roam, supporting
uninterrupted mobility and enforcing security across the entire
wireless network.
information and authorizations as users roam, supporting
uninterrupted mobility and enforcing security across the entire
wireless network.
Distributed Forwarding
Optimize traffic flow, reducing latency and improving performance.
Topology Independence
By providing a Layer 2 path for Layer 3 traffic, 3Com wireless
controllers, switches and MAPs operate as an integrated
infrastructure separated by L2/L3 devices even in distributed remote
networks, making it easy to expand or modify the WLAN as needed.
controllers, switches and MAPs operate as an integrated
infrastructure separated by L2/L3 devices even in distributed remote
networks, making it easy to expand or modify the WLAN as needed.
Fast Roaming
Quick handoff of user information and authorizations within the
Network and Mobility Domain enables seamless roaming with session
integrity and mobility robust enough to support voice traffic.
Network and Mobility Domain enables seamless roaming with session
integrity and mobility robust enough to support voice traffic.
Multiple Per-User Queues
Class-based traffic queuing at the MAP helps ensure that voice and
other real-time applications receive the class of service and quality of
service they need over the WLAN.
other real-time applications receive the class of service and quality of
service they need over the WLAN.
Pay-as-You-Grow Scalability
Upgrade licenses in 24-MAP increments increase support to a total of
192 MAPs per controller for flexible expansion (WX2200 only).
192 MAPs per controller for flexible expansion (WX2200 only).
PoE Support
The WX1200 switch supplies six ports of power to MAPs over Ethernet
cabling for installation flexibility; the WXR100 switch provides one uplink
port and one port for PoE data and power to a MAP.
port and one port for PoE data and power to a MAP.
CLUSTERING
Maximize Connectivity and Environmental Flexibility
Part of the 3Com Wireless LAN Mobility System, the system provides
“always-on” reliability, through controller clustering. If any 3Com
wireless controller fails in the cluster, failover to another controller is
seamless and client connections are maintained. Data flow continues
without any service disruptions to voice and real-time video
applications.
“always-on” reliability, through controller clustering. If any 3Com
wireless controller fails in the cluster, failover to another controller is
seamless and client connections are maintained. Data flow continues
without any service disruptions to voice and real-time video
applications.
ENCRYPTION
Enterprise-Class Encryption
WPA2, AES, TKIP and WEP encryption performed at the MAP help
protect and secure all communications.
protect and secure all communications.
Per-User Encryption Assignment
Different security policies are enforced on a per-user or per-group
basis for flexible, in-depth security control and management.
basis for flexible, in-depth security control and management.
AAA SECURITY
Local or RADIUS Server IEEE 802.1X Authentication
Centralized authentication control and management of all network
users helps ensure that only authorized users access the network.
Virtual Private Group Support
IT staff can assign policies that control per-user or per-group
network access throughout the WLAN for secure seamless roaming
and to keep user traffic separate and secure.
network access throughout the WLAN for secure seamless roaming
and to keep user traffic separate and secure.
Mobility Profile
IT staff can dynamically apply access permissions based on attributes
returned by the AAA server indicating which MAP or LAN
authentication ports a user or group can use.
returned by the AAA server indicating which MAP or LAN
authentication ports a user or group can use.
AAA Integration and RADIUS Offloading
Wireless controllers and switches can shoulder back-end encryption
key generation and authentication tasks, reducing the processing load
and increasing the scale and efficiency of central AAA RADIUS servers
while reducing AAA traffic over the WLAN.
key generation and authentication tasks, reducing the processing load
and increasing the scale and efficiency of central AAA RADIUS servers
while reducing AAA traffic over the WLAN.
User, MAC and VLAN “Globbing”
IT staff can assign AAA policies to user, subnet, or device groups for
convenient, efficient, cost-effective WLAN administration.
convenient, efficient, cost-effective WLAN administration.
Bonded Authentication
By bonding IEEE 802.1X machine authentication with 802.1X user
authentication, only trusted users and client devices are allowed
access to the network.
authentication, only trusted users and client devices are allowed
access to the network.
Time-of-Day/Day-of-Week/Location Access
IT staff are able to control and restrict network resource access based
on building location and/or on an hourly, daily, or weekly basis.
on building location and/or on an hourly, daily, or weekly basis.
Location Policy Enforcement
IT staff can add or override AAA-defined access permissions based on
user location, providing a choice of centralized or location-specific
policy implementation.
user location, providing a choice of centralized or location-specific
policy implementation.
RF SECURITY AND CONTROL
SentrySweep Rogue AP Detection
Scheduled or on-demand RF scans identify unauthorized APs and
ad-hoc networks and alert the central IT staff; dedicated APs can
continually sweep the airspace for 24x7 protection in environments
that require higher security.
ad-hoc networks and alert the central IT staff; dedicated APs can
continually sweep the airspace for 24x7 protection in environments
that require higher security.
Dual-Band RF Scans
A single AP radio can sweep both IEEE 802.11a and 802.11b/g
frequency bands and associated channels while the WLAN stays up
and running. The AP 3950 can also scan the 2.4GHz and 5GHz
802.11n bands.
frequency bands and associated channels while the WLAN stays up
and running. The AP 3950 can also scan the 2.4GHz and 5GHz
802.11n bands.
Real-time RF Monitoring and Control
RF scans measure signal strength and usage; software tools
dynamically adjust traffic loads, power, RF footprint, or channel
assignments to maximize coverage with capacity.
dynamically adjust traffic loads, power, RF footprint, or channel
assignments to maximize coverage with capacity.
Managed Access Point Control
Centrally maintained and distributed MAP settings eliminate the need
to individually configure each device. The MAPs also enables granular
bandwidth management on a per user or SSID basis and load
balancing features that vastly improve network performance and end
user experience.
to individually configure each device. The MAPs also enables granular
bandwidth management on a per user or SSID basis and load
balancing features that vastly improve network performance and end
user experience.
CENTRAL CONTROL AND MANAGEMENT
Identity-Based Networking
Provides all services based on user identity so things like virtual
private group membership, Access Control Lists (ACLs), authentication,
roaming policies and history, location tracking, bandwidth usage and
other authorizations all stay with users as they roam; also tells the IT
manager who’s connected, where they are, where they’ve been, what
services they’re using and what services they’ve used.
private group membership, Access Control Lists (ACLs), authentication,
roaming policies and history, location tracking, bandwidth usage and
other authorizations all stay with users as they roam; also tells the IT
manager who’s connected, where they are, where they’ve been, what
services they’re using and what services they’ve used.