Trapeze Networks MXR-2 Mobility Exchange MXR-2-EU Data Sheet

2

•  Spanning tree and per-VLAN spanning tree (PVST+)
•  Resilient network attachment via any MX port
•  N: redundant MX capabilities

•  Supports complete local AAA authentication, including 802.x, as primary 

or backup to a centralized AAA server

•  Supports multiple AAA server groups and can load share across multiple 

AAA servers or within a server group

•  Generates and manages X.509 digital certificates
•  Assigns and enforces per-user authorization policies that are managed 

centrally from the AAA back-end

•  Authorizations include virtual private group membership, personal firewall 

filters, time-of-day/day-of-week access, encryption type, and location-
specific policies

•  IEEE 802.x with multiple EAP types (TLS, PEAP/MSCHAP,  TTLS) 
•  WebAAA, MAC, Open
•  WiFi  WPA2 Enterprise certified

•  Encryption distributed in Mobility Points
•  MX generates master and session keys
•  Provides key management for each encryption technique

•  User credentials define access and network resource privileges
•  Privileges and services follow users as they roam
•  Maintains a user’s membership in the right virtual private group based on 

the user’s authenticated identity

•  Dynamically enables Virtual Private Groups to support roaming across 

router boundaries

•  Centralized management and control

•  Trusted Computing Group (TCG) - Trusted Network Connect (TNC) 

compliant

•  ActiveScan

™

 rogue and denial-of-service (DoS) attack detection — Scan 

all bands, associated channels and VLANs, while simultaneously providing 
wireless connectivity to mobile clients

•  SentryScan

™

 — Scan the air nonstop on both bands and their associated 

channel while other MPs support wireless LAN clients

•  Rogue detection, Intrusion Detection System (IDS) and RF 

countermeasures

•  Trapeze/AirDefense integrated Intrusion Detection and Prevention

-  Best in class IDS/IPS
-  Common Trapeze MP hardware for sensor and service APs
-  Dynamic threat management- convert MPs to sensors on demand
-  Threat location and mitigation

•  Data-intensive applications
•  Latency-sensitive applications

•  VoIP protocol support
•  802. e/WMM compliant
•  Queuing and priority (802.e/WMM)
•  Preserve voice priority across network (802.i PMK cache,  WMM)
•  Bandwidth control for voice (TSPEC)
•  Maximize handset battery life (U-APSD)
•  Neighbor report assisted roaming (802.k)