Trapeze Networks MX-2800 MX-2800-EU Fiche De Données
Codes de produits
MX-2800-EU
2
Key Features
Scalability and Reliability
Ports and Interfaces
•
8 x GE pluggable SFP and 10/100/1000Base-T RJ45
•
2 x 10GE pluggable XFP
Number of managed Access Points
•
Up to 512 APs in increments of 64 Access Points licenses
Network Domain™ service extends the reach of
•
Cluster of 1,024 Mobility Domains, extending mobility across 32,768 MX controllers
Mobility Domain across a global network
Reliability
Reliability
•
Always-on availability and hitless failover with no service interruption for voice and data clients even in the unlikely event
of a controller failure
•
Hot pluggable redundant power supply
•
Hot pluggable fan tray module
•
EtherChannel™ load-shared, redundant links
•
Spanning tree and per-VLAN spanning tree (PVST+)
•
Resilient network attachment via any MX port
•
N:1 and N:N redundant MX capabilities
Security
Authentication
•
Supports complete local AAA authentication, including 802.1x, as primary or backup to a centralized AAA server
•
Supports multiple AAA server groups and can load share across multiple AAA servers or within a server group
•
Generates and manages X.509 digital certificates
•
Assigns and enforces per-user authorization policies that are managed centrally from the AAA back-end
•
Authorizations include virtual private group membership, personal firewall filters, time-of-day/day-of-week access, encryption type,
and location-specific policies
•
IEEE 802.1x with multiple EAP types (TLS, PEAP/MSCHAP, TTLS)
•
WebAAA, MAC, Open
•
WiFi WPA2 Enterprise certified
Encryption Key Management
•
Encryption distributed in Mobility Point access points
•
MX generates master and session keys
•
Provides key management for each encryption technique
Identity-based Networking
•
User credentials define access and network resource privileges
•
Privileges and services follow users as they roam
•
Maintains a user’s membership in the right virtual private group based on the user’s authenticated identity
•
Dynamically enables Virtual Private Groups to support roaming across router boundaries
•
Centralized management and control
Endpoint assurance
•
Trusted Computing Group (TCG) - Trusted Network Connect (TNC) compliant
•
Microsoft NAP compliant
Intrusion Detection and Protection
•
ActiveScan™ rogue and denial-of-service (DoS) attack detection — Scans all bands, associated channels and VLANs, while
simultaneously providing wireless connectivity to mobile clients
•
SentryScan™ — Scans the air continuously on both bands and their associated channel while other MPs support wireless LAN clients
•
Rogue detection, Intrusion Detection System (IDS) and RF countermeasures
•
Trapeze/AirDefense integrated Intrusion Detection and Prevention
- Best in class IDS/IPS
- Common Trapeze MP hardware for sensor and service APs
- Dynamic threat management- convert MPs to sensors on demand
- Threat location and mitigation
Mobility Services
Data Services
•
Data-intensive applications
•
Latency-sensitive applications
Standards-based toll quality voice service
•
VoIP protocol support
•
802.11 e/WMM compliant
•
Queuing and priority (802.11e/WMM)
•
Preserve voice priority across network (802.11i PMK cache, WMM)
•
Bandwidth control for voice (TSPEC)
•
Maximize handset battery life (U-APSD)
•
Neighbor report assisted roaming (802.11k)