Zebra RFS-7000 RFS-7010-10010-WR Manuel D’Utilisation

RFS 7000

Enabling a secure and reliable Wireless Enterprise for campus, data center and large deployments

motorola.com

Part number SS-RFS 7000. Printed in USA 10/09. MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. All other product or service names are 
the property of their respective owners. ©2009 Motorola, Inc. All rights reserved. For system, product or services availability and specific information within your country, please 
contact your local Motorola office or Business Partner. Specifications are subject to change without notice.

Layer 3 Mobility (Inter-Subnet Roaming)
Radio frequency automatic channel select (ACS); Transmit power control management 

(TPC); Country code-based RF configuration; 802.11b, 802.11g, 802.11a, and 802.11n
Network Security
Role-based wired/wireless firewall ( L2-L7) with stateful inspection for wired and 

wireless traffic; Active firewall sessions — 205,000 per controller and 2,460,000 

per cluster; protects against IP Spoofing and ARP Cache Poisoning
Access Control Lists (ACLs):  L2/L3/L4 ACLs 
Wireless IDS/IPS: 

Multi-mode rogue AP detection, Rogue AP  

 

Containment, 802.11n Rogue Detection, Ad-Hoc 

 

Network Detection, Denial of Service protection  

 

against wireless attacks, client blacklisting, excessive  

 

authentication/association; excessive probes;  

 

excessive disassociation/deauthentication; excessive  

 

decryption errors; excessive authentication failures;  

 

excessive 802.11 replay; excessive crypto IV failures 

 

(TKIP/CCMP replay); Suspicious AP, device in ad-hoc  

 

mode, unauthorized AP using authorized SSID, EAP  

 

flood, fake AP flood, ID theft, ad-hoc advertising  

 

authorized SSID

Geofencing: 

Add location of users as a parameter that defines  

 

access control to the network

WIPS sensor conversion:  Supported on the AP 300, AP 650, and the adaptive  

 

AP 5131 and AP 7131

Anomaly Analysis: 

Source Media Access Control (MAC) = Dest MAC;  

 

Illegal frame sizes; Source MAC is multicast; TKIP  

 

countermeasures; all zero addresses

Authentication: 

 Access Control Lists (ACLS); pre-shared keys (PSK); 

802.1x/EAP—transport layer security (TLS), tunneled 

transport layer security (TTLS), protected EAP (PEAP); 

Kerberos Integrated AAA/RADIUS Server with native 

support for EAP-TTLS, EAP-PEAP (includes a built in 

user name/password database; supports LDAP), and 

EAP-SIM

Transport encryption: 

 WEP 40/128 (RC4), KeyGuard, WPA—TKIP, WPA2-

CCMP (AES), WPA2-TKIP

802.11w: 

 Provides origin authentication, integrity, confidentiality 

and replay protection of management frames for  

AP 300

IPSec VPN gateway:  

Supports DES, 3DES and AES-128 and AES-256  

 

encryption, with site-to-site and client-to-site  

 

VPN capabilities; supports 2,048 concurrent IPSEC  

 

tunnels per switch/controller — 24,576 per cluster
Provides secure guest access for wired and wireless 

clients. built-in captive portal, customizable login/ 

welcome pages, URL redirection for user login, usage-

based charging, dynamic VLAN assignment of clients, 

DNS white list, GRE tunneling of traffic to central 

site, API support for interoperability with custom web 

portals (e.g. Wandering WiFi), Amigopod, support for 

external authentication and billing systems

Wireless RADIUS  

User Based VLANs (Standard) 

Support (Standard and 

MAC Based Authentication (Standard) 

Motorola Vendor 

User Based QoS (Motorola VSA) 

Specific Attributes): 

Location Based Authentication (Motorola VSA) 

 

Allowed ESSIDs (Motorola VSA)

NAC support with third party systems from Microsoft, Symantec and Bradford
Real Time Locationing System (RTLS)
RSSI based triangulation for Wi-Fi assets
Tags supported: Ekahau, Aeroscout, Newbury, Gen 2 Tags
RFID support: Compliant with LLRP protocol. Built-in support for the following 

Motorola RFID readers: fixed (XR440, XR450, XR480; mobile (RD5000) and  

handheld (MC9090-G RFID)

Optimized Wireless QoS
RF priority:  

802.11 traffic prioritization and precedence

Wi-Fi Multimedia 

WMM-power save with TSPEC Admission Control;  

extensions:  

WMM U-APSD

IGMP snooping: 

Optimizes network performance by preventing flooding  

 

of the broadcast domain

SIP Call Admission Control:  Controls the number of active SIP sessions initiated  

 

by a wireless VoIP phone

802.11k: 

Provides radio resource management to improve client  

 

throughput (11k client required)

Classification 

Layer 1-4 packet classification; 802.1p VLAN priority;  

and marking:  

DiffServ/TOS

System Resiliency and Redundancy
Active:Standby; Active:Active and N+1 redundancy with access port and MU load 

balancing; Critical resource monitoring
Virtual IP: Single virtual IP (per VLAN) for a switch cluster for use as a default 

gateway for mobile devices or by wired infrastructure. Seamless fail-over of 

associated services e.g. DHCP Server.
SMART RF: Network optimization to ensure user quality of experience at all times 

by dynamic adjustments to channel and power (on detection of RF interference or 

loss of RF coverage/neighbor recovery). Available for both thin APs and Adaptive 

APs.
Dual Firmware bank supports Image Failover capability
Management
Command line interface (serial, telnet, SSH); secure Web-based GUI (SSL) for 

the wireless controller and the cluster; SNMP v1/v2/v3; SNMP traps—40+ user 

configurable options; Syslog; Firmware, Config upgrade via TFTP, FTP & SFTP 

(clients); simple network time protocol (SNTP); text-based switch/controller 

configuration files; DHCP (client/server/relay), controller auto-configuration and 

firmware updates with DHCP options; multiple user roles (for controller access); 

MIBs (MIB-II, Etherstats, wireless controller specific monitoring and configuration); 

Email notifications for critical alarms; MU naming capability
Physical Characteristics
Form factor: 

1U Rack Mount 

Dimensions:  

1.75 in. H x 17.32 in. W x 15.39 in. D  

 

44.45 mm H x 440 mm W x 390.8 mm D

Weight: 

13.5 lbs./6.12 kg 

Physical interfaces:  

4 10/100/1000 Cu/SFP Ethernet interfaces,  

 

1 10/100 OOB port, 1 CF card slot, 2 USB slots,  

 

1 serial port (RJ45 style) 

MTBF: 

>65,000 Hours 

Power Requirements
AC input voltage: 

90 – 264 VAC 50/60Hz 

Max Power Consumption      100W
User Environment
Operating temperature: 

32° F to 104° F /0° C to 40° C 

Storage temperature: 

-40° F to 158° F/-40° C to 70° C 

Operating humidity: 

5% to 85% (w/o condensation) 

Storage humidity: 

5% to 85% (w/o condensation) 

Max Operating Altitude        3000m
Regulatory
Product safety: 

UL / cUL 60950-1, IEC / EN60950-1

EMC compliance: 

FCC (USA), Industry Canada, CE (Europe),    

 

VCCI (Japan), C-Tick (Australia/New Zealand)

 

 

Zero Port Wireless Switch

 

 

64 Port Wireless Switch

 

 

128 Port Wireless Switch

 

 

256 Port Wireless Switch

 

 

16 Port Upgrade  

License Certificate

 

RFS 7000 License for  

Advanced Security

 

RFS 7000 Licenses for 64 

Adaptive Access Points

 

RFS 7000 Licenses for 512  

Adaptive Access Points

 

RFS 7000 Licenses for 1,024 

Adaptive Access Points

 

RFS 7000 License for the  

Location Application License

Secure guest access 

(Hotspot provisioning)