...

:
People Move. Networks Must Follow.
Aruba Networks securely delivers networks to users, wherever
they work or roam. Our unifi ed mobility solutions integrate high
performance 802.11a/b/g/n self-optimising wireless LANs with
identity based security, wireless intrusion and remote access
solutions that are simple to manage and easy to implement. Aruba
is a world leader in secure enterprise mobility delivering the Follow-
Me Enterprise.
Adaptive 802.11a/b/g/n Wi-Fi networks for corporate offi ce, remote
branch, home offi ce, factory, hospitals and industrial sites ensure
that users are always within reach of mission-critical information
with Follow-Me Connectivity.
Identity based security ensures users are always protected from
internal and external threats, enforcing policies wherever and
whenever the network is accessed with Follow-Me Security.
Remote access and cellular network integration for voice and data
users ensure uninterrupted access to applications as users move
with Follow-Me Applications.
Multi-vendor management provides a single point of control while
managing both legacy and new wireless networks from Aruba and
its competitors with Follow-Me Management.
Aruba delivers a comprehensive mobility solution that serves
applications including wireless LAN access, secure enterprise mesh,
remote access, wireless intrusion protection, network access control,
voice over Wi-Fi and fi xed-mobile convergence, video surveillance,
real time location services and many more.
:
1. Integrated ICSA Certified / DoD Compliant / Common Criteria Certified Wireless IPS
Same AP, controller & management hardware/software for WLAN & WIPS
Continuous visibility of the airwaves with hybrid APs and sensors using single vendor WLAN & WIPS
L1-L7 visibility of WLAN traffic for cross layer integration of user-state for best-in-class WIPS
2. Integrated Role / Identity Based Policy Enforcement with ICSA Certified Stateful Firewall
Role & Identity based access control independent of user VLAN or SSID
Integrated quality of service, location & time-of-day based access per user & per application
Detect & validate user data packet by packet, maintain session state information per user, prevent TCP SYN, RST Replay & ACK attacks, protect WLAN from L3-L7 malicious activity & attacks, per-application redirect to 3rd party anti-virus firewalls, reduce the chances of an attack by enforcing TCP handshake for packet transmission
3. Client-to-Core Security with Centralized Encryption
Only integrated single-vendor DoD 8100.2 compliant encryption architecture
Centralized encryption to prevent key explosion & malicious attacks on APs
Integrated high-performance RADIUS to increase auth efficiency & reduce server costs
4. Deep Packet Inspection and Traffic Management per Application
Application aware RF scanning for WIPS & dynamic RF management for any mission critical application & not just for high-priority queue traffic or few VoWLAN protocols
Stateful (voice call recognition & active call admission control) against all VoWLAN protocols
Packet-rate or air-time based bandwidth control for WLAN traffic
5. Enabling Mobile Applications across the WAN
Integrated role/identity based stateful firewall for remote AP (on any type of Aruba AP)
Integrated IPSec security for remote AP control plane & centralized encryption for client data
Integrated quality of service, WIPS, enterprise mesh, dynamic RF management for remote AP
Integrated client VPN and/or site-to-site VPN termination capability
6. Integrated Intelligent Real-Time & Dynamic RF Management & Monitoring
Integrated pre-deployment RF planning tools & post-deployment live RF heatmaps for WLAN & WIPS
Application / interference / noise aware adaptive radio management for power & channel assignments
Automatic load-balancing & channel overlay for increased capacity without requiring channel overlays
Integrated single vendor solution for RFID, WIPS & client device location tracking services
7. Integrated Outdoor & Indoor Secure Enterprise Mesh
Same AP hardware, controller software & network management solution for enterprise mesh
Client-to-core security for encrypted client data transmission across mesh links
Redundancy, adaptive radio management, WIPS enabled enterprise mesh points & portals
8. Purpose Built Intelligent L1-L7 Aware High-Performance Controller Architecture
Master & local architecture for ease of deployment & pervasive mobility for any authentication type across multiple APs & controllers without requiring a separate network management platform
Integrated PoE, source / destination NAT, L2 bridging, L3 routing, RADIUS server, captive-portal capabilities per mobility controller for no change in the core seamless overlay deployment of WLAN
Integrated role / identity based stateful firewall services for wired clients
9. Fully Redundant Architecture
Port, fan tray, power supply redundancy for APs, controllers, network management system
Redundancy for WIPS, location tracking, multi-AP/controller configuration, adaptive radio mgmt
Sub-10 seconds failover for mobility controllers through standards based VRRP implementation
10. Infrastructure Controlled Device & Protocol Agnostic Quality of Service & Security
Stateful QoS, call recognition & monitoring services for any VoWLAN protocol
Fast roaming, WIPS, battery life mgmt for any Wi-Fi chipset independent of client-side software
:
Aruba End to End Security Unique feature and leading market position
Arubas high-performance 802.11n ready controller architecture includes a dedicated crypto processor capable of supporting 8000+ WLAN clients at 20Gbps rate, per processor. Besides enabling increased encryption throughput, reduced latency & faster roaming, centralized encryption enables Aruba with the best WLAN security architecture in the industry. Due to locked down nature of the solution, unlike Cisco, Aruba assumes that APs are deployed in hostile environments, not inside locked wiring closets or above ceiling tiles. Because of this, Aruba APs contain no configuration, passwords, encryption keys, or security information. The AP has no exposed serial port, no recoverable passwords (some vendors password recovery procedures are posted on the Internet), no vendor-installed certificates, and no way for an intruder to tap into the wired side of the AP to eavesdrop on wireless communication (for example, a student watching for a professor to send final exams to the printer).
In a Cisco deployment, the network manager must worry about compromised APs in addition to the usual wireless security threats. Because all security functionality is centralized and housed in the mobility controller (including encryption) and not the AP, Aruba can guarantee that APs do not have to be replaced as security standards evolve. This not only protects investment, it ensures the continuous security of the network.
While Cisco claims to achieve enterprise class security between APs & Controllers in their Airespace based LWAPP architecture, it is merely an algorithm that uses certificates with public keys to start with. For enterprise level security, to prove to someone else that you are who you say you are, you must prove possession of a private key - which is achieved in software by Cisco LWAPP architecture as Cisco APs do not contain a dedicated trusted platform module to perform cryptography operations. This creates a substantial opportunity for an attacker to get a hold of this private key after taking physical control of the AP. After which Cisco LWAPP network will be vulnerable to an attacker joining the network and pretending to be a valid AP. That's why Aruba does not trust its APs, and why performs centralized encryption - nobody is going to gain access to the network unless they authenticate as a user, through Aruba's mobility controller.
While Cisco to support enterprise grade secure 802.1x, the fact that Cisco LWAPP architecture distributes encryption keys to all APs on the network, before the user even roams to any of the other APs, this creates a considerable security hole. Since Cisco does encryption on the AP, the attacker can get access to the enterprise network if any one of the APs are physically compromised as explained above. It is possible for an attacker to act like a Cisco AP & start retrieving other's encryption keys.
While an attacker can also act like an Aruba AP, it will only receive channel number, power setting, and SSID names - which are already available on the air - and nothing more. And since the network access beyond the controller is blocked by the firewall until a valid user authenticates, enterprise user's data & credentials are never compromised. In addition to this level of security, with Aruba one can turn on IPSec encryption for the control path traffic between the AP & the mobility controller (with 0% performance hit for user data traffic) - which is by definition dynamic and the authentication of the AP can be achieved against an internal or external user database.
:
Spec Sheet:
Aruba AP 70
The Aruba AP 70
The Aruba AP 70 is the industrys fi rst dual-radio hybrid access point that
provides concurrent operation of 802.11a and 802.11b/g services, as well
as secure wired access through an additional Ethernet port. Designed for
use exclusively with Aruba mobility controllers, the Aruba AP 70 is ideally
suited for advanced service delivery in mission-critical networks. The Aruba
AP 70 is a multi-purpose device that can function both as an access point
and as an RF monitoreither independently or concurrentlyacross the
2.4 GHz and 5 GHz spectrums. The Aruba AP 70 supports both a built-in
180 degree rotational omni directional high-gain tri-band antenna as well as
support for 2.4 and 5 GHz detachable antennas.
Antennas
AP 70 Integral Antenna:
Integral, diversity supporting dual, tri-band omni-directional high
gain antennas with 180 degrees movement
Integral antenna gain
~ 2.4-2.5 GHz / 4.46 dBi
~ 5.150 GHz / 7.21 dBi
~ 5.350 GHz / 6.49 dBi
~ 5.850 GHz / 5.23 dBi
AP 70 External Antenna Interfaces:
Quad (2 x 2.4GHz and 2 x 5GHz), diversity supporting reverse polarity
SMA (RP-SMA) antenna interfaces suitable for a wide array
of detachable antennas of various pattern types and gains.
Radio Specs 802.11a
Frequency Bands Supported
- 5.150 ~ 5.250 GHz (low band), country specifi c
- 5.250 ~ 5.350 GHz (mid band), country specifi c
- 5.470 ~ 5.725 GHz (Europe), country specifi c
- 5.725 ~ 5.825/5.850 GHz (high band), country specifi c
Radio technology: orthogonal frequency division multiplexing (OFDM)
Modulation type BPSK, QPSK, 16-QAM, 64-QAM
Transmit power confi gurable by system administrator/professional
installer
MAC CSMA/CA with ACK
Operating channels:
- US, Canada up to 13 (indoor/outdoor dependent)
- ETSI - up to 19
- Japan up to 8 (indoor only)
Data rates: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel
Multi-mode radio band 802.11a or 802.11b/g selectable via software
Radio Specs 802.11b
Frequency bands
2.400 ~ 2.4835/2.497 GHz (Global), channels country specifi c
Radio technology direct sequence spread spectrum (DSSS)
Modulation type CCK, BPSK, QPSK
Transmit power confi gurable by system administrator
MAC CSMA/CA with ACK
Operating channels:
US & Canada: 11
ETSI: 13
Japan: 14
Data rates: 1, 2, 5.5, 11 Mbps per channel
Multi-mode radio band 802.11a or 802.11b/g selectable via software
Radio Specs 802.11G
Frequency bands
2.400 ~ 2.4835 GHz (Global), channels country specifi c
Radio technology OFDM
Modulation type CCK, BPSK, QPSK, 16 QAM, 64-QAM
Transmit power confi gurable by system administrator
MAC CSMA/CA with ACK
Operating channels:
US & Canada: 11
ETSI: 13
Japan: 13
Data rates: 6, 9, 12, 18, 24, 36, 48, 54 Mbps per channel
Multi-mode radio band 802.11a or 802.11b/g selectable via software
Complete country list available at:
http://www.arubanetworks.com/products/aps/certifi cation
Manageability
Management of all 802.11 parameters
Network-wide AP management via:
CLI
WEB GUI
SNMPv3
Access point profi les
Management by:
Geographical location
BSSID
Radio type
Physical (H/W/D)
Antenna Retracted:
167 x 190 x 30mm (6.57 x 7.48 x 1.18 in.)
Antenna Extended:
293 x 190 x 30mm (11.54 x 7.48 x 1.18 in.)
Weight 510 grams (18 oz.)
10.5.SSAP70.kh.10.1
*Extended with support contract
1322 Crossman Avenue
Sunnyvale, California 94089
Tel: 408.227.4500 Fax: 408.227.4550
www.arubanetworks.com
2005 Aruba Wireless Networks, Inc. All rights reserved. Aruba Networks and Aruba The Mobile Edge
Company are trademarks of Aruba Wireless Networks, Inc. All other trademarks or registered trademarks
are the property of their respective holders. Specifi cations are subject to change without notice.
Interfaces (Electrical)
2 x 10/100 Base-TX RJ-45 auto-sensing Ethernet interfaces:
(Port 0)
Auto-sensing MDI/MDX
PoE 48V DC / 250mA power-over-Ethernet (802.3af compliant)
Serial-over-Ethernet (Port 1)
Auto-sensing MDX
PoE 48V DC / 250mA power-over- Ethernet (802.3af compliant)
Redundant Ethernet Data Link and power-over-Ethernet
Secure-jack wired port security (when deployed with the ArubaOS)
USB ver2.0 Interface
1 x 5V DC Power Interface
Interfaces (Mechanical)
Standard Kensington MicroSaver security cable interface (not supplied)
Wall, wall gang-box and ceiling mount kit interface
(optional part number AP-70-MNT)
Visual Indicators (LEDS)
(Ready) Power on/off
(Ethernet 0/1) link status / activity
(Radio Mode) 802.11a + b/g AP / air monitor mode
Power Requirements
External AC power or POE
5V DC / 3A supplied externally via optional country specifi c
AC adapter kits
48V DC / 250mA power-over-Ethernet (802.3af compliant)
Environmental
Temperature
Operating: 0 to 50 ºC (32 to 122 ºF)
Storage: 0 to 70 ºC (32 to 158 ºF)
Humidity 5% to 95% (non-condensing)
Standards
Ethernet IEEE 802.3 / IEEE 802.3u
Power-over-Ethernet IEEE 802.3af
Wireless IEEE 802.11a/b/g
USB 2.0
Radio Approvals
FCC DOC Part 15 Class B (digital portion)
FCC Part 15 Subpart C 15.247
FCC Part 15 Subpart E 15.407
ICES-003 Class B
RSS 210 (Canada)
VCCI Class B (Japan)
Telec 2.4, Channel 14 and 5GHz approved (Japan)
CE marked with NB letter of opinion for RTTE
ETS 300 328 2.4 GHz
ETS 301 893 5.4 GHz
ETS 301 489 EMC
MIC Korea
SRRC (China)
AS/NZS 3548 Class B
AS/NZS4771 (C-tick)
Safety Approvals
cULus listed
PSE Mark (AC Power Supply)
IEC 60950 CB certifi cate and report
UL Listed (UL60950)
UL Listed (Canadian Electrical Code/CSA 22.2 No. 60950)
EN60950 / IEC60950
UL Listed (UL2043)
EN 60601-1-1 & EN 60601-1-2: (MD compliance)
Warranty
1 year limited parts/labor*
Part Numbers
AP-70
Aruba 70 Access Point 802.11a + b/g
AP-70-MNT
Aruba 70 Access Point Wall / Ceiling Mounting Kit
AP-70 Series (AC power adapter country kit variants)
AP-AC-NA (North America)
AP-AC-JPN (Japan)
AP-AC-UK (United Kingdom)
AP-AC-EC (Central Europe, Schuko)
AP-AC-IT (Italy)
Antennas
Aruba offers a wide variety of detachable antenna types suitable
for use with the Aruba 70. Please contact your local sales
representative for details.
Spec Sheet:
Spec Sheet:
Aruba 2400 Mobility Controller
The Aruba 2400 is a full-featured wireless LAN mobility controller
that aggregates up to 48 controlled Access Points (APs) and delivers
centralized control and security for wireless deployments. The Aruba
2400 is designed for regional headquarters or dense offi ce deployments,
the Aruba 2400 mobility controller delivers integrated mobility, security
and convergence services for both wired and wireless users and can
be easily deployed as an overlay without any disruption to the existing
wired network. This device is centrally managed using the ArubaOS
or Aruba Mobility Management System. In addition, the Aruba 2400
can be deployed as an identity-based security gateway to authenticate
wired and wireless users, enforce role-based access control policies
and quarantine unsafe endpoints from accessing the corporate network.
Guest users can easily and safely be supported with the built-in captive
portal server and advanced network services. Features that allow the
Aruba 2400 to create a secure networking environment without requiring
additional VPN/fi rewall devices include integrated site-to-site VPN, splittunneling,
ICSA-compliant stateful fi rewall and NAT capabilities. Siteto-
site VPN can be integrated with all leading VPN concentrators to
provide seamless integration into existing corporate VPNs. In addition,
advanced convergence features such as Call Admission Control (CAC),
voice-aware RF management and strict over-the-air QoS allow the
Aruba 2400 to deliver mobile VoIP capabilities.
Controller Performance and Capacity
Controlled APs 48
Users 768
MAC addresses 4096
VLAN IP interfaces 128
Fast Ethernet ports (10/100) 24
Gigabit Ethernet ports (GBIC) 2
Active fi rewall sessions 64,000
Concurrent IPSEC tunnels 768
Firewall throughput 2 Gbps
Encrypted throughput (3DES & AES-CCM) 400 Mbps
Wireless LAN Security and Control Features
802.11i security (WFA certifi ed WPA2 and WPA)
802.1X user and machine authentication
EAP-PEAP, EAP-TLS, EAP-TTLS support
Centralized AES-CCM, TKIP and WEP encryption
802.11i PMK caching for fast roaming applications
EAP offl oad for AAA server scalability and survivability
Stateful 802.1X authentication for standalone APs
MAC address, SSID and location based authentication
Per-SSID bandwidth contracts
SSID-based RADIUS server selection
Secure AP control and management over IPSEC or GRE
CAPWAP compatible and upgradeable
Distributed WLAN mode for remote AP deployments
Simultaneous centralized and distributed WLAN support
Identity-based Security Features
Wired and wireless user authentication
Captive portal, 802.1X and MAC address authentication
Username, IP address, MAC address and encryption key
binding for strong network identity creation
Per-packet identity verifi cation to prevent impersonation
Endpoint posture assessment, quarantine and remediation
Microsoft NAP, Cisco NAC, Symantec SSE support
RADIUS and LDAP based AAA server support
Internal user database for AAA server failover protection
Role-based authorization for eliminating excess privilege
Robust policy enforcement with stateful packet inspection
Role-based MAC/Ethertype ACLs
Per-user session accounting for usage auditing
Web-based guest enrollment with Aruba GuestConnect
Confi gurable acceptable use policies for guest access
XML-based API for external captive portal integration
xSec option for wired LAN authentication and encryption
(802.1X authentication, 256-bit AES-CBC encryption)
Convergence Features
Voice and data on a single SSID for converged devices
Flow-based QoS using Voice Flow Classifi cation
SIP, Spectralink SVP, Cisco SCCP and Vocera ALGs
Strict priority queuing for over-the-air QoS
802.11e support WMM, U-APSD and T-SPEC
QoS policing for preventing network abuse via 802.11e
SIP authentication tracking
Diffserv marking and 802.1p support for network QoS
On-hook and off-hook VoIP client detection
Voice-aware 802.1x authentication
VoIP call admission control (CAC) using VFC
Call reservation thresholds for mobile VoIP calls
Voice-aware RF management for ensuring voice quality
Fast roaming support for ensuring mobile voice quality
SIP early media and ringing tone generation (RFC 3960)
Per-user and per-role rate limits (bandwidth contracts)
Adaptive Radio Management (ARM) Features
Automatic channel and power settings for controlled APs
Simultaneous air monitoring and end user services
Self-healing coverage based on dynamic RF conditions
Dense deployment options for capacity optimization
AP load balancing based on number of users
AP load balancing based on bandwidth utilization
Coverage hole and RF interference detection
802.11h support for radar detection and avoidance
Automated location detection for Active RFID tags
Built-in XML based Location API for RFID applications
Wireless Intrusion Protection Features
The Aruba 2400 Mobility Controller
1322 Crossman Avenue
Sunnyvale, California 94089
Tel: 408.227.4500 Fax: 408.227.4550
www.arubanetworks.com
2007 Aruba Networks, Inc. All rights reserved.
Specifi cations are subject to change without notice.
Integration with WLAN infrastructure
Simultaneous or dedicated air monitoring capabilities
Rogue AP detection and built-in location visualization
Automatic rogue, interfering and valid AP classifi cation
Over-the-air and over-the-wire rogue AP containment
Adhoc WLAN network detection and containment
Windows client bridging and wireless bridge detection
Denial of service attack protection for APs and stations
Misconfi gured standalone AP detection and containment
3rd party AP performance monitoring and troubleshooting
Flexible attack signature creation for new WLAN attacks
EAP handshake and sequence number analysis
Valid AP impersonation detection
Frame fl oods, Fake AP and Airjack attack detection
ASLEAP, death broadcast, null probe response detection
Netstumbler-based network probe detection
Stateful Firewall Features
Stateful packet inspection tied to user identity or ports
Location and time-of-day aware policy defi nition
802.11 station awareness for WLAN fi rewalling
Over-the-air policy enforcement and station blacklisting
Session mirroring and per-packet logs for forensic analysis
Detailed fi rewall traffi c logs for usage auditing
ICSA corporate fi rewall 4.1 compliance
Application Layer Gateway (ALG) support for SIP, SCCP,
RTSP, Vocera, FTP, TFTP, PPTP
Source and destination Network Address Translation (NAT)
Dedicated fl ow processing hardware for high performance
TCP, ICMP denial of service attack detection and protection
Policy-based forwarding into GRE tunnels for guest traffi c
External service interface for 3rd party security integration
for inline anti-virus, anti-spam and content fi ltering apps
Health checking and load balancing for external services
VPN Server Features
Site-to-site VPN support for branch offi ce deployments
Site-to-site interoperability with 3rd party VPN servers
VPN server emulation for easy integration into WLAN
L2TP/IPSEC VPN termination for Windows VPN clients
Mobile edge client shim for roaming with RSA Tokens
XAUTH/IPSEC VPN termination for 3rd Party clients
PPTP VPN termination for legacy VPN integration
RADIUS and LDAP server support for VPN authentication
PAP, CHAP, MS-CHAP and MS-CHAPv2 authentication
Hardware encryption for DES, 3DES, AES, MPPE
Secure point-to-point xSec tunnels for L2 VPNs
Networking Features and Advanced Services
L2 and L3 switching over-the-air and over-the-wire
VLAN pooling for easy, scalable network designs
VLAN mobility for seamless L2 roaming
Proxy mobile IP and proxy DHCP for L3 roaming
Built-in DHCP server and DHCP relay
VRRP based N+1 controller redundancy (L2)
AP provisioning based N+1 controller redundancy (L3)
Wired access concentrator mode for centralized security
Etherchannel support for link redundancy
802.1d Spanning Tree Protocol
802.1Q VLAN tags
Controller-based Management Features
RF Planning and AP Deployment Toolkit
Centralized AP provisioning and image management
Live coverage visualization with RF heat maps
Detailed statistics visualization for monitoring
Remote packet capture for RF troubleshooting
Interoperable with Ethereal, Airopeek and AirMagnet analyzers
Multi-controller confi guration management
Location visualization and device tracking
System-wide event collection and reporting
Controller Administration Features
Web-based user interface access over HTTP and HTTPS
Quickstart screens for easy controller confi guration
CLI access using SSH, Telnet and console port
Role-based access control for restricted admin access
Authenticated access via RADIUS, LDAP or Internal DB
SNMPv3 and SNMPv2 support for controller monitoring
Standard MIBs and private enterprise MIBs
Detailed message logs with syslog event notifi cation
Controller Power Specifi cation
Power consumption 300W, Maximum
AC Input voltage 90-132VAC/180-264VAC
AC Input Frequency 47-63 Hz
Operating Specifi cations and Dimensions
Operating temperature range 0 to 40 C
Storage temperature range 10 to 70 C
Humidity, non-condensing 5 to 95%
Height 1.75˝ (44.5 mm)
Width 17.4˝ (444 mm)
Depth 13˝ (330 mm)
Weight 12.5 lbs. (unboxed)
Warranty
Hardware 1 year parts/labor
Software 90 days
Regulatory and Safety Compliance
FCC part 15 Class A CE
Industry Canada Class A
VCCI Class A (Japan)
EN 55022 Class A (CISPR 22 Class A), EN 61000-3,
EN 61000-4-2, EN 61000-4-3, EN 61000-4-4,
EN 61000-4-5, EN 61000-4- 6, EN 61000-4-8,
EN 61000-4-11, EN 55024, AS/NZS 3548
UL 60950
CAN/CSA 22.2 #60950
Spec Sheet:
Aruba 2400 Mobility Controller
1.6.SSAP200.km.10.1
1322 Crossman Avenue
Sunnyvale, California 94089
Tel: 408.227.4500 Fax: 408.227.4550
www.arubanetworks.com
2007 Aruba Networks, Inc. All rights reserved.
Specifi cations are subject to change without notice.
Ordering Information
Part number Description
2400-48-AOS-STD A2400-48 Mobility Controller - SPOE,
GBIC GigE - 48 AP Limit
LC-GBIC-T Aruba GBIC Interface Adapter - T
LC-GBIC-SX Aruba GBIC Interface Adapter - SX
LC-GBIC-LX Aruba GBIC Interface Adapter LX
LIC-2400-SEC* Security Software Bundle for A2400-48 (48 AP
License)
LIC-2400-ADV** Advanced Security Software Bundle for A2400-48
(48 AP License)
LIC-2400-PEF Policy Enforcement Firewall Module for A2400-48 (48
AP License)
LIC-2400-VPN VPN Server Module for A2400-48 (48 AP License)
LIC-2400-WIP Wireless Intrusion Protection Module for A2400-48
(48 AP License)
LIC-2400-VOC Voice Services Module for A2400-48 (48 AP License)
LIC-2400-ESI External Services Interface Module for A2400-48 (48
AP License)
LIC-2400-CIM Client Integrity Module for A2400-48 (48 AP License)
LIC-2400-XSC xSec Module for A2400-48 (48 AP License)
LIC-1-RAP Remote Access Point License (Single AP License)
LIC-4-RAP Remote Access Point License (4 AP License)
LIC-6-RAP Remote Access Point License (6 AP License)
LIC-8-RAP Remote Access Point License (8 AP License)
LIC-16-RAP Remote Access Point License (16 AP License)
LIC-24-RAP Remote Access Point License (24 AP License)
LIC-48-RAP Remote Access Point License (48 AP License)
*Includes Policy Enforcement Firewall (PEF) and Wireless Intrusion
Protection (WIP)
**Includes Policy Enforcement Firewall (PEF), Wireless Intrusion Protection
(WIP) and VPN Server (VPN)
Please contact your Aruba Networks Sales representative for more information
on confi guring and ordering this product
...
sheko ...
...
:
...
. unifi
802.11a/b/g/n -
.
.
802.11a/b/g/n
" - ".
" - ".
" - ."
" ".
xed
.
:
1. Icsa / /
wips
wips
l1 - l7 wips
2. / icsa
* ssid
* rst l3 - l7 3rd
3. -
* 8100.2
*
*
4.
* wips " " vowlan
* ( ) vowlan
*
5.
/ ( )
wips
* /
6.
heatmaps wips
* / /
wips &
7.
-
wips
8. l1 - l7
/ l2 l3 " "
/
9.
wips multi-ap/controller mgmt
10 vrrp
10.
vowlan
wips mgmt
:
--
802.11n 8000 + 20gbps . . . . ( ' ) ( ).
. ( ) . .
airespace lwapp . -- lwapp . . lwapp . -- .
802.1x lwapp . . .
ssid -- -- . . ( 0 ٪ ) -- .
:
:
70
70
70 rst ""
802.11a 802.11b /
.
70
.
70
2.4 5 . 70
180
2.4 5 .
70 :
180
--
~ 24-25 / 4.46
~ 5.150 / 7.21
~ 5.350 / 6.49
~ 5.850 / 5.23
70 :
(2 2.4ghz 2 5ghz)
( )
.
-- 802.11a
-- 5.150 ~ 5.250 ( ) specifi
-- 5.250 ~ 5.350 ( ) specifi
-- 5.470 ~ 5.725 () specifi
-- 5.725 ~ 5.825/5.850 ( ) specifi
: ( )
-- bpsk qpsk 16 - 64 -
-- confi gurable /
-- csma /
:
-- -- 13 ( )
-- -- 19
-- -- 8 ( )
: 6 9 12 18 24 36 48 54
802.11a 802.11b /
-- 802.11b
-- 2.400 ~ 2.4835/2.497 () specifi
-- (dsss)
-- bpsk qpsk
-- confi gurable
-- csma /
:
-- : 11
-- : 13
-- : 14
: 1 2 5.5 11
802.11a 802.11b /
-- 802.11g
-- 2.400 ~ 2.4835 () specifi
--
-- bpsk qpsk 16 64 -
-- confi gurable
-- csma /
:
-- : 11
-- : 13
-- : 13
: 6 9 12 18 24 36 48 54
802.11a 802.11b /
:
http://www.arubanetworks.com/products/aps/certifi
802.11
:
--
--
-- snmpv3
:
--
-- bssid
--
( / / )
:
167 190 30mm (6.57 7.48 1.18 )
:
293 190 30mm (11.54 7.48 1.18 )
510 (18 ).
10.5.ssap70.kh.10.1
*
1322
94089
: 408.227.4500 : 408.227.4550
www.arubanetworks.com
2005 .
. Specifi .
()
2 10/100 - 45 :
( 0)
-- / mdx
-- 48v / 250ma (802.3af )
-- ( 1)
-- mdx
-- 48v / 250ma (802.3af )
( arubaos)
[] ver2.0
1 5v
()
microsaver ( )
( -- - 70 - )
( )
() /
( 0 / 1) /
( ) 802.11a + / /
5v / 3a specifi
48v / 250ma (802.3af )
-- : 0 50 ( 32 122 )
-- : 0 70 (32 158 )
5 ٪ 95 ٪ ( )
ieee 802.3 / ieee 802.3u
ieee 802.3af
ieee 802.11a/b/g
[] 2.0
15 ( )
15 15.247
15 15.407
- 003
210 ()
vcci ()
tlc 2.4 14 5ghz ()
rtte
-- 300 328 2.4
-- 301 893 5.4
-- 301 489
()
/ nzs 3548
as/nzs4771 ( )
culus
( )
60950 certifi
(ul60950)
( / 22.2 60950)
en60950 / iec60950
(ul2043)
60601-1-1 & 60601-1-2 : ( )
1 / *
- 70
70 802.11a + /
- 70 -
70 /
- 70 ( )
( )
()
( )
( schuko)
()
70.
.
:
:
2400
2400
48 ()
.
2400
2400
. arubaos
. 2400
.
.
2400
/ rewall splittunneling
icsa rewall . Siteto -
.
()
2400 .
48
768
4096
128
(10/100) 24
(gbic) 2
rewall 64000
768
2
(3des ) 400
802.11i (wpa2 certifi )
802.1x
ttls
tkip) (
802.11i pmk
oad offl
802.1x
ssid
ssid
ssid
capwap
802.1x
verifi
ldap
/ ethertype acls
guestconnect
confi gurable
api
xsec
(802.1x 256 )
ssid
classifi
spectralink vocera algs
802.11e -- apsd
802.11e
diffserv 802.1p
- 802.1x
() vfc
-
(rfc 3960)
( )
()
802.11h
api
2400
1322
94089
: 408.227.4500 : 408.227.4550
www.arubanetworks.com
2007 .
Specifi .
classifi
misconfi gured
3rd
oods airjack
asleap
netstumbler
dfi nition
802.11 rewalling
rewall
icsa rewall 4.1
()
vocera tftp pptp
()
icmp
3rd
ltering
3rd
l2tp/ipsec
xauth / 3rd
pptp
ldap
chapv2
3des mppe
xsec l2
l2 l3
l2
dhcp l3
dhcp dhcp
vrrp +1 (l2)
+1 (l3)
etherchannel
802.1d
802.1q
airopeek airmagnet
confi guration
https
confi guration
ldap
snmpv3 snmpv2
mibs mibs
notifi
specifi
300w
90-132vac/180-264vac
47-63
specifi
0 40
10 70
5 95 ٪
1.75 ˝ (44.5 )
17.4 ˝ (444 )
13 ˝ (330 )
12.5 . ( )
1 /
90
15
()
vcci () ()
55022 (cispr 22 ) 61000-3
61000-4-2 61000-4-3 61000-4-4
61000-4-5 61000-4 -- 6 61000-4-8
61000-4-11 55024 / nzs 3548
60950
/ 22.2 # 60950
:
2400
1.6.ssap200.km.10.1
1322
94089
: 408.227.4500 : 408.227.4550
www.arubanetworks.com
2007 .
Specifi .
2400 - 48 - - a2400 - 48 -- spoe
gbic gige -- 48
- gbic gbic --
- gbic - gbic --
- gbic gbic --
- 2400 - * a2400 - 48 (48
)
- 2400 - ** a2400 - 48
(48 )
- 2400 - a2400 - 48 (48
)
- 2400 - a2400 - 48 (48 )
- 2400 - wip a2400 - 48
(48 )
- 2400 - a2400 - 48 (48 )
- 2400 - a2400 - 48 (48
)
- 2400 - a2400 - 48 (48 )
- 2400 - xsc xsec a2400 - 48 (48 )
- 1 - ( )
- 4 - (4 )
- 6 - ( 6 )
- 8 - (8 )
- 16 - (16 )
- 24 - (24 )
- 48 - (48 )
* ( )
(wip)
** ( )
(wip) ()
confi guring
LeRoi
...
..
..