Cisco Wireless LAN Controller Module

Transcription

1 Cisco Wireless LAN Controller Module Simple and Secure Wireless Deployment and Management for Small and Medium-Sized Businesses and Enterprise Branch Offices. Figure 1. Cisco Wireless LAN Controller Module Product Overview The Cisco Wireless LAN Controller Module allows small and medium-sized businesses (SMBs) and enterprise branch offices to cost-effectively deploy and manage secure WLANs. The module provides unparalleled security, mobility, and ease of use for business-critical WLANs, delivering the most secure enterprise-class wireless system available. As a Cisco Integrated Services Router module, it delivers centralized security policies, wireless intrusion prevention system (IPS) capabilities, award-winning RF management, quality of service (QoS), and Layer 3 fast secure roaming for WLANs. The Cisco Wireless LAN Controller Module manages up to six Cisco Aironet lightweight access points and is supported on Cisco 2800/3800 Series integrated services routers and Cisco 3700 Series routers. The Cisco Wireless LAN Controller Module is a member of the Cisco Wireless LAN controller product family. It works in conjunction with Cisco Aironet lightweight access points, the Cisco Wireless Control System (WCS), and the Cisco Wireless Location Appliance to support mission-critical wireless data, voice, and video applications. The Cisco Wireless LAN Controller Module provides zero-touch access point deployment and configuration, making it easy for IT managers to extend secure wireless networks to branch offices. The Cisco Wireless LAN Controller Module eliminates the need to individually configure, manage, and monitor each access point. In conjunction with Cisco Lightweight Access Point Protocol (LWAPP)-enabled access points and the Cisco WCS, the Cisco Wireless LAN Controller Module minimizes deployment and operational costs, allowing businesses with limited IT staffs to easily deploy and manage wireless networks across hundreds of remote sites. All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 9

2 The Cisco Wireless LAN Controller Module enables enterprises to create and enforce policies that support business-critical applications. From voice and data services to location tracking, the Cisco Wireless LAN Controller Module provides the manageability and performance that IT managers require to extend their secure enterprise-class wireless networks to branch offices (Figure 2). Figure 2. Converged Wireless and Wired Branch Office with Secure Data, Voice, Switching, and Wireless Simplified Deployment and Management The Cisco Wireless LAN Controller Module is easy to deploy and cost-effective to own and operate. It provides maximum flexibility to deploy in SMBs and in enterprise branch offices. It supports zero-touch deployments that do not require manual or pre-configuration of the access points. When deployed with the Cisco WCS, the Cisco Wireless LAN Controller Module supports enhanced monitoring and troubleshooting features, including intuitive heat map displays, alarm filtering, event correlation, and granular reporting tools. It also supports template-based configuration management via Cisco WCS Software (optional). These intuitive templates enable the quick application of systemwide security configurations, QoS policies, mobility groups, backend services, and other configurations via the easy-to-use, award-winning Cisco Unified Wireless Network user interface. Intelligent RF Management The Cisco Wireless LAN Controller Module is equipped with embedded software for adaptive realtime RF management. The Cisco Unified Wireless Network uses Cisco s patent-pending Radio Resource Management (RRM) algorithms that detect and adapt to changes in the air space in real time. These adjustments create the optimal topology for wireless networking in much the same way that routing protocols compute the best possible topology for IP networks. Cisco RMM creates an intelligent RF control plane for self-configuration, self-healing, and self-optimization of the wireless network (Figure 3). Cisco RRM algorithms improve wireless LAN operations; tighten wireless security by creating a defense shield that helps prevent unauthorized access from outside the RF domain; and enable businesses to deploy mission-critical wireless applications such as voice. All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 9

3 Figure 3. Enterprise Wide RF Intelligence Specific intelligent RF capabilities managed by the Cisco Wireless LAN Controller Module include: Dynamic Channel Assignment channels are adjusted to optimize network coverage and performance based on changing RF conditions. Interference Detection and Avoidance The system detects interference and recalibrates the network to avoid performance problems. Load Balancing The system provides automatic load balancing of users across multiple access points for optimum network performance, even under heavy load. Coverage Hole Detection and Correction RMM software detects coverage holes and attempts to correct them by adjusting the power output of access points. Dynamic Power Control The system dynamically adjusts the power output of individual access points to accommodate changing network conditions, helping to ensure predictable wireless performance and availability. All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 9

4 Enterprise-Class Security The Cisco Wireless LAN Controller Module for integrated services routers provides the industry s most comprehensive wireless LAN security solution. The module adheres to the strictest level of security standards, including: i Wi-Fi Protected Access 2 (WPA2), WPA, and Wired Equivalent Privacy (WEP) 802.1X with multiple Extensible Authentication Protocol (EAP) types, including Protected EAP (PEAP), EAP with Transport Layer Security (EAP-TLS), EAP with Tunneled TLS (EAP- TTLS), and Cisco LEAP In the Cisco Unified Wireless Network, access points simultaneously act as air monitors and data forwarding devices. This allows access points to communicate real-time information about the wireless domain, including RF noise floor measurements, interference, and potential security threats to Cisco Wireless LAN controllers, without interrupting service. All security threats are rapidly identified and presented to network administrators via the Cisco WCS, where accurate analysis can take place and corrective action can be taken. Cisco Systems provides the only wireless LAN system that offers simultaneous wireless protection and wireless LAN service delivery. This helps to ensure complete wireless LAN protection, with no unnecessary overlay equipment costs or extra monitoring devices. The Cisco Unified Wireless Network can be deployed initially as a standalone wireless IPS, and reconfigured later to add wireless LAN data service. This allows network managers to create a defense shield around their RF domains, containing unauthorized wireless activity until an organization is ready to deploy wireless LAN services. Cisco addresses wireless LAN security by offering multiple layers of protection (Figure 4), including: RF Security Detects and avoids interference, and controls unwanted RF propagation. Wireless LAN Intrusion Prevention and Location Detects and locates rogue devices or potential wireless threats, helping ITadministrators to quickly assess the threat level and take immediate action to mitigate threats as required. Identity-Based Networking Enables enterprises to deliver individualized security policies to wireless users or groups of users with different access rights, device formats, and application requirements. The security policies include: Layer 2 security: 802.1X (PEAP, LEAP, TTLS), WPA, i (WPA2) Layer 3 (and above) security: IP Security (using VPN pass through), Web authentication VLAN assignments Access control lists (ACLs): IP restrictions, protocol types, ports, and differentiated services code point (DSCP) values QoS: Multiple service levels, bandwidth contracts, traffic shaping, and RF utilization Authentication, authorization, and accounting (AAA)/RADIUS: User session policies and rights management Network Admission Control (NAC) Enforces policies pertaining to client configuration and behavior, to help ensure that only end-user devices with appropriate security utilities can gain access to the network. All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 4 of 9

5 Secure Mobility Maintains the highest level of security in mobile environments with Cisco Proactive Key Caching (PKC), an extension to the i standard and precursor to the r standard that facilitates secure roaming with Advanced Encryption Standard (AES) encryption and RADIUS authentication. Guest Tunneling Allows enterprises to provide guest access for users without sacrificing security for their corporate networks. Guest tunnels place all guest traffic into tunnels that terminate outside of a company s firewall. Guest switch tunneling can be initiated on the Cisco Wireless LAN Controller Module, but cannot be terminated. For terminating guest switch tunneling, a Cisco 44xx Wireless LAN Controller is required. Figure 4. Multiple Layers of Wireless LAN Protection Real-Time Application Support The Cisco Unified Wireless Network provides best-in-class performance to support real-time applications such as voice. The Cisco Wireless LAN Controller Module enables rapid handoff between access points, providing mobility to the client. Intelligent queuing and contention management schemes provide effective resource management of the air space, helping to ensure that voice and data traffic are reliably serviced out of a single wireless network. The Cisco Wireless LAN Controller Module also supports QoS capabilities that are Wi-Fi Multimedia (WMM)- compliant and closely mirror the emerging IEEE e standard. Full compliance with the finished standard will be achieved via a software upgrade when the final standard is ratified. Mobility The Cisco Wireless LAN Controller Module for integrated services routers allows users to roam between access points and across bridged and routed subnets without requiring changes to the underlying infrastructure. Security and QoS context information follows users wherever they roam, helping to ensure that mobility does not compromise performance, reliability, or privacy. The Cisco Wireless LAN Controller Module does not require client devices to load any special software to enable mobility (Mobile IP clients, for example). All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 5 of 9

6 Features and Benefits Table 1 lists the features and benefits of the Cisco Wireless LAN Controller Module. Table 1. Feature Features and Benefits of the Cisco Wireless LAN Controller Module Benefits Integrated Into Cisco Routers Zero-touch Configuration Centralize Management Across Many Branches RF Security Integrated RRM Fast Secure Mobility With the Cisco Wireless LAN Controller Module, SMBs and enterprise branch offices can cost-effectively support their network requirements with converged networks that integrate data, voice, video, and wireless. Integrated branch-office platforms lower hardware costs, simplify remote management, and offer flexible configuration options that reduce the total cost of operations and ownership. Using the existing rich portfolio of services such as integrated Cisco EtherSwitch modules with power over Ethernet (PoE), IP Communications, and security, the Cisco Wireless LAN Controller Module delivers a more economical and manageable solution for customers. The Cisco Wireless LAN Controller Module eliminates the need to individually configure, manage, and monitor each access point. It provides zero-touch LWAPP-enabled access point configuration and is ideal for environments with limited onsite IT support, such as branch offices within a distributed enterprise. By managing all access points as a complete wireless LAN system, the Cisco Wireless LAN Controller Module provides complete wireless LAN control and maximizes wireless LAN performance. A single Cisco WCS can manage 100 wireless LAN controller modules located across several remote sites. The Cisco Wireless LAN Controller Module can also be managed without a Cisco WCS, using a CLI or an intuitive Web interface. Integrated wireless intrusion prevention preserves the integrity of wireless networks and sensitive corporate information. The Cisco Wireless LAN Controller Module creates an intelligent RF control plane for self-configuration, self-healing, and self-optimization. Fast secure roaming between access points enables low-latency applications such as voice over WLAN (branchwide cordless telephony). Summary The Cisco Wireless LAN Controller Module provides network administrators with the visibility and control they need to effectively manage enterprise-class wireless LANs at remote sites. With the Cisco Wireless LAN Controller Module, SMBs and enterprise branch offices can cost-effectively support their network requirements with converged networks that integrate data, voice, video, and wireless. The Cisco Wireless LAN Controller Module provides zero-touch access point configuration and is ideal for environments with limited onsite IT support, such as branch offices within a distributed enterprise. In conjunction with Cisco Aironet lightweight access points and the Cisco WCS, the Wireless LAN Controller Module reduces deployment and operational costs of deploying and managing wireless LANs. All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 6 of 9

7 Product Specifications Table 2 lists the product specifications for the Cisco Wireless LAN Controller Module. Table 2. Item Product Specifications for the Cisco Wireless LAN Controller Module Specification Wireless Access points supporting IEEE a, b, g, d, and h Wired/Switching Several Ethernet switching modules and PoE options are supported on Cisco 2800, 3700, and 3800 series routers Data Rfcs Security Standards Encryption RFC 768 UDP RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 826 ARP RFC 1122 Requirements for Internet Hosts RFC 1519 CIDR RFC 1542 BOOTP RFC 2131 DHCP WPA IEEE i (WPA2, RSN) RFC 1321 MD5 Message-Digest Algorithm RFC 2104 HMAC: Keyed Hashing for Message Authentication RFC 2246 TLS Protocol Version 1.0 RFC 3280 Internet X.509 PKI Certificate and CRL Profile WEP and TKIP-MIC: RC4 40, 104, and 128 bits (both static and shared keys) Secure Sockets Layer (SSL) and TLS: RC4 128-bit and RSA and 2048-bit AES: CCM, CCMP AAA IEEE 802.1X RFC 2548 Microsoft Vendor-Specific RADIUS Attributes RFC 2716 PPP EAP-TLS RFC 2865 RADIUS Authentication RFC 2866 RADIUS Accounting RFC 2867 RADIUS Tunnel Accounting RFC 2869 RADIUS Extensions RFC 3576 Dynamic Authorization Extensions to RADIUS RFC 3579 RADIUS Support for EAP RFC 3580 IEEE 802.1X RADIUS Guidelines RFC 3748 Extensible Authentication Protocol Web-based authentication All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 7 of 9

8 Item Management Management Interfaces Physical and Environmental Regulatory Compliance Product Compatibility Software Compatibility Specification Simple Network Management Protocol (SNMP) v1, v2c, and v3 RFC 854 Telnet RFC 1155 Management Information for TCP/IP-Based Internets RFC 1156 MIB RFC 1157 SNMP RFC 1213 SNMP MIB II RFC 1350 TFTP RFC 1643 Ethernet MIB RFC 2030 SNTP RFC 2616 HTTP RFC 2665 Ethernet-Like Interface Types MIB RFC 2674 Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering, and Virtual LAN Extensions RFC 2819 RMON MIB RFC 2863 Interfaces Group MIB RFC 3164 Syslog RFC 3414 User-Based Security Model (USM) for SNMP v3 RFC 3418 MIB for SNMP RFC 3636 Definitions of Managed Objects for IEEE MAUs Cisco private MIBs Web-based: HTTP/HTTPS CLI: Telnet, Secure Shell (SSH) Protocol Dimensions (W x D x H): 1.55 x 7.10 x 7.2 inches (3.9 x 18.0 x 18.3 centimeters) Weight: 0.86lbs [14oz] Temperature: Operating: 32 to 104 F (0 to 40 C) Storage: 13 to 158 F ( 25 to 70 C) Humidity: Operating humidity: 10 to 95 percent, non-condensing Storage humidity: Up to 95 percent CE Mark Safety: UL :2003 EN 60950:2000 EMI and susceptibility (Class A): U.S.: FCC Part and Canada: ICES-003 Japan: VCCI Europe: EN 55022, EN Routers: Cisco 2800, 3700, and 3800 series (excluding Cisco 2801 routers) Access Points: Cisco Aironet 1000, 1130, and 1200 series lightweight access points and Cisco 1500 Series Mesh APs Location Tracking: Cisco 2700 Series Wireless Location Appliance Wireless LAN Controllers: Cisco 2000 and 4400 series wireless LAN controllers and Cisco Catalyst 6500 Series Wireless Services Module (WISM) Routers: Cisco IOS Software Release 12.4(6)T and later All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 8 of 9

9 Ordering Information Table 3 provides ordering information for the Cisco Wireless LAN Controller Module. To place an order, visit the Cisco Ordering Website: Table 3. Ordering Information for the Cisco Wireless LAN Controller Module Part Number NM-AIR-WLC6-K9 NM-AIR-WLC6-K9= Product Name Cisco Wireless LAN Controller Module for managing up to 6 lightweight access points (when sold as part of ISR system) Cisco Wireless LAN Controller Module for up to 6 lightweight access points (spare, ordered as an individual unit) Service and Support Cisco offers a wide range of services programs to accelerate customer success. These innovative services programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco services help you protect your network investment, optimize network operations, and prepare your network for new applications to extend network intelligence and the power of your business. For more information about Cisco services, visit Cisco Technical Support Services or Cisco Advanced Services. For More Information For more information about the Cisco Wireless LAN Controller Module, visit or contact your local account representative. For more information about the Cisco Unified Wireless Network, visit: For more information about the Cisco Integrated Services Routers, visit: Printed in USA C /07 All contents are Copyright Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 9 of 9