background image

SPECIFICATION ShEET

WS2000 

All-in-one wired and wireless switch for small to medium businesses and branch offices

motorola.com

Part number SS-WS2000. Printed in USA 11/09. MOTOROLA and the Stylized M Logo are registered in the US Patent & Trademark Office. All other product or service names are 
the property of their respective owners. ©Motorola, Inc. 2009. All rights reserved. For system, product or services availability and specific information within your country, please 
contact your local Motorola office or Business Partner. Specifications are subject to change without notice.

Application Layer 

SIP, H323, NETBIOS, IKE, TFTP, FTP, PPTP, DNS, L2TP,  

Gateway (ALG) 

SMTP, NNTP, SQL, HTTP, HTTPS, GATEKEEPER, RPC,  

Support: 

MSGUDP, N2P, PCANYWHERE, RTSP, MSGTCP, N2PE,  

 

AIM, ICQ, MSN, ILS

Transport Encryption: 

WEP 40/128 (RC4), KeyGuard, WPA — 

 

TKIP, AES — CCMP; (802.11i WPA2)

Key Exchange  

Extensible Authentication Protocol  (EAP); 

Management: 

Kerberos

Intrusion Detection: 

AP scanning on one or all channels;  

 

Motorola mobile client assist

IP Filtering:  

Configurable incoming and outgoing IP filtering policies  

 

on packets within the same subnet/WLAN and  

 

between wired and wireless hosts

Wireless IDS/IPS:  

Multi-mode rogue AP detection, integrated capabilities  

 

for Rogue AP containment, client blacklisting, excessive  

 

authentication/association; excessive probes;  

 

excessive disassociation/deauthentication; excessive  

 

decryption errors; excessive authentication failures;  

 

excessive 802.11 replay; excessive crypto IV failures  

 

(TKIP/CCMP replay)

Wired IDS/IPS: 

Inline signature analysis of data traffic performed on  

 

traffic from both wired and wireless hosts; configurable  

 

by protocol — Telnet, POP3, IMAP, NNTP, FTP, SNMP,  

 

TCP-DNS, UDP-DNS, TCP-RPC, UDP-RPC, HTTP, SMTP,  

 

TCPGEN, UDPGEN, ICMP, TCP, UDP, IP; Denial of  

 

Service (DOS) Attack Protection, including logging of  

 

detected attacks

URL Filtering: 

Allow or deny access to specific web sites: Reverse 

 

DNS lookup to block access by IP address;  

 

URL Blacklist; URL Whitelist; Keyword analysis in URL;  

 

trusted host provisioning

Anomaly Analysis:  

Source Media Access Control (MAC) = Dest MAC;  

 

Illegal frame sizes; Source MAC is multicast; TKIP  

 

countermeasures; all zero addresses

Premium Wireless IPS: 

Via RF Management Suite for forensics and reporting

VPN gateway:  

Supports DES, 3DES and AES-128 and AES-256  

 

encryption; supports site-to-site and client-to-site  

 

VPN capabilities  

Secure Guest Local  

URL redirection for access (hotspot user login;  

Web Based  

customizable login/welcome pages; provisioning)  

Authentication: 

support for external authentication/billing systems

Wireless RADIUS 

User based VLANs (standard)  

(standard and  

MAC based authentication (standard) 

Motorola specific  

Vendor user based QoS (Motorola VSA) 

 attributes): 

Location based authentication (Motorola VSA) 

 

Allowed ESSIDs (Motorola VSA)

Optimized Wireless QoS

Wi-Fi multimedia 

WMM-power save with Admission Control; 

extensions: 

WMM U-APSD

Classification 

Layer 1-4 packet classification; 802.1p VLAN priority; 

and marking:  

DiffServ/TOS

Management

Command Line Interface (Serial, Telnet, SSH v2); secure Web-based GUI (SSL); SNMP 
v1/v2/v3; SNMP traps — 40+ user configurable options; Syslog; TFTP Client, FTP Client, 
SFTP Client, text based switch configuration files; DHCP (client/server/relay), switch 
auto-configuration and firmware updates with DHCP options; Syslog, MIBs (MIB-II, Ping 
MIB, Trace Route MIB, Motorola MIB

High Availability

Active/standby configuration support; self healing (on detection of RF interference 
or loss of RF coverage)
Dual Firmware bank supports Image Failover capability 

Physical Characteristics

Form Factor:  

Standard 1RU rack mount

Dimensions:  

1.75 in. H x 11.25 in. W x 8 in. D  

 

44.5 mm H x 286 mm W x 203 mm D

Weight:  

1.41 lb/0.64 kg

Physical Interfaces:  

1 - RS232 serial console port 

 

7 - 10/100 Ethernet ports (including 1 WAN  

 

   uplink port), 4 Ports support 802.3af  

 

   Power-over-Ethernet  

 

CF Card (for storage, configuration update and  

 

alternate syslog)

MTBF:  

>50,000 Hours

RoHS Compliant: 

Yes

Power Requirements 

AC Input Voltage:  

100-250 VAC

Max AC Input Current: 

3A@230 VAC

Maximum Power 

120 W 

Consumption: 
Input Frequency:  

47 Hz to 63 Hz

User Environment 

Operating Temperature: 

32°F to 104°F/0°C to 40°C

Storage Temperature:  

-40°F to 158°F/-40°C to 70°C

Operating Humidity:  

5% - 95% (w/o condensation)

Storage Humidity:  

5% - 95% (w/o condensation)

Operating Altitude:  

50 ft. to 8,000 ft./16 m to 2,438 m

Storage Altitude:  

50 ft. to 12,000 ft./16 m to 3,658 m

Regulatory 

Safety Certifications:  

UL, cUL (60950-1), EN60950-1, TUV/GS

EMI Compliance:  

FCC (Part 15 Subpart B), VCCI, EN 55024,  

 

EN 61000-3-2, EN 61000-3-3, IEC 61000-4-2,  

 

IEC 61000-4-3, IEC 61000-4-4, IEC 61000-4-5,  

 

IEC 61000-4-6, IEC 61000-4-8, IEC 61000-4-11

Recommended Enterprise Mobility Services 

Customer Services:  

Service from the Start Advance Exchange Support

Part Numbers for all countries 

WS-2000-SME-ES-WR 
WS-2000-1ES-ABG-WR(WS2000 and 1 AP300 (802.11a/b/g) bundle) 
WS-2000-2ES-ABG-WR(WS2000 and 2 AP300 (802.11a/b/g) bundle) 
WS-2000-2ES-BG-WR (WS2000 and 2 AP300 (802.11b/g) bundle)

Summary of Contents for WS2000 - Wireless Switch - Network Management Device

Page 1: ...AP detection and containment Anomaly Analysis stateful packet inspection firewall with extension Application Layer Gateway ALG support URL filtering IP routing IP filtering and more And comprehensive VPN support provides a secure connection between your sites as well as between your users and your host computer The end result is a robust layered security approach than enables enterprises to achiev...

Page 2: ...ntactus Smart Scan Opportunistically scans channels to provide a list of nearby channels that are available improving roaming speed for clients Wireless IDS IPS Enhanced intrusion detection system IDS provides Rogue AP detection Rogue AP containment and anomaly analysis of wireless data packets and client blacklisting Wired IDS IPS Built in Stateful Packet Inspection firewall provides comprehensiv...

Page 3: ...d enables centralized authentication to a Radius server simplifying hotspot enablement for the enterprise and the user Site to Site IPSec VPN Cost effective secure point to point and client device to host communications 802 3af Power over Ethernet PoE support Built in 4 port PoE eliminates need and expense to power access ports and points Java web based graphical user interface Motorola RF Managem...

Page 4: ... URL redirection for access hotspot user login Web Based customizable login welcome pages provisioning Authentication support for external authentication billing systems Wireless RADIUS User based VLANs standard standard and MAC based authentication standard Motorola specific Vendor user based QoS Motorola VSA attributes Location based authentication Motorola VSA Allowed ESSIDs Motorola VSA Optimi...

Reviews: