3
Alcatel-Lucent OmniAccess 4308
The Alcatel-Lucent OmniAccess 4308
used in conjunction with Alcatel-
Lucent OmniAccess APs includes the
following industry-leading radio
management capabilities:
• Automatic channel selection
• Automatic power selection
• 3-dimensional access point (AP)
location planning tool
• Interference detection and avoidance
• Coverage hole detection
• Configurable performance thresholds
• Self-healing around failed radios
• Radio load balancing
• Wireless RMON statistics
Rogue access point detection
–
The Alcatel-Lucent OmniAccess wireless
system constantly scans all channels
of the RF spectrum, capturing native
802.11 traffic and learning about all
wireless APs. A patent-pending
classification algorithms, determines
if the detected APs are legitimate
APs, rogue APs or interfering APs. An
interfering AP is one that has not
been authenticated to the corporate
network, but is not deemed to be a
potential security breach. Rogue APs
are those that are deemed hazardous
to the network. If rogue APs are detected,
the Alcatel-Lucent OmniAccess wireless
system will automatically detect and
disable the devices by preventing
users from associating with them.
Administrators are also notified of
the location of rogue APs so that
they may be physically removed.
Wireless intrusion protection
–
The Alcatel-Lucent OmniAccess wire-
less intrusion detection capabilities
eliminate the need for a separate system
of RF sensors and RF security by providing
extraordinary capabilities to the Alcatel-
Lucent OmniAccess wireless switching
system that gives administrators visibility
and the power to thwart malicious
wireless attacks.
These attacks include wireless probing/
discovery, denial of service (DoS),
impersonations, man-in-the-middle,
and unauthorized intrusions. As new
attacks emerge, the system is flexible
enough to incorporate new attack
signatures while in service. In addition
to attack protection, the Alcatel-Lucent
OmniAccess wireless system enforces
wireless security policies, which includes
the ability to detect and prevent weak
WEP initialization vectors (IVs), AP miscon-
figuration, ad-hoc networks, unauthorized
NIC types, and wireless bridges.
Data encryption
– The Alcatel-
Lucent OmniAccess WLAN system is
designed to work in environments where
the physical media cannot be protected
against eavesdropping - such as wireless
networks or the Internet. The Alcatel-
Lucent OmniAccess 4308 enables a large
number of tested and proven encryption
protocols to prevent intruders from
eavesdropping on sensitive data. These
protocols include AES-CCMP (WPA2),
AESCBC (up to 256 bits), DES, Triple-
DES, WEP (64 or 128 bit), TKIP (WPA1),
MPPE (PPTP), and SSL (up to 128 bit).
Network security
– The Alcatel-
Lucent OmniAccess WLAN system
was built from the ground up with
security in mind, and includes a full
ICSA-certified stateful firewall that
can process traffic based on user identity
as well as other parameters, rather than
just simple source/destination addresses.
A number of security features allow
the Alcatel-Lucent OmniAccess 4308
to be installed in the most security-
conscious environments, including
ICSA-certified internal firewall, system
log integrity, hardened OS resistant
to known attacks and exploits, control-
path encryption of communication
between Alcatel-Lucent OmniAccess
WLAN platforms, and access control
lists (ACLs).
Availability
– The Alcatel-Lucent
OmniAccess WLAN system enables
support for business critical applications
that cannot tolerate downtime. The
Alcatel-Lucent OmniAccess WLAN
system provides a number of features
that support high-availability including
VRRP-based hot standby, modular
software design with protected memory,
automatic AP failover.
Seamless user mobility
–
Mobility is a key requirement in modern
enterprise networks, and is more
important each day as voice over
WLAN (VoWLAN) demands emerge
and laptop computers continue to
replace stationary desktop computers.
Alcatel's mobility services enable users to
move freely without the need to restart
sessions or re-authenticate each time.
The Alcatel-Lucent OmniAccess 4308
enables and enhances user mobility
through features such as, wireless fast
roaming, transparent inter-subnet (L3)
roaming, proxy mobile-IP support for
roaming between multiple WLAN
switches, and proxy DHCP.
Centralized management
–
Manageability and configuration are
top concerns when introducing any
type of device to an enterprise data
network. The Alcatel-Lucent OmniAccess
WLAN system offers clustering capabilities
that allow an OmniAccess WLAN switch
to configure and manage up to 32
other WLAN switches. When a policy
change is made to the master device,
this change is automatically pushed
to other devices in the cluster. The intuitive
Web-based interface provides logical
