f
EAP280-L
►
Intelligent load balancing mechanism
In general, a wireless client will select an AP according to the
signal strength of APs. When this uncontrolled access mode is
applied, however, a large number of clients could be connected
to the same AP simply because the AP provides strong signals.
As more clients are connected to an AP, the bandwidth available
to each client will be smaller, thereby greatly affecting user
experience of the clients. DCN wireless products support
diversified intelligent load balancing means:
--AP load balancing based on traffic
--AP load balancing based on the number of users
--AP load balancing based on frequency bands
--Access control based on signal strength of terminals
--Mandatory roaming control of terminals to direct terminals to
APs with stronger signals
►
Intelligent identification of terminals
DCN smart APs may be used with DCN wireless ACs and a
unified authentication platform to intelligently identify the size,
system type, and type of each terminal; and comprehensively
support mainstream smart terminal operating systems, such as
Apple iOS, Android, and Windows. They intelligently identify the
size of a terminal and adaptively present a portal authentication
page of the corresponding size and page pattern, freeing users
from multiple times of dragging to adjust the screen and enabling
users to enjoy more intelligent wireless experience. They can also
intelligently identify the system type of each terminal and present
the system type of each terminal such as Windows, MAC OS, or
Android on the unified authentication platform, exhibiting every
detail of intelligence to users. In addition, they can intelligently
identify the type of each terminal such as the mobile phone,
tablet, or PC, and implement dynamic policy control of terminals
according to different types of the terminals, making possible
more intelligent user control at a finer granularity.
►
Comprehensive support for IPV4/V6 dual-stack
network
Powered by DCN cutting-edge IPv6 technology, DCN smart
APs may be deployed on an IPv6 network, with IPv6 tunnels
established through auto negotiation between a wireless AC and
an AP. When the wireless AC and the AP completely operate
in IPv6 mode, the wireless AC can still correctly identify IPv4
terminals and process IPv4 packets from wireless clients.
Featuring flexible adaptability to IPv4/6, DCN smart APs cater
to complex applications involved in migration from an IPv4
network to an IPv6 network. They not only provide IPv4 service to
customers on an IPv6 network, but also enable users on an IPv4
network to log in to the network through the IPv6 protocol at ease.
►
Network-wide seamless roaming
DCN wireless ACs support an advanced wireless AC cluster
technology, which enables multiple ACs to synchronize online
connection information and roaming records of all users to each
other in real time. This technology implements not only L2/L3
seamless roaming inside a wireless AC but also fast roaming
across wireless ACs. As client IP address information does not
change and re-authentication is not required in the roaming
process, the continuity of real-time mobile services is well
guaranteed.
Secure and Controllable Wireless Network
►
User isolation policy
DCN wireless APs support the isolation of wireless users from
one another. If this user isolation function is enabled, two wireless
clients cannot directly communicate with each other but can only
access an upstream wired network. This further guarantees the
security of wireless network applications.
►
Wireless intrusion detection and intrusion defense
DCN wireless APs support wireless intrusion detection and
intrusion defense features, such as detection of unauthorized
wireless devices, intrusion detection, blacklist, and white list,
thereby greatly improving security management of an entire
wireless network.
►
Wireless user management at a fine granularity
Each AP supports a maximum of 16 WLANs to implement
multilayer multi-service management of wireless users at a
fine granularity. Each WLAN supports access control and uplink/
downlink rate limit based on MAC or IP addresses. These
WLANs may be bound to virtual local area networks (VLANs). In
addition, different authentication and accounting policies can be
implemented. This feature is practically significant in a multiWLAN
environment.
►
Secure user admission
DCN smart APs may be used with wireless ACs to provide multiple
secure access, authentication, and accounting mechanisms for
various application environments. These mechanisms include:
--802.1x authentication
--Captive portal authentication, including built-in portal, external
portal, and custom portal authentication modes
--MAC address authentication
--LDAP authentication
--WAPI encryption and authentication
--Wired/wireless integrated authentication and accounting
►
Wireless SAVI
DCN wireless network products support a source address
validation (SAVI) technology to deal with spoofed packet attacks
that keep emerging on today's campus networks. As users' IP
addresses are obtained through an address allocation protocol,
users access the Internet using correct addresses in subsequent
applications and cannot spoof others' IP addresses, thereby
guaranteeing the reliability of source addresses. In addition, the
SAVI technology is combined with a portal technology to further
guarantee the authenticity and security of packets of all users
accessing the Internet.
►
PEAP user authentication
With the popularization and application of smart terminals,
wireless terminal users require authentication mechanisms
of higher usability and convenience. Using a mechanism that
combines portal authentication and MAC address authentication,
DCN wireless network products support Protected Extensible
Authentication Protocol (PEAP) authentication to attain better
user experience. Initially a user needs to manually perform portal
authentication and later the user gets authenticated through PEAP
in automatic mode. DCN wireless network products feature high
terminal adaptation and provide good authentication compatibility.
They adapt to the majority of WLAN terminals and do not need to
adapt to clients. DCN wireless network products are compatible
with existing portal authentication modes.
►
Secure access mechanism
An AP is usually deployed in a public area and therefore requires
a strict security mechanism to guarantee the legality of access
devices. The following secure access mechanisms may be
applied between a DCN smart AP and a wireless AC:
--AP MAC address authentication
--AP password authentication
--Bidirectional digital certificate authentication
Содержание EAP280-L
Страница 5: ...EAP280 L Indoor Wireless AP...
