6
This unified approach to wired and wireless policy
management provides edge-enforced security and
network access control on every network connection
regardless of whether a user connects to the network
wirelessly or through a wired port. Moreover, wired and
wireless users are presented with a consistent and
personalized view of the network based on user identity
and time of day.
The ProCurve wireless LAN systems also take advantage
of the Switchs' built-in connection-rate filtering based on
Virus Throttle technology. This ProCurve-developed
solution addresses new threats not yet recognized by
virus protection software. With Virus Throttle
technology, ProCurve WLAN systems are able to
automatically discover attacks originating by wired or
wireless devices and rate-limit or even block infected
traffic from entering the network, giving network
managers the time necessary to implement a response.
Advanced Wireless Services
ProCurve Wireless Edge Services Modules provide a
single point to configure system-wide wireless LAN
setup and operation, including SSID, security and
authentication options as well as advanced wireless
services. Wireless LAN settings are automatically
administered to designated ProCurve Radio Ports,
eliminating the cost and time associated with individual
configuration of access points. Advanced wireless
services include the following:
• Network self-healing: In the event of a radio port
failure, the module will automatically adjust
transmission power and data rate on adjacent ProCurve
Radio Ports to maintain wireless LAN coverage.
• RF detection and interference avoidance: The system
automatically recalibrates radio port channel
assignments to avoid environmental or other
802.11-based wireless interference.
• Wireless intrusion detection: Wireless Edge Services
Modules can also guard against hackers who use
wireless stations to launch attacks, monitoring stations
for suspicious behavior that may signal a denial-of-
service (DoS) attack.
• Stateful packet inspection firewall: Inspects and drops
routed packets with invalid TCP flags, corrupted packets
and stops common DoS attacks.
• Fast, secure roaming: Enables seamless, fast Layer 2
roaming with pre-cached authentication credentials
for wireless users to help enable real-time business
applications.
Benefits of Wired and Wireless Integration
ProCurve Wireless Edge Services Modules, working in
conjunction with ProCurve Radio Ports, simplify the
deployment and management of a wireless LAN by
seamlessly integrating centralized RF management,
advanced wireless services and secure wireless network
access control into ProCurve's line of premier xl and zl
switch chassis family.
This modular approach to enabling wireless services also
simplifies network design and deployment by leveraging
the inherent benefits of a chassis architecture, including
choice of port type, density and Power over Ethernet
(PoE) capability, in addition to modular expansion to
scale as network needs change. Further, greater
resiliency results from using ProCurve switching
capability as much as possible for deployment of
mobility services, rather than relying on a separate
dedicated overlay.
ProCurve intelligent edge switches already offer identity-
driven access control to network resources over wired
network connections. With the addition of the ProCurve
Wireless Edge Services Modules, these same role-based
access policies, dynamically generated by built-in
support for ProCurve Identity Driven Manager, are also
enforced across the wireless edge for wireless clients
connecting to the network through ProCurve Radio Ports.
