HiPath Wireless Controller andConvergence Software V3.0

The HiPath Wireless Controller is a high-performance platform that provides centralized intelligence for the HiPath Wireless enterprise solution, the world's first truly scalable routed wireless LAN (WLAN) solution. The Controller is a full-functioning router that aggregates and coordinates all access points into what appears to the rest of the network as individual, centrally managed, IP subnets. As a result, network management is greatly simplified, eliminating the need to ever physically visit the remote access points. Further, the Controller operates at wireline speed for maximum throughput.

The HiPath Wireless Controller also manages user authentication and security, rogue detection, seamless user roaming across the wireless network, advanced radio frequency management, and user policy segmentation such as quality of service management and application permissions.

HiPath Wireless Controller

Wireless 'overlay' deployment means minimal disruption to existing networks

Because of its flexible Layer 3 'overlay' archi-tecture, the Controller can be located any-where on your network. Each Controller can coordinate as many as 200 HiPath Wireless Access Points or 802.11-based Third Party APs, including those located in remote office locations.

The HiPath Wireless Convergence Software architecture offers convenient feature updates for serviceability and investment protection.

For management efficiency, centralized auto configuration and software loading for Access Points is provided, along with statistics reporting, logging and tracing through the HiPath Wireless Convergence Software. Administrative access via the Web allows user policy, security and access control, both locally or centralized.

Fast, secure roaming across Access Points for 'always on' voice and data mobility

Fast, secure and seamless roaming is provided as users and devices move throughout the radio coverage range of each Access Point in your network. This roaming capability means no need to reconnect or re-authenticate mobile applications, and no more dropped Voice-over-WLAN calls as users move about the enterprise. Seamless roaming greatly improves productivity by providing user true mobility across the enterprise - the HiPath Wireless Controller manages each hand-off transparent to users.

Virtualization allows user segmentation with policy management and service definitions

Through the use of Siemens' unique Virtual Network Services (VNS), specific users and mobile devices can be grouped by policy class to provide for levels of service, access permissions and device authorization.

A VNS segment is like a virtual WLAN in itself and multiple VNS segments can run on each AP, creating a much more flexible and powerful solution than fixed VLANs. Variables such as time of day and the physical location of a given user can even be used to define specific services. The dynamic nature of WLANs themselves is thus optimized in venues such as conven-tion centers, sports arenas, hotels, campus settings, hospitals, and multi-tier environ-ments among others.

VNS provides the provisioning, monitoring, and control that allows a WLAN infrastruc-ture to meet the needs of diverse constitu-encies with appropriate efficiency, perfor-mance, and security. Up to 50 virtual WLANs (via VNS) can be created and managed, each with its own user policies and services. Policies can be managed by packet filtering, individual user or group.

Security Features

User authentication and encryption

The HiPath Wireless Controller supports comprehensive access authentication, encryption and intrusion detection capabil-ities. 802.11i standard WPA2 (Wireless Pro-tected Access Version 2) 802.1x or PSK authentication and Advanced Encryption Standard (AES) for encryption of data ensure your network stays secure. To sup-port Fast Secure Roaming, the WLAN client is already pre-authenticated by controller and is allowed to roam seamlessly without authentication latency. The VNS Captive Portal feature also provides Web-based authentication, and the system also supports the overlay of any IP-based VPN infrastructure. Data privacy features include management of WEP and Public Shared Key administration.

Rogue AP detection for network privacy and control

HiPath Wireless Access Points' Scan Task feature performs detection of rogue access points on the network by scanning the RF space at specific intervals. The scanned information is forwarded to the Controller’s Analysis Engine, which processes the data centrally. Rogue detection data can be viewed from the management console, or send via intrusion alert messages.

Management Features

High availability and self-healing

Service continuity is assured against both Controller and network segment outages by deploying redundant HiPath Wireless Controllers, which can also run in load sharing mode. The C100 and C1000 models also provide standard redundant power supplies. The Controller servers as a full functioning router, able to route around network failures. The HiPath Wireless solution also supports dynamic RF management. Unassisted Access Point fault-tolerance is achieved by expanding radio coverage to fill in for outages of particular Access Points.

Centralized configuration and monitoring

The controller individually monitors and manages associated Access Points from a single interface. This interface makes it possible to separately configure, enable, or disable each AP, and also allows administrators to group APs into one of ten configurable profiles. Using profiles, configuration changes or software updates can be performed once, after which they are automatically deployed to each AP in the profile. The controller also collects SNMP and log information from each AP, which can then be processed by a third party network management application.

Quality of Service (QoS) for real-time communications

On the wireless side, support for 802.11e / WMM capabilities provides four priority queues per radio (with two radios per Access Point). When voice and data traffic share the same SSID on an Access Point, voice traffic can be prioritized to ensure minimal delay and jitter, while providing maximized voice quality. On the wired network, existing priority schemes (for example, TOS/DSCP) are supported.

Traffic management

The Controller enables the physical data ports to be configured to support either ingress (to and from the Access Points) or egress traffic (to or from the appropriate adjacent network), or both. This also provides per VNS segment traffic steering and routing control for unicast and broadcast traffic.

System management capabilities

Systems management capabilities include SNMP, FTP, NTP, Accounting, Statistics, and Syslog.

HiPath Wireless Controller

About the HiPath Wireless PortfolioThe HiPath Wireless Portfolio provides a complete solution allowing companies to realize the benefits of true enterprise mobility.

The Portfolio offers wireless handsets, access points and controllers, along with best of breed management software and comprehensive services for planning and implementation.

Siemens' wireless networking solutions for the enterprise deliver more than just data connectivity without wires. With the HiPath Portfolio, companies can exploit the benefits of a truly mobile communications solution.● integrated vertical solutions providing

‘always on’ access to corporate data and true user mobility across the enterprise through seamless roaming

● presence- and location-aware real-time applications such as HiPath OpenScape and HiPath ProCenter Agile

● converged voice and data networks providing Voice over Wireless LAN, offering productivity with a lower cost of ownership compared to proprietary wireless voice solutions

● a wireless LAN architecture designed from the ground up for flexibility, scalability, manageability and enhanced user services

HiPath Wireless Controller Supported Features

Feature C10 C100 C1000

Man

agea

bilit

y Centralized Management over Layer 3 (CAPWAP) Yes Yes Yes

Branch Office Support over WAN Yes Yes Yes

Auto-discovery of new APs Yes Yes Yes

CDR/RADIUS Accounting Yes Yes Yes

Cap

acit

y

Network Interfaces 4x10/100 BaseT

4x10/100 BaseT

2xGigE (Fiber)

APs Supported per Controller 30 75 200

Simultaneous Users per Controller 512 2048 4096

Number of VNS User Segments per Controller 8 32 32

Perf

orm

ance Automatic Failover to Redundant Controller Yes Yes Yes

Dual, Hot Swappable Power Supply No Yes Yes

Premium Radio Frequency Management Support Yes Yes Yes

Mob

ility Roaming Between IP Subnets Yes Yes Yes

Roaming Between Multiple Controllers No Yes Yes

Secu

rity Enhanced 802.11i security with fast roaming Yes Yes Yes

Captive Portal (URL Redirect) and Walled Garden (unauthenticated access to URL)

Yes Yes Yes

Voic

e

HiPath Premium Voice Support Yes Yes Yes

Enhanced 802.11e quality of service features Yes Yes Yes

Simultaneous Voice Calls per Controller (802.11b, G.711, R > 80)

75 200 1000

HiPath Wireless Portfolio

© Siemens AG 06/2005 Siemens Communications • Hofmannstr. 51 • D-81359 München

Reference No.: A31002-W1000-A200-1-7629

The information provided in this document contains merely gen-eral descriptions or characteristics of performance which in case of actual use do not always apply as described or which may change as a result of further development of the products. An obligation to provide the respective characteristics shall only exist if expressly agreed in the terms of contract. The trademarks used are owned by Siemens AG or their respective owners.Availability and technical specifications are subject to change without notice.

Our strengths – Your advantages

Siemens is known worldwide as a trailblazer in the advancement of information and communication technologies. No other company offers such a comprehensive and innovative portfolio.

Regardless of which communication tech-nology you are using today – or want to use tomorrow – Siemens offers you the right solution.

www.siemens.com/hipath

HiPath Wireless Controller – C10/C100/C1000

Product Specifications

Security

Authentication● Captive Portal – URL Redirect to a Web

Page● Walled Garden – unauthenticated access

to restricted sites● 802.1x – WPA, WPA2, EAP-TLS,

EAP-TTLS, PEAP, EAP-MD5● RADIUS, Rogue AP Detection

Encryption● AES, TKIP, WEP (40 & 128 bit)

Physical/Environmental

Number of Access Point Supported● C10 – 30 Access Points● C100 – 75 Access Points● C1000 – 200 Access Points

Dimensions● Length – 54.4 cm (21.4 in)● Width – 42.2 cm (17.0 in)● Height – 8.9 cm (3.5 in) – 2U

Weight● Standard Configuration – 8.2 kg (18 lbs)● With Redundant Power Supply – 10.4 kg

(23 lbs)

Operating and Storage Temperature● Operating: -5ºC to 40ºC● Storage: -20ºC to 70ºC● 10% – 95% Humidity (Non-Condensing)

Mounting Requirements● 2U Rack Mount Configuration fitting

standard 19” rack● Adjustable mounting ears (provided)

allow cabling at front or rear of unit

Ports● 2 x Gigabit Ethernet Ports (C1000) or

4 x 10/100 Ethernet (C10/C100)● Management Port 1x 10/100BaseT

Auto-sensing● Console Port DB9 Serial

Electrical Specifications

Power SupplySingle (C10 Only)● Voltage – 100-240 VAC● Frequency – 50-60 Hz● Input Current – 8.0/4.0A (RMS) for

115/230 VAC● In-rush Current – 55.0/110.0A max. for

115/230 VAC

Redundant (C100/C1000 Only)● Hot-Swappable modules● Voltage – 100-240 VAC● Frequency – 47-63 Hz● Input Current – 8.0/4.0A (RMS) for 115/

230 VAC● In-rush Current – 55/110A max. for 115/

230 VAC (per power module)

Standards Compliance● SNMP v.2● Routing – OSPF v.2

Regulatory/Safety● UL 60950● CSA● EN 60950

Emissions● FCC, Part 15 Class A● CISPR22 Class A

RF Standards● IEEE 802.11a/b/g