 |
 |
 |
|
The RFS 4000 802.11n Integrated Services Controller is designed to provide any branch office or remote facility with high performance, comprehensive, cost-effective and secure wireless and wired networking services. No matter what the networking needs are in your branch offices, the RFS 4000 delivers rich voice support including Voice over WLAN (VoWLAN) now, Fixed Mobile Convergence (FMC) and IP PBX in the future; rich video support including video conferencing and video surveillance; multiple locationing technologies such as Wi-Fi and RFID; plus support for multiple RF technologies, including future technologies such as Wi-MAX. The RFS4000 is the only product in its class that offers dual band access concurrent with Mesh services as well as gap free security with 24x7 Wireless Intrusion Protection System (IPS).
- PACKET FORWARDING
802.1D-1999 Ethernet bridging; 802.11-.802.3 bridging; 802.1Q VLAN tagging and
trunking; proxy ARP; IP packet steering-redirection
WIRELESS NETWORKING
Wireless LAN Supports 24 WLANs; multi-ESS/BSSID traffic
segmentation; VLAN to ESSID mapping; auto assignment
of VLANs (on RADIUS authentication); power save
protocol polling; pre-emptive roaming; VLAN Pooling and
dynamic VLAN adjustment; IGMP Snooping
Bandwidth
management
Congestion control per WLAN; per user based on user
count or bandwidth utilization; bandwidth provisioning
via AAA server
Layer 2 or Layer 3 deployment of access points
Layer 3 Mobility (Inter-Subnet Roaming
IPv6 client support
Thin Access Ports Supports 6 802.11a/b/g AP 300 thin access points for L2
or L3 deployment per; 6*/ 36** AP 650s per controller **;
Legacy support*: AP100 for L2 deployments only
Adaptive AP Supports adoption of 6 adaptive AP 51X1 802.11a/b/g and
36** 802.11a/b/g/n access points in adaptive mode per
RFS 4000 Integrated Services Controller; multiple country
configuration support; Legacy support*: AP 4131 Access
Point conversion for L2 deployments only
NETWORK SECURITY
Role-based wired/wireless firewall (L2-L7) with stateful inspection for wired
and wireless traffic; Active firewall sessions — 50,000 per RFS 4000 Integrated
Services Controller; protects against IP Spoofing and ARP Cache Poisoning
Access Control Lists
(ACLs)
L2/L3/L4 ACLs
Wireless IDS/IPS Multi-mode rogue AP detection, Rogue AP Containment,
802.11n Rogue Detection, Ad-Hoc Network Detection,
Denial of Service protection against wireless
attacks, client blacklisting, excessive authentication/
association; excessive probes; excessive disassociation/
deauthentication; excessive decryption errors;
excessive authentication failures; excessive 802.11
replay; excessive crypto IV failures (TKIP/CCMP replay);
Suspicious AP, Authorized device in ad-hoc mode,
unauthorized AP using authorized SSID, EAP Flood, Fake
AP Flood, ID theft, ad-hoc advertising Authorized SSID
Geofencing Add location of users as a parameter that defines access
control to the network
WIPS sensor
conversion
Supported on all dependent and Independent/ Adaptive
Access Points
Anomaly Analysis Source Media Access Control (MAC) = Dest MAC;
Illegal frame sizes; Source MAC is multicast; TKIP
countermeasures; all zero addresses
Authentication Access Control Lists (ACLS); pre-shared keys (PSK);
802.1x/EAP—transport layer security (TLS), tunneled
transport layer security (TTLS), protected EAP (PEAP);
Kerberos Integrated AAA/RADIUS Server with native
support for EAP-TTLS, EAP-PEAP (includes a built in user
name/password database; supports LDAP), and EAP-SIM
Transport encryption WEP 40/128 (RC4), KeyGuard, WPA—TKIP, WPA2-CCMP
(AES), WPA2-TKIP
802.11w* Provides origin authentication, integrity, confidentiality
and replay protection of management frames for
Motorola’s AP 300 access point
IPSec VPN gateway Supports DES, 3DES and AES-128 and AES-256
encryption, with site-to-site and client-to-site
VPN capabilities
Secure guest access
(Hotspot provisioning)
Provides secure guest access for wired and wireless
clients. built-in captive portal, customizable login/
welcome pages, URL redirection for user login, usagebased charging, dynamic VLAN assignment of clients,
DNS white list, GRE tunneling of traffic to central site*,
API support for interoperabilty with custom web portals*
support for external authentication and billing systems
Wireless RADIUS
Support (Standard and
Motorola Vendor
Specific Attributes)
User Based VLANs (Standard)
MAC Based Authentication (Standard)
User Based QoS (Motorola VSA)
Location Based Authentication (Motorola VSA)
Allowed ESSIDs (Motorola VSA)
NAC support with third party systems from Microsoft, Symantec and Bradford
REAL TIME LOCATIONING SYSTEM (RTLS)*
RSSI based triangulation for Wi-Fi assets
Tags supported Ekahau, Aeroscout, Gen 2 Tags
QUALITY OF SERVICE
Wi-Fi Multimedia
extensions
WMM-power save with TSPEC Admission Control;
WMM U-APSD
IGMP snooping Optimizes network performance by preventing flooding of
the broadcast domain
SIP Call Admission
Control
Controls the number of active SIP sessions initiated by a
wireless VoIP phone
802.11k Provides radio resource management to improve client
throughput (11k client required)
Classification
and marking
Layer 1-4 packet classification; 802.1p VLAN priority;
DiffServ/TOS
SYSTEM RESILIENCY AND REDUNDANCY
Active:Standby; Active:Active and N+1 redundancy with access port and Wireless
Clients load balancing; Critical resource monitoring
Virtual IP*: Single virtual IP (per VLAN) for a switch/contoller cluster to use as the
default gateway by mobile devices or wired infrastructure. Seamless fail-over of
associated services e.g. DHCP Server.
SMART RF: Network optimization to ensure user quality of experience at all times by
dynamic adjustments to channel and power (on detection of RF interference or loss of
RF coverage/neighbor recovery). Available for both thin APs and Adaptive APs.
Dual Firmware bank supports Image Failover capability
SYSTEM EXTENSIBILITY
ExpressCard™ Slot: Driver support for 3G wireless cards for WAN backhaul
• AT&T (NALA) – HYPERLINK “http://www.wireless.att.com/businesscenter/
sierra-wireless-aircard-890/index.jsp?skuId=sku9557600025” Sierra Wireless
AirCard® 890, Option GT Ultra Express
• Verizon (NALA) – V770 Express Card
• Sprint (NALA) - Sprint Novatel Merlin C777 Express card
• Rogers Wireless (Canada) – Sierra Wireless AirCard® 503
• Vodaphone (EMEA) – Novatel Merlin XU870
• Vodaphone (EMEA) – Vodaphone E3730 3G Expresscard
• Telstra (Australia) – Sierra Wireless AirCard® 503, Telstra Turbo 7 series
Expresscard (Aircard 880E)
• General Use – Novatel Merlin XU870, Option GE 0302, Sierra Wireless
AirCard® 504
MANAGEMENT
Command line interface (serial, telnet, SSH); secure Web-based GUI (SSL) for the
wireless switch and the cluster; SNMP v1/v2/v3; SNMP traps—40+ user configurable options; Syslog; Firmware, Config upgrade via TFTP, FTP & SFTP (clients);
simple network time protocol (SNTP); text-based switch configuration files; DHCP
(client/server/relay), switch auto-configuration and firmware updates with DHCP
options; multiple user roles (for switch access); MIBs (MIB-II, Etherstats, wireless
switch specific monitoring and configuration); Email notifications for critical alarms;
MU naming capability
PHYSICAL CHARACTERISTICS
Form factor 1U Rack Mount Tray available for the RFS4010
2U Rack Mount Tray available for the RFS4011
Dimensions RFS 4010: 1.75 in. H x 12 in. W x 10 in. D
44.45 mm H x 304.8 mm W x 254.0 mm D
Antenna facade: 289.2mm x 340mm x 20.5mm
Weight RFS 4010: 4.75 lbs./2.15 kg
RFS 4011: 4.9lbs
Antenna facade: 1.45lb
Physical interfaces 1x Uplink Port -10/100/1000 Cu/ Gigabit SFP interface
5x 10/100/1000 Cu Ethernet Ports, 802.3af and
802.3at Draft
1x USB 2.0 Host
1x ExpressCard™ Slot 1x Serial Port (RJ45 style)
Antenna Connections RFS 4011: RP-SMA
MTBF >65,000 Hours
POWER REQUIREMENTS
AC input voltage 100-240 VAC 50/60Hz
Operating Voltage 44 to 57 VDC
Operating Current 2.5A(max) @48 VDC or 2.2A(max) @ 54 VDC
Max Power
Consumption
120W for RFS 4010, 150W for RFS 4011
USER ENVIRONMENT
Operating temperature 32° F to 104° F /0° C to 40° C
Storage temperature -40° F to 158° F/-40° C to 70° C
Operating humidity 5% to 85% (w/o condensation)
Storage humidity 5% to 85% (w/o condensation)
Heat dissipation 95 BTU/hr for RFS 4010, 190 BTU/hr for RFS 4011
Max Operating
Altitude
3000m
REGULATORY
Product safety UL / cUL 60950-1, IEC / EN60950-1
EMC compliance FCC (USA), Industry Canada, CE (Europe), VCCI (Japan),
C-Tick (Australia/New Zealand)
RECOMMENDED ENTERPRISE MOBILITY SERVICES
Customer Services Service from the Start Advance Exchange Support
The Motorola RFS4000 802.11n wireless servicescontroller integrates wired, wireless and securitynetworking features into a compact and easy-to-useform factor, enabling organizations to create survivable branch networks using a single platform.(Updated 2011/09/14 | PDF 552 KB)
This guide provides an RF engineer a catalog of antenna parts and accessories to complete a customized RF environment. This guide specifically addresses the antennas used for 2.4 GHz, 5.2 GHz and dual band antenna implementations for Wireless Local Area Networks (WLANs).(Updated 2011/01/13 | PDF 7 MB)
(Updated 2011/07/25 | PDF 125 KB)
|
|
|
 |
|
 |
|
|
|
 |
|
 |
|
Features
- A converged platform of features & functionality
The RFS4000 is a fully integrated 802.11n wireless services controller, 802.11n access point, wired switch with 5 POE ports rolled into one, with IPSEC VPN/firewall/WIPS security, RADIUS & DHCP server, location & RFID engines, 3G failover, and more.
Wi-NG Operating System: delivering a unified voice, data and RF management platform
Improve business process flow with one platform for wireless voice, video, data and multiple RF technologies - such as RFID, Wi-Fi (including 802.11n) and future technologies such as Wi-MAX; rich enterprise class functionality includes seamless roaming across L2/L3 deployments, resilient failover capabilities, comprehensive security, toll-quality voice and other value-added services, such as multi-RF locationing.
Wireless Intrusion Detection/Protection System
The integrated IDS/IPS provides defense against over-the-air attacks by leveraging the sensing capabilities of AP300/ AP51x1/AP7131.
Real Time Locationing System (RTLS)
Provides rich locationing services to enable real-time enterprise asset-tracking through support for 802.11, RFID and third party locationing solutions - including industry leaders such as AeroScout, Ekahau, and Newbury Networks. Standards-based support for: EPC Global ALE interface for processing and filtering data from all active and passive tags; and EPC Global LLRP interface for passive RFID tag support.
Role-based wired/wireless firewall
Secures and protects the wired and wireless network against attacks and unauthorized access at Layer 2 and Layer 3 with stateful inspection; ability to create identity and location-based policies provides granular control of network access.
3G Wireless for WAN Backhaul
Support for 3G wireless cards to backhaul WAN traffic when the primary WAN Link fails.
Enhanced End-to-End Quality of Service (QoS)
Enhances voice and video capabilities; prioritizes network traffic to minimize latency and provide optimal quality of experience; SIP Call Admission Control and Wi-Fi Multimedia Extensions (WMM-Power Save) with Admission Control enhances multimedia application support and improves battery life and capacity.
|
|
|
|
|
|
|
