Aruba 800
Aruba 800
Mobility Controller
SPECIFICATIONS SHEET
Designed for branch office applications, the Aruba
800 mobility controller supports up to 16 APs and
hundreds of simultaneous users. The Aruba 800
comes equipped with eight 10/100 Mbps Ethernet
ports and one Gigabit Ethernet (GBIC) uplink. An
integrated hardware-accelerated encryption provides
high-speed performance enabling the Aruba 800 to
deliver up to 200 Mbps of encrypted throughput.
PERFORMANCE & CAPACITY
Rack mountable
Configuration
10/100 ports
Power-over-Ethernet
Serial-over-Ethernet
GBIC uplink ports
Wired L2/L3 switch operation
Hardware-accelerated encryption
RS-232 serial console (RJ-45)
Out-of-band Ethernet management port
Maximum users per switch
Max APs per switch
Encrypted traffic (3DES) throughput
Switch throughput
MOBILITY
1U
Fixed
8
Yes
Yes
1
Yes
Yes
Yes
No
256
16
200 Mbps
1 Gbps
FAULT TOLERANCE
VRRP for switch failover
Automatic AP re-homing
Redundant power supply
Redundant fan
Redundant supervisor module
Multiple uplinks with redundancy
Yes
Yes
No
No
No
Yes (use any switch port)
802.11 TRANSPORT, AUTHENTICATION & ENCRYPTION
802.11 communications standards
802.1x
Encryption types
MAC address authentication
Upgradable to new encryption mechanisms
Wi-Fi Certified
a, b & g
Yes
WEP, dynamic WEP, TKIP
WPA, WPA-2, 802.11i,
DES, 3DES, AES-CCMP,
AES-CBC, EAP, PEAP, TLS,
TTLS, LEAP, EAP-FAST,
xSec-L2 AES
Yes
Yes
Yes
RF MANAGEMENT AND CONTROL
Adaptive Radio Resource Management (ARM)
Voice-aware scanning
Multiple ESSIDs per AP
3-Dimensional RF site survey
Automatic AP calibration
Self-healing around failed APs
Load balancing — number of users
Load balancing — utilization-based
Coverage hole & interference detection
Wireless RMON/packet capture
Plug-ins for third-party analysis tools
Timer-based AP access control
Yes
Yes
Up to 16
Yes
Distributed & Centralized
Yes
Yes
Yes
Yes
Yes
Ethereal, Airopeek
Yes
Fast roaming
Intersubnet roaming
Mobile IP support
Proxy Mobile IP
Proxy DHCP
2–3 msec intra-switch,
10–15 msec inter-switch
Yes
Yes
Yes
Yes
VPN & FIREWALL
Concurrent IPsec tunnels
Stateful firewall policies (per-user & per-port)
VPN termination
VPN dialer
Customizable Captive Portal
External Captive Portal
Network address translation
ACLs
256
16,000
IPsec, PPTP, XAUTH, xSec
(Client-Server and
Point-to-Point)
Yes
Yes
Yes
Yes
Standard & Extended
USER MANAGEMENT
Per-user or per-role assignments
Role derivation
Location-based access control
Firewall Policies,
Bandwidth Contracts,
Session Prioritization,
VLAN Assignment
Based on Authentication,
ESSID, Encryption, OUI
Yes
QUALITY OF SERVICE
Bandwidth contracts
Application-aware traffic classification
and prioritization
802.1p support
DiffServ Control Protocol Support (DSCP tagging)
Yes—per-user & per-role
Yes
Yes
Yes
VOIP SUPPORT
Voice-aware RF monitoring/scanning
Stateful voice-session prioritization
Yes—session-based
SCP, SIP, Skinny, Vocera
AUTHENTICATION SERVICES
Local RADIUS
Third-party AAA server interoperability
LDAP/SSL Secure LDAP
Yes
Microsoft Active Directory,
Microsoft IAS Radius
Server, Cisco ACS Radius
Server, Funk Steel Belted
Radius Server, RSA
ACEserver, Infoblox,
Interlink Radius Server
Yes
Aruba 800 Mobility Controller
Specifications Sheet
WIRELESS LAN INTRUSION DETECTION
Voice-aware scanning
Multi-band scanning (single radio, all band)
Works with third-party WLANs
Rogue AP detection and destruction
Denial of Service attack detection and protection
Yes
Yes
Yes
Yes
Authentication &
Deauthentication floods,
Probe request flood,
Fake AP flood
Man-in-the-Middle attack detection and protection Sequence Number,
EAP rate, Station
Disconnect analysis
Station and AP classification
Yes
Station blacklisting
Manual, Authentication
Failure based, Man-in-theMiddle attack based
Rogue or valid AP classification based on
Yes—MS-SQL or MySQL
customer database of MAC addresses
AP misconfiguration protection
Yes
Station and AP impersonation
Yes
Bad/weak WEP keys & initialization vectors
Yes
Ad-hoc network detection & prevention
Yes
Unauthorized NIC types (OUI)
Yes
Signature analysis
Yes
Upgradable to support new signatures and attacks
Yes
Multi-tenant policies
Yes
Wireless bridge detection
Yes
NETWORK & SYSTEM MANAGEMENT
Web-based UI
Command Line
Syslog
SNMP v2c
Aruba private MIB
MIB-II
Centralized configuration of local Wi-Fi Muxes
Centralized configuration of local Wi-Fi Switches
Centralized image upgrade for Wi-Fi switch and all APs
Yes
Console, telnet, SSH
Yes
Yes
Yes
Yes
4
16
Yes
THIRD-PARTY SECURITY SERVICES INTEGRATION
Anti-virus service integration and
user quarantine
Remediation integration and
user quarantine
Server load-balancing for external servers/
server groups
STANDARDS SUPPORTED
IEEE
IEEE
IEEE
IEEE
IEEE
IEEE
IEEE
IEEE
802.1x
802.3 10BASE-T
802.3u 100BASE-T
802.1Q
802.3af
802.11a/b/g
802.11d
802.11i (draft version)
POWER
Power consumption
AC Input voltage
Input frequency
200 Watts
100–127VAC, 200–240VAC
47-63 Hz
ENVIRONMENTAL
Operating temperature range
Storage temperature range
Humidity, non-condensing
0° to 40° C
10° to 70° C
5 to 95%
PHYSICAL DIMENSIONS
Height
Width
Depth
Weight
1.75˝ (44.5 mm)
17.4˝ (444 mm)
13˝ (330 mm)
10 lbs. (unboxed)
REGULATORY
FCC part 15 Class A CE
Industry Canada Class A
VCCI Class A (Japan)
EN 55022 Class A (CISPR 22 Class A), EN 61000-3, EN 61000-4-2,
EN 61000-4-3, EN 61000-4-4, EN 61000-4-5, EN 61000-4- 6, EN 61000-4-8,
EN 61000-4-11, EN 55024, AS/N2S 3548
SAFETY
UL 60950
CAN/CSA 22.2 #60950
WARRANTY
90 days parts/labor*
Yes—Fortinet
Yes—Sygate
Yes
1322 crossman avenue
sunnyvale california 94089
tel 408 227 4500 fax 408 227 4550
w w w. a r u b a n e t w o r k s . c o m
* Extended with support contract
© 2005 Aruba Wireless Networks, Inc. All trademarks are the property of their respective holders.
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising