
WLAN Controller
Central Firmware deployment and management of the Access Points. Requires an external web server. Automatic Firmware update on the Access
Points is also possible. The Controller checks every day, depending on the defined policy, for the latest Firmware and compares it with the versions
in the devices. This can also be activated using Cron jobs. If there is a Firmware mismatch, then the Controller downloads the matching Firmware
from the server and updates the corresponding Access Points and Routers.
Firmware deployment
Enables the complete configuration of non-WLAN specific functions such as Redirects, Protocol Filter, ARF etc. Internal storage of up to three script
files (max. 64 kByte) for provisioning access points without a separate HTTP server
Script distribution
The channel deployment can be static or can be automated. Upon activation of the RF Optimization setting, the Access Points search for an optimal
channel in the 2.4 GHz band. The selected channels are sent to the Controller saves these channels on the corresponding Access Points. RF
Optmization can also be activated for individual Access Points. Transmit power setting static between 0 to -20 dB. Alarm notification in case of
Access Point failure by LED, e-mail, SYSLOG and SNMP traps.
RF management and automatic RF
optimization
Definition and grouping of all logical and physical WLAN parameters by means of WLAN configuration profiles. Fully automatic or manual profile
assignment to WLAN Access Points; automatic transfer and configuration verification (policy enforcement).
Configuration management
Support of hierarchical WLAN profile groups. New profiles can be easily created by inheriting parameters from existing profiles.Inheritance of configuration profiles
The AP can be set to 'managed' or 'unmanaged' mode for each radio interface. With LANCOM WLAN routers, the Controller manages the WLAN
part only (split management).
Management operating modes
In 'Managed' mode, an adjustable setting defines the time-span for which the AP continues Stand-alone operation in the event the connection to
the Controller fails. After this time-span the AP configuration is deleted and the AP resumes operation only after the connection to the Controller
is reestablished. By default this value is set to zero and AP ceases operation as soon as connection to the Controller is lost. Alternatively, a special
time setting allows the AP to function in Stand-alone mode indefinetly. In Stand-alone mode only Pre-shared Key SSID's are functional.
Stand alone operation
A fixed VLAN can be set for each SSID. The WLAN Controller can independently provide up to 16 separate IP networks, and each of these can be
individually mapped to VLANs and, consequently, to SSIDs (Advanced Routing and Forwarding, ARF). The Controller can provide, among others,
individual DHCP, DNS, routing, firewall and VPN functions for these networks.
VLAN and IP contexts
Dynamic VLAN assignment for target user groups based on MAC addresses, BSSID or SSID by means of external RADIUS server.Dynamic VLAN assignment
Deployment of 802.1X settings per SSIDRADIUS accounting per SSID
Integrated RADIUS server for MAC address list management. Support for RADSEC (Secure RADIUS) for secure communication with RADIUS servers.RADIUS server
Integrated EAP server for authentication of 802.1X clients via EAP-TLS, EAP-TTLS, PEAP, MSCHAP or MSCHAPv2EAP server
Proxy mode for external RADIUS/EAP servers (forwarding and realm handling) per SSIDRADIUS/EAP proxy per SSID
Every managed LANCOM AP can be assigned to a group of alternative WLAN Controllers. A suitable Controller is selected within this group depending
on AP load. This ensures that also in backup state the load of larger installations remains equally distributed.
Redundancy, Controller backup and load
balancing
VoWLAN devices require seamless roaming for ensuring optimal speech quality. The Access Points support PMK caching and Pre-authentication
for such demanding applications. WPA2 and WPA2-PSK operate with sub-85 ms roaming times (requirements: adequate signal quality, sufficient
RF overlap, clients with a low roaming threshold).
Fast roaming
802.11e / WME: Automatic VLAN tagging (802.1p) in the Access Points. Mapping to DiffServ attributes in the WLAN Controller if this is deployed
as a layer-3 router
QoS
Background scanning does not interupt normal AP operation and collects information on the radio channel load (AP acts as a 'Probe' or 'Sensor'
by going off-channel). Foreign Access Points and clients is sent to the Rogue AP Detection in LANCOM WLANmonitor.
Background scanning, rogue-AP and
rogue-client detection
The management tool LANCOM WLANmonitor (included) acts as a central monitoring program for the WLAN Controller and visualizes the performance
of all WLAN Controllers, Access Points, SSIDs and clients.
WLAN visualization
Static mapping of guest SSIDs in VLANs, access limitations and VLAN routing by means of ARF (Advanced Routing and Forwarding).WLAN guess access accounts
Easy set-up of guest accounts with just a few mouse clicks using the Voucher-Wizard (max. 256 user). The vouchers can be printed over any standard
Printer on the network. The Voucher-Wizard can be customized by uploading an individual logo. Function works without external RADIUS and
Accounting servers. Configuration of time and/or traffic budgets as well as when accounting should start. Support of public certificates and certificate
chains from trust centers for Public Spots. This allows popular browsers to access trustworthy login pages with secure access (HTTPS) without
warnings
Public Spot function
To ensure that load is evenly balanced between multiple Access Points, each one can be set with a maximum number of allowable WLAN clients.WLAN client limiting
Included: - LANCOM LANconfig - LANCOM LANmonitor - LANCOM WLANmonitorManagement software
Supported Access Points and WLAN routers
1
LANCOM L-54g Wireless, LANCOM L-54ag Wireless, LANCOM L-54 dual Wireless
1
LANCOM L-305agn Wireless, LANCOM L-310agn Wireless, LANCOM L-315agn dual Wireless
1
LANCOM L-320agn Wireless, LANCOM L-321agn Wireless, LANCOM L-322agn dual Wireless
1
LANCOM L-451agn Wireless, LANCOM L-452agn dual Wireless, LANCOM L-460agn dual Wireless
Indoor
LANCOM WLC-4006+
Features as of: LCOS 8.84
Komentarze do niniejszej Instrukcji