View
214
Download
0
Category
Preview:
Citation preview
7/31/2019 MobilityRFS7000_DS
1/6
HIGHLIGHTS
Providesareliable,high-performanceWireless
LAN(WLAN)communicationsplatformfor
unifyingdata,voice,andvideoservicesfor
large-scaleenterpriseenvironments
Maximizes802.11nperformanceby
forwardingtrafcdirectlytoitsdestination,
eliminatingcontrollerbottlenecks
Includesadvancedwirelessfeaturesthat
arestandardintheoperatingsystemforbetterReturnonInvestment(ROI)
UsesSmartRFtechnologytoprovide
dynamicRFtuningforoptimalwireless
performance
Deliversnetworkresiliencythrough
controllerclusteringandhitlessfailure
Eliminatessecuritygapswithatiered
approachforprotectingdatainthewired
orwirelessnetwork
ProvidesstatefulLayer2-7wired/wireless
rewall
IntegratesInternetProtocolSecurity(IPSec)
VirtualPrivateNetwork(VPN)gatewayto
securealltrafc
Enabling a Secure and Reliable
Wireless Enterprise for Campus,
Data Center, and Large DeploymentsDesignedforhigh-bandwidthWireless
LAN(WLAN)deployments,theBrocade
MobilityRFS7000Controllerprovides
highlyscalablemobilityinlarge
enterprises,campuses,anddatacenters.
Theinnovativearchitectureenablesa
comprehensivesetofservices,offering
unmatchedsecurity,reliability,and
mobilityforhigh-performance802.11n
networks.Easytodeployandmanage,
theBrocadeMobilityRFS7000actsasaconvergedplatformtodelivermultimedia
applications(data,voice,andvideo),
wirelessnetworking,andvalue-added
mobilityservicessuchasguestaccessand
seamlessroaming.Next-generationself-
healingmesh,RFIDlocationingservices,
andcentralizedmanagementsimplifyand
minimizethecostsassociatedwithday-to-
daymanagement.
BROCADEMOBILITYRFS7000WLANCONTROLLER
CAMPUS
NETWORK
DATASHEET www.brocade.com
HIGH PERFORMANCE AND SCALABILITY
TheBrocadeMobilityRFS7000features
amulticore,multithreadedarchitecture
designedforlarge-scale,high-bandwidth
enterprisedeployments.Iteasilyhandlesfrom
8000to96,000mobiledevicesand1024
BrocadeMobilityAPspercontroller.
ADVANCED NETWORKING SERVICES
IMPROVE PRODUCTIVITY AND ROI
TheBrocadeMobilityRFS7000offers
enterprise-classservicessuchassecurity,
voice,performance,andresiliencypackaged
togetheratnoadditionalcosttomakemobility
workevenbetter.Redundantwireless
controllersshareAPlicenses,whichincreases
capacitywithoutaddingincrementalcost.
BrocadeMobilitydual-purposeAPsprovide
wirelessaccessanddedicateddual-band
TheBrocadeOnestrategyhelpssimplify
networkinginfrastructuresthrough
innovativetechnologiesandsolutions.
TheBrocadeMobilityWLANsolution
supportsthisstrategybyprovidinga
singlehigh-performance,highlyavailable
networkwitharangeofsecurityand
networkmanagementfunctionstodeliver
anytime,anywheremultimediaaccess.
7/31/2019 MobilityRFS7000_DS
2/6
RFsensing,whicheliminatespurchasing
andmanagingseparatededicatedsensing
devicesandprovidesamorecost-effective,
greenerapproachto247security.
NON-BLOCKING, HIGH-PERFORMANCE802.11n ARCHITECTURE
Anadaptivearchitectureenablestwomodes
ofoperationwithoutchangingthermware
asastandaloneAPorasawireless
controller-adoptedAPforcentralized
management.Standaloneorcontroller-
adoptedAPsforwardtrafcdirectlytothe
nextAPviathebest-qualitypathwithfull
QoSandsecurity,minimizingwiredtrafc
toeliminatecontrollerbottlenecksand
singlepointsoffailure,whileaccelerating
applicationperformance.Eachelementof
thenetworkisawareofotherelementsand
theirstatus,andtheyallworktogetherto
ndthebestroutesthroughthenetworkfor
maximumperformance.Whilecontrollers
arestillusedtomanage,direct,andscale
thenetwork,individualtransmissions
cantakeplaceviatheshortestpath.By
harnessingthepoweroftheBrocade
MobilityadaptiveAPs,thenetworkperforms
better,needsfewerwirelesscontrollers,and
increasesROI.
UNMATCHED RELIABILITY
TheBrocadeMobilityRFS7000offers
SmartRFtechnology,whichprovides
automaticRadioFrequency(RF)tuningfor
optimalnetworkperformance.Theabilityto
dynamicallyadjustthepowerandchannelsonanyAPautomaticallyeliminatesgapsin
coveragefromimperfectsitesurveys,AP
failures,andinterferencefromadjacent
APsandnon-802.11ndevicesdramatically
reducingnetworkmonitoringcostsby
enablingWLANstointelligentlyadapttothe
ever-changingRFenvironment.Thisfeature
protectsagainstunder-orover-powering
scenariosthatcouldreduceperformance
andnetworkavailability.Andadjustments
arecompletelytransparentthereisno
impactonvoicecallsanddatasessionsin
progresswhichprotectsQoSandensures
anoptimaluserexperience.
Controllerclusteringprotectsagainst
wirelessswitchfailureandoffersActive/
ActiveorActive/Standbycontroller
redundancyoptions.AdaptiveAPscontinue
toforwardtrafceventhoughthecontroller
maybeunreachablelocallyoracrossan
Internet/WANconnection.
ENTERPRISE-GRADE SECURITY
Comprehensivenetworksecurityfeatures
keepwirelesstransmissionssecureand
providecomplianceforHIPAAandPCI
regulations.TheBrocadeMobilityRFS7000
providesgap-freesecurityforWLAN
networksbyusingatieredapproachthat
protectsdataateverypointinthenetwork
wiredorwireless.
Thiscompletesolutionincludes:
StatefulLayer2-7wired/wirelessrewall
IntegratedIPSecVPNgatewaytosecureal
trafcbetweentheAPsandthecontroller
AAARemoteAuthenticationDial-InUser
Service(RADIUS)serverandsecure
guestaccesswithacaptiveWebportal,
reducingtheneedtopurchaseand
manageadditionalinfrastructure
Hyper-fastsecureroaming
NetworkAccessControl(NAC)support
MAC-basedauthentication
ComprehensiveintegratedIntrusion
DetectionSystem(IDS)/Intrusion
PreventionSystem(IPS)enginefor
roguedetectionandcontainmentandanomalyanalysis
TOLL-QUALITY VOICE FOR THE
WIRELESS ENTERPRISE
SupportforVoiceoverWLAN(VoWLAN)
providescost-effectivevoiceservices
throughoutthewirelessenterprise,enabling
push-to-talkandothercapabilitiesfor
employeesinsidethebuildingaswellasin
outsideareas.Therichfeaturesetprovides
granularcontroloverthemanywireless
networkingfunctionsrequiredtodeliver
high-performance,persistent,andclear
connectionswithtoll-qualityvoice.
7/31/2019 MobilityRFS7000_DS
3/6
QoSprovides802.11trafcprioritization
andprecedenceforsuperiorperformance
forvoiceandvideoservices.WMM
Extensions(WMM-PowerSave)with
AdmissionControlincludingTSPEC,
SIPCallAdmissionControl,and802.11kradioresourcemanagementenhance
multimediaapplicationsupportandimprove
batterylifeandcapacity.Layer3hyper-fast
secureroamingenablesvoiceserviceswith
truemobilityacrosstheenterprise.
HIGH AVAILABILITY AND RESILIENCY
TheBrocadeMobilityRFS7000simplies
andreducesthecostofextendingmobility
toremoteandbranchofcesaswell
astelecommuters.Organizationscan
deployBrocadeMobilityAPsinameshto
reachremotelocationsorbackupwired
connections,yetcentrallymanagethem
intheNetworkOperationsCenter(NOC)
throughtheBrocadeMobilityRFS7000
(singlecontrolleroraclusterforscalability).
SECURE GUEST ACCESS (HOTSPOT)
Secureguestaccessprovidesaccessfor
guests,contractors,andothertemporary
wiredandwirelessusers.Thebuilt-in
captiveportalsupportscustomizablelogin/
welcomepages,URLredirectionforuser
login,usage-basedcharging,dynamicVLANassignmentofclients,DomainName
Server(DNS)whitelist,GenericRouting
Encapsulation(GRE)tunnelingoftrafc
toacentralsite,ApplicationProgramming
Interface(API)supportforinteroperability
withcustomWebportals,andexternal
authenticationandbillingsystems.Guest
trafccanbesufcientlyrestrictedand
limitedsothatenterpriseusersare
unaffectedbyguestusage.
REAL-TIME LOCATIONING
SYSTEM (RTLS)
Richlocationingservicesprovidereal-time
enterpriseasset-trackingthroughsupport
for802.11,RFID,andthird-partylocationing
solutionsincludingindustryleaders
AeroScout,Ekahau,andNewburyNetworks.
Real-TimeLocationingSystem(RTLS)supports
astandards-basedEPCGlobalALEinterface
forprocessingandlteringdatafromallactive
andpassivetags,andanEPCGlobalLLRP
interfaceforpassiveRFIDtagsupport.
SIMPLE TO DEPLOY AND MANAGE
NO ONSITE IT SUPPORT REQUIRED
TheBrocadeMobilityRFS7000combines
multiplefeaturestoeliminatetheneed
foronsiteITsupportfordeploymentand
day-to-daymanagement.Plug-and-play
setupfeaturesincludebuilt-inintelligence,
whichallowsthenetworktoidentifyand
automaticallyaddressnetworkissues,along
withzero-touchinstallation.Plug-and-play
meshprovisioningsignicantlyreduces
deploymenttimeandongoingmanagement.Theintegrationofallwiredandwireless
networkinginfrastructureintoasingle
deviceiseasilymanagedbackintheNOC
viaauto-discoveryandauto-conguration.
WIRED/WIRELESS NETWORK
MANAGEMENT REDUCES
COMPLEXITY
Toreducecomplexityandtimespent
managingtheseenvironments,theeasy-
to-useBrocadeNetworkAdvisordiscovers,manages,anddeployscongurationsto
groupsofdevices.ByusingtheBrocade
NetworkAdvisorDeviceConguration
Managertool,organizationscancongure
VLANswithinthenetwork,managewireless
APrealms,groupWLANswitchesinto
domainsforLayer3mobilitysupport,or
executeCommandLineInterface(CLI)
commandsonspecicdevicesorgroups
ofdevices.BrocadeNetworkAdvisor
centralizesmanagementoftheentirefamily
ofBrocadeMobilitywirelessproducts.
BROCADE GLOBAL SERVICES
BrocadeGlobalServicesoffers
comprehensiveEssentialSupportfor
BrocadeenterpriseWLANproducts
includinghardwareand247software
support,softwareupdates,andnew
releasestooptimizenetworkperformance
MAXIMIZING INVESTMENTS
Tohelpoptimizetechnologyinvestments,
Brocadeanditspartnersoffercomplete
solutionsthatincludeprofessionalservicestechnicalsupport,andeducation.For
moreinformation,contactaBrocadesales
partnerorvisitwww.brocade.com.
7/31/2019 MobilityRFS7000_DS
4/6
Deployment
Performance
andsupported
congurations
ProvidescentralmanagementofBrocadeMobility
AccessPoints(APs)deployedlocallyoratremote
locations;plug-and-playdeploymentsoverLayer2
andLayer3networks
Wireless networkingWirelessLAN(WLAN) Supports256WLANs;multi-ESSID/BSSIDtrafc
segmentation;VLAN-to-ESSIDmapping;auto-
assignmentofVLANs(onRADIUSauthentication);
power-saveprotocolpolling;pre-emptiveroaming;
fastroamingwithopportunisticchannelscan;
congestioncontrolwithbandwidthmanagement,
VLANpooling,anddynamicVLANadjustment;IGMP
snooping;Layer3mobility(inter-subnetroaming);
radiofrequencyAutomaticChannelSelect(ACS);
TransmitPowerControl(TPC)management;country
code-basedRFconguration;802.11b,802.11g,
802.11a,and802.11n
VLANsupport 256VLANssupportperAP,802.1QVLANtrunkingandtagging,dynamicuser-basedVLANsusing
EAPauthentication
Bandwidth
management
CongestioncontrolperWLAN;peruserbasedon
usercountorbandwidthutilization;bandwidth
provisioningviaAAAserver
AccessPoints(APs) Supportsadoptionof1024BrocadeMobility650
andMobility7131802.11a/b/g/nAPsper
controllerand12,288percluster;supportsradio
frequencyACS;TPCmanagement;country
code-basedRFconguration
BSSIDsupport FourBSSIDsperradio
Poweredclients CAM-andPSP-poweredclientssupported
IPv6clients Supported
Clients Upto8000userspercontroller,96,000users
percluster
Trafc management and Quality of Service
802.11e Supported
QoS Voicepri or itization;WMM-powersavewi thTSPEC
AdmissionControl;WMMU-APSD;Layer1-4
packetclassication;802.1p;DiffServ/TOS,SVP,
SIPCallAdmissionControl(CAC)
IGMPsnooping Optimizesnetworkperformancebypreventing
oodingofthebroadcastdomain
802.11k Providesradioresourcemanagementtoimprove
clientthroughput(11kclientrequired)
Ratelimiting Broadcast/multicasttransmitratecontrol,clientrate
limiting,per-radioclientlimit
RFpriority 802.11trafcprioritizationandprecedenceClassicationand
marking
Layer1-4packetclassication;802.1pVLAN
priority;DiffServ/TOS
Network security
Statefulrewall Role-basedwired/wirelessrewall(Layer27)with
statefulinspectionforwiredandwirelesstrafc;
activerewallsessions205,000percontroller
and2,460,000percluster;protectsagainstIP
spoongandARPcachepoisoning;per-userrewallrequiresoptionalAdvancedSecurityLicense
AccessControlLists
(ACLs)
Layer2/3/4ACLs
WirelessIDS/IPS MultimoderogueAPdetection,rogueAP
containment,802.11nroguedetection,ad
hocnetworkdetection,DenialofService(DoS)
protectionagainstwirelessattacks,client
blacklisting,excessiveauthentication/association;
excessiveprobes;excessivedisassociation/
de-authentication;excessivedecryptionerrors;
excessiveauthenticationfailures;excessive
802.11replay;excessivecryptoIVfailures(TKIP/
CCMPreplay);suspiciousAP,authorizeddevicein
adhocmode,unauthorizedAPusingauthorized
SSID,EAPFlood,FakeAPFlood,IDtheft,adhocadvertising,authorizedSSID
Geofencing Controlorlimitnetworkorapplicationaccess
basedonusersandtheirlocation
Anomalyanalysis SourceMediaAccessControl(MAC)=DestMAC;
illegalframesizes;sourceMACismulticast;TKIP
countermeasures;allzeroaddresses
Authentication ACLS;Pre-SharedKeys(PSK);802.1x/EAP
TransportLayerSecurity(TLS),TunneledTransport
LayerSecurity(TTLS),ProtectedEAP(PEAP);
KerberosIntegratedAAA/RADIUSserverwithnative
supportforEAP-TTLS,EAP-PEAP(includesabuilt-in
username/passworddatabase;supportsLDAP),
andEAP-SIM;localauthenticationdatabase
Encryption WEP40/128(RC4);WPA-TKIP;WPA2-CCMP(AES);802.11iWPA2-TKIP;Multi-Ciphersupport
IPSecVPNgateway SupportsDES,3DES,AES-128,andAES-256
encryption,withsite-to-siteandclient-to-site
VPNcapabilities;supports512concurrentIPSec
tunnelspercontrollerwithoutADSeclicense,and
1024concurrentIPSectunnelspercontrollerwith
ADSeclicense
Secureguestaccess
(hotspotprovisioning)
Providessecureguestaccessforwiredandwireless
clients;built-incaptiveportal;customizablelogin/
welcomepages;URLredirectionforuserlogin;
usage-basedcharging;dynamicVLANassignment
ofclients;DNSwhitelist;GREtunnelingoftrafcto
acentralsite;APIsupportforinteroperabilitywith
customWebportals(forexample,WanderingWi-Fi);
Amigopod;supportforexternalauthenticationand
billingsystems
WirelessRADIUS
support
User-basedVLANs(standard);MAC-based
authentication(standard);user-basedQoS;
location-basedauthentication;allowedESSIDs
NACsupport NACsupportwiththird-partysystemsfrom
Microsoft,Symantec,andBradford
BROCADE MOBILITY RFS7000 SPECIFICATIONS
7/31/2019 MobilityRFS7000_DS
5/6
Network services
Layer2andLayer3 802.1D-1999Ethernetbridging;802.11-802.3
bridging;Layer3RIProuting,802.1QVLAN
trunkingandtagging;BOOTPclient,DynamicDNS
(DynDNS),PPPoE,NAT,LLDP,IPltering,content
ltering(lesorURLextensions,HTTP,SMTPandFTPrequests)NAT,ARP/ProxyARP;IPpacket
steeringredirection
DHCPservice/client/relay
Supported
Real-Time Locationing System (RTLS)
RSSI-basedtriangulationforWi-Fiassets
Tagssupported Ekahau,Aeroscout,Newbury,Gen2tags
RFIDsupport:
CompliantwithLLRP
protocol
Built-insupportforthefollowingMotorolaRFID
readers:xed(XR440,XR450,XR480);mobile
(RD5000)andhandheld(MC9090-GRFID)
Management
Features CLI(serial,telnet,SSH);secureWeb-basedGUI
(SSL)forthewirelesscontrollerandthecluster;
SecureNetworkManagementProtocol(SNMP)
v1/v2/v3;SNMPtraps40+user-congurable
options;Syslog;TFTPClient;SecureNetwork
TimeProtocol(SNTP);text-basedcontroller
congurationles;controllerauto-conguration
andrmwareupdateswithDHCPoptions;multiple
userroles(forcontrolleraccess);MIBs(MIB-II,
Etherstats,wirelesscontroller-specicmonitoring,
andconguration);e-mailnoticationsforcritical
alarms;MUnamingcapability;systemmessages/
tracemessageslogging
Start-upwizard Web-basedcongurationwizard
Conguration Flash-basedWebuserinterface,human-readable
congleimport/export,CLI(RS-232orTelnet),
SSH,HTTP/S,MIB,programmableSNMPv1/v2c/v3trapsupport
Statistics LAN,wireless,andassociatedstations
(accessibleviaWebUI)
Software/rmware
updates
FTPorTFTP,remoteautoavailable,USB
System resiliency and redundancy
Highavailability Active:Standby;Active:ActiveandN+1redundancy
withAPandclientloadbalancingforlarge
deployments;criticalresourcemonitoring;
APlicensesaresharedbetweenredundant
controllers
VirtualIP SinglevirtualIP(perVLAN)foraswitch/controller
clustertouseasthedefaultgatewaybymobile
devicesorwiredinfrastructure;seamlessfailoverofassociatedservices(forexample,DHCPserver)
SmartRF Networkoptimizationtoensureuserqualityof
experienceatalltimesbydynamicadjustmentsto
channelandpower(ondetectionofRFinterference
orlossofRFcoverage/neighborrecovery);
availableforboththinAPsandadaptiveAPs
Dual-rmwarebank Dual-rmwarebanksupportsimagefailover
capability
Mesh Standal onemesh;a da ptivemesh;self-heali ng
meshfailover;Layer2wiredtomeshfailover
Physical characteristics
Formfactor 1Urackmount
Dimensions 1.75in.H17.32in.W15.39in.D
(44.45mm440.00mm390.80mm)
Weight 13.5lb(6.12kg)
Physicalinterfaces Four10/100/1000copper/SFPEthernet
interfaces(LEDs:PortSpeed,PortActivity)
One10/100managementport(OOB)
OneCompactFlashCardslot
TwoUSB2.0slots
OneRJ-45consoleserialport
MTBF Greaterthan65,000hours
Environmental specications
Temperature Operating:32Fto104F(0Cto40C)
Non-operating:-40Fto158F(-40Cto70C)
Humidity Operating:5%to85%(withoutcondensation
Non-operating:5%to85%(withoutcondensation)
Heatdissipation 341BTUperhour
Maximumoperating
altitude
3km(10,000ft)
Power specications
ACinputvoltage 90to264VAC50/60Hz
MaximumACinput
current
6Aat115VAC,3Aat230VAC
Inputfrequency 47Hzto63Hz
Maximumpower
consumption
100W
Regulatory information
Productsafety UL/cUL60950-1,IEC/EN60950-1,
IEC/EN60825-1
CompliancewithRoHSDirective2002/95/EC
EMCcompliance FCC(USA),IndustryCanada,CE(Europe),VCCI
(Japan),C-Tick(Australia/NewZealand)
BROCADE MOBILITY RFS7000 SPECIFICATIONS (CONTINUED)
7/31/2019 MobilityRFS7000_DS
6/6
DATASHEET
2011BrocadeCommunicationsSystems,Inc.AllRightsReserved.06/11GA-DS-1414-03
Brocade,theB-wingsymbol,BigIron,DCFM,DCX,FabricOS,FastIron,IronView,NetIron,SANHealth,ServerIron,
TurboIron,andWingspanareregisteredtrademarks,andBrocadeAssurance,BrocadeNETHealth,BrocadeOne,
ExtraordinaryNetworks,MyBrocade,VCS,andVDXaretrademarksofBrocadeCommunicationsSystems,Inc.,inthe
UnitedStatesand/orinothercountries.Otherbrands,products,orservicenamesmentionedareormaybetrademarks
orservicemarksoftheirrespectiveowners.
Notice:Thisdocumentisforinformationalpurposesonlyanddoesnotsetforthanywarranty,expressedorimplied,
concerninganyequipment,equipmentfeature,orserviceofferedortobeofferedbyBrocade.Brocadereservesthe
righttomakechangestothisdocumentatanytime,withoutnotice,andassumesnoresponsibilityforitsuse.This
informationaldocumentdescribesfeaturesthatmaynotbecurrentlyavailable.ContactaBrocadesalesofcefor
informationonfeatureandproductavailability.Exportoftechnicaldatacontainedinthisdocumentmayrequirean
exportlicensefromtheUnitedStatesgovernment.
Corporate Headquarters
SanJose,CAUSAT:+1-408-333-8000
info@brocade.com
European Headquarters
Geneva,SwitzerlandT:+41-22-799-56-40
emea-info@brocade.com
Asia Pacic Headquarters
SingaporeT:+65-6538-4700
apac-info@brocade.com
www.brocade.com
Recommended