| |
Mobility
- IEEE 802.11g single-radio design: provides choice for support of IEEE 802.11g and legacy IEEE 802.11b wireless clients with selection of three radio modes of operation: IEEE 802.11b, 802.11g, or 802.11g with fallback support for 802.11b
- Detachable antenna design: enables use of external antenna configurations for improved radio coverage and performance
- Adjustable output power: controls cell size for high-density access point deployments
- Interoperability: Wi-Fi Alliance certifications including IEEE 802.11g Wi-Fi and WPA2 to help ensure multivendor interoperability
Management
- Remote configuration and management: through secure Web browser or command-line interface (CLI)
- Management interface control: each of the following interfaces can be enabled or disabled depending on security preferences: console port, telnet port, reset button
- Manager, operator privilege levels: enables read-only (operator) and read-write (manager) access on CLI and Web browser management interfaces
- Management VLAN: segments traffic to and from management interfaces, including CLI/telnet, Web browser interface, and SNMP
- RADIUS accounting support: separate RADIUS accounting server support per SSID; provides detailed session, usage, and billing information for each client activity
- International country configuration: select the appropriate country, and the access point automatically configures operation to match regulatory requirements (model J8131B only)
- Local wireless bridge client traffic filtering: when enabled, prevents communication between wireless devices associated with the same access point
Security
- Choice of IEEE 802.11i, Wi-Fi Protected Access 2 (WPA2), or WPA: locks out unauthorized wireless access by authenticating users prior to granting network access; robust Advanced Encryption Standard (AES) or Temporal Key Integrity Protocol (TKIP) encryption secures the data integrity of the wireless traffic
- IEEE 802.1X: provides port-based user authentication with support for Extensible Authentication Protocol (EAP) MD-5, TLS, TTLS, and PEAP with choice of AES, TKIP, and static or dynamic WEP encryption for protecting wireless traffic between authenticated clients and the access point
- 8 SSIDs with separate VLAN, security, and authentication per SSID: permits network administrators to control user access to network resources based on user authentication and level of trusted security between the wireless user and the access point. For example, the SSID labled "GUEST" requires no authentication or security for users of this SSID. All traffic on the "GUEST" SSID is placed on a VLAN with restricted access to specific services such as Internet access. A second SSID is configured for employee access. The "EMPLOYEE" SSID requires successful authentication to the network using IEEE 802.11i with AES encryption to protect wireless data. The VLAN associated with the "EMPLOYEE" SSID grants access to a broader range of services and network access.
- RADIUS-based MAC authentication: a wireless client is authenticated with a RADIUS server based on the MAC address of the client; this is useful for clients that have minimal or no user interface
- Secure access to management interfaces: all management interfaces of the ProCurve Access Point 420--CLI, browser interface, or MIB--are securely encrypted through SSHv2, SSL, and SNMPv3
- Closed system: restricts broadcast of SSID as a security measure to conceal presence of the wireless network; access point does not respond to the wireless client probe request of "ANY"
- Access Point (rogue AP) and ad-hoc wireless network detection: each ProCurve Access Point 420 can be configured to periodically scan for neighboring access points and ad-hoc wireless networks. Information collected during the scan--including the BSSID, SSID, channel, RSSI, security setting, and radio type (IEEE 802.11b, g, or b/g mode)--are captured for each access point detected. If configured, the access point can enter dedicated scan mode to provide continuous scanning of the surrounding RF environment.
Convergence
- SpectraLink voice priority (SVP) support: prioritizes SpectraLink voice IP packets sent from a SpectraLink NetLink SVP server to SpectraLink wireless voice handsets to help ensure excellent voice quality
- IEEE 802.3af Power over Ethernet support: simplifies deployment and dramatically reduces installation costs by helping to eliminate the time and cost involved in supplying local power at each access point location
|
Networking
