Transcript
Product Brief
Nortel Networks
Wireless LAN 2200 Series
Anytime, anywhere access—that is the promise wireless brings; the ability to use the same applications you have access to from your desktop—no matter where you are. The nature of wireless—unrestricted by walls or doors—brings with it an inherent challenge: security. Add to this total cost of ownership, functionality, and manageability, and you realize that up until now wireless LAN offerings have been unable to make the grade for the majority of enterprise customers. Corporations want their wireless network to be an extension of their wired network. They seek standards-based solutions, which address security, QoS, interoperability and are capable of being managed by one system. The Nortel Networks WLAN 2200 Series makes it possible, by bringing the combination of True Mobility, Total Security, and Integrated Management into the enterprise.
Introducing Nortel Networks WLAN 2200 Series The Nortel Networks WLAN 2200 Series is comprised of the WLAN - Mobile Adapter 2201, WLAN - Access Point 2220, and WLAN - Security Switch 2250. With its unique feature set and flexible architecture, the series offers an enhanced user experience through true mobility, total security and integrated management, with the intelligence and performance for mass deployment of multi-service wireless networks. True Mobility—The ability for users to maintain uninterrupted connectivity as they seamlessly roam across access points, different wireless technologies, subnets, and buildings within the campus. Total Security—A layered approach to security, where modular or stand-alone solutions are available to suit customer requirements. Integrated Management—Simplified operations and reduced costs through easy configuration and intuitive network management.
Nortel Networks WLAN Mobile Adapter 2201 A 32-bit CARDBUS adapter that supports both 802.11b and 802.11a, featuring: Low power consumption Nortel Networks WLAN - Mobile Adapter 2201 consumes about 30 percent less power than competitive equivalents. Low power consumption is particularly important in a wireless solution where the client devices rely on battery power. With 30 percent lower power, the battery life of laptop computers will be extended.
Nortel Networks WLAN Access Point 2220 A dual mode access point that supports both 802.11b and 802.11a, allowing users to roam seamlessly across the two standards. It includes the following features: 801.11a and 802.11b support Integrating both 802.11a and 802.11b radio technology within the same access point makes it possible to deploy 11 Mbps 802.11b and 54 Mbps 802.11a networks.
Features of Nortel Networks WLAN 2200 Series • • • • • • • • • • • •
2
Low power consumption CARDBUS card 801.11a and 802.11b 802.11a turbo mode (108 Mbps) 802.3af draft-compliant Power over Ethernet Quality of Service Multiple VLAN support Virtual Port-based Authentication Plenum rated Four levels of power management Web-based management Dual firmware images Multiple authentication options
• Strong encryption • Full enterprise roaming • Multi-service • High availability mode WLAN - Access Point 2220
WLAN - Mobile Adapter 2201
This integrated approach also allows users to roam seamlessly between the two standards, while reducing the required number of access points. 802.11a turbo mode Nortel Networks WLAN - Access Point 2220 and WLAN - Mobile Adapter 2201 support a double rate 108 Mbps turbo mode. This doubles the throughput of the standard 802.11a 54 Mbps, without compromising the physical range. While the access point is in this mode, support for non-Nortel Networks wireless adapters is maintained by the standard 802.11b mode. 802.11f draft-compliant IAPP roaming To enable efficient roaming, access points must handover each mobile adapter as they move from one access point to another. This is achieved using the IEEE 802.11f draft Inter Access Point Protocol (IAPP). Nortel Networks WLAN - Access Point 2220 supports IAPP, making it compatible with other vendors that use this protocol. This ensures that in a mixed vendor environment, users can roam efficiently and seamlessly between access points. Plenum rating Nortel Networks WLAN - Access Point 2220 is Plenum rated for safety. The Plenum rating covers the regulations and safety standards required of equipment intended for installation in areas such as false ceilings. 802.3af draft-compliant Power over Ethernet Nortel Networks WLAN - Access Point 2220 can be powered via its Ethernet port. This simplifies deployment when installing an access point somewhere power is not usually found, such as above a false ceiling. Powering a device by its Ethernet port, using a product such as Nortel Networks BayStack* 460-24TPWR Power over Ethernet Switch can prove extremely cost-effective when compared to the cost of installing a power outlet, which can amount to $1,500 per outlet. Power delivered via the Ethernet port can also be protected more easily with a centralized battery backup or a UPS.
Virtual Port-based Authentication/802.1x Nortel Networks WLAN - Access Point 2220 supports Virtual Port-based Authentication/802.1x (VPA) for local authentication of clients. Based on the IEEE 802.1x protocol, VPA utilizes the existing 802.1x support within client devices, such as Microsoft Windows 2000 or Windows XP, to provide single sign-on capabilities and prevent unauthorized users from accessing the wireless domain. When a user first attempts to connect to the wireless network, their logon credentials will be passed to the access point by the client. The access point will then look to its internal tables or to backend RADIUS servers to authenticate the client. The client can then be assigned to one of the wireless VLANs. Quality of Service/Bandwidth management Nortel Networks WLAN - Access Point 2220 is planned to support Quality of Service (QoS)†. Client traffic can be throttled globally or individually by MAC address to restrict the amount of bandwidth users have access to. This prevents application abuse by averting any one user from 'hogging all the bandwidth'. QoS can also be used to ensure that applications such as voice and video perform as needed in busy wireless networks. This allows a variety of multi-service clients, including Nortel Networks i2050 Mobile Voice Client and Nortel Networks i2050 PC Soft Phone, to provide superior voice quality, even during times of network congestion. Multiple VLAN support Nortel Networks WLAN - Access Point 2220 is planned to support 16 VLANs†. Wireless clients can be segmented into different VLANs for security or QoS purposes. Using separate VLANs prevents communication between different clients in different VLANs unless it is switched or routed on the wired LAN.
First level security Nortel Networks WLAN - Access Point 2220 provides a first line of defense by offering basic, standalone security for customers who do not have high security requirements. Protocols supported include WEP, 802.1x, and MAC filtering. Four levels of RF power control Nortel Networks WLAN - Access Point 2220 supports four levels of RF power control, enabling the radio output of the 802.11a to be adjusted. This allows administrators to control Access Point coverage and prevents the radio signal from extending too far. Where greater density of access points is required for higher bandwidth or higher user count, reducing the range permits more access points to be installed without overlapping signals. Web-based management Nortel Networks WLAN - Access Point 2220 features a Web-based management interface for ease of installation and management. The intuitive browser-based interface allows access to configuration and management options. Dual firmware images Each Nortel Networks WLAN - Access Point 2220 has built-in redundancy with two firmware images for increased network availability. Should an access point experience an issue with the primary image, it will switch to the secondary image and continue to function.
Nortel Networks WLAN Security Switch 2250 A security switch that allows mobile adaptive tunneling, robust security, traffic filtering, bandwidth management, rogue access point detection, and multiple authentication options to secure the wireless domain. It features:
Mobile Adaptive Tunneling (MAT) Key to Wireless LAN switching is the ability for customers to access the network securely from anyplace, anytime. Mobile Adaptive Tunneling (MAT) provides granular access control to corporate networks, enabling administrators to dynamically provide full or limited access to corporate resources based on user profile, access type and device security. For example, wireless users accessing the corporate network from their personal laptop at the local cybercafe may be given limited access to intranet applications compared to users accessing the network from their corporate-owned laptop. MAT uses client certificates or tokenbased authentication mechanisms to identify the security level of the access device. Based on the security level, users have full secure IP level access to the network or limited browser-based access over SSL to few applications. This helps in protecting the corporate intranet from any malicious activity which may occur due to "compromise" of an unsecured device such as a personal laptop. Providing this flexible approach to security lets enterprises extend their wireless network to a broader audience, such as visiting guests or contractors. Multiple authentication options Nortel Networks WLAN - Security Switch 2250 supports multiple authentication mechanisms including LDAP, RADIUS, NTLM, and Active Directory so that access can be controlled on a per user basis without the need for duplicate authentication servers. A centralized and integrated security framework—such as Nortel Networks Unified Security Architecture— enables enterprise customers to benefit from a simpler and safer access control model with a consistent user interface. Robust security Nortel Networks WLAN 2200 Series delivers a rich set of security features. This enables all traffic to be encrypted using WEP, SSL, IPSec, and PPTP, as well as support for dynamic session tokens.
†Available in software release Q3-2003.
WLAN - Security Switch 2250 3
Full enterprise roaming Nortel Networks WLAN 2200 Series allows users to roam seamlessly and securely across the enterprise campus by authenticating, creating, and maintaining a secure tunnel between the Mobile Adapter and the WLAN - Security Switch 2250. By preserving the user's identity from the WLAN - Security Switch 2250 to the rest of the network, users can access their applications from anywhere without having to reload or re-attach as they roam across the network. This is particularly important in an IP telephony environment where dropped calls are inconvenient, frustrating, and could impact customer satisfaction. Rogue and free agent Access Point detection To detect and alleviate the security threat posed by 'rogue' and 'free agent' access points, Nortel Networks WLAN Security Switch 2250 monitors the air and the wired network. Unauthorized devices result in a trap being sent to the network management platform with information about the unauthorized device. High availability mode Nortel Networks WLAN - Access Point 2220 has built-in redundancy with two firmware images for increased network availability. Further redundancy is provided when two or more Nortel Networks WLAN - Security Switch 2250s are configured as a cluster. Members of the cluster exchange and synchronize information about connected wireless clients, sharing the load, increasing performance and network coverage, and eliminating the single point of failure. In the event of switch failure, the remaining Security Switches take on the additional traffic.
Safe air—Layered security model gives options and leverages installed base of security solutions SSL with end-to-end encryption
Strong IPSec client
Wireless VLAN(s) in DMZ
Generic IPSec client
WLAN Access Point 2220 Subnet A 802.11b “Legacy” clients
1 4 7 * *
2 5 8 0 0
Subnet B 802.11a
3 6 9 # # #
IPSec Gateway
Applications Today's business environments require mobility and always-on connectivity to compete. Business professionals often have a need for network access in areas such as hotels, coffee shops, and airports. Some industries, including healthcare, education, hospitality, and transportation, have networking requirements where an untethered wireless solution delivers immense benefits. Public wireless access to broadband Internet services provided though 'hotspots' is a growing market that Nortel Networks expertise and our WLAN 2200 Series are ideally positioned to service. The WLAN 2200 Series includes several features specifically for this purpose, such as localbridge filtering, access point management filtering, RADIUS, and PPPoE support.
Why Nortel Networks WLAN 2200 Series Nortel Networks Wireless LAN 2200 Series provides a secure mobile networking environment, featuring true mobility across the campus, total security to protect the network, and integrated management for control of the wireless environment.
4
Application server
WLAN - Security Switch 2250
Wireless LAN technology can deliver enormous benefits to the enterprise by removing the tether of a cable restricting employees to their desks. The freedom wireless brings allows users access to information anytime, anywhere and improves productivity. Nortel Networks approach to mobility is to eliminate boundaries and deliver a solution that enables access to the same applications in the wireless domain that users have access to in the wired domain. True mobility makes access to multi-service applications, like IP Telephony, possible. This and the development of handheld devices, such as the PDA, have brought an unplugged world a step nearer and the enterprise closer to Nortel Networks vision of "One network, a world of choice." Nortel Networks is the only vendor in the industry with the wealth of experience in voice, data, wireless, and security technologies for enterprise and service provider customers. This experience uniquely positions Nortel Networks WLAN 2200 Series as best in class for its ability to deliver a mobile network that provides a secure, adaptable, multi-service solution.
Technical specifications Nortel Networks WLAN - Access Point 2220 Dimensions
• Size: 8.07 x 5.35 x 1.58 inches (20.5 x 13.6 x 4 cm) • Weight: 1.5 lbs (700 grams)
Environmental specifications
Temperature: Operating 0˚ to 55˚C (-32˚ to 122˚F), Storage 0˚ to 70˚C (-32˚ to 158˚F) Humidity: 5% to 95% (non-condensing)
Power specifications
External Adapter—Input: 100-240 VAC, 50-60 Hz; Output: 5 VDC, 3A Power over Ethernet (PoE) circuitry—Input voltage: 48 VDC, 12.95 W max
Certifications
Safety: UL 60950, CAN/CSA - 22.2 No. 60950
Nortel Networks WLAN - Mobile Adapter 2201 Dimensions
• Length: 23 mm
• Width: 54 mm
Environmental specifications
Temperature: Operating 0˚ to 55˚C Storage -20˚ to 80˚C
Power specifications
Operating current: 350 mA (max) at 3.3 V (+/-5%)
Certifications
Safety: UL 60950, CAN/CSA - 22.2 No. 60950
• Height: 10.4 mm
Nortel Networks WLAN - Security Switch 2250 Dimensions
• Width: 17.61 inches • Weight: 22 lbs (9.9 Kg)
• Depth: 24 inches • Height: 1.7 inches • Standard 19” EIA 1U rack mountable
Environmental specifications
• Operating temperature: 10˚ to 35˚C • Operating humidity: 8% to 80% (non-condensing)
Power specifications
100-240 VAC @ 60-50 Hz, 3.6–1.8A
Power consumption MTBF
240 Watts >50,000 hours
Certifications
• US: FCC Class B • Canada: DOC Class B • Europe: CE Mark to EN55022/EN50082-1/ICE 801-3/ICE 801-4 • Safety: UL 1950, CSA 950, CE Mark EN60950, IEC60950
5
In the United States: Nortel Networks 35 Davis Drive Research Triangle Park, NC 27709 USA
In Canada: Nortel Networks 8200 Dixie Road, Suite 100 Brampton, Ontario L6T 5P6 Canada
In Caribbean and Latin America: Nortel Networks 1500 Concorde Terrace Sunrise, FL 33323 USA
In Europe: Nortel Networks Maidenhead Office Park Westacott Way Maidenhead Berkshire SL6 3QH UK
In Asia: Nortel Networks Asia 6/F Cityplaza 4, Taikooshing, 12 Taikoo Wan Road, Hong Kong
Nortel Networks is an industry leader and innovator focused on transforming how the world communicates and exchanges information. The company is supplying its service provider and enterprise customers with communications technology and infrastructure to enable value-added IP data, voice and multimedia services spanning Wireless Networks, Wireline Networks, Enterprise Networks, and Optical Networks. As a global company, Nortel Networks does business in more than 150 countries. More information about Nortel Networks can be found on the Web at:
www.nortelnetworks.com For more information, contact your Nortel Networks representative, or call 1-800-4 NORTEL or 1-800-466-7835 from anywhere in North America. *Nortel Networks, the Nortel Networks logo, BayStack, and the globemark design are trademarks of Nortel Networks. All other trademarks are the property of their owners. Copyright © 2003 Nortel Networks. All rights reserved. Information in this document is subject to change without notice. Nortel Networks assumes no responsibility for any errors that may appear in this document.
NN103809-032803