Alcatel-Lucent OmniAccess 6000 User manual

OmniAccess 6000
W R E L E S S L A N S W T C H
The Alcatel-Lucent OmniAccess™ 6000 (OAW-6000) Wireless LAN Switch is a high performance, fully feature mo ular
WLAN switch able to aggregate up to 2,048 campus connecte access points (APs). The OAW-6000 provi es a true
user-centric network experience, elivering follow-me connectivity, i entity-base access, an application continuity services.
The OAW-6000 offers a scalable esign that supports large eployments an can be easily implemente as an overlay
without any isruption to the existing wire network.
A vance voice-over-WLAN features such as Call A mission Control (CAC), voice-aware RF management an strict
over-the-air quality of service (QoS) allow the OAW-6000 to eliver mobile VoIP capabilities. The OAW-6000 is manage
via the integrate management capability of the Alcatel-Lucent OmniAccess Wireless Operating System or the
Alcatel-Lucent OmniVista™ Mobility Manager.
B E N E F T SF E A T U R E S
• High capacity and high performance
for large deployments
• Scalable design
• Mobile Vo P
• ntegrated network management
• User-centric security
• Secure network environment
• A scalable design that supports up
to 32,768 users with follow-me
connectivity, identity based access
and application continuity
• Does not make existing deployments
obsolete since it is implemented as
an overlay without disturbing the
existing wired network
• mproves voice quality through support
of Call Admission Control, voice-aware
RF management and strict over-the-air
quality of service (QoS)
• Eliminates need for multiple network
management applications via
OmniAccess Wireless Operating System
and OmniVista Mobility Manager
• Prevents unauthenticated users and
unsafe endpoints from access the
corporate wireless network while
safely supporting guest users
• Eliminates need for additional
VPN/firewall devices

T E C H N C A L S P E C F C A T O N S
Performan e and apa ity
• Campus-connected APs: Up to 2,048
• Remote APs: Up to 8,192
• Users: Up to 32,768
• MAC addresses: Up to 256,000
• VLAN P interfaces: 512
• Fast Ethernet ports (10/100): Up to 72
• Gigabit Ethernet ports (GB C or SFP): Up to 40
• 10 Gigabit Ethernet ports (XFP): Up to 8
• Active firewall sessions: Up to 2,097,200
• Concurrent PSec tunnels: Up to 32,768
• Firewall throughput: Up to 80 Gbps
• Encrypted throughput (3DES): Up to 32 Gbps
• Encrypted throughput (AES-CCM): Up to 16 Gbps
Wireless LAN se urity and
ontrol features
• 802.11i security (WFA-certified WPA2 and WPA)
• 802.1X user and machine authentication
• EAP-PEAP, EAP-TLS, EAP-TTLS support
• Centralized AES-CCM, TK P and WEP encryption
• 802.11i PMK caching for fast roaming applications
• EAP offload for AAA server scalability and
survivability
• Stateful 802.1X authentication for standalone APs
• MAC address, SS D and location-based
authentication
• Multi-SS D support for operation of multiple WLANs
• SS D-based RAD US server selection
• Secure AP control and management over
PSec or GRE
• CAPWAP-compatible and upgradeable
• Distributed WLAN mode for remote AP deployments
• Simultaneous centralized and distributed
WLAN support
Identity-based se urity features
• Captive portal, 802.1X and MAC address
authentication
• Username, P address, MAC address and encryption
key binding for strong network identity creation
• Per-packet identity verification to prevent
impersonation
• RAD US and LDAP-based AAA server support
• nternal user database for AAA server failover
protection
• Role-based authorization for eliminating
excess privilege
• Robust policy enforcement with stateful
packet inspection
• Per-user session accounting for usage auditing
• Web-based guest enrollment
• Configurable acceptable use policies for guest
access
• XML-based AP for external captive portal
integration
• xSec option for wired LAN authentication and
encryption(802.1X authentication, 256-bit
AES-CBC encryption)
Convergen e features
• Voice and data on a single SS D for
converged devices
• Flow-based QoS using voice flow classification (VFC)
• Alcatel-Lucent NOE, S P, Spectralink SVP, SCCP
and Vocera ALGs
• Strict priority queuing for over-the-air QoS
• 802.11e support – WMM, U-APSD and T-SPEC
• QoS policing for preventing network abuse
via 802.11e
• DiffServ marking and 802.1p support for
network QoS
• On-hook and off-hook Vo P client detection
• Vo P call admission control (CAC) using VFC
• Call reservation thresholds for mobile Vo P calls
• Voice-aware RF management for ensuring
voice quality
• Fast roaming support for ensuring mobile
voice quality
• S P early media and ringing tone generation
(RFC 3960)
• Per-user and per-role rate limits (bandwidth
contracts)
Adaptive radio management
(ARM) features
• Automatic channel and power settings for
thin APs
• Simultaneous air monitoring and end user services
• Self-healing coverage based on dynamic
RF conditions
• Dense deployment options for capacity optimization
• AP load balancing based on number of users
• AP load balancing based on bandwidth utilization
• Coverage hole and RF interference detection
• 802.11h support for radar detection and avoidance
• Automated location detection for active RF D tags
• Built-in XML-based Location AP for RF D
applications
Wireless intrusion prote tion
features
• ntegration with WLAN infrastructure
• Simultaneous or dedicated air monitoring
capabilities
• Rogue AP detection and built-in location
visualization
• Automatic rogue, interfering and valid AP
classification
• Over-the-air and over-the-wire rogue AP
containment
• Adhoc WLAN network detection and containment
• Windows client bridging and wireless bridge
detection
• Denial of service attack protection for APs
and stations
• Misconfigured standalone AP detection and
containment
• Third party AP performance monitoring and
troubleshooting
• Flexible attack signature creation for new
WLAN attacks
• EAP handshake and sequence number analysis
• Valid AP impersonation detection
• Frame floods, Fake AP and Airjack attack detection
• ASLEAP, death broadcast, null probe response
detection
• Netstumbler-based network probe detection
Stateful firewall features
• Stateful packet inspection tied to user identity
or ports
• Location and time-of-day aware policy definition
• 802.11 station awareness for WLAN firewalling
• Over-the-air policy enforcement and station
blacklisting
• Session mirroring and per-packet logs for
forensic analysis
2Alcatel-Lucent OmniAccess 6000
The OAW-6000 offers a best in class, user-centric security framework to authenticate wireless users, enforce role-base
access control policies an quarantine unsafe en points from accessing the corporate wireless network. Guest users can
be easily an safely supporte with the built-in captive portal server an a vance network services.
The OAW-6000 can create a secure networking environment without requiring a itional VPN/firewall evices using
integrate site-to-site VPN an NAT capabilities, split-tunneling an an ICSA-certifie stateful firewall. Site-to-site VPN
support can be integrate with all lea ing VPN concentrators to provi e seamless integration into existing corporate VPNs.

3Alcatel-Lucent OmniAccess 6000
T E C H N C A L S P E C F C A T O N S
• Detailed firewall traffic logs for usage auditing
• Application Layer Gateway (ALG) support for
NOE, S P, SCCP, RTSP, Vocera, FTP, TFTP, PPTP
• Source and destination Network Address
Translation (NAT)
• Dedicated flow processing hardware for high
performance
• TCP, CMP denial of service attack detection
and protection
• Policy-based forwarding into GRE tunnels for
guest traffic
• External service interface for third-party security
integration for inline anti-virus, anti-spam and
content filtering apps
• Heath checking and load balancing for
external services
VPN server features
• Site-to-site VPN support for branch office
deployments
• Site-to-site interoperability with third-party
VPN servers
• VPN server emulation for easy integration
into WLAN
• L2TP/ PSec VPN termination for Windows
VPN clients
• XAUTH/ PSec VPN termination for third-party clients
• PPTP VPN termination for legacy VPN integration
• RAD US and LDAP server support for
VPN authentication
• PAP, CHAP, MS-CHAP and MS-CHAPv2
authentication
• Hardware encryption for DES, 3DES, AES, MPPE
• Secure point-to-point xSec tunnels for L2 VPNs
Networking features and
advan ed servi es
• L2 and L3 switching over-the-air and
over-the-wire
• VLAN pooling for easy, scalable network designs
• VLAN mobility for seamless L2 roaming
• Proxy mobile P and proxy DHCP for L3 roaming
• Built-in DHCP server and DHCP relay
• VRRP-based N+1 WLAN switch redundancy (L2)
• AP provisioning-based N+1 WLAN switch
redundancy (L3)
• Etherchannel support for link redundancy
• 802.1d Spanning Tree Protocol (STP)
• 802.1Q VLAN tags
WLAN swit h-based
management features
• RF Planning and AP Deployment Toolkit
• Centralized AP provisioning and image management
• Live coverage visualization with RF heat maps
• Detailed statistics visualization for monitoring
• Remote packet capture for RF troubleshooting
• nteroperable with Ethereal and Airopeek analyzers
• Multi-WLAN switch configuration management
• Location visualization and device tracking
• System-wide event collection and reporting
Administration features
• Web-based user interface access over HTTP
and HTTPS
• Quickstart screens for easy WLAN switch
configuration
• CL access using SSH, Telnet and console port
• Role-based access control for restricted
admin access
• Authenticated access via RAD US, LDAP or
nternal DB
• SNMPv3 and SNMPv2 support for WLAN
switch monitoring
• Standard M Bs and private enterprise M Bs
• Detailed message logs with syslog event notification
Power supply options
• Power consumption: Max. 466 Watts per PSU
OAW-6000-PS200: AC power supplies deliver
200 W of power
• AC input voltage 90-132 VAC, 170-264 VAC
• AC input frequency 47-63 Hz
• AC input current 5 A @ 110 VAC
OAW-6000-PS400: AC power supplies deliver
400W of power
• AC input voltage 85-264 VAC, Auto-sensing
• AC input frequency 47-63 Hz
• AC input current 5 A @ 110 VAC
Operating spe ifi ations
and dimensions
• Operating temperature range: 0° to 40° C
• Storage temperature range: 10° to 70° C
• Humidity, non-condensing: 5 to 95%
• Height: 5.75˝ (146 mm)
• Width: 17.4˝ (444 mm)
• Depth: 12.5˝ (317.5 mm)
• Weight: 30 lbs. (unboxed)
Regulatory and safety
omplian e
• FCC part 15 Class A CE
• ndustry Canada Class A
• VCC Class A (Japan)
• EN 55022 Class A (C SPR 22 Class A), EN
61000-3
• EN 61000-4-2, EN 61000-4-3, EN 61000-4-4
• EN 61000-4-5, EN 61000-4- 6, EN 61000-4-8
• EN 61000-4-11, EN 55024, AS/NZS 3548
• UL 60950, EN60950
• CAN/CSA 22.2 #60950
• CE mark, cTUVus, GS, CB, C-tick, Anatel, NOM,
M C, QC

www.alcatel-luce t.com
Alcatel, Lucent, Alcatel-Lucent and the Alcatel-Lucent logo are trademarks of Alcatel-Lucent. All other
trademarks are the property of their respective owners. Alcatel-Lucent assumes no responsibility for
the accuracy of the information presented, which is subject to change without notice.
© 2007 Alcatel-Lucent. All rights reserved. P/N 031670-00 Rev. C 12/07
To learn more, contact your dedicated Alcatel-Lucent representative, authorized reseller, or sales agent.
You can also visit our Web site at www.alcatel-lucent.com.
This document is provided for planning purposes only and does not create, modify, or supplement
any warranties, which may be made by Alcatel-Lucent relating to the products and/or services described
herein. The publication of information contained in this document does not imply freedom from patent
or other protective rights of Alcatel-Lucent or other third parties.
ORDER NG NFORMAT ON
PART NUMBER DESCRIPTION
OAW-6000-PS2 Alcatel-Lucent OmniAccess 6000 chassis for non PoE configurations. ncludes one modular 4-Slot 19" chassis, one fan tray, two 200 watt
auto-sensing 110V/240V AC PSU, and one accessory kit.
OAW-6000-PS4 Alcatel-Lucent OmniAccess 6000 chassis for PoE configurations. ncludes one modular 4-slot 19" chassis, one fan tray, two 400 watt auto-sensing
110V/240V AC PSU, and one accessory kit.
OAW-SC-1-48 OmniAccess Supervisor Card with adaptive RF management and support for up to 48 access points. One OAW-6000 chassis can accommodate
one or two Supervisor Cards.
OAW-SC-1-128 OmniAccess Supervisor Card with adaptive RF management and support for up to 128 access points. One OAW-6000 chassis can accommodate
one or two Supervisor Cards.
OAW-SC-2-256 OmniAccess Supervisor Card with adaptive RF management and support for up to 256 access points. One OAW-6000 chassis can accommodate
one or two Supervisor Cards.
OAW-S3-C-2X10G OmniAccess Supervisor Card , 10x 1000BaseX (SFP), 2x 10GBaseX (XFP), bundled with license to support 128 AP. One OAW-6000 chassis can
accommodate up to four (4) Supervisor Card .
OAW-S3-0-2X10G OmniAccess Supervisor Card , 10x 1000BaseX (SFP), 2x 10GBaseX (XFP), (no AP license included). One OAW-6000 chassis can accommodate
up to four (4) Supervisor Card .
OAW-LC-2G OmniAccess 2GE Line Card with support for two GB C uplinks. GB C adapters shall be ordered separately.
OAW-LC-2G24F OmniAccess 2GE24F Line Card with support for 24 auto-sensing 10/100 interfaces and two GB C uplinks. GB C adapters shall be ordered separately.
OAW-LC-2G24FP OmniAccess 2GE24FP Line Card with support for 24 auto-sensing 10/100 interfaces with power-over-Ethernet (PoE) and two GB C uplinks.
GB C adapters shall be ordered separately. Requires an OAW-6000-PS4 chassis.
OAW-GBIC-T OmniAccess GB C nterface Adapter - T
OAW-GBIC-SX OmniAccess GB C nterface Adapter - SX
OAW-GBIC-LX OmniAccess GB C nterface Adapter - LX
OAW-XFP-SR OmniAccess Wireless XFP - 850nm serial pluggable XFP optic (LC), target range 300m over MMF
OAW-XFP-LR OmniAccess Wireless XFP - 1310nm serial pluggable XFP optic (LC) for up to 10km over SMF
OAW-SFP-TX OmniAccess Wireless SFP - 1000BaseT, RJ45
OAW-SFP-SX OmniAccess Wireless SFP - 1000BaseSX, LC Connector
OAW-SFP-LX OmniAccess Wireless SFP - 1000BaseLX, LC connector