HP MSM Series User manual

Product overview
Working in unison with HP MSM and Unied Access Points, the IEEE 802.11ac-ready
HP MSM Controller Series delivers a high-performance networking solution. The
enhanced controller architecture scales to new WLAN standards without requiring
a controller replacement. The MSM controllers provide advanced Radio Resource
Management (RRM), including client load balancing and interference mitigation.
The MSM wireless controllers also support a fast-roaming capability.
Wireless security is comprehensive with integrated wireless IDS and support for
internal and external Authentication, Authorization, and Accounting (AAA) servers; a
built-in stateful rewall; per-user VLAN mapping; and authentication.
A summary of the highlights of the MSM Controller Series:
• Ease of use, scalability, and redundancy
• Enhanced architecture for exible network design
• IEEE 802.11a/b/g/n AP and access device support
• Comprehensive WLAN security
• Appliance and blade form factors
Data sheet
HP MSM Controller Series

2
Data sheet | HP MSM Controller Series
Features and benets
Management
• Wi-Fi Clear Connect
Provides a system-wide approach to delivering WLAN reliability by proactively determining
and adjusting to changing RF conditions; optimizes WLAN performance by detecting
interference from Wi-Fi and non-Wi-Fi sources—by using spectrum analysis capabilities
built into the specic access points (refer to the HP Access Point—Controller compatibility
matrix), identifying rogue activity and making decisions at a system-wide level.
• Advanced radio resource management
– Automatic radio power adjustments
Include real-time power adjustments based on changing environmental conditions and
signal coverage adjustment
– Automatic radio channel
Provides intelligent channel switching and real-time interference detection
– Intelligent client load balancing
Determines the number of clients across neighboring APs and adjusts client allocation
to balance the load
– Airtime fairness
Helps ensure equal RF transmission time for wireless clients
• Spectrum analysis
– Power/frequency spectrum analysis
Measures noise from IEEE 802.11 remote sources
– Signal detection/classication
Identies source of RF interference; for example, Bluetooth, cordless phones, and
microwave ovens
– Evaluation of channel quality
Helps detect severe channel degradation and improves the reporting of poor
RF performance
• Automated work ows
– Initial controller settings
Denes basic operational settings for the controller; for example, network connections,
security settings, and system time
– Wireless network for employees
Enables setup of a new wireless network for employees; for example, network and security
settings, and basic voice and video settings
– Wireless network for guests
Provides wireless access for guest users; for example, network and security settings specic
to guest access
• Support for environments using Bonjour services
–Gateway
Allows discovery of Bonjour services located in a dierent layer-3 network
–HP Zerocast
Eliminates Bonjour multicast trac from the WLAN enabling scalable deployment of Apple
devices with no performance impact on the Wi-Fi network
–Access control
Enables lters to be applied inbound and outbound (on the AP) to SSIDs, groups of or specic APs.
User based ltering can block Bonjour trac until the user is authenticated

3
Data sheet | HP MSM Controller Series
• Remote conguration and management
Are available through a secure Web browser, command-line interface (console port or SSH),
SOAP, or SNMP
• Management interface control
Allows interfaces to be enabled or disabled depending on security preferences
• Management VLAN
Segments trac to and from management interfaces, including CLI, Web browser interface,
and SNMP
• RADIUS accounting support
Separates RADIUS accounting server support per SSID; and provides detailed session, usage,
and billing information for each client activity
• Logging
Provides local and remote logging of events via SNMP (v2c and v3) and syslog; and provides
log throttling and log ltering to reduce the number of log events generated
• Controller networking
Includes IEEE 802.1D-compliant bridging and bridge MIB (RFC 4188), which is supported only
on a primary bridge interface; stateful rewall; PPPoE client (RFC 2516); ICMP (RFC 792);
IEEE 802.1Q VLAN tagging; NAT (RFC 1631); CIDR (RFC 1519); L2TP and PPTP servers for
wireless clients; VPN client, which establishes PPTP or IPSec tunnels to other devices; and
IGMP snooping (IGMP proxy v1 and v2), which is supported on the wireless interfaces of APs
• DHCP support
Includes RFC 2131 and RFC 3046 (DHCP relay option 82) for server and built-in DHCP client
for client
• Band steering
Redirects 5 GHz-capable clients automatically to the less-congested 5 GHz spectrum
• Controller management
Provides a secure Web browser (Secure Sockets Layer [SSL] and VPN), command-line interface,
SOAP, SNMP v2c and v3, MIB-II with traps, RADIUS Authentication Client MIB (RFC 2618), and
RIPv2 MIB extension (RFC 1724); implements scheduled conguration and rmware upgrades
from a central server; oers per-user activity records by time used or data transferred; and
supports remote syslog
• HP Intelligent Management Center (IMC) and Wireless Services Manager Software
Provide centralized management for discovery, logging, status, and conguration management
• Unied network visibility
Provides visibility between a wired and wireless network, using the IEEE 802.1AB Link Layer
Discovery Protocol (LLDP) and sFlow
• Diagnostics
Records association, authentication, and DHCP events in client event log; includes a packet
capture tool for Ethernet and IEEE 802.11 interfaces (PCAP format), a wireless client data rate
matrix, and a client status page; complete session logging provides detailed information for
problem identication and resolution

4
Data sheet | HP MSM Controller Series
Firewall
• Stateful rewall
Enforces rewall policies to control trac and lter access to network services; maintains
session information for every connection passing through it, enabling the rewall to control
packets based on existing sessions
• NAT/PAT
Leverages a choice of dynamic partial address translation (PAT) or static network address
translation (NAT) preserves a network’s IP address pool or conceals the private address of
network resources such as Web servers, which are made accessible to users of a guest or
public wireless LAN
• Authenticated network access
Authenticates users with an internal or external RADIUS server or Microsoft® Active Directory
before allowing full network connectivity
Quality of Service (QoS)
• Rate limiting
Supports per-wireless client, ingress-enforced maximums and per-wireless client, per-queue
guaranteed minimums
• Centralized trac
Layer 2 and Layer 3 QoS settings are maintained when using the Mobility Trac Manager or
guest access
Mobility
• HP MSM solutions enhanced for businesses
Delivers services for a range of vertical markets, including healthcare, hospitality, education,
manufacturing, transportation, and service providers
• Powerful security capabilities
Enables robust identity- and role-based user account proles to use internal or external
AAA services
• Solutions that cover the most important WLAN applications
Deliver rich application support, including guest access, location-based services, Voice over
Wi-Fi (VoW), hotspot, surveillance, and secure point of sale
• Capacity that scales from small oce to large campus
Deploy wireless LANs (WLANs) eciently with the MSM720 controller (which supports 10 to 40 APs)
and the MSM760, MSM765 zl, and MSM775 zl controllers (which control 40 to 200 APs)
• Premium mobility scalability features
– Virtual Controller
Managed by a single IP address; the MSM76x and MSM775 zl each support a team of
up to 800 APs and ve controllers and the MSM720 a team of up to 40 APs across two
controllers (a team requires the same controller type)
– N+1 redundancy
Teaming provides N+1 redundancy
– Seamless failover
APs can failover without rebooting, preserving mobility services when client trac is bridged
locally at the AP
–64 VSC proles
Allows up to 64 dened proles

5
Data sheet | HP MSM Controller Series
• Mobility Trac Manager
Provides exible and multiple network distribution schemes address a range of business
needs; policies for user network and security proles are consistently applied and enforced;
wireless trac can be directed anywhere in the network as required; enterprise businesses
can easily migrate to the MSM mobility solution, preserving prior network designs
• Controller client access control
Provides an SSL-protected universal access method, MAC address authentication, and
IEEE 802.1X authentication; Web proxy server; support for a centralized portal; AAA security;
WPA and WPA2 encryption; client-xed IP address spoong; per-site and per-user access
lists; white-list and black-list support; and bandwidth limiting per user, per VLAN, or per
VSC; and concurrent users (250 for the MSM720 and 2,000 for the MSM760, MSM765 zl,
and MSM775 zl controllers)
• Simplied management with central control
Reduces the time and complexity of managing a wireless network; the solution controls up to
hundreds of APs (depending on the controller) from a single management interface and helps
ensure that a consistent set of services is delivered throughout the wireless network; and the
controllers push authentication, encryption, QoS enforcement, and access policies to the APs,
delivering intelligence to the edge of mobile networks
• Services
Provides standard L2 roaming and VoWLAN support on all controllers, advanced fast roaming on
mobility controllers, plug-and-play AP management, as well as public and guest Internet access
• Advanced fast roaming (requires a mobility controller or upgrade)
Provides WPA2 opportunistic key caching through controller support as well as inter/intra-subnet
roaming and seamless roaming (less than 50 ms roaming delay) support for VoW deployments
Security
• Integrated IDS support (requires the premium mobility version)
– Automated AP and client classication
Reduces manual eort (the administrator can override AP classication)
– Comprehensive detection capabilities
Detects a wide range of attacks
– Flexible event reporting
Enables conguration that determines which events will result in notications
– Location tracking capabilities
Helps identify the location of a rogue device
– Flexible deployment models
Supports time slicing or dedicating a radio to detect full time

6
Data sheet | HP MSM Controller Series
• SSH
Encrypts all transmitted data for secure remote CLI access over IP networks
• SSL
Encrypts all HTTP trac, allowing secure access to the browser-based management GUI in
the switch
• IEEE 802.1X, Active Directory, and RADIUS network logins
Control wireless network access for authentication and accountability, using the IEEE 802.1X,
Microsoft Active Directory, and RADIUS
• RADIUS-based MAC authentication
Authenticates a wireless client with a RADIUS server, based on the MAC address of the client;
this is useful for clients with minimal or no user interface
• Web-based authentication
Provides a Web browser-based environment to authenticate clients that may not support the
IEEE 802.1X supplicant
• IEEE 802.1X supplicant on MSM APs
Helps prevent deployment of rogue networking equipment
• Secure management access
Encrypts all access methods (CLI, GUI, or MIB) securely through SSH v2c, SSL, and/or SNMPv3
Policy management
• Standards-based authentication support for Microsoft Active Directory and IEEE 802.1X
Integrates seamlessly into existing authentication services or uses the built-in database
• Integration with HP IMC Network Management software
Helps ensure consistent policy enforcement across wired and wireless networks
Connectivity
• 10GbE connections to the switch fabric (the MSM765 zl and MSM775 zl premium mobility
controllers only)
Leverages two 10GbE wire-speed internal connections to help ensure that the network
connections from the application to the switch backplane do not limit application performance
• IPv6 wireless client trac forwarding
Is supported for L2 and L3 mobility (MTM) and for client trac directly bridged at the APs
• IEEE 802.3ad link-aggregation control protocol (LACP) and HP port trunking
(the MSM720 controller only)
Support up to six ports bonded via LACP; and facilitates manually congured trunks between
an HP switch and the controller

7
Data sheet | HP MSM Controller Series
Performance
• High-performance processor system
– MSM720 controllers
Freescale Dual Core 800 MHz P1020 Processor, 256 KB cache, and 1 GB DDR3 memory
– MSM760 controllers
Intel® Core™ 2 Duo Processor E6400, 2.13 GHz, and 2 MB cache
– MSM765 zl controller
Intel Core 2 Duo Processor T7500, 2.2 GHz, and 4 MB cache
– MSM775 zl controller
Intel® Ivy Bridge Dual Core CPU Core i3-3120ME, 2.4 GHz, and 3 MB cache
• Memory subsystems
– MSM720 controllers
1 GB of DDR3 memory
– MSM760 controllers
2 GB of DDR2 memory
– MSM765 zl controllers
4 GB of DDR2 memory
– MSM775 zl controllers
4 GB ECC DDR3-1333 SO-DIMM
• Disk drive (MSM76x models)
Enables rapid data reads/writes via the 250 GB SATA II 7200 rpm hard disk drive, providing
improved application performance
• Solid state drive (MSM775 zl model)
Enables rapid data reads/writes via the 32 GB SATA solid state drive (SSD), providing improved
application performance
Additional information
• TAA versions for the MSM720 controller
For U.S.-government-manufactured sales requirements, order the TAA MSM720 controller
models; and for all other AMS and WW orders, use WW models
• Licensing model for guest user access (v5.7 and later)
The full number of supported guest access user sessions is enabled with the base-level
controller models and is no longer tied to the AP upgrade license; for example, the base
MSM720 (access and premium mobility) controllers will now support 250 concurrent guest
access user sessions and the MSM76x base controllers will now support 2,000 guest access
user sessions without requiring additional AP license upgrades
• 10-AP license upgrade option
This can be used on the MSM720, MSM76x, and MSM775 zl products on all supported
rmware releases

8
Data sheet | HP MSM Controller Series
• Licensing model for the MSM317 access device (v5.7 and later)
No additional AP license is required for the MSM317; non-MSM317 devices are subject to AP
licensing; maximum wireless device limits per controller and team are unchanged, and all devices
count toward these maximums; for example, an MSM760 could manage 200 MSM317 devices
with no additional AP license, 40 APs and 160 MSM317 devices with no additional AP license;
or 80 APs and 120 MSM317 devices with an additional 40-AP license
• RFC and AP support
For a list of RFCs and other industry standards supported by the MSM solution, refer to the
“mobility products specication sheet,” which can be accessed at h17007.www1.hp.com/docs/
mobility/4AA3-3883ENW.pdf. For access point support, refer to the HP Access Point—Controller
Compatibility Matrix
Warranty and support
• Lifetime Warranty 2.0—5y HDD
Advance hardware replacement for as long as you own the MSM720 and MSM765 zl
controllers, with the exception of the hard disk drive in the MSM765 zl controller (which comes
with a 5-year warranty); and next-business-day delivery (available in most countries)1
• Lifetime Warranty 2.0
Advance hardware replacement for as long as you own the MSM775 zl controller with
next-business-day delivery (available in most countries)2
• Electronic and telephone support (for Lifetime Warranty 2.0)
Limited 24x7 telephone support is provided by HP for the rst three years; limited electronic and
business hours telephone support is provided by HP for the entire warranty period; to reach our
support centers, visit hp.com/networking/contact-support; for details on the duration of support
provided with your product purchase, visit hp.com/networking/warrantysummary
• 1-year Warranty 2.0
Advance hardware replacement for the MSM760 controller with next-business-day delivery
(available in most countries)
• Electronic and telephone support (for Warranty 2.0)
Limited electronic and 24x7 telephone support is provided by HP for the entire warranty
period; to reach our support centers, visit hp.com/networking/contact-support; for details
on the duration of support provided with your product purchase, visit hp.com/networking/
warrantysummary
• Software releases and warranty
The MSM720 and MSM775 zl controllers include all oered software releases for as long as you
own the products; the MSM765 zl and MSM760 controllers include one year of bug xes; for
details on the software releases available with your product purchase, visit hp.com/networking/
warrantysummary; to nd software for your product, visit hp.com/networking/support
1
HP warranty includes repair or replacement of
hardware for as long as you own the product,
with next-business-day advance replacement
(available in most countries). The disk drives
included—with the HP AllianceOne Advanced
Services and Services zl Modules, HP Threat
Management Services zl Module, HP AllianceOne
Extended zl Module with Riverbed Steelhead,
HP MSM765 zl Mobility Controller, and
HP Survivable Branch Communication zl Module
powered by Microsoft Lync—each have a
ve-year hardware warranty. For details, refer
to the software license and hardware warranty
statements at hp.com/networking/warranty.
2
HP warranty includes repair or replacement of
hardware for as long as you own the product,
with next-business-day advance replacement
(available in most countries). For details, refer
to the software license and hardware warranty
statements at hp.com/networking/warranty.

9
Data sheet | HP MSM Controller Series
HP MSM Controller Series
Specications
HP MSM720 Premium Mobility
Controller (WW) (J9694A)
HP MSM720 Access Controller (WW)
(J9693A)
HP MSM720 TAA Access Controller
(J9695A)
I/O ports and slots 4 RJ-45 autosensing 10/100/1000
ports; Duplex: 10BASE-T/100BASE-TX:
half or full; 1000BASE-T: full only (IEEE
802.3 Type 10BASE-T, IEEE 802.3u
Type 100BASE-TX, IEEE 802.3ab Type
1000BASE-T)
2 RJ-45 dual-personality 10/100/1000
ports (IEEE 802.3 Type 10BASE-T, IEEE
802.3u Type 100BASE-TX, IEEE 802.3ab
Type 1000BASE-T)
1 RJ-45 serial console port
4 RJ-45 autosensing 10/100/1000
ports; Duplex: 10BASE-T/100BASE-TX:
half or full; 1000BASE-T: full only (IEEE
802.3 Type 10BASE-T, IEEE 802.3u
Type 100BASE-TX, IEEE 802.3ab Type
1000BASE-T)
2 RJ-45 dual-personality 10/100/1000
ports (IEEE 802.3 Type 10BASE-T, IEEE
802.3u Type 100BASE-TX, IEEE 802.3ab
Type 1000BASE-T)
1 RJ-45 serial console port
4 RJ-45 autosensing 10/100/1000
ports; Duplex: 10BASE-T/100BASE-TX:
half or full; 1000BASE-T: full only (IEEE
802.3 Type 10BASE-T, IEEE 802.3u
Type 100BASE-TX, IEEE 802.3ab Type
1000BASE-T)
2 RJ-45 dual-personality 10/100/1000
ports (IEEE 802.3 Type 10BASE-T, IEEE
802.3u Type 100BASE-TX, IEEE 802.3ab
Type 1000BASE-T)
1 RJ-45 serial console port
Physical characteristics
Weight
6.28(w) x 10(d) x 1.75(h) in. (15.95 x
25.4 x 4.45 cm) 3.62 lb (1.64 kg)
6.28(w) x 10(d) x 1.75(h) in. (15.95 x
25.4 x 4.45 cm) 3.62 lb (1.64 kg)
6.28(w) x 10(d) x 1.75(h) in. (15.95 x
25.4 x 4.45 cm) 3.62 lb (1.64 kg)
Mounting and enclosure Supports the mounting options of the
2520-8 PoE switch, including EIA-standard
19 in. Telco rack or equipment cabinet
(rack-mounting kit included); horizontal
surface or wall mounting
Supports the mounting options of the
2520-8 PoE switch, including EIA-standard
19 in. Telco rack or equipment cabinet
(rack-mounting kit included); horizontal
surface or wall mounting
MSM720 controller supports the mounting
options of the 2520-8 port, including
EIA-standard 19 in. Telco rack or equipment
cabinet (rack-mounting kit included);
horizontal surface or wall mounting
Performance
100 Mb Latency
1000 Mb Latency
Throughput
< 20.4 µs (LIFO 64-byte packets)
< 6.3 µs (LIFO 64-byte packets)
Up to 8.9 million pps
< 20.4 µs (LIFO 64-byte packets)
< 6.3 µs (LIFO 64-byte packets)
Up to 8.9 million pps
Environment
Operating temperature
Operating relative humidity
Nonoperating/Storage
temperature
Nonoperating/Storage relative
humidity
41°F to 113°F (5°C to 45°C)
15% to 95% @ 104°F (40°C)
-40°F to 158°F (-40°C to 70°C)
15% to 95% @ 149°F (65°C)
41°F to 113°F (5°C to 45°C)
15% to 95% @ 104°F (40°C)
-40°F to 158°F (-40°C to 70°C)
15% to 95% @ 149°F (65°C)
41°F to 113°F (5°C to 45°C)
15% to 95% @ 104°F (40°C)
-40°F to 158°F (-40°C to 70°C)
15% to 95% @ 149°F (65°C)
Electrical characteristics
Frequency
Maximum heat dissipation
AC voltage
Current
Maximum power rating
50/60 Hz
70 BTU/hr (73.85 kJ/hr)
100–240 VAC
.2/.1 A
20 W
50/60 Hz
70 BTU/hr (73.85 kJ/hr)
100–240 VAC
.2/.1 A
20 W
50/60 Hz
100–240 VAC
Safety UL 60950-1; IEC 60950-1;
EN 60950-1; CAN/CSA-C22.2
No. 60950-1
UL 60950-1; IEC 60950-1;
EN 60950-1; CAN/CSA-C22.2
No. 60950-1
UL 60950-1; IEC 60950-1;
EN 60950-1; CAN/CSA-C22.2
No. 60950-1
Emissions FCC part 15 Class A; EN 55022 Class A;
CISPR 22 Class A; ICES-003
FCC part 15 Class A; EN 55022 Class A;
CISPR 22 Class A; ICES-003
FCC part 15 Class A; EN 55022 Class A;
CISPR 22 Class A; ICES-003

10
Data sheet | HP MSM Controller Series
HP MSM Controller Series (continued)
Specications (continued)
HP MSM720 Premium Mobility
Controller (WW) (J9694A)
HP MSM720 Access Controller (WW)
(J9693A)
HP MSM720 TAA Access Controller
(J9695A)
Features Supported:
– IEEE 802.11 n/a/b/g APs and/or
access devices
– 10 to 40 APs and/or access devices
(in increments of 10)
– IEEE 802.3ad Link Aggregation
Control Protocol (LACP)
– 250 simultaneous guest access users
Included services:
– Plug-and-play AP management and
WLAN management
– Guest access
– Captive portal
– PCI DSS compliance for wireless
PoS trac
– Support for Real-Time Location
Services (RTLS)
– Advanced fast roaming with
VoWLAN support
– Mobility Trac Manager (MTM)
– Support for up to 64 VSC proles
– Unied policy enforcement and
network visibility
– Virtual controller (up to two MSM720
controllers and 40 APs with resiliency)
Supported:
– IEEE 802.11 n/a/b/g APs and/or
access devices
– 10 to 40 APs and/or access devices
(in increments of 10)
– IEEE 802.3ad Link Aggregation
Control Protocol (LACP)
– 250 simultaneous guest access users
Included services:
– Plug-and-play AP management and
WLAN management
– Guest access
– Captive portal
– PCI DSS compliance for wireless
PoS trac
– Support for Real-Time Location
Services (RTLS)
– Standard Layer 2 roaming with
VoWLAN support
– Support for up to 16 VSC proles
– Unied policy enforcement and
network visibility
Supported:
– IEEE 802.11 n/a/b/g APs and/or
access devices
– 10 to 40 APs and/or access devices
(in increments of 10)
– IEEE 802.3ad Link Aggregation
Control Protocol (LACP)
– 250 simultaneous guest access users
Included services:
– Plug-and-play AP management and
WLAN management
– Guest access
– Captive portal
– PCI DSS compliant for wireless
PoS trac
– Support for Real-Time Location
Services (RTLS)
– Standard Layer 2 roaming with
VoWLAN support
– Support for up to 16 VSC proles
– Unied policy enforcement and
network visibility
Notes Latency values refer to client trac
bridged locally at the AP.
Not all services are supported with the
Virtual Controller feature. Please refer to
the user documentation for more detail.
For U.S. government manufactured sales
requirements, order the TAA MSM720
controller models. For all other AMS and
WW orders, use WW models.
Latency values refer to client trac
bridged locally at the AP.
For U.S. government manufactured sales
requirements, order the TAA MSM720
controller models. For all other AMS and
WW orders, use WW models.
Latency values refer to client trac
bridged locally at the AP.
For U.S. government manufactured sales
requirements, order the TAA MSM720
controller models. For all other AMS and
WW orders, use WW models.
Services Refer to the HP website at hp.com/
networking/services for details on the
service-level descriptions and product
numbers. For details about services
and response times in your area, please
contact your local HP sales oce.
Refer to the HP website at hp.com/
networking/services for details on the
service-level descriptions and product
numbers. For details about services
and response times in your area, please
contact your local HP sales oce.
Refer to the HP website at hp.com/
networking/services for details on the
service-level descriptions and product
numbers. For details about services
and response times in your area, please
contact your local HP sales oce.