
Designed exclusively for use with Aruba WLAN switching
systems, Aruba APs deliver a new model for building structured
wireless environments that deliver high performance, unparal-
leled security, plug-and-play installation and automated
management.
Unlike conventional APs, Aruba APs also function simultane-
ously as RF monitors and are designed to be managed as part of
a complete centralized wireless system. Each AP is controlled
by an Aruba WLAN switch.
THIN I S IN
Aruba access points are “thin” APs that provide 802.11a/b/g
user access but are not overburdened with processing-intensive
functions, such as wireless user authentication, link layer
encryption, VPN termination, and upper layer MAC services
better suited for a purpose-built processing system.
Moving these functions into a centrally-located Aruba WLAN
system gives administrators greater control over the entire
system, better scalability, performance and the ability to easily
make system-wide changes as standards and security scheme
change. Additional benefits include better support for roaming
and low-latency (sub 5 millisecond) handoffs between APs -
making the Aruba system ideal for handling delay-sensitive
applications such as voice over wireless.
UNPARALLELED SECURITY
Conventional WLAN systems decrypt wireless traffic at the AP,
store electronic keys derived from the requisite exchanges
performed between the client and the authentication server of
each AP. This poses serious security risks for large corporations
if an access point is lost, stolen or if a fake AP or man-in-the-
middle attack is launched.
Because Aruba’s APs are managed and controlled by Aruba Wi-
Fi switches, no critical configuration information, such as pass-
words, encryption keys or digital certificates, is stored on Aruba
APs. If lost or stolen, no sensitive information can be obtained.
Aruba eliminates unwanted latency and complexity associated
with having to “pre-authenticate” mobile clients (a new concept
introduced by 802.11i). Pre-authentication requires complex state
information to be exchanged between all possible APs to which
a client might roam. Because Aruba centralizes encryption and
authentication, all state information is managed at a single point
for the entire system.
ZERO C O N F I G U R AT I O N , PLUG-AND-PLAY DEPLOYMENT
Aruba APs are completely plug-and-play, requiring no manual
configuration. Aruba APs can be directly attached to any
existing Ethernet switch or IP router and across any subnet
boundry. Once connected, Aruba APs self-configure by
automatically building a secure IP (generic routing encapsulation
or GRE) tunnel to the Aruba WLAN switch. The Aruba switch
automatically configures each Aruba AP from a single point
based on the policies and configuration set by the administrator.
This dramatically simplifies operation and obviates the need for
configuring discrete VLANs for new and existing APs. All
mobility is handled centrally within the Aruba Wi-Fi switch.
RF M O N I TORING A N D WIRELESS I N T R U S I O N ANALYSIS
Aruba APs are capable of performing a variety of sophisticated
RF processing and monitoring functions that enhance the enter-
prise WLAN. By providing programmable packet capture, Aruba’s
APs provide wireless RMON capabilities letting administrators
quickly diagnose and troubleshoot remote wireless problems.
FEATU R E BENEFITS
Multi-purpose
functionality
• Provides user access with
simultaneous support for
802.11a, 802.11b and 802.11g
• Constant monitoring of the air
to protect against unwanted
wireless intrusions
• Immediate access to wireless
RMON stats
• 2.4 Ghz and 5 Ghz RF spectrum
Thin AP
• Enables all authentication,
security, roaming, mobility to be
performed by centralized
Wi-Fi switch
• Obviates need for AP VLANs
everywhere
• Lower cost
• Easy upgrades
• Enhanced security that can be
scaled for entire system at the
Wi-Fi switch
Plug and play
• Auto-configuration of L2/L3
networks
• Configuration-free deployment
• No logical or physically re-
configuration of existing
wired network
Programmable
• New features and capabilities,
such as the detection of new
byte patterns for the detection
of new attacks can be added
• Third-party plug-ins supported
802.3af PoE support
• 802.3af power as well as serial
(RS-232) over Ethernet can be
provided from any Aruba
Wi-Fi switch
• No additional cabling
Plenum rated
• Can be easily deployed in harsh
environments including the
space above dropped ceilings
Flexible deployment
options
• In the ceiling, wall mounted,
or on the desktop
Integral and detachable
antenna options
• Directional and omni-directional
dual-band high gain antenna for
indoor and outdoor applications
Antenna diversity
• Allow for best possible signal
processing
Remote packet
capture
• Dynamically captures Wi-Fi traffic
for remote troubleshooting
Comentarios a estos manuales