Home

Cisco Aironet 1100 802.11g/54Mbps Wireless Access Point incl.antenne

image

Contents

1. Enables centralized management of remote access points Facilitates standardization of network configuration Supports standards based security methods for interoperability Helps to ensure data privacy using the strongest security algorithm defined for WLANs Provides uncompromised performance Available on 802 11g version 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 10 of 20 Feature Cisco Wireless Security Suite Support Scalability Range of management and security options Configurable transmit power Availability Hot standby Load balancing Auto rate scaling Investment Protection 802 11g and 802 11b compliant 8 MB Flash memory for firmware Anti theft security slot and security hasp Simplified Deployment Flexible mounting orientations Integrated diversity dipole antennas Auto channel selection Benefit Provides award winning WLAN security features Defends against passive and active security attacks 802 1X and EAP based authentication leverages user access lists Supports RADIUS server for user login registry Includes TKIP and AES encryption enhancements Supports Wi Fi Protected Access WPA and Wi Fi Protected Access 2 WPA2 the Wi Fi Alliance specifications for interoperable standards based wireless LAN security Autonomous management and security features s
2. Cisco SWAN e Collection of Cisco IOS Software features enhance WLAN client mobility and simplify WLAN deployment and management e Supports radio management aggregation fast secure roaming client tracking and WAN link remote site survivability e Allows authenticated client devices to roam securely from one access point to another within or across subnets without any perceptible delay during reassociation e Supports latency sensitive applications such as VoIP ERP and Citrix e Allows the access point to act as a local RADIUS server to IEEE 802 1X authenticate wireless clients when the AAA server is not available e Provides remote site survivability and backup authentication services during WAN link or server failure 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 9 of 20 Feature Access Point Scanning Only Mode Client Tracking Client Address Resolution Protocol ARP Caching RADIUS Server per SSID WPA Migration Mode Manageability Support for Cisco Discovery Protocol SNMP standard MIB I and MIB II Cisco CLI supports Telnet FTP and TFTP Secure 40 bit 128 bit WEP Advanced Encryption Standard AES Benefit Cisco SWAN WDS feature that allows the Cisco Aironet access point to be set in a scanning only mode where it scans the RF environment for rogue access points and unassociated 8
3. Delay sensitive traffic such as voice and video can be prioritized over data traffic for improved user experience and optimal network utilization Software and radio firmware upgrades allow upgrades to future QoS standards such as 802 1 le Supporting the voice prioritization schemes for 802 11b mobile phones the Aironet 1100 Series further enables quality voice over wireless LAN solutions The Cisco Aironet 1100 Series also supports Wi Fi Multimedia WMM and pre standard IEEE 802 1 le WMM improves the user experience for audio video and voice applications over a Wi Fi wireless connection WMM is a subset of the IEEE 802 1 1e quality of service QoS draft standard supporting QoS prioritized media access via the Enhanced Distributed Channel Access EDCA method Optional elements of the WMM specification including Call Admission Control using traffic specifications TSPEC are not supported at this time CISCO STRUCTURED WIRELESS AWARE NETWORK The Cisco Aironet 1100 Series is a key component of the Cisco Structured Wireless Aware Network SWAN Cisco SWAN is a framework to integrate and extend wired and wireless networks to deliver the lowest possible total cost of ownership for companies deploying WLANs Cisco SWAN extends wireless awareness into important elements of the network infrastructure providing the same level of security scalability reliability ease of deployment and management for wireless LANs that organizations have
4. common across Cisco products Web browser based GUI Express Set Up consolidates key configuration tasks in single view Dynamic Host Configuration Automatically obtains an IP address from DHCP server Protocol DHCP client Figure 8 The Cisco Aironet 1100 Series can be powered over Ethernet with the optional inline power injector Power Strip Emi Universal l E a Power Supply Wiring Closet Up to 300 ft ae 000000 Aironet 1100 Series Cisco Aironet Switch Access Point Power Injector Without Inline Power Figure 9 The Cisco Aironet 1100 Series can use Cisco Catalyst powered switches for power over Ethernet See Table 3 for specific details Wiring Closet i Up to 300 ft l P un Aironet 1100 Series p Switch with Inline Power Access Point Cisco Catalyst 3750 Figure 10 A Cisco Catalyst Inline Power Patch Panel can be used to power the Cisco Aironet 1100 Series over Ethernet Wiring Closet Up to 300 ft ra F o Aironet 1100 Series Inline Power Patch Panel Switch Access Point Cisco Catalyst Without Inline Power Inline Power Patch Panel 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 12 of 20 Table 2 Product Specifications Item Part Number Data Rates Supported Network Standard Uplink Frequency Band Network Architecture Type
5. 0 ft 27 m 54 Mbps 95 ft 29 m 48 Mbps 100 ft 30 m 36 Mbps 140 ft 42 m 24 Mbps 180 ft 54 m 18 Mbps 210 ft 64 m 12 Mbps 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 15 of 20 Item Specification 220 ft 67 m 11 Mbps 250 ft 76 m 9 Mbps e 300 ft 91 m 6 Mbps 310 ft 94 m 5 5 Mbps e 350 ft 107 m 2 Mbps 410 ft 125 m 1 Mbps Outdoor e 110 ft 34 m 54 Mbps e 200 ft 60 m 48 Mbps e 225 ft 69 m 36 Mbps e 325 ft 100 m 24 Mbps 400 ft 122 m 18 Mbps 475 ft 145 m 12 Mbps 490 ft 150 m 11 Mbps e 550 ft 168 m 9 Mbps 650 ft 198 m 6 Mbps e 660 ft 201 m 5 5 Mbps e 690 ft 210 m 2 Mbps e 700 ft 213 m 1Mbps Ranges and actual throughput vary based upon numerous environmental factors so individual performance may differ Compliance Standards e Safety UL1950 CSA 22 2 No 950 95 IEC 60950 EN 60950 e Radio Approvals FCC Part 15 247 RSS 210 Canada EN 300 328 Europe ARIB STD 33 Japan 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 16 of 20 Item SNMP Compliance Antenna Security Architecture Client Authentication and Encryption Status LEDs Software and Device Management
6. 02 11 clients In this WLAN IDS mode the access point does not transmit beacons respond to probe requests or support client device association Cisco SWAN WDS feature that expands the radio management information gathered from Cisco Aironet access points to include near real time tracking information on client authentication and roaming events via the CiscoWorks WLSE Allows Cisco Aironet access points to respond to Address Resolution Protocol ARP requests on behalf of IEEE 802 11 Cisco Aironet Cisco Compatible Extensions and most Wi Fi Certified wireless client devices Enables IP address resolution without requiring the wireless client device to leave power save or idle modes Extends client device battery life Allows specification of RADIUS servers on a per SSID basis by leveraging access point multiple SSID capabilities Beneficial for multi tenant deployments such as airports where each tenant desires a separate RADIUS server for user authentication Enables both WPA and non WPA clients to associate to an access point using the same SSID Interoperable with Simple Network Management Protocol SNMP compliant network management systems such as HP OpenView and CA Unicenter Manageable by many CiscoWorks applications in Resource Manager Essentials Inventory Manager Software Image Manager Availability Manager Campus Manager Topology Services and CiscoView Provides interface familiar to large community of network managers
7. 9 Mbps QPSK 12 and 18 Mbps 16 QAM 24 and 36 Mbps 64 QAM 48 and 54 Mbps e DSS DBPSK 1 Mbps DQPSK 2 Mbps CCK 5 5 and 11 Mbps Operating Channels 802 11b ETSI 13 Israel 4 Americas 11 TELEC Japan 14 e 802 11g ETSI 13 Americas 11 TELEC Japan CCK 14 OFDM 13 Nonoverlapping Channels Three Receive Sensitivity 802 11b 1 Mbps 94 dBm 2 Mbps 91 dBm 5 5 Mbps 89 dBm 11 Mbps 85 dBm e 802 11g 1 Mbps 95 dBm 2 Mbps 91 dBm 5 5 Mbps 89 dBm 6 Mbps 90 dBm 9 Mbps 84 dBm 11 Mbps 88 dBm 12 Mbps 82 dBm 18 Mbps 80 dBm 24 Mbps 77 dBm 36 Mbps 73 dBm 48 Mbps 72 dBm 54 Mbps 72 dBm 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 14 of 20 Item Available Transmit Power Settings Range Specification 802 11b CCK 100 mW 20 dBm 50mW 17 dBm 30mW 15 dBm 20mW 13 dBm 5mW 7dBm 1mW 0dBm 802 11g CCK 100 mW 20 dBm 50mW 17 dBm 30mW 15 dBm 20mW 13 dBm 10mW 10 dBm 5mW 7dBm 1mW 0dBm OFDM 30mW 15 dBm 20mW 13 dBm 10mW 10 dBm 5mW 7 dBm 1mW 0dBm Maximum power setting will vary according to individual country regulations Indoor Distance across open office environment 9
8. Cisco SYSTEMS DATA SHEET CISCO AIRONET 1100 SERIES ACCESS POINT The Cisco Aironet 1100 Series Access Point provides a high speed secure affordable and easy to use wireless LAN solution that combines the freedom and flexibility of wireless networking with the features and services required in enterprise networks Figure 1 The Cisco Aironet 1100 Series supports a single radio and is available in an IEEE 802 11g version or IEEE 802 11b version The IEEE 802 11b version is field upgradable to 802 11g The access point offers flexibility and investment protection for wireless networks With the IEEE 802 11g version users can enjoy up to 54 Mbps data rates while maintaining full backward compatibility with legacy 802 11b devices Administrators can configure the access point to support both 802 11g and legacy 802 11b clients for investment protection or for higher performance it may be configured to support only 802 11g clients The Cisco Wireless Security Suite provides the strongest enterprise security solution available while the Cisco IOS Software operating system delivers enterprise class services with a familiar user interface The Cisco Aironet 1100 Series also features integrated diversity dipole antennas and an innovative mounting system for easy installation and reliable coverage in a variety of locations and orientations All contents are Copyright 1992 2004 Cisco Systems Inc All rights reserved Important Notices and Privacy
9. Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 5 of 20 IEEE 802 11i WPA2 Advanced Encryption Standard AES support as a firmware upgrade for the 802 11g radio e RADIUS accounting records for all authentication attempts For more information on wireless security visit http www cisco com go aironet security Figure 5 The Cisco Wireless Security Suite is an Enterprise Class Security System Based on the 802 1X Architecture RADI ar ee sS Access Point blocks IS Server P 4 all User requests a User Database pi to access LAN N f Client associates with Access Point U Camp TH gt Aironet 1100 ED Access Switch oe Access Point with Cisco LEAP Support Wireless Client with Cisco LEAP Supplicant leg RADIUS Server with isco uthentication Support User provides login Ci LEAP Authentication S TA and Dynamic Encryption Key Generation authentication credentials ee ty See so ei are 7 Se Q RADIUS server authenticates User a User Database User authenticates RADIUS Server pa y A aa a Campus Network A Aironet 1100 Series Access Switch ia ee ri Access Point with Cisco LEAP Support RADIUS server delivers Pair wise Wireless Master Key PMK to Access Point with Cisco LEAP Supplicant O Client and Access Point Access Point encrypts broadcast encryption Q Access Point and Client exchange m
10. Statement Page 1 of 1 Figure 1 An access point either is the center point in an all wireless network or serves as a connection point between a wired and wireless network Multiple access points can be placed throughout a facility to give users with 802 11b or 802 11g wireless LAN client adapters the ability to roam freely throughout an extended area while maintaining uninterrupted access to all network resources Tablet with Aironet 350 Series Handheld with Cisco Wirel PC Card Adapter Aironet 350 Series isco Wireless PC Card Adapter IP Phone 7920 Desktop with Aironet 802 11a b g PCI Adapter E Aironet 1100 Series Aironet 1100 Series 4 Access Point Access Point o gt n ff la 4 ay LAN WAN i Laptop with 802 119 Cisco Compatible Client Switch with Inline Power Router Cisco Catalyst 3750 INTELLIGENT NETWORKING FEATURES FOR A SCALABLE MANAGEABLE SOLUTION The Cisco Aironet 1100 Series extends end to end intelligent networking to the wireless access point Cisco command line interface CLI allows customers to quickly and consistently implement the extended capabilities available in Cisco IOS Software Customers can manage and standardize their networks using tools they have developed internally for their Cisco routers and switches An ideal choice for enterprise installations the Cisco Aironet 1100 Series supports enterprise class virtual LANs VLANs quality of service QoS and a
11. Wireless Medium Media Access Protocol Specification e 802 11b AIR AP1120B x K9 e 802 11g AIR AP1121G x K9 Regulatory Domains X Regulatory Domain e A FCC e E ETSI e J TELEC Japan Customers are responsible for verifying approval for use in their country Please see http www cisco com go aironet compliance to verify approval and to identify the regulatory domain that corresponds to a particular country Not all regulatory domains have been approved As they are approved the part numbers will be available on the Global Price List e 802 11b 1 2 5 5 11 Mbps e 802 11g 1 2 5 5 6 9 11 12 18 24 36 48 and 54 Mbps e IEEE 802 11b or IEEE 802 11 e Autosensing 802 3 10 100BaseT Ethernet e 802 11b 2 412 to 2 462 GHz FCC 2 412 to 2 472 GHz ETSI 2 412 to 2 484 GHz TELEC 2 432 to 2 447 GHz Israel e 802 11 2 412 to 2 462 GHz FCC 2 412 to 2 472 GHz ETSI 2 412 to 2 484 GHz CCK TELEC 2 412 to 2 472 GHz OFDM TELEC e Infrastructure star topology e 802 11g Orthogonal Frequency Division Multiplexing OFDM e 802 11b and 802 11g Direct sequence spread spectrum DSSS Carrier sense multiple access with collision avoidance CSMA CA 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 13 of 20 Item Specification Modulation OFDM BPSK 6 and
12. and Topology Specification e ARIB STD 66 Japan AS NZS 4771 Australia and New Zealand EMI and Susceptibility Class B FCC Part 15 107 and 15 109 ICES 003 Canada VCCI Japan EN 301 489 1 and 17 Europe AS NZS 3548 Security 802 111 WPA2 WPA 802 1x AES TKIP Other JEEE 802 11b and IEEE 802 11g FCC Bulletin OET 65C RSS 102 MIB I and MIB I Integrated 2 2 dBi diversity dipole antennas Cisco Wireless Security Suite supporting WPA and WPA2 including Authentication e 802 1X support including Cisco LEAP EAP Flexible Authentication via Secure Tunneling EAP FAST Protected EAP Generic Token Card PEAP GTC PEAP Microsoft Challenge Authentication Protocol Version 2 PEAP MSCHAPv2 EAP Transport Layer Security EAP TLS EAP Tunneled TLS EAP TTLS and EAP Subscriber Identity Module EAP SIM to yield mutual authentication and dynamic per user per session encryption keys WPA and WPA2 MAC address and standard 802 11 authentication mechanisms Encryption AES CCMP encryption WPA2 TKIP encryption enhancements key hashing per packet keying message integrity check MIC and broadcast key rotation via Cisco TKIP or WPA TKIP Support for static and dynamic IEEE 802 11 WEP keys of 40 bits and 128 bits Three indicators on the top panel report association status operation error warning firmware upgrade and configuration network modem and
13. cale with evolving architecture Requires minimal initial investment Facilitates cell size management Coverage can be decreased as deployment density requirements to optimize bandwidth increase Fails over seamlessly to standby access point Distributes user connections across available access points Optimizes Aggregate Throughput Sustains connectivity at outlying distances Support newer high speed 802 11g clients as well as installed base of 802 11b clients Mature technology incorporates generations of enhancements Provides extra capacity for follow on feature releases Supports standard security cables or padlocks not included Locks can be single or master keyed for simplified inventory management Supports installation for a wide range of locations including walls ceilings desktops and cubicle partitions Compact antenna profile Spherical coverage pattern is optimized for any orientation Diversity antennas improve reliability in high multipath environments such as offices Determines and selects least congested channel 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 11 of 20 Feature Benefit Supports Inline power over e Eliminates need for local AC power Ethernet Figures 8 9 10 e Reduces cable clutter Enables deployment in remote locations HTTP server with redesigned Navigable graphic oriented layout
14. ccess control lists ACLs The Cisco Aironet 1100 Series can manage up to 16 VLANs Figure 2 which allows customers to differentiate LAN policies and services such as security and QoS for different users For example enterprise customers can use different VLANs to segregate employee traffic from guest traffic and further segregate those traffic groups from high priority voice traffic Traffic to and from wireless clients with varying security capabilities can be segregated into VLANs with varying security policies Another example would be educational institutions that use VLANs to secure faculty and administrator traffic from student traffic traveling over the same infrastructure Implementing VLAN segmentation increases wireless LAN manageability and security 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 2 of 20 Figure 2 Indoor Wireless VLAN Deployment Access Point 2 SSID Engineering Channel 6 RADIUS Server g SSID Guest al SSID Engineering SSID Marketing az 802 10 Trunk Native VLAN 10 802 10 Trunk Access Point 1 Nene VANGID Channel 1 Management VLAN VLAN id 10 Enterprise Network SSID Human Resources SSID Guest With support for 802 1p QoS the Cisco Aironet 1100 Series provides traffic prioritization for packets traveling to and from the access point over Ethernet
15. come to expect from their wired LANs Wireless domain services WDS is introduced with Cisco SWAN WDS is a collection of Cisco IOS Software features that expand WLAN client mobility simplify WLAN deployment and management and enhance WLAN security These services supported on access points client devices and the Cisco Catalyst 6500 Series Wireless LAN Services Module WLSM today and other Cisco LAN switches and routers in 2005 include radio management aggregation fast secure roaming client tracking and WAN link remote site survivability WDS radio management aggregation supports radio frequency RF managed services such as rogue access point detection for WLAN Intrusion Detection System IDS interference detection assisted site surveys and self healing wireless LANs For more information on Cisco SWAN visit http www cisco com go swan WLAN IDS secures WLANs from malicious and unauthorized access The Cisco Aironet 1100 Series supports both an integrated and dedicated WLAN IDS With Cisco SWAN Dedicated WLAN IDS the Cisco Aironet 1100 Series is placed in Access Point Scanning Only Mode to support 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 3 of 20 full WLAN intrusion monitoring with continuous full time 24 hours and 7 days a week monitoring of the RF environment With Cisco SWAN Integrated WLAN IDS the access point
16. dges CiscoWorks WLSE is a turnkey scalable and centralized management platform for managing hundreds to thousands of Cisco Aironet access points and wireless bridges For more information on CiscoWorks WLSE visit http www cisco com go wlse COST EFFECTIVE SOLUTION FOR EVOLVING REQUIREMENTS The Cisco Aironet 1100 Series is ideal for new deployments or as an addition to existing deployments to support increasing capacity requirements Engineered with extra system capacity including memory storage and processing power the Cisco Aironet 1100 Series is designed to support not only today s feature set but future software releases for expanded functionality and capabilities KEY FEATURES AND BENEFITS The Cisco Aironet 1100 Series merges enterprise features manageability security and availability into a scalable easy to deploy and cost effective WLAN solution Tables 1 3 highlight key features product specifications and product system requirements for the Cisco Aironet 1100 Series 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 8 of 20 Table 1 Feature Enterprise Performance 2 4 GHz 802 11g or 802 11b radio configurable up to 100 mW Cisco IOS Software Virtual LAN VLAN support Quality of Service QoS Wi Fi Multimedia WMM Support for Cisco SWAN Wireless Domain Services WDS Fast Secure Roam
17. essages to derive the encryption keys key and delivers it to the Client activate encryption SIMPLIFIED DEPLOYMENT FOR RAPID CONNECTIVITY The Cisco Aironet 1100 Series with its redesigned graphical user interface GUI introduces the next level of intuitive browser based management for an improved user experience Figure 6 A menu based organization simplifies navigation and configuration for easy setup and ongoing management with uncompromised security The Cisco Aironet 1100 Series can also be managed using Cisco IOS Software CLI which is familiar to IT professionals allowing them to rely on existing skills in both management and deployment 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 6 of 20 Figure 6 The redesigned GUI in the Aironet 1100 Series provides intuitive browser based management for basic configuration of the access point pee n jian jbari j eram CET E minvi Pyn fban 7 Dapa etee hen yai T Ta Alpe cere 3 Baas Denakie Ey TO acy Fik mdi The Cisco Aironet 1100 Series defines enterprise office deployment capability Designed in an attractive durable plastic enclosure with integrated diversity dipole antennas the Cisco Aironet 1100 Series can be quickly deployed with a reliable omni directional coverage pattern Supported in various mounting orientations and locations it can be easily moved
18. g Malaysia Mexico The Netherlands New Zealand Norway e Peru Philippines Poland Portugal Puerto Rico Romania Russia e Saudi Arabia Scotland Singapore Slovakia Slovenia South Africa Spain Sweden Switzerland Taiwan Thailand Turkey Ukraine United Kingdom United States Venezuela Vietnam Zimbabwe Copyright 2004 Cisco Systems Inc All rights reserved Aironet Catalyst Cisco Cisco IOS Cisco Systems the Cisco Systems logo and SMARTnet are registered trademarks of Cisco Systems Inc and or its affiliates in the United States and certain other countries All other trademarks mentioned in this document or Web site are the property of their respective owners The use of the word partner does not imply a partnership relationship between Cisco and any other company 0402R 204113_ETMG_SD_11 04 Printed in the USA 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 20 of 20
19. ing WAN Link Remote Site Survivability Key Features and Benefits Benefit e High performance 2 4 GHz WLAN solution that delivers data rates of up to 11 Mbps IEEE 802 11b or 54 Mbps IEEE 802 11g with backwards compatibility to legacy 802 11b equipment e High quality transmitter and receiver design provides long range and reliable coverage e Provides end to end solution support for intelligent network services e Produces predictable and consistent network behavior e Delivers uniform applications and services e Allows segmentation of up to 16 user groups e Increases system flexibility accommodating clients with different security requirements and capabilities e Prioritizes traffic for different application requirements e Improves voice and video user experience e Subset of the IEEE 802 11e QoS draft standard supporting QoS prioritized media access via the EDCA method Improves the user experience for audio video and voice applications over a Wi Fi wireless connection e Comprehensive Cisco framework to integrate and extend wired and wireless networks to deliver the lowest possible total cost of ownership for companies deploying WLANs e Extends wireless awareness into important elements of the network infrastructure e Provides the same level of security scalability reliability ease of deployment and management for wireless LANs that organizations have come to expect from their wired LANs e Component of
20. o services help you to protect your network investment optimize network operations and prepare the network for new applications to extend network intelligence and the power of your business For more information about Cisco Services see Cisco Technical Support Services or Cisco Advanced Services Cisco SYSTEMS Corporate Headquarters European Headquarters Americas Headquarters Asia Pacific Headquarters Cisco Systems Inc Cisco Systems International BV Cisco Systems Inc Cisco Systems Inc 170 West Tasman Drive Haarlerbergpark 170 West Tasman Drive 168 Robinson Road San Jose CA 95134 1706 Haarlerbergweg 13 19 San Jose CA 95134 1706 28 01 Capital Tower USA 1101 CH Amsterdam USA Singapore 068912 www cisco com The Netherlands www cisco com www cisco com Tel 408 526 4000 www europe cisco com Tel 408 526 7660 Tel 65 6317 7777 800 553 NETS 6387 Tel 31 0 20 357 1000 Fax 408 527 0883 Fax 65 6317 7799 Fax 408 526 4100 Fax 31 0 20 357 1100 Cisco Systems has more than 200 offices in the following countries and regions Addresses phone numbers and fax numbers are listed on the Cisco Web site at www cisco com go offices Argentina Australia Austria Belgium Brazil Bulgaria Canada Chile China PRC Colombia Costa Rica Croatia Cyprus Czech Republic e Denmark Dubai UAE Finland France Germany Greece e Hong Kong SAR Hungary e India Indonesia Ireland Israel Italy Japan Korea e Luxembour
21. or user based authentication Figure 5 This solution also supports Wi Fi Protected Access WPA and Wi Fi Protected Access 2 WPA2 the Wi Fi Alliance certifications for interoperable standards based wireless LAN security The Cisco Wireless Security Suite interoperates with a range of client devices It supports all 802 1X authentication types including Cisco LEAP Extensible Authentication Protocol Flexible Authentication via Secure Tunneling EAP FAST EAP Transport Layer Security EAP TLS Protected Extensible Authentication Protocol Generic Token Card PEAP GTC Protected Extensible Authentication Protocol Microsoft Challenge Handshake Authentication Protocol Version 2 PEAP MSCHAP V2 EAP Tunneled TLS EAP TTLS and EAP Subscriber Identity Module EAP SIM A wide selection of RADIUS servers such as the Cisco Secure Access Control Server ACS can be used for enterprise class centralized user management that includes e Strong mutual authentication to ensure that only legitimate clients associate with legitimate and authorized network RADIUS servers via authorized access points e Dynamic per user per session encryption keys that automatically change on a configurable basis to protect the privacy of transmitted data e Stronger encryption keys provided by Temporal Key Integrity Protocol TKIP enhancements such as message integrity check MIC per packet keys via initialization vector hashing and broadcast key rotation 2004
22. performs WLAN intrusion monitoring of the RF environment while also functioning as an IEEE 802 11 infrastructure device allowing client associations to the network To take advantage of the innovative features of the 1100 Series not only can Cisco client adapters be used but now a wide variety of Cisco Compatible devices are available from leading WLAN client suppliers For example fast secure roaming is supported by the Cisco Aironet 1100 Series in conjunction with Cisco or Cisco Compatible client devices With fast secure roaming authenticated client devices can roam securely from one access point to another within or across subnets without perceptible delay during reassociation Fast secure roaming supports latency sensitive applications such as wireless voice over IP VoIP enterprise resource planning ERP or Citrix based solutions Figure 3 Figure 3 Fast Secure Roaming 1 Access Point AP1 must now 802 1X authenticate with the WDS device to establish a secure session 2 Initial client 802 1X authentication goes to a central AAA server 500ms 3 During a client roam the client signals to the WDS device ithas roamed and WDS device will send the client s key to the new Access Point AP2 Cisco Secure 4 The Access Point hand off time is reduced to 50 ms Access Control Switch Server AAA Server Based WDS AP2 AP1 lt w A Fast Secure Layer 3 Roaming Note Because the WDS handles roaming and reauthentica
23. r Injector Media Converter Cisco Catalyst Switch IEEE 802 3af and Pre Standard Power over Ethernet Cisco WS PWR PANEL Midspan Power Patch Panel CISCO SMARTNET SUPPORT AND SMARTNET ONSITE SUPPORT Operational technical support service for maximizing network availability is offered through Cisco SMARTnet support and SMARTnet Onsite support Cisco SMARTnet support augments the resources of your operations staff it provides them access to a wealth of expertise both online and via telephone the ability to refresh their system software at will and a range of hardware advance replacement options Cisco SMARTnet Onsite support provides all SMARTnet services and complements the hardware advance replacement feature by adding the services of a field engineer critical for those locations where staffing is insufficient or unavailable to replace parts 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 18 of 20 To learn more about service and support for the Cisco Aironet 1100 Series visit http www cisco com en US products svcs ps3034 ps2827 ps2978 serv_home html SERVICE AND SUPPORT Cisco offers a wide range of services programs to accelerate customer success These innovative services programs are delivered through a unique combination of people processes tools and partners resulting in high levels of customer satisfaction Cisc
24. radio status CiscoWorks CiscoView Resource Manager Essentials and Campus Manager 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 17 of 20 Item Remote Configuration Support Dimensions Weight Environmental System Memory Input Power Requirements Power Draw Warranty Wi Fi Certification Specification BOOTP DHCP Telnet HTTP FTP TFTP and SNMP e 4 1 in 10 4 cm wide 8 1 in 20 5 cm high 1 5 in 3 8 cm deep e 10 5 oz 297 g e 32 104 F 0 40 C e 10 90 humidity noncondensing e 16 MB RAM 8 MB FLASH e 100 240 VAC 50 0Hz power supply e 33 57 VDC device 4 9 watts RMS e One year SLATE Table 3 Product System Requirements Feature Standard 802 1X compliant user level System Requirement authentication and dynamic encryption keying CiscoWorks RME Campus Manager Line power over Ethernet support One of the following RADIUS servers Cisco Secure Access Control Server Version 3 0 or greater Cisco Access Registrar Version 3 0 or greater Funk Software Steel Belted RADIUS Server Version 3 0 or greater Interlink Networks RAD Series RADIUS Server Version 5 1 or greater CiscoWorks LAN Management Solution LMS or Routed WAN Solution RWAN Cisco AIR PWRINJ3 Aironet Power Injector for the 1100 and 1200Series Cisco AIR PWRINJ FIB Aironet Powe
25. throughout the work area as needs change Figure 7 A standard surface mounting bracket supports installation on office walls and ceilings for elevated placement UL 2043 certification for the plenum rating requirements set by local fire codes supports installation in environmental air spaces such as areas above suspended ceilings The design protects against tampering and theft using single or master keyed padlocks The Cisco Aironet 1100 Series can also be brought into the cubicle space with a cubicle wall mounting bracket or device stand The device stand positions the access point on any horizontal surface such as a desktop or shelf Theft is deterred in these installations using the security slot with standard security cables Support for either local or inline power over Ethernet further simplifies installation The Cisco Aironet 1100 Series is Wi Fi certified to ensure interoperability with other IEEE 802 11g and IEEE 802 11b devices 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 7 of 20 Figure 7 The Cisco Aironet 1100 Series Access Point Mounting Brackets Include Ceiling Wall Cubicle and Desktop Options ADVANCED MANAGEMENT OF LARGE SCALE WIRELESS LAN DEPLOYMENTS The CiscoWorks Wireless LAN Solution Engine WLSE a component of the Cisco SWAN is available as a management tool for Cisco Aironet access points and wireless bri
26. tion the WAN link is not used WAN link remote site survivability allows the access point to act as a local RADIUS server to IEFE 802 1X authenticate wireless clients when the authentication authorization and accounting AAA server is not available This provides remote site survivability and backup authentication services during a WAN link or server failure allowing users in remote site deployments with nonredundant WAN links access to local resources such as file servers or printers Figure 4 2004 Cisco Systems Inc All right reserved Important notices privacy statements and trademarks of Cisco Systems Inc can be found on cisco com Page 4 of 20 Figure 4 WAN Link Remote Site Survivability Local Authentication Service on Router Cisco Secure Access Control Server Solution Engine AAA Server Cisco 10S Software Configuration Local Authentication Service hostname WDS1 fallback aaa server username registerl password JWFMsCPsa username phonel passowrd HNFasn32SFn Up to 50 accounts ENTERPRISE CLASS SECURITY SOLUTION Wireless LAN security is a primary concern The Cisco Aironet 1100 Series secures the enterprise network with a scalable and manageable system featuring the award winning Cisco Wireless Security Suite Based on the 802 1X standard for port based network access the Cisco Wireless Security Suite takes advantage of the Extensible Authentication Protocol EAP framework f

Download Pdf Manuals

image

Related Search

Related Contents

Copyright © All rights reserved.
DMCA: DMCA_mwitty#outlook.com.