Industrial Secure WLAN Controller Centralized Medium-Scale AP Management IWF 8405 Main F Main Features eatures Œ Dual-WAN Load Balance and Failover Œ Centralized AP management and multi-level connections up to 150 Œ Data tunnel security by Intranet local IPSec VPN, Internet Remote manageable access points Client PPTP VPN, Site-to-Site VPN Œ Virtual service zone management by user group, security profile Œ QoS and WMM Traffic Types support for Voice, Video, Best Effort and etc. and Background Œ Authentication, Authorization, Accounting (AAA) support Product Overview The IWF 8405 industrial Secure WLAN Controller is an ideal security solution for medium-scale industrial WLAN deployments. The IWF 8405 integrates "secure access control", "user account provisioning", "centralized WLAN management" , even "flexible accounting and billing" into one box to provide simplified manageability and instant mobility. With more powerful hardware, IWF 8405 is capable of centrally managing 150 access points to cover a wider service area in a medium network. Secure Networking under Central Management IWF 8405 is suitable for industry in managing their wired and wireless network access uniformly. The network access of users from different departments and the access of guests can be segregated in different Service Zones. When needed, IWF 8405's Local, Site-to-Site and Remote VPN tunnels can be used to further secure the information flows for business. For multi-site Manufacturing facilities, Network deployment and management is always challenge to IT manger, IWF 8405 makes it easy to quickly deploy and offer wireless Internet service. IT manager can centrally manage all the access points connected to the IWF 8405. Also, remote firmware upgrade can be done through IWF 8405. Security policy and user groups can be pre-defined in Virtual AP profile and applied to the access points through IWF 8405. Built-in External Account Authentication Database Modem Server (Optional) ISP1 Internet Managed AP (IWF 3320X) ISP2 Firewall Modem Switch Tunneled AP Location N Switch IWF 8405 Mail Server IWF 3320X IWF 3320X Web Server Managed AP Receptionist App Server DMZ Zone Staff Factory Location 2 Access to Internal Network & Internet Access to Internal Only Location 1 WLAN Controller Œ Built-in DoS attack protection Specifications Service Zones Œ The network is divided into maximum 9 Service Zones, each defined Networking by a pair of VLAN tag and ESSID Œ Support NAT or Router mode Œ Each service zone has its own (1) login portal page (2) authentication Œ Support Static IP, DHCP, PPPoE mode on WAN interfaces and PPTP options (3) LAN interface IP address (4) DHCP address range (WAN 1 only) Œ Each service zone allows access to the selected groups Œ Choose freely which LAN is authentication-enabled LAN Œ Each service zone assigns a network policy to each user group Œ Support NAT: (1) IP/Port destination redirection (2) DMZ server Œ WISPr support per service zone mapping (3) Virtual server mapping (4) H.323 pass-through Œ Supports email service via designated email server AP Management Œ Built-in with DHCP Server and support DHCP relay Œ Manage up to 150 x NEXCOM AP in both Local and Wide Areas AP Œ Support walled garden (free surfing zone) management totally Œ Walled Garden Ad List that enables advertisement website links on Œ Monitor 3rd party non-integrated AP: up to 200 user login portal page Œ Centralized remote management via HTTP/SNMP interface Œ Support MAC-address and IP-address pass-through Œ Auto discovery for managed APs Œ Support HTTP Proxy Œ Enable or disable APs easily via user interface Œ Support IP Plug and Play (IP PnP) Œ Templates for managed APs Œ Support configurable static routes Œ Monitoring managed AP for its status, the number of associated Œ Support dual uplinks, outbound load balancing and failover for more clients, and RF information reliable Internet connection Œ Upgrade managed APs centrally, including bulk upgrade Œ Support SIP pass-through NAT Œ Rogue AP detection and AP load balancing Œ Support Ethernet connection to external terminal servers Œ Tunneled AP management over internet for NEXCOM Wi-Fi AP Family Œ Port location mapping features for working with DSLAM and VLAN Œ Graphical AP statistics display switches Œ Dynamic Routing Protocol: RIP, OSPF, IS-IS Accounting and Billing Œ Seamless L2/L3 Roaming Œ Support local on-demand and external RADIUS server Œ Contain 10 configurable billing plans for on-demand accounts System Administration Œ Support credit card billing system by Authorize.net ,PayPal, Œ Support web-based management user interface SecurePay, and WorldPay Œ Provide customizable login and logout portal page Œ Provide session expiration control for on-demand accounts Œ SSH remote management Œ Provide detailed per-user network traffic history for both local and Œ Remote firmware upgrade on-demand user accounts Œ NTP time synchronization Œ RADIUS VSA implementation for volume-based session control using Œ Menu driven console management interface RADIUS server Œ Utilities to backup and restore the system configuration Œ Support automatic e-mail to report network traffic history Œ Built-in root CA and centralized certificate management Œ Support middleware connection to Property Management System (PMS) Monitoring and Reporting Œ Status monitoring of on-line users Hardware Specifications Œ IP-based monitoring of network devices Œ WAN Ports: 2 x 10/100/1000 BASE-T RJ-45 Œ Uplink (WAN) connection failure alert Œ LAN Ports: 4 x 10/100/1000 BASE-T RJ-45 Œ Support Syslog for diagnosis and troubleshooting Œ Console Port: 1 x RJ-45 Œ User traffic history logging Œ LED Indicators: 1 x Power, 1 x Status, 1 x HDD Œ Traffic history report via email to adMinistrator Œ LCD Display Œ Users’ session log can be sent to FTP or Syslog server Œ Graphical system report Physical and Power Œ Power Adapter: 100~240 VAC, 50/60 Hz User Management and Access Control Œ Form Factor: 19" 1U Rack Mount Œ Support 6,000 local accounts and 6,000 on-demand accounts Œ Dimensions (W x D x H): 426 x 236 x 44mm (16.77" x 9.29" x 1.75") Œ Provide on-demand accounts for visitors Œ Weight: 12.3 lbs (5.6 kg) Œ Support Local user account roaming Œ Authentication methods supported: Local and On-demand accounts, Environment Protection POP3, LDAP, RADIUS, Windows Domain, and SIP authentication Œ Operating Temperature: 0 to +40°C Œ Single-Sign-On for Windows Domain Œ Storage Temperature: -20 to +75°C Œ Allow MAC address and user identity binding for local user Œ Operation Humidity: 10% to 90% (Non-condensing) authentication Œ Storage Humidity: 10% to 90% (Non-condensing) Œ Support MAC Access Control List Certifications Œ Support auto-expired guest accounts Œ CE, FCC Œ Users can be divided into user groups, each user group has its own Œ RoHS compliant network properties, including bandwidth, QoS, accessible service zones, and other privileges Package Contents Œ Support QoS and WMM traffic types: Voice, Video, Best Effort and Œ IWF 8405 x 1 Background Œ CD-ROM (User's Manual and QIG) x 1 Œ Each group (role) may get different network policies in different Œ RS-232 DB9 to RJ45 Console Cable x 1 service zones Œ Ethernet Cable x 1 Œ Max concurrent user session (TCP/UDP) limit Œ Power Cord x 1 Œ A setting for user-idle-timeout Œ Rack Mounting Bracket (with Screws) x 1 Œ Configurable user Black List * Specifications subject to change without notice Œ Export/Import local users list to/from a text file Security Œ Support local IPSec VPN tunnels Ordering Information Œ Support PPTP VPN tunnels Œ IWF 8405 (P/N: 10T00840500x0) Œ Support site-to-site VPN tunnels Œ Support VPN pass-through (IPSec and PPTP) WLAN Controller