HP A-WX5000 Access Controller Series

Overview:

The HP A-WX5000 Access Controller Series features large capacity, high reliability, and rich services, and offers strong wired and wireless data processing capacity. The A-WX5000 series provides refined user control and management, a comprehensive RF management and security mechanism, fast roaming, strong QoS and IPv4/IPv6 features, and powerful WLAN access control functions. Designed for WLAN access of enterprise networks and metropolitan area networks (MANs), the WX5000 series provides an ideal access control solution for the WLAN access of large enterprise campus networks, wireless MAN coverage, and hotspot coverage. The A-WX5000 series include two models: the A-WX5002 and A-WX5004 access controllers. A standard A-WX5002 access controller supports up to 32 APs, and can support up to 64 with license upgrades. A standard A-WX5004 access controller supports 64 APs, and can support up to 256 with license upgrades.

• Flexible forwarding modes
• Carrier-Class Wireless User Access Control
• High reliability
• IPv4/IPv6 dual stack
• End-to-end QoS

HP A-WX5000 Access Controller Series Models:

	A-WX5002 Access Controller (JD447B)
	A-WX5004 Access Controller (JD448B)

Features and Benefits:

Quality of Service (QoS)

• End-to-end QoS — developed based on the Comware V5 platform, the A-WX5000 access controllers support not only the DiffServ standard but also the IPv6 QoS; the QoS DiffServ model includes traffic classification and traffic policing, completely implementing the six groups of services (EF, AF1 through AF4 and BE); this enables ISPs to provide differentiated services for users, making the Internet a true integrated network carrying data, voice, and video services at the same time
• IEEE 802.1p prioritization — delivers data to devices based on the priority and type of traffic
• Class of service (CoS) — sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ

Management

• Automatic radio power adjustment — automatic AP power adjustment features analyze user access status in real time, adapting power requirements based on environmental changes and providing high-quality user access signal coverage
• Automatic radio channel adjustment — intelligent channel switching and real-time interference detection provide the allocation of a high-quality channel to each AP, reducing adjacent channel interference
• Load balancing — intelligent load sharing analyzes the locations of wireless clients in real time, providing high-quality client throughput regardless of location or number of online sessions
• Rogue AP detection — regular scans for rogue APs help confirm that the network is secure
• Enterprise network management — is supported by the Web-based, enterprise-class HP Intelligent Management Center (IMC) network management platform and Wireless Service Management (WSM), which effectively integrate traditionally disparate management tools into one easy-to-use interface
• Secure controller management — securely manages the controller from a single location with IMC or any other SNMP management station; controller supports SNMPv3 as well as SSH and SSL for secure CLI and Web management
• AAA server — uses an embedded AAA server or external AAA server for local users

Connectivity

• IPv6 — IPv6 host enables controllers to be managed and deployed at the IPv6 network's edge; dual stack (IPv4 and IPv6) transitions from IPv4 to IPv6, supporting connectivity for both protocols; MLD snooping forwards IPv6 multicast traffic to the appropriate interface, preventing traffic flooding; IPv6 ACL/QoS supports ACL and QoS for IPv6 network traffic
• IEEE 802.11h International Telecommunication Union (ITU) compliant — employs Dynamic Frequency Selection (DFS) to automatically select another channel and adjust transmit power to reduce interference with systems such as radar, if detected on that same channel

Performance

• Flexible forwarding modes — the A-WX5000 access controller supports both distributed forwarding mode and centralized forwarding mode, allowing you to set SSID-based forwarding type as needed; in a wireless network of centralized forwarding mode, all wireless traffic is sent to an AC for processing; if there is a wireless network where APs are deployed at branches, ACs are deployed at the headquarters, and APs and ACs are connected over a WAN, the distributed mode will be necessary
• Carrier-Class Wireless User Access Control — user-based access control is a feature of the A-WX5000 access controller; for different application scenarios, you can configure different items in a user profile, such as Committed Access Rate (CAR) and QoS policies
• Fast roaming — supports Layer 3 roaming and fast roaming, satisfying the most demanding voice service requirements
• High performance — robust switching capacity and wire-speed processing provide powerful forwarding capacity for medium and large enterprise-size wireless LANs (WLANs)

Resiliency and high availability

• High reliability — the A-WX5000 access controller supports 1+1, N+1, and N+N backup; the 1+1 redundancy configuration of the A-WX5000 access controller supports subsecond level failover; Fit APs establish CAPWAP links with both ACs, but only the links to the active AC are active; when the active AC fails, the heartbeat mechanism between the two ACs helps ensure that the standby AC can sense the failure within 300 ms and then inform APs to use links to it, providing service continuity

Layer 2 switching

• VLAN support and tagging — support IEEE 802.1Q, with 4094 simultaneous VLAN IDs
• GARP VLAN Registration Protocol (GVRP) — allows automatic learning and dynamic assignment of VLANs
• Spanning Tree — fully supports standard IEEE 802.1D Spanning Tree Protocol, IEEE 802.1w Rapid Spanning Tree Protocol for faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol
• Jumbo packet support — supports up to a 4 KB frame size to improve performance of large data transfers

Standards

• Latest high-speed wireless standards — when used with IEEE 802.11n-based APs, provides wireless access six times that of traditional IEEE 802.11a/b/g networks, resulting in expanded coverage and more efficient support for wireless multimedia applications

• IEEE 802.1X and RADIUS network logins — control port-based access for authentication and accountability
• Web-based authentication — similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients that do not support the IEEE 802.1X supplicant
• Choice of IEEE 802.11i, Wi-Fi Protected Access 2 (WPA2), or WPA — locks out unauthorized wireless access by authenticating users prior to granting network access; robust Advanced Encryption Standard (AES) or Temporal Key Integrity Protocol (TKIP) encryption secures the data integrity of wireless traffic
• Secure Shell (SSHv2) — uses external servers to securely log in to a remote device; with authentication and encryption, it protects against IP spoofing and plain text password interception; increases the security of SFTP transfers
• MAC authentication — provides simple authentication based on a user's MAC address; supports local or RADIUS-based authentication
• Secure user isolation — virtual AP services enable the network administrator to provide specific services for different user groups, improving bandwidth and system resources and simplifying network maintenance and management
• Secure access by location — location AP-based user access control helps ensure that wireless users can access and authenticate only to preselected APs, enabling system administrators to control the locations where a wireless user can access the network
• Secure access control by user — media access control (MAC)-based and IEEE 802.1X network access control centralize wireless security through existing Remote Authentication Dial-In User Service (RADIUS) servers to protect the network from unauthorized user access
• Endpoint Admission Defense (EAD) — integrated wired and wireless EAD helps ensure that only wireless clients who comply with mandated enterprise security policies access the network, reducing threat levels by infected wireless clients and improving the overall security of the wireless network
• Guest VLAN — similar to IEEE 802.1X, it provides a browser-based environment to authenticated clients via iMC component
• HTTPS management — provides secure Web management
• Public Key Infrastructure (PKI) — is used to control access

Scalability

• Pay as you grow — license upgrades allow you to increase support for additional access points without the need to buy additional costly hardware and use additional valuable space in a chassis

Specifications:

	A-WX5002 (JD447B)	A-WX5004 (JD448B)
Port
	2 dual-personality ports (2 GbE 10/100/1000Base-T and 1000Base-X combination ports) 1 RJ-45 serial console port	4 dual-personality ports (4 GbE 10/100/1000Base-T and 1000Base-X combination ports) 1 RJ-45 serial console port
Physical characteristics
Dimensions	16.93(d) x 17.32(w) x 1.72(h) in. (43 x 44 x 4.36 cm) (1U height)	16.93(d) x 17.32(w) x 1.72(h) in. (43 x 44 x 4.36 cm) (1U height)
Weight	16.31 lb. (7.4 kg), Fully loaded two power supplies	16.31 lb. (7.4 kg), Fully loaded two power supplies
Memory and processor
Processor	Quad-core @ 800 MHz, 256 MB compact flash, 1 GB DDR2 DIMM	Quad-core @ 800 MHz, 256 MB compact flash, 1 GB DDR2 DIMM
Mounting
	EIA standard 19-in. telco rack or equipment cabinet (hardware included)	EIA standard 19-in. telco rack or equipment cabinet (hardware included)
Performance
Switch fabric speed	4 Gbps	8 Gbps
MAC address table size	4000 entries	8000 entries
Environment
Operating temperature	32°F to 113°F (0°C to 45°C)	32°F to 113°F (0°C to 45°C)
Operating relative humidity	5% to 95%, noncondensing	5% to 95%, noncondensing
Non-Operating temperature	-40°F to 158°F (-40°C to 70°C)	-40°F to 158°F (-40°C to 70°C)
Non-Operating relative humidity	5% to 95%, noncondensing	5% to 95%, noncondensing
Electrical characteristics
Maximum heat dissipation	222 BTU/hr (234.21 kJ/hr)	222 BTU/hr (234.21 kJ/hr)
Voltage	100-240 VAC	100-240 VAC
DC voltage	-48 VDC to -60 VDC	-48 VDC to -60 VDC
Maximum power rating	67.7 W	67.7 W
Frequency	50/60 Hz	50/60 Hz
Safety
	UL 60950-1EN 60950-1CAN/CSA-C22.2 No. 60950-1AnatelGOSTC-TickNOMIEC 60950-1(with CB report)	UL 60950-1EN 60950-1CAN/CSA-C22.2 No. 60950-1AnatelGOSTC-TickNOMIEC 60950-1(with CB report)
Notes
	Maximum number of users: 2000; maximum number of users supported by local authentication: 1000; maximum number of SSIDs that can be configured: 128; maximum number of users supported by local portal authentication: 1000; number of ACLs: 4000.	Maximum number of users: 4000; maximum number of users supported by local authentication: 1000; maximum number of SSIDs that can be configured: 256; maximum number of users supported by local portal authentication: 2000; number of ACLs: 8000.

Additional Features:

(Applies to All Models in Series)

Services and Support:

HP Care Packs for HP Networking (All Models in Series)

• 3-year, parts only, global next-day advance exchange (UX182E)
• 3-year, 4-hour onsite, 13x5 coverage for hardware (UX183E)
• 3-year, 4-hour onsite, 24x7 coverage for hardware (UX186E)
• 3-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 SW phone support and SW updates (UX189E)
• 3-year, 24x7 SW phone support, software updates (UX192E)
• 4-year, 4-hour onsite, 13x5 coverage for hardware (UX184E)
• 4-year, 4-hour onsite, 24x7 coverage for hardware (UX187E)
• 4-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 software phone (UX190E)
• 4-year, 24x7 SW phone support, software updates (UX193E)
• 5-year, 4-hour onsite, 13x5 coverage for hardware (UX185E)
• 5-year, 4-hour onsite, 24x7 coverage for hardware (UX188E)
• 5-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 software phone (UX191E)
• 5-year, 24x7 SW phone support, software updates (UX194E)
• 3 Yr 6 hr Call-to-Repair Onsite (UX195E)
• 4 Yr 6 hr Call-to-Repair Onsite (UX196E)
• 5 Yr 6 hr Call-to-Repair Onsite (UX197E)

HP Networking Services

Services that add value to your business
The warranties on HP Networking products provide a robust foundation for ongoing network support, but many customers have advanced support needs. Today's enterprise businesses, regardless of their size, are under increasing pressure to reduce the cost and complexity of supporting their network infrastructures. Demand for new services from businesses and their end users is constantly increasing. HP offers an affordable, comprehensive portfolio of networking services for organizations of all sizes. HP has a unique services advantage you can benefit from, and HP is the only vendor in the IT industry that can provide integrated and consistent support for your entire technology infrastructure worldwide, including networking, servers and storage, and imaging and printing, as well as desktop and mobile computing, to help you grow your business with expert support that is affordable, personal, and scaled to your needs. HP Networking's implementation and design centers simplify your network planning, while HP Technology and Enterprise Services deliver choice and flexibility.

HP provides a full range of custom services to meet the end-to-end networking needs of our customers. HP Network Lifecycle Services form the core foundation of network consulting, assessments, planning, design, integration, deployment, and management. They are available as standalone services or can be crafted to deliver solutions across the services portfolio, spanning network performance, network security and risk management, global deployment, data center networking, wireless LAN/mobility, and Unified Communications and Collaboration.