HP MSM710 Access Controller

Overview:

Working in unison with HP E-series MultiService Mobility Access Points, HP E-series MultiService Mobility Controllers deliver high-performance networking solutions for the midmarket. The enhanced architecture scales to 802.11n without requiring expensive controller upgrades. Robust identity- and roles-based user account profiles, as well as Virtual Service Communities (VSCs) with independently configurable Quality of Service (QoS), authentication, encryption, and VLAN support, deliver intelligence to the edge of the network. Scalable from small to large midmarket deployments, the E-series wireless controllers deliver a fast-roaming capability. Wireless security is comprehensive with support for internal and external authentication, authorization, and accounting (AAA) servers, built-in stateful firewall, per-user VLAN mapping, and mutual controller/access point (AP) authentication.

• Enterprise scalability and redundancy
• Optimized architecture for flexible network design
• IEEE 802.11a/b/g/n AP and access device support
• Rock-solid WLAN security
• Blade mobility controller

Features and Benefits:

Quality of Service (QoS)

• Rate limiting — sets per-port ingress enforced maximums and per-port, per-queue guaranteed minimums
• Diagnostic —
  • Client event log records association, authentication, and DHCP events
  • Packet capture tool for Ethernet and IEEE 802.11 interfaces (PCAP format)
  • Data rate matrix

Firewall

• Stateful firewall — enforces firewall policies to control traffic and filter access to network services; maintains session information for every connection passing through it, enabling the firewall to control packets based on existing sessions
• NAT/PAT — choice of dynamic partial address translation (PAT) or static network address translation (NAT) preserves a network's IP address pool or conceals the private address of network resources, such as web servers, which are made accessible to users of a guest or public wireless LAN
• Authenticated network access — authenticates users with an internal or external RADIUS server before allowing full network connectivity

Management

• Complete session logging — provides detailed information for problem identification and resolution
• Remote configuration and management — through secure web browser, command-line (console port or SSH), SOAP, or SNMP
• Management interface control — allows interfaces to be enabled or disabled depending on security preferences
• Management VLAN — segments traffic to and from management interfaces, including CLI, web browser interface, and SNMP
• RADIUS accounting support — separates RADIUS accounting server support per SSID; provides detailed session, usage, and billing information for each client activity
• Unified RADIUS Account Management — provides management across wired and wireless networks
• Secure web GUI — provides a secure, easy-to-use graphical interface for module configuration
• Command-line interface (CLI) — provides a secure, easy-to-use command-line interface for configuring the module via SSH or a switch console; provides direct real-time session visibility
• HP PCM and PMM — provides central management for discovery, logging, status, and configuration management
• Logging — provides local and remote logging of events via SNMP (v2c and v3) and syslog; provides log throttling and log filtering to reduce the number of log events generated
• Controller networking —
  • Bridging and routing: IEEE 802.1d-compliant bridging, RIPv1 (RFC 1058), and RIPv2 (RFC 1723)
  • Stateful firewall
  • Other: PPPoE Client (RFC 2516), ICMP (RFC 792), and IEEE 802.1q VLAN tagging, NAT (RFC 1631), and CIDR (RFC 1519)
• DHCP options —
  • DNS Relay and SMTP Redirection
  • DHCP: Server (RFC 2131), Client, and Option-82 Relay (RFC 3046)
• Band steering — Automatically redirects 5 GHz-capable clients to the 5 GHz spectrum
• Network management: —
  • Centralized management through PCM and PMM
  • SNMP v2c, MIB-II with Traps, RADIUS Authentication Client MIB (RFC 2618), and RIPv2 MIB Extension (RFC 1724)
  • Embedded HTML management tool with secure access (SSL and VPN)
  • Scheduled configuration and firmware upgrades from central server
  • Per-user activity records by time used or data transferred
  • Remote syslog
• Unified network visibility — provides visibility between wired and wireless network using LLDP and sFlow

Connectivity

• 10 GbE connections to the switch (for E-MSM765zl mobility controller) — two 10-GbE wire-speed internal connections help ensure that the network connections from the application to the switch backplane will not limit application performance

Performance

• High-performance processor system —
  • E-MSM765zl: Intel® Coreâ„¢ 2 Duo Processor T7500 with 2.2 GHz, 4 MB cache provides a high-performance compute environment in a small footprint using a single-switch slot
  • E-MSM760: Intel® Coreâ„¢ 2 Duo Processor E6400 with 2.13 GHz, 2 MB cache provides a high-performance compute environment in an appliance form factor
• Memory subsystems — 4/2 GB of DDR2 dual-channel memory (E-MSM765zl/E-MSM760) provides for enhanced application performance
• Disk drive — 250 GB SATA II 7200 rpm hard disk drive allows rapid data reads/writes, providing improved application performance

Mobility

• Solutions enhanced for businesses — HP E-series MSM7xx controllers deliver services for a range of vertical markets, including healthcare, hospitality, education, manufacturing, transportation, and service providers
• Powerful security capabilities — robust, identity- and role-based user account profiles use internal or external AAA services
• Solutions that cover the most important WLAN applications — HP E-series MSM7xx controllers and the rest of the HP E-series MultiService Mobility Solutions deliver rich application support, including guest access, location-based services, Voice over Wi-Fi (VoWi-Fi), hotspot, surveillance, and secure point of sale
• Capacity that scales from small office to large campus — efficiently deploy wireless LAN (WLAN) capacity with the E-MSM710, which controls up to 10 APs; the E-MSM760, which controls 40 to 200 APs; and the E-MSM765zl, which controls 40 to 200 APs; the E-MSM760 and E-MSM765zl controllers can be configured in a virtual controller (team) model in which up to 800 APs can be managed from a single IP address (a team must consist of all E-MSM760 or all E-MSM765 controllers)
• Virtual controller —
  • Available only with the E-MSM760 mobility controller and the E-MSM765zl controller
  • Capable of managing up to 800 MSM APs through a single IP address
  • Redundant configuration preserves network mobility services through seamless failover
• Mobility Traffic Manager —
  • Flexible and multiple network distribution schemes address any business need
  • Policies for user network and security profiles are consistently applied and enforced
  • Wireless traffic can be directed anywhere in the network as required
  • Enterprise businesses can easily migrate to the E-series mobility solution, preserving prior network design
• Controller Client Access Control —
  • SSL-protected universal access method, MAC address authentication, and IEEE 802.1x authentication
  • Web proxy server; support for centralized portal
  • AAA Security
  • WPA and WPA2 encryption
  • Client-fixed IP address spoofing
  • Per-site and per-user access lists; white list and black list support
  • Bandwidth limiting per user or per VLAN
  • Concurrent users (up to 100 for the E-MSM710 controller and up to 2000 for the E-MSM760 and E-MSM765zl controllers)
• Simplified management with central control — HP E-series MSM7xx controllers reduce the time and complexity of managing a wireless network; the solution controls hundreds of APs from a single management interface and helps ensure that a consistent set of services is delivered throughout the wireless network; the controllers push authentication, encryption, QoS enforcement, and access policies to the access points delivering intelligence to the edge of your mobile network
• Services —
  • Standard Layer 2 roaming and VoWLAN support on all controllers
  • Advanced Fast roaming on the mobility controllers
  • Plug-and-play AP management
  • Public and guest Internet access
• Intra-/Inter-subnet roaming —
  • OpenVPN protected tunnels for secure communication of control traffic
  • Authenticated unencrypted UDP tunnels for AP-to-controller, and controller-to-controller data traffic
• Mobility controllers exception for intra-subnet/inter-subnet roaming — intra-subnet and inter-subnet Advanced Fast roaming is not included on any of the HP E-series MSM Access Controllers

• Secure Shell (SSHv2) — encrypts all transmitted data for secure, remote command-line interface (CLI) access over IP networks
• Secure Sockets Layer (SSL) — encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
• IEEE 802.1X and RADIUS network logins — control wireless network access for authentication and accountability using IEEE 802.1x and RADIUS
• RADIUS-based MAC authentication — authenticates a wireless client with a RADIUS server based on the MAC address of the client; this is useful for clients with minimal or no user interface
• Web-based authentication — provides a web browser-based environment to authenticate clients that may not support the IEEE 802.1X supplicant
• IEEE 802.1x supplicant on MSM APs — helps prevent deployment of rogue networking equipment
• Secure management access — securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3

Policy management

• Standards-based authentication support for Active Directory and IEEE 802.1X — seamlessly integrates into existing authentication services or uses the built-in database

Warranty and support

• Hardware warranty —
  • Lifetime warranty for the E-MSM765zl controller (J9370A) with the exception of the hard disk drive, which has a 5-year limited warranty
  • One-year limited hardware warranty for E-MSM710 and E-MSM760 controllers
• Electronic and telephone support — limited electronic and telephone support is available from HP; refer to www.hp.com/networking/warranty for details on the support provided and the period during which support is available
• Software releases — refer to www.hp.com/networking/warranty for details on the software releases provided and the period during which software releases are available for your product(s)

Specifications:

Additional Features:

(Applies to All Models in Series)

Service & Support:

HP Care Packs for HP Networking

• 3-year, parts only, global next-day advance exchange (UN639E)
• 3-year, 4-hour onsite, 13x5 coverage for hardware (UN640E)
• 3-year, 4-hour onsite, 24x7 coverage for hardware (UN641E)
• 3-year, 4-hour onsite, 24x7 coverage for hardware, 24x7 SW phone support and SW updates (UN642E)
• 3-Year, 9x5 SW phone support, software updates (UQ583E)
• 3-year, 24x7 SW phone support, software updates (UQ584E)
• 1-year, post-warranty, parts only, global next-day advance exchange (UN643PE)
• 1-year, post-warranty, 4-hour onsite, 13x5 coverage for hardware (UN644PE)
• 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware (UN645PE)
• 1-year, post-warranty, 4-hour onsite, 24x7 coverage for hardware, 24x7 software phone support (UN646PE)
• 3 Yr 6 hr Call-to-Repair Onsite (UW331E)

HP Networking Services

Services that add value to your business
The warranties on HP Networking products provide a robust foundation for ongoing network support, but many customers have advanced support needs. Today's enterprise businesses, regardless of their size, are under increasing pressure to reduce the cost and complexity of supporting their network infrastructures. Demand for new services from businesses and their end users is constantly increasing. HP offers an affordable, comprehensive portfolio of networking services for organizations of all sizes. HP has a unique services advantage you can benefit from, and HP is the only vendor in the IT industry that can provide integrated and consistent support for your entire technology infrastructure worldwide, including networking, servers and storage, and imaging and printing, as well as desktop and mobile computing, to help you grow your business with expert support that is affordable, personal, and scaled to your needs. HP Networking's implementation and design centers simplify your network planning, while HP Technology and Enterprise Services deliver choice and flexibility.

HP provides a full range of custom services to meet the end-to-end networking needs of our customers. HP Network Lifecycle Services form the core foundation of network consulting, assessments, planning, design, integration, deployment, and management. They are available as standalone services or can be crafted to deliver solutions across the services portfolio, spanning network performance, network security and risk management, global deployment, data center networking, wireless LAN/mobility, and Unified Communications and Collaboration.

Documentation:

HP ProCurve MultiService Controller Series Datasheet (.PDF)