
WLAN profile settings*
Up to 13 channels, max. 3 non-overlapping (depending on country-specific restrictions)Radio channels 2.4 GHz
Up to 26 non-overlapping channels (available channels and further obligations such as automatic DFS dynamic channel selection depending on
national regulations)
Radio channels 5 GHz
Managed LANCOM Access Points support the WLAN standard IEEE 802.11u (Hotspot 2.0) which allows mobile clients a seamless transition from
the cellular network into WLAN hotspots. Authentication methods using SIM card information, certificates or username and password, enable an
automatic, encrypted login to WLAN hotspots of roaming partners - without the need to manually enter login credentials
IEEE 802.11u
Seamless handover between radio cells, IAPP support with optional restriction to an ARF context, IEEE 802.11d supportRoaming
Opportunistic key caching allows fast roaming processes between access points. WLAN installations utilizing a WLAN controller and IEEE 802.1X
authentication cache the access keys of the clients and are transmitted by the WLAN controller to all mananged access points
Opportunistic Key Caching***
VLAN ID definable per interface, WLAN SSID, point-to-point connection and routing context (4094 IDs) IEEE 802.1qVLAN
IEEE 802.11i / WPA2 with passphrase (WPA2-Personal) or 802.1X (WPA2-Enterprise) and hardware-accelerated AES, closed network, WEP64,
WEP128, WEP152, user authentication, 802.1x /EAP, LEPS, WPA1/TKIP
Security
Prioritization according to Wireless Multimedia Extensions (WME, subset of IEEE 802.11e)Quality of Service
Detection of rogue AP's and the channel information for all WLAN channels during normal AP operation. The Background Scan Time Interval defines
the time slots in which an AP or Router searches for a foreign WLAN network in its vicinity. The time interval can be specified in either milliseconds,
seconds, minutes, hours or days
Background scanning
Rogue WLAN client detection based on probe requestsClient detection
The WLAN standard IEEE 802.11u (Hotspot 2.0) allows for a seamless transition from the cellular network into WLAN hotspots. Authentication
methods using SIM card information, certificates or username and password, enable an automatic, encrypted login to WLAN hotspots - without
the need to manually enter login credentials.
IEEE 802.11u
Coding method according to IEEE 802.11n. The Space Time Block Coding improves reception by coding the data stream in blocks.Space Time Block Coding (STBC)*
Low Density Parity Check (LDPC) is an error correcting method. IEEE 802.11n uses convolution coding (CC) as standard error correcting method,
the usage of the more effective Low Density Parity Check (LDPC) is optional.
Low Density Parity Check (LDPC)*
Depends on the access points in operation*) Note
Only in installations with WLAN controller***) Note
LANCOM Active Radio Control
Automatic selection of optimal WLAN channels. Due to reduced channel overlaps, WLAN clients benefit from an improved data throughput. In
controller-based installations, an automatic selection of optimal channels is conducted for all managed access points.
RF Optimization *
Steering of WLAN clients towards the 5 GHz frequency band by restricting the access to the 2.4 GHz band.Band Steering**
Only in installations with WLAN controller*) Note
Depends on the access points in operation. Steering of WLAN clients is not available in US version**) Note
WLAN Controller
Any combination of up to 6 LANCOM access points and WLAN routers can be centrally managed by the LANCOM WLAN Controller. The WLC AP
upgrade expansion option enables you to increase the number of access points up to 30 LANCOM WLAN access points and WLAN routers to be
managed. Capacities can be expanded even further by employing multiple Controllers.
Number of managed devices
The WLAN Controller can switch user data per AP Radio or per SSID in the following ways: – Direct switching to the LAN at the AP (for maximum
performance, e.g. for 802.11n-based access points) – Logical seperation of user data into VLAN's (e.g. for WLAN guest access accounts) – Central
tunneling to the Controller (layer 3 tunneling between different IP Subnets)
Smart Controller technology
LANCOM access points and WLAN routers automatically discover the WLAN Controller by means of DNS name or IP addresses. Even AP's at remote
sites or in home offices with no direct access to the Controller can be integrated into the central Controller
Auto Discovery
Access Points can be authenticated manually or automatically. Signaling of new access points by LED, e-mail message, SYSLOG and SNMP traps.
Manual authentication via LANmonitor or WEBconfig GUI tools. Semi-automatic authentication based on access-point lists in the Controller ('bulk
mode'). Fully automatic authentication with default configuration assignement (can be activated/deactivated separately, e.g. during the rollout
phase). Authenticated access points can be identified by means of digital certificates; certificate generation by integrated CA (Certificate Authority);
certificate distribution by SCEP (Simple Certificate Enrollment Protocol). Access points can be blocked by CRL (Certificate Revocation List).
Authentication and Authorization
CAPWAP (Control and Provisioning Protocol for Wireless Access Points)Management communication protocol
Layer-3 Tunneling in conformity with the CAPWAP standard allows the bridging of WLANs per SSID to a separate IP subnet. Layer-2 packets are
encapsulated in Layer-3 tunnels and transported to a LANCOM WLAN controller. By doing this the access point is independent of the present
infrastructure of the network. Possible applications are roaming without changing the IP address and compounding SSIDs without using VLANs
Layer-3 Tunneling
DTLS encryption of the control channel between WLAN Controller and Access Point (256-bit AES encryption with digital certificates, incl. hardware
encryption accelerator; encryption can be disabled for diagnostic purposes).
Encryption
LANCOM WLC-4006+
Features as of: LCOS 8.84
Kommentare zu diesen Handbüchern