NetGear WFS709TP ProSafe Smart Wireless Controller

NetGear WFS709TP ProSafe Smart Wireless Controller

The NETGEAR ProSafe Smart Wireless Controller is a full-featured wireless controller that centrally manages 16 access points, delivering integrated wireless mobility, security and converged services for both wired and wireless users.

Supporting up to 256 users per ProSafe Smart Wireless Controller, the WFS709TP has built- in PoE support on all eight 10/100 interfaces. With a Gigabit Ethernet port typically used to connect the wireless controller to the network backbone, WFS709TP supports advanced security features such as 802.1x, EAP-PEAP, EAP-TLS, EAP-TTLS, 802.11i, MAC address, SSID and location-based authentication.

With identity-based security features such as support for RADIUS and AAA server support, NETGEAR ProSafe Smart Wireless Controller, truly unifies wired and wireless access without compromising on security.

Deployed as an overlay on the existing network infrastructure, WFS709TP centrally manages, deploys, monitors and controls your wireless infrastructure. Supporting multiple deployment architectures including standalone wireless controller deployments to hierarchical setups in master/local configurations, the NETGEAR ProSafe Smart Wireless Controller, can be configured in "master" mode where all the configuration and security parameters are managed for the entire wireless network. In addition, WFS709TP can be configured in "local" mode, acting as policy enforcement points for the "master" controller as part of a hierarchical setup.

The overall Smart Wireless Controller solution supports up to 32 access points with the Smart Wireless Controllers configured in redundant master/local mode and up to 48 access points with the Smart Wireless Controllers configured in non-redundant master/local configuration. A standalone Smart Wireless Controller supports up to 16 access points.

Targeted towards the growing business NETGEAR ProSafe Smart Wireless Controller provides continuous wireless coverage with features such as IntelliFi radio management. IntelliFi radio management provides automatic self-configuration of all radio parameters including transmit power level, channel, load balancing and interference avoidance.

For low-latency applications such as VoIP, NETGEAR ProSafe Wireless Controller delivers VoIP over wireless by providing support for call admission control, voice-aware fast-roaming and strict over-the-air QoS to deliver mobile voice capabilities.

Wireless users on the network can now experience seamless roaming as moving between multiple access points is made simple with the ProSafe Smart Wireless Controller centralized architecture. All user states, including security and mobility information, are maintained in the centralized Smart Wireless Controller. Access points (AP's) act as logical extensions to the WFS709TP, accepting wireless traffic and sending it to the Wireless Controller over IP tunnels.

Access points supported include NETGEAR ProSafe 802.11a/g Dual Band Light Wireless Access Point (WAGL102) and NETGEAR ProSafe 802.11g Light Wireless Access Point (WGL102).

The WFS709TP can also manage existing NETGEAR WG102 and WAG102 Wireless Access Point deployment by a one-time image download available on http://support.netgear.com that allows the existing wireless access point to be managed by the Wireless Controller.

With integrated RF planning tools, administrators can input floor plan images, number of floors, building dimensions, desired coverage and an overlap factor for fault tolerance. The planning tools compute the predicted RF characteristics of the building, plot the optimal location of the access points and display predicted coverage.

Guest access, provided by a built-in captive portal, allows guest users connecting over the wireless network restricted guest level access to the network, prohibiting them any access to the sensitive data on the corporate network.

For mission-critical applications requiring network resiliency, the WFS709TP supports fault tolerant hardware with industry standard N+1 wireless controller redundancy and access point interleaving for access point redundancy. These features make it possible to provide a wireless network with no single point of failure, guaranteeing the highest possible availability.

Specifications

• Memory: Flash/RAM - 256 MB, CompactFlash - 256 MB RAM
• CPU
• LAN port 10/100: Eight 10/100Base-T PoE ports and one 10/100/1000Base-T uplink port
• Auto-MDIX-MDI-X
• Serial port: For serial console access only
• MTBF 5 years/43,800 hours
• LEDs to indicate power, port configuration and activity

• Power consumption: 200W maximum
• AC input voltage: 110 - 240V AC
• AC input frequency: 50 - 60 Hz

• Controlled access points: 16, supports 16 users each on average:
• NetGear ProSafe WGL102
• NetGear ProSafe WAGL102
• Users: 256
• MAC Addresses: 4096
• VLAN IP Interfaces: 128
• Fast Ethernet ports: 8
• Gigabit Ethernet ports: One 10/100/1000Base-T
• Total throughput: 1 Gbps
• Encrypted throughput (3DES and AES-CCM): 200 Mbps

• 802.11i security (WPA2 and WPA)
• 802.1x user and machine authentication
• EAP-PEAP, EAP-TLS, and EAP-TTLS support
• 802.11i PMK caching for fast-roaming applications
• EAP offload for AAA server scalability and survivability
• Stateful 802.1x authentication for standalone APs
• MAC address, SSID and location-based authentication
• Multi-SSID support for operation of multiple WLANs
• SSID-based RADIUS server selection
• Simultaneous centralized and distributed WLAN support

• Wired and wireless user authentication
• Captive portal; 802.1x and MAC address authentication
• Username, IP Address, MAC address and encryption key binding for strong network identity creation
• Per-packet identity verification to prevent impersonation
• RADIUS based AAA server support
• Internal user DB for AAA server failover protection
• Per-user session accounting for usage auditing
• Configurable acceptable use policies for guest access

• Voice and data on a single SSID for convergence devices
• Flow-based QoS using Voice Flow Classification (VFC)
• SIP, SpectraLink (SVP), Cisco SCCP and VoceraALG
• Strict priority queuing for over-the-air QoS
• DiffServ marking and 802.1p support for network QoS
• On-hook and off-hook VoIP client detection
• VoIP call admission control (CAC) using VFC
• Call reservation thresholds for mobile VoIP calls
• Voice-aware RF management for ensuring voice quality
• Fast-roaming support for ensuring voice quality
• SIP early media and ring tone generation (RFC 3960)
• Per-user and per-role rate limits (bandwidth contracts)

• Automatic channel and power settings for controlled APs
• Simultaneous air monitoring and end user services
• Self-healing coverage based on dynamic RF conditions
• Dense deployment options for capacity optimizations
• AP load balancing based on number of users
• Coverage hole and RF interference detection
• 802.11h support for radar detection and avoidance

• Integration with wireless infrastructure
• Simultaneous or dedicated monitoring capabilities
• Rogue AP detection and built-in location visualization

• L2 and L3 switching over the air and over the wire
• VLAN pooling for easy, scalable network designs
• VLAN mobility for seamless L2 roaming
• Proxy mobile IP and proxy DHCP for L3 roaming
• Built-in DHCP server and DHCP relay
• VRRP-based N+I controller redundancy (L2)
• AP provisioning-based N+I controller redundancy (L3)
• 802.1d Spanning Tree Protocol

• RF planning and AP deployment toolkit
• Centralized AP provisioning and image management
• Live coverage and visualization heat maps
• Detailed statistics visualization for monitoring
• Remote packet capture for RF troubleshooting
• Interoperable with Ethereal Airopeek and AirMagnet analyzers
• Multi-controller configuration and management
• Location visualization and device tracking
• System-wide event collection and reporting

• Web-based user interface access over HTTP and HTTPS
• Quickstart screens for easy controller configuration
• Restricted CLI access using console, disabled by default CLI access, SSH and telnet console
• Role-based access control for restricted admin access
• Authentication access via RADIUS or internal DB
• SNMPv3 and SNMPv2 for controller monitoring
• Standard MIBS and private enterprise MIBS
• Detailed message logs with syslog event notification

• CE mark (external AC/DC power supplies)
• PSE Mark (external AC/DC power supplies)
• Underwriters Laboratories (UL) 60950
• Canadian Standards Association (CAN/CSA) C22.2 No. 60950
• EN 60950 / IEC 60950 CB Scheme
• FCC Part 15 Class A
• VCCI Class A
• AS/NZS CISPR 22 Class A AS/NZS4771 (C-Tick)