Opportunistic Key Caching | OKC allows fast roaming processes between access points. WLAN installations utilizing a WLAN controller and IEEE 802.1X authentication cache the access keys of the clients and are transmitted by the WLAN controller to all mananged access points |
---|
Time Control | time-based activation and deactivation of WLAN networks |
---|
Radius Server | Radius/EAP Server: User administration MAC-based, rate limiting, passphrases, VLAN user based, authentication of IEEE 802.1X clients via EAP-TLS, EAP-TTLS, EAP-MD5, EAP-GTC, PEAP, MSCHAP or MSCHAPv2 |
---|
Scripting | Script distribution enables the complete configuration of non-WLAN specific functions such as Redirects, Protocol Filter, ARF etc. Internal storage of up to three script files (max. 64 kByte) for provisioning access points without a separate HTTP server. |
---|
Software features | Central Firmware deployment (requires external webserver) and management of the Access Points. The Controller checks every day, depending on the defined policy, for the latest Firmware and compares it with the versions in the devices. The Controller downloads the matching Firmware from the server and updates the corresponding Access Points. |
---|
Switching | VLAN IEEE 802.1q, Q-in-Q tagging, Multicast Snooping (IGMP and MLD), The WLAN controller can switch user data per AP Radio or per SSID in the following ways: Direct injection into the network at the Access Point (or into VLAN) or central tunneling to the Controller (Layer 3 tunneling between different IP Subnets) |
---|
Redundancy | Includes High Availability Clustering function to synchronize and load-share between multiple BAT Controllers., Access Points are able to operate (permanently or based on a configurable time out) in Stand-Alone mode; VMWare High Availability is not supported; HiLCOS High Availability Clustering is included (up to 3 BAT Controllers can be combined to increase capacity or redundancy, each Controller needs to have its own license) |
---|
Management | IPv4/IPv6: HTML5 webinterface (HTTP, HTTPs), Command Line, LANConfig |
---|
Configuration | Access Points automatically discover the WLAN controller by means of DNS name or IP addresses. Access Points can be authenticated manually or automatically. Signaling of new access points by LED, e-mail message, SYSLOG or SNMP traps. Manual authentication via LANmonitor or WEBconfig GUI tools. Semi-automatic authentication based on access-point lists in the Controller ('bulk mode'). Fully automatic authentication with default configuration assignment (can be activated/deactivated separately, e.g. during the rollout phase). Authenticated access points can be identified by means of digital certificates, Certificate generation by integrated CA (Certificate Authority), Certificate distribution by SCEP (Simple Certificate Enrollment Protocol). Access Points can be blocked by CRL (Certificate Revocation List). Management of APs over CAPWAP (Control and Provisioning Protocol for Wireless Access Points) |
---|
Routing | IPv4/IPv6, Traffic shaping, Bandwidth reservation, DiffServ/TOS, PPP, Advanced Routing and Forwarding - ARF (separate routing contexts), Layer-3 Tunneling in conformity with the CAPWAP standard allows the bridging of WLANs per SSID to a separate IP subnet. Layer-2 packets are encapsulated in Layer-3 tunnels and transported to a LANCOM WLAN controller. By doing this the access point is independent of the present infrastructure of the network. Possible applications are roaming without changing the IP address and compounding SSIDs without using VLANs, A fixed VLAN can be set for each SSID. The WLAN controller can independently provide up to 64 separate IP networks, and each of these can be individually mapped to VLANs and, consequently, to SSIDs (Advanced Routing and Forwarding, ARF). The Controller can provide, among others, individual DHCP, DNS, routing, firewall and VPN functions for these networks. |
---|
Dynamic routing | VRRP v2, BGP, OSPF |
---|
Management Software | IPv4/IPv6: HTML5 webinterface (HTTP, HTTPs), Command Line, LANConfig |
---|