ENABLING A SECURE AND RELIABLE WIRELESS ENTERPRISE FOR MEDIUM TO LARGE DEPLOYMENTS
The RFS 6000 Wireless Services Controller from Zebra enables the wireless enterprise by offering an integrated WLAN communication platform that delivers secure and reliable voice, video and data applications. Designed on the innovative and modular Wi-NG operating system, the RFS 6000 provides wired and wireless networking services, multiple locationing technologies such as Wi-Fi and RFID*; resiliency via 3G wireless broadband backhaul; and high performance with 802.11n networks. The enterprise class RFS 6000 delivers the best in class performance, security, scalability and manageability required to meet the needs of demanding mission critical business applications.
Based on Zebra's landmark Wireless Next Generation (Wi-NG) operating system, the RFS 6000 provides the tools you need to simplify and minimize the costs associated with real-time management of mobility solutions. The Wi-NG architecture provides unified management of network hardware, software configuration, and network policies, complete with built-in process monitors and troubleshooting tools for all the Access Points that it administers policy configurations for.
The RFS 6000 offers a multicore, multithreaded Wi-NG architecture capable of supporting 2,000 to mobile devices and up to 256 802.11 a/b/g/n adaptive access points per switch/controller. The result is an architecture that is purpose-built to deliver high availability — and scalability. In addition, a user accessible ExpressCard™ Slot supports 3G broadband cards for a redundant wireless WAN backhaul connection, providing a truly self-sustainable wireless enterprise.
Comprehensive network security features keep wireless
transmissions secure and provide compliance for HIPAA
and PCI. The RFS 6000 provides gap-free security for the
WLAN network, following a tiered approach to protect
and secure data at every point in the network, wired or
wireless. This complete solution includes a wired/wireless
firewall, a built-in wireless intrusion protection system
(IPS), an integrated IPSec VPN gateway, AAA Radius
Server and secure guest access with a captive web portal,
reducing the need to purchase and manage additional
infrastructure. Additional security features include MACbased
authentication, 802.11w* to secure management
frames, NAC support, anomaly analysis and more.
Support for VoWLAN provides cost-effective voice services throughout the wireless enterprise, enabling push-to-talk and more for employees inside the four walls as well as outside. The rich feature set provides granular control over the many wireless networking functions required to deliver high performance persistent clear connections with toll-quality voice. Quality of Service (QoS) ensures superior performance for voice and video services. WMM Admission Control, including TSPEC, SIP Call Admission Control, and 802.11k* radio resource management, ensures dedicated bandwidth for voice calls as well as better control over active voice calls for a variety of VoIP handsets.
The RFS 6000 simplifies and reduces the cost of extending mobility to remote and branch offices as well as telecommuters. Zebra's Independent Mesh Access Points can be deployed at remote locations yet centrally managed in the Network Operations Center (NOC) through the RFS 6000 (single switch or a cluster for scalability). Remote Site Survivability (RSS) mesh access points deliver secure uninterrupted wireless service — providing unparalleled resiliency that survives a WAN link outage with the distributed intelligence of WiNG 5 that delivers controller-like services at the edge.
The WiNG architecture delivers SMART RF Management, which provides the dynamic RF tuning required for optimal network performance. This feature takes self-healing to the next level, dramatically reducing network monitoring IT costs by enabling the WLAN to intelligently adapt to the ever-changing RF environment. The ability to dynamically adjust the power and channels automatically eliminates the gaps in coverage that occur when an AP fails, or has a faulty antenna or there is a change in your environment — all without any physical intervention. And adjustments are completely transparent — there is no impact on voice calls and data sessions in progress — protecting the quality of service and the user experience to ensure user productivity.
All the enterprise class services such as security, voice, performance and resiliency are built into the Wi-NG architecture — the innovative and modular operating system (OS) for the RFS 6000. The RFS6000 includes a full-function DHCP server, AAA Server, POE/L2 Switch, VPN gateway. Captive Portal for Guest Access and a Wired/Wireless Firewall as part of the base OS image - giving users a highly secure multi-function solution,, simplifying the network deployment and reducing opex and capex. These comprehensive services come at no additional cost and are packaged together to make mobility work — even better.
As an industry leader in mobility, Zebra offers the experience gained from deploying mobility solutions all over the globe in many of the world’s largest enterprises. Leverage this expertise through Zebra Enterprise Mobility Services, which provides the comprehensive support programs you need to deploy and maintain your RFS 6000 at peak performance. Zebra recommends protecting your investment with ‘Service from the Start Advance Exchange Support’, a multi-year program that provides the next-business-day device replacement , technical software support and software downloads you need to keep your business running smoothly and productively. This service also includes ‘Comprehensive Coverage’, which covers normal wear and tear, as well as internal and external components damaged through accidental breakage — significantly reducing your unforeseen repair expenses.
* Available in WiNG 4 only currently
** Available in WiNG 5
The RFS 6000 offers the comprehensive functionality necessary to extend wireless voice, video and data access inside medium to large enterprises — as well as to remote locations such as branch offices.
|802.1D-1999 Ethernet bridging; 802.11-.802.3 bridging; 802.1Q VLAN tagging and trunking; proxy ARP; IP packet steering-redirection|
|Wireless LAN||Supports 32 WLANs; multi-ESS/BSSID traffic segmentation; VLAN to ESSID mapping; auto assignment of VLANs (on RADIUS authentication); power save protocol polling; pre-emptive roaming; VLAN Loadbalancing and dynamic VLAN adjustment; IGMP Snooping|
|Bandwidthmanagement||Congestion control per WLAN; per user based on user count or bandwidth utilization per AP; dynamic load balancing; bandwidth provisioning via AAA server|
|Layer 2 or Layer 3 deployment of dependent and Adaptive access points|
|Layer 3 Mobility (Inter-Subnet Roaming)|
|IPv6 client support|
|DependentAccess Ports||Supports 1-48 802.11a/b/g AP 300 or 256** 802.11a/b/g/n AP 650 / AP 621 access points for L2 or L3 deployment per RFS 6000 Wireless Services Controller; Legacy support*: AP 100 for L2 deployments only|
|Adaptive AP||Supports adoption of 256 adaptive access points per RFS 6000 Wireless Services Controller; Legacy support*: AP 4131 port conversion for L2 deployments only|
|Power-over-Ethernet||Integrated; up to 29.7 watts per Ethernet port, up to a maximum of 180 watts for simultaneous operation|
|Mesh Capability||Single hop mesh** supported on the 802.11n Dependent and Adaptive/Independent Access Points. WING v4.x supports multi-hop mesh on AP5131/AP7131|
|Radio frequency automatic channel select (ACS); Transmit power control management (TPC); Country code-based RF configuration; 802.11b, 802.11g 802.11a, and 802.11n|
|Role-based wired/wireless firewall (L2-L7) with stateful inspection for wired and wireless traffic; Active firewall sessions — 100,000 per RFS 6000 Wireless Services Controller; protects against IP Spoofing and ARP Cache Poisoning|
|Access Control Lists(ACLs)||L2/L3/L4 ACLs|
|Wireless IDS/IPS||Multi-mode rogue AP detection, Rogue AP Containment, 802.11n Rogue Detection, Ad-Hoc Network Detection, Denial of Service protection against wireless attacks, client blacklisting, excessive authentication/ association; excessive probes; excessive disassociation/ deauthentication; excessive decryption errors; excessive authentication failures; excessive 802.11 replay; excessive crypto IV failures (TKIP/CCMP replay); Suspicious AP, Authorized device in ad-hoc mode, unauthorized AP using authorized SSID, EAP Flood, Fake AP Flood, ID theft, ad-hoc advertising Authorized SSID|
|Geofencing||Add location of users as a parameter that defines access control to the network|
|WIPS sensorconversion||Supported on all dependent and Independent Access Points|
|Anomaly Analysis||Source Media Access Control (MAC) = Dest MAC; Illegal frame sizes; Source MAC is multicast; TKIP countermeasures; all zero addresses|
|Authentication||Access Control Lists (ACLS); pre-shared keys (PSK); 802.1x/EAP—transport layer security (TLS), tunneled transport layer security (TTLS), protected EAP (PEAP); Kerberos Integrated AAA/RADIUS Server with native support for EAP-TTLS, EAP-PEAP (includes a built in user name/password database; supports LDAP), and EAP-SIM|
|Transport encryption||WEP 40/128 (RC4), KeyGuard, WPA—TKIP, WPA2-CCMP (AES), WPA2-TKIP|
|802.11w*||Provides origin authentication, integrity, confidentiality and replay protection of management frames for Zebra's AP 300 access point|
|IPSec VPN gateway||Supports DES, 3DES and AES-128 and AES-256 encryption, with site-to-site and client-to-site VPN capabilities; supports 1,024 concurrent IPSEC tunnels per switch|
|Secure guest access(Hotspot provisioning)||Provides secure guest access for wired* and wireless clients. built-in captive portal, customizable login/ welcome pages, URL redirection for user login, usagebased charging, dynamic VLAN assignment of clients, DNS white list, GRE tunneling of traffic to central site, API support for interoperability with custom web portals support for external authentication and billing systems|
|Wireless RADIUSSupport (Standard and Zebra Vendor Specific Attributes)||User Based VLANs (Standard)MAC Based Authentication (Standard)User Based QoS (Zebra VSA)Location Based Authentication (Zebra VSA)Allowed ESSIDs (Zebra VSA)|
|NAC support with third party systems from Microsoft, Symantec and Bradford|
|Command line interface (serial, telnet, SSH); secure Web-based GUI (SSL) for the wireless switch and the cluster; SNMP v1/v2/v3; SNMP traps—40+ user configurable options; Syslog; Firmware, Config upgrade via TFTP, FTP & SFTP (clients); simple network time protocol (SNTP); text-based switch configuration files; DHCP (client/server/relay), switch auto-configuration and firmware updates with DHCP options; multiple user roles (for switch access); MIBs (MIB-II, Etherstats, wireless switch specific monitoring and configuration); Email notifications for critical alarms*; Wireless Client friendly nomenclatures naming capability|
|REAL TIME LOCATIONING SYSTEM (RTLS)*|
|RSSI based triangulation for Wi-Fi assets|
|Tags supported||Ekahau, Aeroscout|
|RFID support||Compliant with LLRP protocol. Built-in support for the following Zebra RFID readers: fixed (XR440, XR450, XR480; mobile (RD5000) and handheld (MC9090-G RFID)|
|OPTIMIZED WIRELESS QOS|
|RF priority||Optimizes network performance by preventing flooding of the broadcast domain|
|Wi-Fi Multimediaextensions||WMM-power save with TSPEC Admission Control; WMM U-APSD|
|IGMP snooping||Optimizes network performance by preventing flooding of the broadcast domain|
|SIP Call AdmissionControl||Controls the number of active SIP sessions initiated by a wireless VoIP phone|
|802.11k*||Provides radio resource management to improve client throughput (11k client required)|
|Classificationand marking||Layer 1-4 packet classification; 802.1p VLAN priority; DiffServ/TOS|
|SYSTEM RESILIENCY AND REDUNDANCY|
|Active:Standby; Active:Active and N+1 redundancy with access port and MU load balancing; Critical resource monitoring|
|Virtual IP*: Single virtual IP (per VLAN) for a switch/contoller cluster to use as the default gateway by mobile devices or wired infrastructure. Seamless fail-over of associated services e.g. DHCP Server.|
|SMART RF:Network optimization to ensure user quality of experience at all times by dynamic adjustments to channel and power (on detection of RF interference or loss of RF coverage/neighbor recovery).|
|Dual Firmware bank supports Image Failover capability|
|ExpressCard™ Slot: Driver support for 3G wireless cards for WAN backhaul
|Form factor||1U Rack Mount|
|Dimensions||1.75 in. H x 17.32 in. W x 15.39 in. D44.45 mm H x 440 mm W x 390.8 mm D|
|Weight||14 lbs./6.35 kg|
|Physical interfaces||1x Uplink Port -10/100/1000 Cu/ Gigabit SFP interface8x 10/100/1000 Cu Ethernet Ports with 29.7 Watts PoE,802.3af and 802.3at Draft1x 10/100 Management Interface (OOB port)1x USB 2.0 Host1x ExpressCard™ Slot (in USB mode) 1X PCI-X Interface1x Serial Port (RJ45 style)|
|Operating temperature||32° F to 104° F /0° C to 40° C|
|Storage temperature||-40° F to 158° F/-40° C to 70° C|
|Operating humidity||5% to 85% (w/o condensation)|
|Storage humidity||5% to 85% (w/o condensation)|
|Heat dissipation||665 BTU per hour|
|AC input voltage||100-240 VAC 50/60Hz|
|Product safety||UL / cUL 60950-1, IEC / EN60950-1|
|EMC compliance||FCC (USA), Industry Canada, CE (Europe), VCCI (Japan), C-Tick (Australia/New Zealand)|
|RECOMMENDED ENTERPRISE MOBILITY SERVICES|
|Customer Services||Service from the Start Advance Exchange Support|