Huawei Wireless Access Controller Unit2 Brochure

Huawei Wireless Access Controller Unit2 Brochure

Huawei Access Controller Unit 2 (ACU2) is a WLAN service unit installed on Huawei S12700/S9700/S7700 switches, and

provides Access Controller (AC) functions. The ACU2 can be used to provide wireless services on large enterprise or campus

networks. It features large capacity, high reliability, various types of services, and works with Huawei wireless Access Points

(APs) to deliver large-scale, high-density access services.

Product Characteristics

A WLAN can be built rapidly by adding ACU2s to wired

network switches. This shortens WLAN construction

costs and time, and reduces the Total Cost of

Ownership (TCO). Huawei ACU2 leads the industry

with the capacity to manage 2,048 APs. It provides

flexible data forwarding, fine-grained user group

management control policies, comprehensive radio

management, and end-to-end QoS guarantees.

802.11ac-Compatible

Huawei ACU2 is compatible with Huawei 802.11ac

wireless APs, permitting users to seamlessly expand

wireless networks without incurring additional

administrative or equipment expense.

High access capacity and processing capability

An ACU2 can manage a maximum of 2048 APs and 32K •

STAs.

The ACU2 provides a nearly 40 Gbit/s line-speed forwarding •

capability.

Flexible user policy management and authorization control

capability

The ACU2 implements per-user access control based on ACLs, •

VLAN IDs, and bandwidth limits sent from the RADIUS server.

You can define user groups for users of different roles and •

apply access control policies to the user groups. Access of

users in a user group is controlled based on the ACL, user

isolation policy, and bandwidth limit applied to the user

group. You can configure inter-group user isolation or intra-

group user isolation as required to implement access control.

Independent service unit, facilitating centralized deployment

and capacity expansion

The ACU2, as a switch card, provides both wired and wireless •

service capabilities, reducing space occupied and cables in

equipment rooms and lowering network construction cost.

Multiple ACU2s can be installed on a switch to manage N x •

2,048 APs (N is the number of ACU2s).

Visualized WLAN network management and maintenance

The ACU2 and APs establish Fit AP + AC networking •

for centralized AP management, facilitating network

management and maintenance. Huawei AC and AP

products support the standard Link Layer Discovery Protocol

(LLDP), which helps display topologies of wired and wireless

networks for visualized management and maintenance.

1 WLAN

Typical Networking

The ACU 2 can be installed on switches as a WLAN service unit. It can be deployed in the following

modes:

Inline mode•

The ACU2 is installed on the aggregation switch to manage downstream APs or APs connected to access

switches.

Bypass mode•

The ACU2 is installed on the aggregation switch, but the ACU2 and APs are located in different areas.

APs communicate with the aggregation switch through Layer 3 routing.

ACU2 topology

eSight

Aggregation switch

Aggregation switch

ACU2

Internet

Access switchUser layer

Service access layer

Access switch

Service management layer

Performance Indicators

Item Specifications

Dimensions (W x D x H) 380 mm x 378 mm x 35 mm

Maximum power consumption 168W

Weight 3.2 kg

Forwarding capability 40 Gbit/s

WLAN 2

Item Specification

Management capabilities

Maximum number of managed APs: 2K

Maximum number of access users: 32K

Wireless protocols

IEEE 802.11a, 802.11b, 802.11g, 802.11d, WMM/802.11e, 802.11h, 802.11n, and 802.11ac

Wired/switching/routing

IEEE 802.3 10BASE-T, IEEE 802.3u 100BASE-TX, 1000BASE-T, 1000BASE-SX, 1000-BASE-LH, IEEE 802.1Q Vtagging, and IEEE 802.1AX Link Aggregation

Network management and maintenance

Device management and statisticsCommand line management based on SSH/Telnet/Console• SNMPv2/v3• Standard Management Information Bases (MIBs) and Huawei proprietary MIBs• Syslog• AP and station statistics• Alarms with different severities•

Centralized AP configuration and managementRegion-based AP management• Centralized version management and automatic version file load• Default AP types and self-defined AP types•

Graphic AP deployment and topology displaysAP LLDP• AC LLDP•

WLAN deployment

AP-AC networkingAP-AC Layer 2/3 networking• AC Layer 2 forwarding or Layer 3 routing• NAT traversal (APs are deployed on a private network and ACs are deployed on a • public network)

Data forwardingAP-AC CAPWAP tunnel and DTLS encryption• VAP-based forwarding (centralized forwarding and local forwarding)• Centralized authentication and local forwarding•

VLAN deploymentMapping between SSIDs and VLANs and VLAN assignments based on SSIDs or • physical locations

WDS deploymentPoint-to-point and point-to-multipoint• Automatic topology detection and loop prevention: Spanning Tree Protocol (STP)•

AC active/standby modeDual-link AC backup• 1+1 hot backup• N+1 or N+N backup•

Product Features

3 WLAN

Feature Description

Radio management

Channel and power configurationCentralized or static channel and power configuration• Automatic channel allocation to implement global or partial radio calibration• Automatic power adjustment to compensate for coverage holes• AP region-based configuration and management•

Load balancingLoad balancing based on traffic volume• Load balancing based on the number of users•

Wireless service control

Extended Service Set (ESS)-based service managementESS-based SSID hiding and AP isolation at Layer 2• Maximum number of access users and associated aging time settings in an ESS• ESS-to-service VLAN mappings• ESS associations with a security profile or a QoS profile• Internet Group Management Protocol (IGMP) support for APs in an ESS•

Wireless roamingLayer 2 roaming• Inter-VLAN Layer 3 roaming• Pairwise Master Key (PMK) caching, fast key negotiation• Inter-AC roaming•

DHCP service controlBuilt-in DHCP server• DHCP snooping on APs • DHCP relay and DHCP snooping on the AC•

Multicast service managementIGMP snooping• IGMP proxy•

Wireless user management

WLAN user managementUser blacklist and whitelist• User access number limit• Forced logout of users• Multiple queries including online user information and statistics•

User group managementACLs based on user groups• Isolation based on user groups (user isolation in a group or between groups)•

Wireless security and authentication

Authentication and encryptionOPEN/WEP/PSK/WPA (2) + 802.1x• WEP/TKIP/AES (CCMP)• WAPI•

User authentication and controlMAC address authentication, Portal authentication, and 802.1x authentication• MAC + Portal authentication• Built-in Portal authentication and authentication page customization• PEAP/TTLS/TLS/MD5/CHAP•

WLAN 4

Purchase and Accessory Information

Feature Description

Wireless security and authentication

Security and defenseACLs based on ports, users, and user groups• IPSec• Isolation based on VAPs and user groups• IP source guard for STAs• Rogue AP detection and alarm function• User blacklist and whitelist•

AAALocal authentication/local accounts (MAC addresses and accounts)• RADIUS authentication• Multiple authentication servers•

Wireless QoS control

Flow control:VAP-based rate limiting• User-group-based rate limiting• Rate limiting for a specified user• Dynamic traffic control, preventing resources from being wasted by STAs•

Priority mapping and schedulingWMM, 802.1p, and DSCP• WMM and QoS mapping for user packets and tunnel packets• QoS priority settings and mapping for CAPWAP tunnel packets•

Item Part Number Product Name Description

ACU2 03030TPP ACU2WLAN ACU2 Access Controller Unit(128 AP Control Resource Included)

ACU2 License

88032BGV L-ACU2-128APACU2 Wireless Access Controller AP Resource License(128 AP)

88032BGX L-ACU2-256APACU2 Wireless Access Controller AP Resource License(256 AP)

88032GSM L-ACU2-384APACU2 Wireless Access Controller AP Resource License(384 AP)

88032BGY L-ACU2-512AP ACU2 Wireless Access Controller AP Resource License(512 AP)

5 WLAN

Professional Service and Support

Huawei WLAN planning tools deliver expert network design and optimization services using the most

professional simulation platform in the industry. Backed by fifteen years of continuous investment in

wireless technologies, extensive network planning and optimization experience, as well as rich expert

resources, Huawei helps customers:

Design, deploy, and operate a high-performance network that is reliable and secure.•

Maximize return on investment and reduce operating expenses.•

More Information

For more information, please visit http://e.huawei.com or contact your local Huawei office.

WLAN 6

Enterprise Services Product Overview Marketing Documentation

Copyright © Huawei Technologies Co., Ltd. 2014. All rights reserved.

Trademark Notice

General Disclaimer

, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.

The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.