WLAN
Rogue WLAN client detection based on probe requestsClient detection
Authentication of an access point in WLAN client mode at another access point via 802.1X (EAP-TLS, EAP-TTLS and PEAP)802.1X supplicant
Layer-3 Tunneling in conformity with the CAPWAP standard allows the bridging of WLANs per SSID to a separate IP subnet. Layer-2 packets are
encapsulated in Layer-3 tunnels and transported to a LANCOM WLAN controller. By doing this the access point is independent of the present
infrastructure of the network. Possible applications are roaming without changing the IP address and compounding SSIDs without using VLANs.
Layer-3 Tunneling
The effective distances and transmission rates that can be achieved are depending of the site RF conditions*) Note
IEEE 802.11n Features
MIMO technology is a technique which uses multiple transmitters to deliver multiple data streams via different spatial channels. LANCOM uses a
3 x 3 MIMO Configuration where 2 data streams are spread over 3 transmitters. Depending on the existing RF conditions the throughput is doubled
with MIMO technology
MIMO
Two adjacent 20 MHz channels are combined to create a single 40 MHz channel. Depending on the existing RF Conditions channel bonding doubles
the throughput.
40 MHz Channels
MAC Aggregation increase the 802.11 MAC efficiency by combining MAC data frames and sending it out with a single header. The receiver
acknowledges the combined MAC frame with a Block Acknowledgement. Depending on existing RF conditions, this technique improves throughput
by up to 20%.
MAC Aggregation and Block
Acknowledgement
The guard interval is the time between OFDM symbols in the air. 802.11n gives the option for a shorter 400 nsec guard interval compared to the
legacy 800 nsec guard interval. Under ideal RF conditions this increases the throughput by upto 10%
Short Guard Interval
Support for Broadband Fixed Wireless Access in 5.8 GHz band with up to 4 Watt EIRP for WLAN point-to-point links according to the national
regulations of your country, special antennas required
BFWA*
The use of BFWA is subject to country specific regulation*) Note
WLAN operating modes
Infrastructure mode (autonomous operation or managed by LANCOM WLAN Controller)WLAN access point
Point-to-multipoint connection of up to 16 Ethernet LANs (mixed operation optional), broken link detection, blind mode, supports VLAN When
configuring Pt-to-Pt links, pre-configured names can be used as an alternative to MAC Adresses for creating a link. Rapid spanning-tree protocol
to support redundant routes in Ethernet networks
WLAN bridge
Transparent WLAN client mode for wireless Ethernet extensions, e.g. connecting PCs or printers by Ethernet; up to 64 MAC addresses. Automatic
selection of a WLAN profile (max. 8) with individual access parameters depending on signal strength or priority
WLAN client
Firewall
Incoming/Outgoing Traffic inspection based on connection information. Trigger for firewall rules depending on backup status, e.g. simplified rule
sets for low-bandwidth backup lines. Limitation of the number of sessions per remote site (ID)
Stateful inspection firewall
Check based on the header information of an IP packet (IP or MAC source/destination addresses; source/destination ports, DiffServ attribute);
remote-site dependant, direction dependant, bandwidth dependant
Packet filter
Network Address Translation (NAT) based on protocol and WAN address, i.e. to make internal webservers accessible from WANExtended port forwarding
N:N IP address mapping for translation of IP addresses or entire networksN:N IP address mapping
The firewall marks packets with routing tags, e.g. for policy-based routingTagging
Forward, drop, reject, block sender address, close destination port, disconnectActions
Via e-mail, SYSLOG or SNMP trapNotification
Quality of Service
Dynamic bandwidth management with IP traffic shapingTraffic shaping
Dynamic reservation of minimum and maximum bandwidths, totally or connection based, separate settings for send and receive directions. Setting
relative bandwidth limits for QoS in percent
Bandwidth reservation
Priority queuing of packets based on DiffServ/TOS fieldsDiffServ/TOS
Automatic packet-size control by fragmentation or Path Maximum Transmission Unit (PMTU) adjustmentPacket-size control
Automatic or fixed translation of layer-2 priority information (IEEE 802.11p-marked Ethernet frames) to layer-3 DiffServ attributes in routing mode.
Translation from layer 3 to layer 2 with automatic recognition of 802.1p-support in the destination device
Layer 2/Layer 3 tagging
Security
Monitoring and blocking of login attempts and port scansIntrusion Prevention
Source IP address check on all interfaces: only IP addresses belonging to the defined IP networks are allowedIP spoofing
LANCOM 1781EW
Features as of: LCOS 8.60
