HPE JG643A Getting Started Guide

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

QuickSpecs

have older product names and model numbers that differ from current models.

HP 5800 Access Controller Module for 32–64 Access

HP 5800 Access Controller Module for 32–64 AccessHP 5800 Access Controller Module for 32–64 Access

Points

PointsPoints

Overview

Models

ModelsModels

HP 5800 Access Controller Module for 32–64 Access Points

Key features

Key featuresKey features

Flexible forwarding modes Carrier-class wireless user access control IPv4/IPv6 dual stack End-to-end QoS

Product overview

Product overviewProduct overview

The 5800 Access Controller Module (ACM) for 32–64 access points (APs) supports up to 32 APs by default. After adding an upgrade license for 32 additional users (up to one license for 32 additional users is supported), it can support up to 64 APs and thus can satisfy the deployment requirements of medium-size wireless networks. The module is applicable for the six models of HP 5800 Switch series.

JD443A

Features and benefits

Features and benefitsFeatures and benefits

Quality of Service

Quality of ServiceQuality of Service

End-to-end QoS

End-to-end QoSEnd-to-end QoS standard but also the IPv6 QoS; the QoS DiffServ model includes traffic classification and traffic policing, completely implementing the six groups of services—EF, AF1 through AF4, and BE; this enables ISPs to provide differentiated services for users, making the Internet a true integrated network carrying data, voice, and video services at the same time IEEE 802.1p prioritization

IEEE 802.1p prioritization

IEEE 802.1p prioritizationIEEE 802.1p prioritization Class of Service

Class of Service

Class of ServiceClass of Service TCP/UDP port number, source port, and DiffServ

Management

ManagementManagement

Automatic radio power adjustment

Automatic radio power adjustmentAutomatic radio power adjustment power requirements based on environmental changes and providing high-quality user access signal coverage Automatic radio channel adjustment

Automatic radio channel adjustment

Automatic radio channel adjustmentAutomatic radio channel adjustment of a high-quality channel to each AP, reducing adjacent channel interference Load balancing

Load balancing

Load balancingLoad balancing throughput regardless of location or number of online sessions Rogue AP detection

Rogue AP detection

Rogue AP detectionRogue AP detection Enterprise network management

Enterprise network management

Enterprise network managementEnterprise network management network management platform and Wireless Service Management (WSM), which effectively integrate traditionally disparate management tools into one easy-to-use interface Secure controller management

Secure controller management

Secure controller managementSecure controller management management station; controller supports SNMPv3 as well as SSH and SSL for secure CLI and Web management AAA

AAA

AAAAAA

(QoS)

: based on the Comware V5 platform, the 5800 ACM (for 32–64 APs) supports not only the DiffServ

: delivers data to devices based on the priority and type of traffic

(CoS): sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol,

: automatic AP power adjustment features analyze user access status in real time, adapting

: intelligent channel switching and real-time interference detection provide the allocation

: intelligent load-sharing analyzes the locations of wireless clients in real time, providing high-quality client

: regular scans for rogue APs help confirm that the network is secure

: is supported by the Web-based, enterprise-class HP Intelligent Management Center (IMC)

: securely manages the controller from a single location with IMC or any other SNMP

: use embedded AAA server or use external AAA server for local users

Connectivity

ConnectivityConnectivity

IPv6

IPv6IPv6

IPv6 host: enables controllers to be managed and deployed at the IPv6 network's edge

DA - 13814 Worldwide — Version 2 — November 9, 2011

Page 1

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

HP 5800 Access Controller Module for 32–64 Access

HP 5800 Access Controller Module for 32–64 AccessHP 5800 Access Controller Module for 32–64 Access

QuickSpecs

Overview

Dual stack (IPv4 and IPv6): transitions from IPv4 to IPv6, supporting connectivity for both protocols MLD snooping: IPv6 multicast traffic to the appropriate interface, preventing traffic flooding IPv6 ACL/QoS: supports ACL and QoS for IPv6 network traffic

IEEE 802.11h International Telecommunication Union

IEEE 802.11h International Telecommunication UnionIEEE 802.11h International Telecommunication Union automatically select another channel and adjust transmit power to reduce interference with systems such as radar, if detected on that same channel

Performance

PerformancePerformance

Flexible forwarding modes

Flexible forwarding modesFlexible forwarding modes forwarding mode; you can set SSID-based forwarding type as needed; in a wireless network of centralized forwarding mode, all wireless traffic is sent to an AC for processing; in a wireless network where APs are deployed at branches, ACs are deployed at the headquarters, and APs and ACs are connected over a WAN, the distributed mode will be necessary Carrier-class wireless user access control

Carrier-class wireless user access control

Carrier-class wireless user access controlCarrier-class wireless user access control different application scenarios, you can configure different items in a user profile, such as Committed Access Rate (CAR) and QoS policies Fast roaming

Fast roaming

Fast roamingFast roaming High performance

High performance

High performanceHigh performance and large enterprise-size wireless LANs (WLANs)

: supports Layer 3 roaming and fast roaming, satisfying the most demanding voice service requirements

: robust switching capacity and wire-speed processing provide powerful forwarding capacity for medium

: the 5800 ACM (for 32–64 APs) supports both distributed forwarding mode and centralized

: user-based access control is a feature of the 5800 ACM (for 32–64 APs); for

(ITU)

compliant

compliantcompliant

: employs Dynamic Frequency Selection (DFS) to

Points

PointsPoints

Manageability

ManageabilityManageability

Web interface

Web interfaceWeb interface

Layer 2 switching

Layer 2 switchingLayer 2 switching

VLAN support and tagging

VLAN support and taggingVLAN support and tagging GARP VLAN Registration Protocol

GARP VLAN Registration Protocol

GARP VLAN Registration ProtocolGARP VLAN Registration Protocol Spanning Tree

Spanning Tree

Spanning TreeSpanning Tree faster convergence, and IEEE 802.1s Multiple Spanning Tree Protocol Jumbo packet support

Jumbo packet support

Jumbo packet supportJumbo packet support

Standards

StandardsStandards

Latest high-speed wireless standards

Latest high-speed wireless standardsLatest high-speed wireless standards traditional IEEE 802.11a/b/g networks, resulting in expanded coverage and more efficient support for wireless multimedia applications

Security

SecuritySecurity

IEEE 802.1X and RADIUS network logins

IEEE 802.1X and RADIUS network loginsIEEE 802.1X and RADIUS network logins Web-based authentication

Web-based authentication

Web-based authenticationWeb-based authentication not support the IEEE 802.1X supplicant Choice of IEEE 802.11i, Wi-Fi Protected Access 2

Choice of IEEE 802.11i, Wi-Fi Protected Access 2

Choice of IEEE 802.11i, Wi-Fi Protected Access 2Choice of IEEE 802.11i, Wi-Fi Protected Access 2 users prior to granting network access; robust Advanced Encryption Standard (AES) or Temporal Key Integrity Protocol (TKIP) encryption secures the data integrity of the wireless traffic Secure Shell

Secure Shell

Secure ShellSecure Shell MAC authentication

MAC authentication

MAC authenticationMAC authentication authentication Secure user isolation

Secure user isolation

Secure user isolationSecure user isolation groups, improving bandwidth and system resources and simplifying network maintenance and management Secure access by location

Secure access by location

Secure access by locationSecure access by location only to preselected APs, enabling system administrators to control the locations where a wireless user can access the network

: allows configuration of the switch from any Web browser on the network

: support IEEE 802.1Q, with 4094 simultaneous VLAN IDs

(GVRP): allows automatic learning and dynamic assignment of VLANs

: fully supports standard IEEE 802.1D Spanning Tree Protocol, IEEE 802.1w Rapid Spanning Tree Protocol for

: supports up to 4 KB frame size to improve performance of large data transfers

: when used with IEEE 802.11n-based APs, provides wireless access six times that of

: control port-based access for authentication and accountability

: similar to IEEE 802.1X, it provides a browser-based environment to authenticate clients that do

(WPA2)

(SSHv2): encrypts all transmitted data for secure, remote command-line interface (CLI) access over IP networks

: provides simple authentication based on a user's MAC address; supports local or RADIUS-based

: virtual AP services enable the network administrator to provide specific services for different user

: location AP-based user access control helps ensure that wireless users can access and authenticate

, or WPA

, or WPA, or WPA

: locks out unauthorized wireless access by authenticating

DA - 13814 Worldwide — Version 2 — November 9, 2011

Page 2

RETIRED: Retired products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may

have older product names and model numbers that differ from current models.

HP 5800 Access Controller Module for 32–64 Access

HP 5800 Access Controller Module for 32–64 AccessHP 5800 Access Controller Module for 32–64 Access

QuickSpecs

Overview

Secure access control by user

Secure access control by userSecure access control by user security through existing Remote Authentication Dial-In User Service (RADIUS) servers to protect the network from unauthorized user access Endpoint Admission Defense

Endpoint Admission Defense

Endpoint Admission DefenseEndpoint Admission Defense mandated enterprise security policies access the network, reducing threat levels by infected wireless clients and improving the overall security of the wireless network Guest VLAN

Guest VLAN

Guest VLANGuest VLAN HTTPS management

HTTPS management

HTTPS managementHTTPS management Public Key Infrastructure

Public Key Infrastructure

Public Key InfrastructurePublic Key Infrastructure

Scalability

ScalabilityScalability

Pay as you grow

Pay as you growPay as you grow additional costly hardware and use additional valuable space in a chassis Ease of deployment

Ease of deployment

Ease of deploymentEase of deployment is no need for external network power connections

: similar to IEEE 802.1X, it provides a browser-based environment to authenticated clients via the IMC component

: provides secure Web management

: license upgrades allow you to increase support for additional access points without the need to buy

: these wireless interface cards use the backplane for all network and management communications; there

: media access control (MAC)-based and IEEE 802.1X network access control centralize wireless

(EAD): integrated wired and wireless EAD helps ensure that only wireless clients who comply with

(PKI): used to control access

Points

PointsPoints

Warranty and support

Warranty and supportWarranty and support

Lifetime warranty

Lifetime warrantyLifetime warranty most countries) Electronic and telephone support

Electronic and telephone support

Electronic and telephone supportElectronic and telephone support

www.hp.com/networking/warranty

Software releases

Software releasesSoftware releases during which software releases are available for your product(s)

* Hardware warranty replacement for as long as you own the product, with next business day advance replacement (available in most countries) with a five-year hardware warranty replacement for the disk drive included with HP AllianceONE Services zl Module, HP Threat Management Services zl Module, HP PCM+ Agent with AllianceONE Services zl Module, and HP E-MSM765 zl Mobility Controller. For details, refer to the HP Software License, Warranty, and Support booklet at:

: for as long as you own the product with advance replacement and next-business-day delivery (available in

: limited electronic and telephone support is available from HP; refer to:

for details on the support provided and the period during which support is available

: refer to:

www.hp.com/networking/warranty

for details on the software releases provided and the period

www.hp.com/networking/warranty

DA - 13814 Worldwide — Version 2 — November 9, 2011

Page 3

+ 4 hidden pages