Aruba Networks MC-2400 Mobility controller

The Aruba MC-2400 is a fully-featured wireless LAN mobility controller that aggregates up to 24 access points (APs) and delivers centralized control and security for wireless deployments.

The MC-2400 provides a truly unified mobility network experience, delivering follow-me connectivity, identity-based access, and application continuity services for small/branch offices wireless deployment. The MC-2400 can be easily deployed as an overlay without any disruption to the existing branch office network and centrally managed from the corporate headquarters or data center using the Aruba Mobility Management System. Advanced convergence features such as Call Admission Control (CAC), voice-aware RF management and strict over-the-air QoS allow the MC-2400 to deliver mobile VoIP capabilities.

Additionally, the MC-2400 can be deployed as an identity-based security gateway to authenticate wired and wireless users, enforce role-based access control policies and quarantine unsafe endpoints from accessing the corporate network. Guest users can be easily and safely supported with the built-in captive portal server and advanced network services, such as EAP offload and DHCP server, allowing branch office network operations to continue uninterrupted even when the WAN link fails. The MC-2400 can create a secure branch office environment without requiring additional VPN/firewall devices using its integrated site-to-site VPN and NAT capabilities, split-tunneling, and an ICSAcompliant stateful firewall. Site-to-site VPN support can be integrated with all leading VPN concentrators to provide seamless integration into existing corporate VPNs.

Controller Performamance and Capacity
Controlled APs 48
Users 768
MAC addresses 4,096
VLAN IP interfaces 128
Fast Ethernet ports (10/100) 24
Gigabit Ethernet ports (GBIC) 2
Active firewall sessions 64,000
Concurrent IPsec tunnels 768
Firewall throughput 2 Gbps
Encrypted throughput (3DES and AES-CCM) 400 Mbps

Wireless LAN Security and Control Features
• 802.11i security (WFA-certified WPA2 and WPA)
• 802.1X user and machine authentication
• EAP-PEAP, EAP-TLS, EAP-TTLS support
• Centralized AES-CCM, TKIP and WEP encryption
• 802.11i PMK caching for fast roaming applications
• EAP offload for AAA server scalability and survivability
• Stateful 802.1X authentication for standalone APs
• MAC address, SSID and location-based authentication
• Multi-SSID support for operation of multiple WLANs
• SSID-based RADIUS server selection
• Secure AP control and management over IPsec or GRE
• CAPWAP-compatible and upgradeable
• Distributed WLAN mode for remote AP deployments
• Simultaneous centralized and distributed WLAN support

Identity-based Security Features
• Wired and wireless user authentication
• Captive portal, 802.1X and MAC address authentication
• Username, IP address, MAC address and encryption key binding for strong network identity creation
• Per-packet identity verification to prevent impersonation
• Endpoint posture assessment, quarantine and remediation
• Microsoft NAP, Cisco NAC, Symantec SSE support
• RADIUS and LDAP-based AAA server support
• Internal user database for AAA server failover protection
• Role-based authorization for eliminating excess privilege
• Robust policy enforcement with stateful packet inspection
• Per-user session accounting for usage auditing
• Web-based guest enrollment with Aruba GuestConnect
• Configurable acceptable use policies for guest access
• XML-based API for external captive portal integration
• xSec option for wired LAN authentication and encryption
(802.1X authentication, 256-bit AES-CBC encryption)

Convergence Features
• Voice and data on a single SSID for converged devices
• Flow-based QoS using Voice Flow Classification
• SIP, Spectralink SVP, Cisco SCCP and Vocera ALGs
• Strict priority queuing for over-the-air QoS
• 802.11e support – WMM, U-APSD and T-SPEC
• QoS policing for preventing network abuse via 802.11e
• Diffserv marking and 802.1p support for network QoS
• On-hook and off-hook VoIP client detection
• VoIP call admission control (CAC) using VFC

Be the first to write a review!