0% found this document useful (0 votes)
23 views7 pages

Comprehensive WLAN Security Features

The document outlines the security, maintenance, location, BYOD, spectrum analysis, and cloud-based management features of a wireless access point, detailing various authentication methods and encryption standards such as WPA3 and WPA2. It also includes technical specifications such as installation modes, dimensions, power supply, environmental conditions, and compliance with safety and radio standards. Additionally, it provides contact information for further inquiries about Huawei WLAN products.

Uploaded by

sarfii bhat
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
23 views7 pages

Comprehensive WLAN Security Features

The document outlines the security, maintenance, location, BYOD, spectrum analysis, and cloud-based management features of a wireless access point, detailing various authentication methods and encryption standards such as WPA3 and WPA2. It also includes technical specifications such as installation modes, dimensions, power supply, environmental conditions, and compliance with safety and radio standards. Additionally, it provides contact information for further inquiries about Huawei WLAN products.

Uploaded by

sarfii bhat
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Security features Open system authentication

WEP authentication/encryption using a 64-bit, 128-bit, 152-bit or 192-bit encryption key


WPA2-PSK authentication and encryption (WPA2-Personal)
WPA2-802.1X authentication and encryption (WPA2-Enterprise) WPA3-SAE
authentication and encryption (WPA3-Personal)
WPA3-802.1X authentication and encryption (WPA3-Enterprise)
WPA-WPA2 hybrid authentication
WPA2-WPA3 hybrid authentication
WPA2-PPSK authentication and encryption in Fit AP mode
WAPI authentication and encryption

WIDS/WIPS, including rogue device detection and containment, attack detection and
dynamic blacklist, and STA/AP blacklist and whitelist
802.1X authentication, MAC address authentication, Portal authentication, etc.
DHCP snooping
Dynamic ARP inspection (DAI)
IP Source Guard (IPSG)
802.11w Protected Management Frames (PMF)
Hardware encryption: IPsec and DTLS

Maintenance features Unified management and maintenance on the WAC in Fit AP mode
Automatic login, automatic configuration loading, and plug-and-play (PnP) in Fit AP mode
Automatic batch upgrade in Fit AP mode
Telnet
STelnet using SSHv2
SFTP using SSHv2
Remote wireless O&M through Bluetooth console ports
Web system-based AP management and login through HTTP or HTTPS in Fat AP mode
Real-time configuration monitoring and fast fault locating using the NMS
SNMPv1/v2/v3 in Fat AP mode
System status alarm
Network Time Protocol (NTP) in Fat AP mode

Location service NOTE


The AP supports the location service only in Fit and cloud AP modes.
STA location
Working with a location server to locate rogue devices

BYOD NOTE
The AP supports BYOD only in Fit AP mode.
Device type identification according to the organizationally unique identifier (OUI) in the
MAC address
Device type identification based on the user agent (UA) information in an HTTP packet
Device type identification based on DHCP options
The RADIUS server delivers packet forwarding, security, and QoS policies according to the
device type carried in the RADIUS authentication and accounting packets.

1
Spectrum analysis NOTE
The AP supports spectrum analysis only in Fit AP mode.
Identification of multiple interference sources including Bluetooth devices, microwave
ovens, cordless phones, ZigBee devices, game controllers, 2.4 GHz/5 GHz wireless video and
audio devices, and baby monitors
Working with a location server to locate interference sources and perform spectrum analysis
on them

Cloud-based management mode

Item Description

WLAN Compliance with IEEE 802.11ax and compatibility with IEEE 802.11a/b/g/n/ac/ac Wave 2 Maximum
features ratio combining (MRC)
Space time block code (STBC)
Cyclic delay diversity (CDD)/Cyclic shift diversity (CSD)
Beamforming
Multi-user multiple-input multiple-output (MU-MIMO)
Orthogonal frequency division multiple access (OFDMA)
Compliance with 1024-QAM and compatibility with 256-QAM/64-QAM/16-
QAM/8QAM/QPSK/BPSK
Target wake time (TWT)
Low-density parity-check (LDPC)
Frame aggregation, including A-MPDU (Tx/Rx) and A-MSDU (Tx/Rx)
802.11 dynamic frequency selection (DFS)
Short GI in 20 MHz, 40 MHz, 80 MHz, and 160 MHz modes
Priority mapping and scheduling that are compliant with Wi-Fi multimedia (WMM) to implement
priority-based data processing and forwarding
WLAN channel management and channel rate adjustment
NOTE
For detailed management channels, see Country Code & Channel Compliance Table.
Automatic channel scanning and interference avoidance
Separate service set identifier (SSID) hiding configuration for each AP, supporting Chinese SSIDs
Signal sustain technology (SST)
Unscheduled automatic power save delivery (U-APSD)
Automatic AP login
802.11k and 802.11v smart roaming
802.11r fast roaming (≤ 50 ms)
Advanced cellular coexistence (ACC), minimizing the impact of interference from cellular networks

1
Network Compliance with IEEE 802.3ab
features Auto-negotiation of the rate and duplex mode and automatic switchover between the Media
Dependent Interface (MDI) and Media Dependent Interface Crossover (MDI-X)
Compliance with IEEE 802.1Q
VLAN assignment by SSID
DHCP client, obtaining IP addresses through DHCP
STA isolation in the same VLAN
Access control list (ACL)
Unified authentication on the cloud management platform
NAT
Telemetry, quickly collecting AP status and application experience parameters

QoS features WMM power saving


Priority mapping for uplink packets; flow-based mapping for downlink packets
Queue mapping and scheduling
User-based bandwidth limiting
Airtime scheduling
Air interface HQoS scheduling
Acceleration for VR and mobile gaming applications

Security Open system authentication


features WEP authentication/encryption using a 64-bit, 128-bit, 152-bit or 192-bit encryption key
WPA2-PSK authentication and encryption (WPA2-Personal)
WPA2-802.1X authentication and encryption (WPA2-Enterprise) WPA3-SAE
authentication and encryption (WPA3-Personal)
WPA3-802.1X authentication and encryption (WPA3-Enterprise)
WPA-WPA2 hybrid authentication
WPA2-WPA3 hybrid authentication
WPA2-PPSK authentication and encryption
802.1X authentication, MAC address authentication, Portal authentication, etc.
DHCP snooping
Dynamic ARP inspection (DAI)
IP Source Guard (IPSG)

Maintenance Unified management and maintenance on the cloud management platform


features Automatic login, automatic configuration loading, and plug-and-play (PnP)
Batch upgrade
Telnet
STelnet using SSHv2
SFTP using SSHv2
Remote wireless O&M through Bluetooth console ports
Web-based NMS, and login through HTTP or HTTPS
Real-time configuration monitoring and fast fault locating using the NMS
System status alarm
NTP

1
Product Specifications
Item Description

Technical Installation mode Wall mounting


specifications Ceiling mounting
T-rail mounting

Dimensions (diameter x Φ 220 mm x 50 mm


height)

Weight 1.08 kg

Port 1 x 10M/100M/GE/2.5GE electrical port


1 x 10M/100M/GE electrical port

1 x USB port
NOTE
⚫ The 2.5GE port supports PoE-In. If the BOM code is 02353XBQ,

the port is a GE port.

LED indicator Indicate the power-on, startup, running, alarm, and fault states of the
system.

Power supply Power input DC: 12 V ± 10%


specifications PoE power supply: in compliance with IEEE 802.3at
NOTE
For details about the device working status in different power supply
modes, see the Quick Information Check website.

Maximum power 21.2 W (excluding USB)


consumption NOTE
The actual maximum power consumption depends on local laws and
regulations.

Environmental Operating temperature –10°C to +50°C (From 1800 m to 5000 m, the maximum operating
specifications temperature of the device decreases by 1°C for every 300 m increase
in altitude.)

Storage temperature -40°C to +70°C

Operating humidity 5% to 95% (non-condensing)

Altitude –60 m to +5000 m

Atmospheric pressure 53 kPa to 106 kPa

IP rating IP rating IP41

Antenna type Built-in smart antenna

1
Radio Antenna gain 2.4 GHz: 4 dBi
specifications 5 GHz: 5 dBi
NOTE
1. The preceding gain is the peak gain of a single antenna.
2. Equivalent antenna gain after all 2.4 GHz or 5 GHz antennas
arecombined: 2 dBi for 2.4 GHz and 3 dBi for 5 GHz.

Maximum quantity of ≤ 16
SSIDs on each radio

Maximum number of ≤ 1536 (512/radio)


STAs NOTE
The actual number of users varies according to the environment.

Maximum transmit 2.4 GHz: 25 dBm (combined power)


power 5 GHz (2x2 MIMO): 23 dBm (combined power) 5
GHz (4x4 MIMO): 26 dBm (combined power)
NOTE
The actual transmit power varies according to local laws and
regulations.

Power adjustment 1dBm


increment

Maximum number of 2.4 GHz (2.412 GHz to 2.472 GHz) ⚫


non-overlapping 802.11b/g
channels
− 20 MHz: 3

802.11n
− 20 MHz: 3
− 40 MHz: 1 ⚫
802.11ax
− 20 MHz: 3
40 MHz: 1
5 GHz (5.18 GHz to 5.825 GHz) ⚫
802.11a
− 20 MHz: 13

802.11n
− 20 MHz: 13
− 40 MHz: 6

802.11ac
− 20 MHz: 13
− 40 MHz: 6
− 80 MHz: 3
− 160 MHz: 1 ⚫
802.11ax
− 20 MHz: 13
− 40 MHz: 6

1
− 80 MHz: 3
− 160 MHz: 1
NOTE
In this table, the number of non-overlapping channels supported in
China is used as an example. The number of non-overlapping channels
varies with countries. For details, see Country Code & Channel
Compliance Table.

Standards Compliance

Item Description


Safety standards UL 60950-1 ⚫
UL 62368-1 ⚫
GB 4943.1
⚫ EN 62368-1 CAN/CSA 22.2 No.60950-1
EN 60950-1 ⚫ ⚫

⚫ ⚫
IEC 60950-1 IEC 62368-1

⚫ ⚫ ⚫
Radio standards ETSI EN 300 328 ETSI EN 301 893 AS/NZS 4268

⚫ ⚫ ⚫
EMC standards EN 301 489-1 GB 9254 IEC/EN61000-4-2
⚫ ⚫ ⚫
EN 301 489-17 GB 17625.1 IEC/EN 61000-4-3
⚫ ⚫ ⚫
EN 60601-1-1 GB 17625.2 IEC/EN 61000-4-4
⚫ ⚫ ⚫
EN 60601-1-2 AS/NZS CISPR32 IEC/EN 61000-4-5
⚫ ⚫ ⚫
EN 55024 CISPR 24 IEC/EN61000-4-6
⚫ ⚫ ⚫
EN 55032 CISPR 32 ICES-003
⚫ ⚫
EN 55035 CISPR 35
⚫ ⚫ ⚫
IEEE standards IEEE 802.11a/b/g IEEE 802.11h IEEE 802.11v
⚫ ⚫ ⚫
IEEE 802.11n IEEE 802.11d IEEE 802.11w
⚫ ⚫ ⚫
IEEE 802.11ac IEEE 802.11e IEEE 802.11r
⚫ ⚫
IEEE 802.11ax IEEE 802.11k

Security ⚫ 802.11i, Wi-Fi Protected Access (WPA), WPA2, WPA2-Enterprise, WPA2-PSK, WPA3, WAPI
standards ⚫ 802.1X
⚫ Advanced Encryption Standards (AES), Temporal Key Integrity Protocol (TKIP), WEP, Open
⚫ EAP Type(s)
⚫ ⚫
EMF standards EN 62311 EN 50385

⚫ ⚫
RoHS standards Directive 2002/95/EC (EU)2015/863
& 2011/65/EU

Reach standards Regulation 1907/2006/EC


WEEE standards Directive 2002/96/EC & 2012/19/EU

1
More Information
For more information about Huawei WLAN products, visit [Link] or contact Huawei's local sales office.
Alternatively, you can contact us through one of the following methods:

1. Global service hotline: [Link]


2. Enterprise technical support website: [Link] 3. Service
email address for enterprise users: support_e@[Link]

Copyright © Huawei Technologies Co., Ltd. 2024. All rights reserved.


No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei
Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice
The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the
products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise
specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties,
guarantees or representations of any kind, either express or implied.
The information in this document is subject to change due to version upgrade or other reasons. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document
do not constitute a warranty of any kind, express or implied.

HUAWEI TECHNOLOGIES CO., LTD.


Address: Huawei Industrial Base, Bantian, Longgang, Shenzhen, People's Republic of China Post

code: 518129

Website: [Link]

13

You might also like