ProCurve Switch xl Access Controller Module

Why ProCurve ?

Products & Solutions

Security

Convergence

Mobility

Product services

Technical support

Software updates

Network training

Design Center

Reference library

Customers success

Contact ProCurve

• Choice and flexibility:
  • Leveraging the versatility of the 5300xl switch series, the ProCurve Switch xl Access Controller Module unifies wireless and wired mobility user access control in an intelligent edge Switch 5300xl platform to meet the mobile LAN demands of today--and it easily scales as your business needs change.
  • The Switch xl Access Controller Module enables network managers to easily deploy edge- enforced access control on any or all 5300xl ports or integrate user access control into new highly scalable and secure 5300xl switch-based networks.
  • The modular design of the 5300xl allows network designers to leverage port type, density, and PoE capability to deploy a secure and cost-effective mobile LAN as an integrated component of a 5300xl intelligent edge switch.
  • As your mobile LAN grows, the edge enforcement capabilities of the Switch 5300xl easily scale by simply installing an additional Switch xl Access Controller Module in any 5300xl intelligent edge switch.

• Identity-driven policy management:
  • Rights-based network access control and management: enables network administrators to easily create and maintain robust access policies that permit or deny mobile access to network resources based on user identity, location, and time of day
  • Same mobile LAN for all users: no need to deploy separate networks because identity- based access control allows multiple types of users (employees, visitors, temporary workforce) on the same network to access specific network services without risk to network security or unauthorized access to sensitive data
  • Precise control over who has access to what and when: centrally managed access policies combined with edge-enforced packet inspection allow or deny user access to specific network services at the edge of the network, including applications such as Internet or intranet Web access, FTP, telnet, specialized application servers, or any network element that can be identified by port and IP address

• Wireless data privacy:
  • Terminates client VPN sessions using non-proprietary, built-in VPN clients of Microsoft and Apple Macintosh operating systems and third-party VPN clients
  • Uses IPSec, PPTP, L2TP/IPSec, or SSH tunnels to encrypt wireless traffic with DES, 3DES, Blowfish, CAST, or AES to provide the utmost in wireless data privacy
  • User authentication and appropriate access to network resources can be controlled at the edge of the network since all secure tunnels terminate at each 5300xl edge switch

• Client-based bandwidth rate limiting: prioritizes network bandwidth based on business need by setting limits on upstream and downstream bandwidth based on user, group, time, and location
• Roaming across subnets: ensures that users maintain persistent connectivity to the network and applications
• Standards-based authentication support for LDAP, Active Directory, and 802.1X: seamlessly integrates into existing authentication services or uses the built-in database

• 802.1Q VLAN support:
  • Supports standards-based tagging based on user or point of network access
  • Allows placement of wireless traffic on separate VLANs
  • Provides application of filters based on VLAN ID

• Misconfigured service management and proxy redirection: allow secure, transparent login for guests or users who have changed their client network configurations
• Anti-MAC-address spoofing: prevents untrusted users from gaining access by spoofing a trusted user's MAC address
• Complete session logging: provides detailed information for problem identification and resolution

» Return to top

» Return to top