H3C WX2860X Access Controller with 10*1000BASE-T Ports and 2*SFP Plus Ports

Dimensions (WxDxH)

440 mm *250 mm *43.6 mm

Weight

3.1kg (single power supply)

3.3kg (dual power supply)

Wireless throughput

10Gbps

Port

WAN 2*2.5GE & LAN 8*GE & LAN 2*SFP+ & 1*USB + 1*Console

Power supplies

Built in single power supply

Built in dual power supply

Operating and storage

temperature

0℃~45℃/-40℃~70℃

Operating and storage relative humidity

5%~95%

Safety Compliance

FDA 21 CFR Subchapter J

GB 4943.1

UL 62368-1

CAN/CSA C22.2 No 62368-1

IEC 62368-1

EN 62368-1

AS/NZS 62368-1

EMC

CISPR 32；

CISPR 35；

EN 55032；

EN 55035；

EN IEC 61000-3-2；

EN 61000-3-3；

ETSI EN 300 386 ；

IEC 61000-4-2；

IEC 61000-4-3；

IEC 61000-4-4；

IEC 61000-4-5；

IEC 61000-4-6；

IEC 61000-4-8；

IEC 61000-4-11；

GB/T 9254.1;

GB/T 9254.2;

GB 17626.1;

GB 17626.2;

MTBF

145 years

Basic functions

Number of managed APs by default

0

Size of license

1/4/8/16/32/64/128

Maximum number of managed APs

144

288

Maximum number of configured APs

288

576

Maximum users of authentication

4096

8192

ARP table

8192

16384

ND table

8192

16384

802.11MAC

802.11 Protocols

√

Maximum SSID number of the whole machine

128

SSID hiding

√

11G protection

√

11n only

√

Use number limit

Supported: SSID based, per RF based

Keepalive

√

Idle

√

Multi-country code assignment

√

Wireless user isolation

Supported:

VLAN based wireless users 2-layer isolation

SSID based wireless user 2-layer isolation

20MHz/40MHz auto-switch in 40MHz mode

√

Local forwarding

Local forwarding based on SSID+VLAN

CAPWAP

Auto AP serial number entry

√

AC discovery (DHCP option43, DNS)

√

IPv6 tunnel

√

Clock synchronization

√

Jumbo frame forwarding

√

Assign basic AP network parameter through AC

Supported: Static IP, VLAN, connected AC address

L2/L3 connection between AP and AC

√

NAT traversal between AP and AC

√

Roaming

Intra-AC, Inter-AP L2 and L3 roaming

√

Inter-AC, Inter-AP L2 and L3 roaming

√

GW Features

NAT

√

PPPoE

√

DDNS

√

SSL VPN

√

IPSEC VPN

√

RIP

√

GRE

√

Access control

Open system, Shared-Key

√

WEP-64/128, dynamic WEP

√

WPA,WPA2,WPA3

√

TKIP

√

CCMP

√

SSH v1.5/v2.0

√

Wireless EAD (End-point Access Domination)

√

Portal authentication

Supported: Remote Authentication, external server

Portal page redirection

Supported: SSID based, AP Portal page push

Portal by-pass Proxy

√

802.1x authentication

EAP-TLS, EAP-TTLS, EAP-PEAP, EAP-MD5,

EAP-SIM, LEAP, EAP-FAST, EAP offload (TLS, PEAP only)

Local authentication

802.1X, Portal, MAC authentication

LDAP authentication

802.1X and Portal

EAP-GTC and EAP-TLS supported by 802.1X login

AP location-based user access control

√

Guest Access control

√

VIP channel

√

ARP attack detection

Supported: Wireless SAVI

SSID anti-spoofing

SSID + user name binding

AAA server selection based on SSID and domain

√

AAA server back up

√

Local AAA server for wireless user

√

TACACS+

√

QoS

Priority mapping

√

L2-L4 packet filtering and traffic classification

√

Rate limit

Supported with granularity of 8Kbps

802.11e/WMM

√

Access control based on user profile

√

Intelligent bandwidth limit (equal bandwidth share algorithm)

√

Intelligent bandwidth limit (user specific)

√

Intelligent bandwidth guarantee

Supported: Free flow for packets coming from every SSID When traffic is not congested,

and guarantee a minimum bandwidth for each SSID when traffic is congested

QoS Optimization for SVP phone

√

CAC(Call Admission Control)

Supported: based on user number/bandwidth

End-to-end QoS

√

AP upload speed limit

√

RF management

Country code lock

√

Static channel and power configuration

√

Auto channel and power configuration

√

Auto transmission rate adjustment

√

Coverage hole detection and correction

√

Load balancing

Supported: based on traffic, user & frequency (dual-frequency supported)

Intelligent load balancing

√

AP load balancing group

Supported: auto-discovery and flexible setting

Security

Static blacklist

√

Dynamic blacklist

√

White list

√

Rogue AP detection

Supported: SSID based, BSSID, device OUI

Rouge AP countermeasure

√

Flooding attack detection

√

Spoof attack detection

√

Weak IV attack detection

√

WIPS/WIDS

Supported: 7-layer mobile security

Layer 2 protocol

ARP (gratuitous ARP)

√

802.1p

√

802.1q

√ (Maximum VLANs: 4094)

802.1x

√

IP protocol

IPv4 protocol

√

Native IPv6

√

IPv6 SAVI

√

IPv6 Portal

√

Multicast

MLD Snooping

√

IGMP Snooping

√

Multicast group

256

Multicast to Unicast (IPv4, IPv6)

Supported: Set unicast limit based on operating environment

Redundancy

1+1 failover between ACs

√

Intelligent AP sharing among ACs

√

Remote AP

√

Management and deployment

Network management

WEB, SNMP v1/v2/v3, RMON

Network deployment

WEB, CLI, Telnet, FTP

WiFi location

CUPID location

√

Green features

Scheduled shutdown of AP RF interface

√

Scheduled shutdown of wireless service

√

Per-packet power adjust­ment (PPC)

√

WLAN

Application

RF Ping

√

Remote probe analysis

√

RealTime Spectrum Guard (RTSG)

√

Wireless Intelligent Application Aware (wIAA)

Supported/ Stateful Inspection Firewall

Packet forwarding fairness adjustment

√

802.11n packet forwarding suppression

√

Access based traffic shaping

√

Co-AP channel sharing

√

Co-AP channel reuse

√

RF interface transmission rate adjustment algorithm

√

Drop wireless packet with weak signal

√

Disable user access with weak signal

√

Disable multicast packet caching

√

Status blink(limited to some AP)

√

New added features

Policy forwarding

√

VLAN pool

√

Bonjour gateway

√

802.11w

√

802.11k,v,r

√

Hotspot2.0 (802.11u)

√

NAT

√

VPN

√