WS2000

Wireless Switch

The WS2000 Wireless Switch is a market-leading powerful all-in-one solution that simplifies and reduces the costs of managing wired and wireless (802.11a/b/g) networks in enterprise branch offices. The integrated router, gateway, firewall, Power-over-Ethernet (PoE) and more eliminate the cost of purchasing and the complexity of managing multiple pieces of equipment. The ability to easily and cost-effectively scale to meet growing needs, as well as upgrade to support new security, radio and other standards provides the assurance that the WS2000 will meet your needs today and tomorrow.

WS2000-Spec-Sheet-0209.pdf

Part Numbers

Switch-based centralized upgradeable architecture
Enhances performance and functionality; simplifies deployment/management, protects your investment and reduces TCO.

802.11a/b/g compatibility
Reduces costs with flexible radio support.

Wi-Fi Multimedia (WMM) extensions support with U-APSD
Enables voice/video applications with wired QoS extension support and efficient power management..

SIP Call Admission Control
Controls the number of active SIP sessions that are initiated by a wireless VoIP phone.

Enterprise-class security: 802.1X/EAP Kerberos, WPA2 (802.11i)
Enterprise-class authentication and encryption; ensures privacy of data during transmission.

Active/standby configuration
Ensures robust network redundancy through multiple links.

AAA integrated server: verifies identify of users and administrators
Eliminates the cost/need for a separate RADIUS server.

Simplified provisioning of network resources
Eliminates the need to purchase and manage additional equipment with integrated secure gateway: routing, DHCP, NAT, Stateful Packet Inspection Firewall and WAN uplink (with PPPoE).

IP Filtering
Provides flexibility in defining access policies.

Comprehensive features to enable public hot spots
Provides secure public access — complimentary or service-based.

Rogue AP containment
Identifies, reports, detects and disarms unauthorized access ports and points attempting to access the network.

IPSec VPN
Cost-effective, secure point-to-point communications.

Integrated IDS/IPS
Integrated intrusion detection, prevention, inline signature analysis, and anomaly analysis protect against threats to the network.

URL Filtering
Provides IT staff the ability to control access to specific web sites.

802.3af Power-over-Ethernet (PoE) support
Eliminates the need to power access ports and points, resulting in lower expenses overall.

Locationing
Enables visualization of mobile clients with RF Management Software.

Meshing
Extends wireless in hard-to-cable areas by over-the-air bridging with other independent access points or wireless switches.

Dynamic RF Management
Automatic healing of networks to account for neighbor recovery and interference avoidance.

Specification

HIGH AVAILABILITY

Active:Standby failover	Yes

Pre-emptive roaming	Yes

Self healing (On RF coverage loss)	Yes

MANAGEMENT

Admin authentication via RADIUS	Yes

Auto-update with DHCP	Yes

CLI (serial, telnet, SSHv2)	Yes

MIBS	Yes

Remote configuration and firmware update (via TFTP, FTP)	Yes

SNMP (v1, v2, v3)	Yes

Secure web-based GUI (HTTP, HTTPS, SSL)	Yes

Syslogs	Yes

Text-based switch configuration files	Yes

NETWORK SECURITY

Access control lists	L2/3/4 ACLs

Anomaly analysis	Source Media Access Control (MAC) = Destination MAC; illegal frame sizes; Source MAC is multicast; TKIP countermeasures; all zero addresses

Application Layer Gateway (ALG) support	SIP, H323, NETBIOS, IKE, TFTP, FTP, PPTP, DNS, L2TP, SMTP, NNTP, SQL, HTTP, HTTPS, GATEKEEPER, RPC, MSGUDP, N2P, PCANYWHERE, RTSP, MSGTCP, N2PE, AIM, ICQ, MSN, ILS

Authentication	Pre-shared keys (PSK); 802.1x/EAP-transport layer security (TLS), tunneled transport layer security (TTLS), protected EAP (PEAP); Kerberos; Integrated AAA/RADIUS server with native support for PEAP-TTLS; Support for LDAP, Radius Authentication across VPN.

IP filtering	Configurable incoming and outgoing IP filtering policies on packets within the same subnet/WLAN and between wired and wireless hosts, Provides flexibility in defining access policies

IPSec VPN gateway	Supports DES, 3DES, AES-128 and AES-256 encryption, with site-to-site VPN

Network address translation (NAT) support	Yes

RADIUS support (standard and Motorola vendor specific attributes)	Location-based authentication (Motorola VSA), User-based QoS (Motorola VSA), MAC-based authentication (standard), Allowed ESSIDs (Motorola VSA), User-based VLANs (standard)

Secure guest access (Hotspot provisioning)	Customizable login/welcome pages, Local web-based authentication, Support for external authentication/billing systems, URL redirection for user login

Stateful Layer 3 firewall	Yes

Transport encryption	KeyGuard, WEP 40/128 (RC4), WPA2-CCMP (AES), WPA-TKIP

URL filtering	Allow or deny access to specific web sites: Reverse DNS lookup to block access by IP address; URL Blacklist; URL Whitelist; Keyword analysis in URL; trusted host provisioning

Wired IDS/IPS	Inline signature analysis of data traffic, performed on traffic from both wired and wireless hosts; configurable by protocol — Telnet, POP3, IMAP, NNTP, FTP, SNMP, TCP-DNS, UDP-DNS, TCP-RPC, UDP-RPC, HTTP, SMTP, TCPGEN, UDPGEN, ICMP, TCP, UDP, IP; Denial of Service (DOS) Attack Protection. Logging of detected attacks

Wireless IDS/IPS	Multi-mode rogue AP detection, client blacklisting, excessive authentication,/associations; excessive probes; excessive disassociation/deauthentications; excessive decryption errors; excessive authentication failures; excessive 802.11 replay; excessive crypto IV failures( TKIP/CCMP replay)

OPTIMIZED WIRELESS QOS

Classification and packet marking	802.1p VLAN Priority, DiffServ/TOS, Layer 1-4 packet classification

SIP call admission control	Controls the number of activeSIP sessions that are initiatedby a wireless VoIP phone

Wi-Fi multimedia extensions	WMM-UPSD for voice over Wi-Fi applications, WMM-power save with admission control

PACKET FORWARDING

802.11-802.3 bridging	Yes

802.1D-1999 Ethernet bridging	Yes

802.1q-VLAN tagging and trunking	Yes

IP packet steering - redirection	Yes

Proxy ARP	Yes

PHYSICAL CHARACTERISTICS

Dimensions (HxWxD)	1.75 x 11.25 x 8 in. (44.5 x 286 x 203 mm) H x W x D

Form factor	Standard 1RU

MTBF	>50,000 Hours

Part numbers	Part numbers for US/Canada: WS-2000-SME-ES-WR: Energy Star Compliant Wireless Switch SME solution; WS-2000-1ES-ABG-WR (WS2000 and 1 AP300 (802.11a/b/g) bundle): Energy Star Compliant Wireless Switch SME solution; WS-2000-2ES-ABG-WR (WS2000 and 2 AP300 (802.11a/b/g) bundle): Energy Star Compliant Wireless Switch SME solution; WS-2000-2ES-BG-WR (WS2000 and 2 AP300 (802.11b/g) bundle): Energy Star Compliant Wireless Switch SME solution. Part Numbers for all other countries : WS-2000-SME-WWR; WS-2000-1C-ABG-WWR (WS2000 and 1 AP300 (802.11a/b/g) bundle); WS-2000-2C-ABG-WWR (WS2000 and 2 AP300 (802.11a/b/g) bundle); WS-2000-2C-BG-WWR (WS2000 and 2 AP300 (802.11b/g) bundle)

Physical interfaces	1 RS232 serial console port, 7 10/100 Ethernet ports (including 1 WAN uplink port), 4 Ports support 802.3af Power-over-EthernetCF Card (for storage, configuration update and alternate syslog)

RoHS compliant	Yes

Weight	1.41 lb (0.64 kg)

POWER REQUIREMENTS

AC input voltage	100-250 VAC

Input frequency	47 Hz to 63 Hz

Max AC input current	3A@230 VAC

Max power consumption	120 W

REGULATORY SPECIFICATIONS

EMC	EN 301 489-1, EN 301 489-17, IEC 60601-1-2, EN 55022, FCC Part 15 Class B, ICES 003 Class B, EN 55024, EN 61000-3-2, EN 61000-3-3

Electrical safety	UL 60950-1, C22.2 No. 60950-1, EN 60950-1, IEC 60950-1

Environmental	RoHS Directive 2002/95/EEC

USER ENVIRONMENT

Operating altitude	50 to 8,000 ft. (16 to 2,438 m)

Operating humidity	5% - 95% (w/o condensation)

Operating temperature	32º to 104º F ( 0º to 40º C)

Storage altitude	50 to 12,000 ft. (16 to 3,658 m)

Storage humidity	5% - 95% (w/o condensation)

Storage temperature	-40º to 158º F (40º C to 70º C)

Partner:

Motorola Solutions

Search

Primary links

Warehouse Slotting Software

Wireless Switch

Footer_img