Ewp-Wx2520X-Li WiFi Router Next-Generation Enterprise-Level Core Multi-Service Wireless Controller

• Work Mode: AC
• WiFi Antenna Type: Built-in
• Transmission Rate: >200Mbps
• Model NO.: EWP-WX2520X-LI
• Certification: FCC
• Transport Package: Carton
• Specification: 440mm*250mm*43.6mm
• Trademark: H3C
• Origin: China

Product Description

 

Detailed Photos

 

 

Product Introduction

 

H3C WX2520X-LI is a gateway wireless controller (AC, Access Controller) independently developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C company). WX2520X-LI wireless controller has rich service types, and integrates functions such as fine user control management, perfect radio resource management, 7X24 hours wireless security management and control, fast roaming at the second and third layers, flexible QoS control, and IPv4&IPv6 dual stack.
H3C WX2520X-LI wireless controller is specially designed for branch and small campus wireless network requirements. It integrates gateway and AC functions, cooperates with H3C Fit AP product series, supports WIPS, firewall and other functions, and is an all-rounder in enterprise networking. At the same time, it has a wealth of port types, especially its own USB interface, which can be connected to enterprise-related peripherals. On the whole, the types and quantities of equipment purchased by enterprises during networking are reduced, helping enterprises save investment.
*H3C WX2520X-LI wireless controller cooperates with H3C Fit AP product series, which can meet the typical applications of small enterprise campus WLAN access, branch hotspot coverage and other wireless scenarios.

 

Provides management of 802.11ax APs

WX2520X-LI wireless controller not only supports the management of traditional 802.11a/b/g/n/ac AP, but also can cooperate with H3C AP based on 802.11ax protocol to form a network, thus breaking through the traditional wireless network serial communication mechanism, The utilization rate of wireless spectrum resources has been doubled, the number of effective access users has been greatly improved, the deployment overhead of wireless networks has been effectively reduced, and the user experience in a high-density user environment has been greatly improved.
 

Provide flexible data forwarding methods

The traditional wireless controller deployment generally adopts the centralized forwarding mode. The AC can comprehensively control and safely supervise the packets. However, all wireless service traffic needs to be processed uniformly by the AC. The core link bandwidth and the AC forwarding capability can easily become the bottleneck. In particular, when APs and ACs are connected through a WAN, APs are deployed as data access devices in branches, while ACs are deployed in headquarters. All user data is sent from APs to ACs, which are then forwarded centrally by the ACs, resulting in low forwarding efficiency. WX2520X-LI wireless controller can support centralized forwarding, distributed forwarding, and policy forwarding. Users can flexibly set the forwarding mode according to business needs and actual network conditions.
The WX2520X-LI wireless controller also supports the networking mode of centralized authentication and local forwarding, and provides centralized authentication and management of 802.1X and Portal in the case of local forwarding of data streams.
 

Support carrier-grade wireless user access control and management

User-based access control is a major feature of WX2520X-LI wireless controller products. User Profile (User Profile) provides a configuration template that can save preset configurations (a collection of configurations). Users can configure different contents for User Profile according to different application scenarios, such as CAR (Committed Access Rate, committed access rate) policy and QoS (Quality of Service, quality of service) policy.
When users access the device, they need to authenticate first. During the authentication process, the authentication server will send the User Profile name to the device, and the device will immediately enable the specific content configured in the User Profile. When a user accesses the device through authentication, the device will restrict the user's access behavior through these specific contents. When a user goes offline, the system automatically disables the configuration items under the User Profile, thereby canceling the restriction on the user by the User Profile. Therefore, User Profile is suitable for restricting the access behavior of online users. When there is no user online (perhaps there is no user access, or the user has not passed the authentication, or the user is offline), the User Profile is a preset configuration and does not take effect.
In addition, WX2520X-LI wireless controller also supports MAC-based authentication access control mode, which not only enables customers to configure and modify user group permissions on the AAA server, but also supports the configuration of specific user permissions. This fine-grained control of user rights greatly enhances the availability of wireless networks, and network administrators can easily assign access rights to different levels of people or groups of people in this way.
MAC-based VLAN is also a major feature of WX2520X-LI wireless controller. In terms of control strategy, administrators can assign users of the same nature (MAC) to the same VLAN, and configure security policies based on VLAN on the controller. This can not only simplify system configuration, but also achieve fine-grained management at the user level.
For security or billing reasons, system administrators may want to control where wireless users access the network. WX2520X-LI wireless controller supports user access control based on AP location. When a wireless user accesses the network, the authentication server can deliver a list of APs that the user is allowed to access to the AC, and access control is performed on the AC, thereby limiting wireless users to only APs in designated locations.
 

Provides reliable gateway functionality

WX2520X-LI is positioned at small and medium-sized enterprises, and it has the gateway function of branch offices on the basis of wireless controller. Dual WAN port design provides basic conditions for uplink backup. At the same time, WX2520X-LI supports general gateway functions such as PPPOE, NAT gateway function, dynamic IP address, and static IP address setting.

Support Bonjour Gateway

The WX2520X-LI wireless controller supports the Bonjour Gateway function, making it easy for small businesses to use Apple devices such as printers, TVs and tablets.

Support channel intelligent switching

In a wireless local area network, channels are very scarce resources, and each AP can only work on very limited non-overlapping channels. For example, for a 2.4G network, there are only 3 non-overlapping channels, so how to intelligently allocate channels to APs is a wireless application. key.
There are a large number of possible interference sources in the frequency band where the WLAN works, such as radar and microwave ovens. Their presence in the network will interfere with the normal operation of the AP. Through the channel intelligent switching function, it can ensure that each AP can be allocated the optimal channel, reduce and avoid adjacent channel interference as much as possible, and through the real-time channel interference detection, the AP can avoid interference sources such as radar and microwave ovens in real time.
 

Support intelligent AP load balancing

The 802.11 protocol leaves the decision of wireless roaming to the wireless client, and the wireless client generally selects the AP according to the AP signal strength (RSSI). on the AP. Since these clients share the wireless medium, the network throughput per client will be greatly reduced.
The intelligent load sharing method can analyze the location of the wireless client in real time, dynamically determine which APs can share the load with each other at the current moment and the current location, and realize the load sharing among these APs by controlling the APs accessed by the wireless client. The system not only supports load balancing according to the number of online sessions of users, but also supports load balancing according to user traffic.
 

Support 7-layer mobile security detection/defense (WIDS/WIPS)

The mobile security defense modes supported by the WX2520X-LI wireless controller include: blacklist, whitelist, Rogue defense, malformed packet detection, illegal user offline, signature MAC layer attack detection and countermeasure based on preset upgrades (for example: DoS attack, Flood attack, man-in-the-middle attack), etc. With the built-in massive intelligent expert knowledge base of the wireless application console, a flexible basis for judging wireless security policies can be obtained, and for clear illegal attack sources (AP or terminal, etc.), the visual physical location tracking monitoring and switch physical port removal can be realized. .
By cooperating with H3C professional core layer firewall/IPS equipment, it can realize the 7-layer three-dimensional security defense of the mobile park, and meet the real end-to-end security protection requirements from wireless (802.11) to wired (802.3).
 

Support RealTime Spectrum Guard (real-time spectrum protection) mode

RealTime Spectrum Guard (RTSG) is a professional monitoring solution for wireless environment spectrum status proposed by H3C innovation. The full range of wireless controllers can work with Sensor APs with built-in RF acquisition modules to achieve deeply integrated RF monitoring and real-time spectrum protection.
The RTSG console is integrated and deployed in the H3C iMC intelligent management center. It communicates and collects data with the Sensor AP through the CAPWAP management tunnel, and realizes 7X24-hour wireless environment quality monitoring, wireless network capability trend assessment, and unlicensed interference alarms. Actively detect and identify all RF interference sources (Wi-Fi or non-Wi-Fi) in the 2.4GHz/5GHz band by graphical means, providing real-time FFT plots, spectral density plots, spectrograms, duty cycle plots, event spectra map, channel power, interference power, etc.; it can automatically identify the source of interference, determine the location of the wireless device in question, and ensure the best performance of the wireless network. Combined with the H3C iAR intelligent report component, the storage, traceability, and playback of RF quality history records in the full coverage area can be realized, and customized trend, compliance and audit reports can be automatically generated.
According to the requirements of different levels of user wireless environment supervision, the deployment of the RTSG solution can flexibly adopt Local Mode or Monitor Mode. When working in Local Mode, normal user access and data packet forwarding can be maintained under the premise of obtaining effective spectrum protection.
 

Built-in RF Optimization Engine (ROE)

The WX2520X-LI wireless controller has a built-in RF Optimizing Engine (RF Optimizing Engine) for APs. Through RF optimization based on features and protocols, it can effectively improve the application acceleration capability and quality assurance in scenarios such as high-density access and streaming media transmission in wireless deployment. Effect. These include: multi-user fair scheduling, hybrid access fairness, filtering interference, rate optimization, spectrum navigation, multicast enhancement (IPv4/IPv6), packet-by-packet power control, and intelligent bandwidth assurance.
 

Support 802.1x authentication, MAC address authentication, Portal authentication, etc.

WX2520X-LI wireless controller supports multiple authentication methods:
802.1x authentication: WX2520X-LI wireless controller supports various 802.1x authentication methods such as TLS, PEAP, TTLS, MD5, SIM card, etc., and also supports 802.1x local authentication methods, providing support for MD5, TLS, PEAP these mainstream With the support of authentication mode, users no longer need to configure AAA server additionally. WX2520X-LI wireless controller also supports dynamic authorization of VLAN and ACL function after passing 802.1x authentication. The policy for users can be set in advance. When users are authenticated, the system automatically configures customer permissions.
MAC address authentication: WX2520X-LI wireless controller supports MAC address authentication. For some handheld terminals (such as Wi-Fi Phone, handheld mobile terminals, etc.), it is not convenient to use the authentication method on the computer, but MAC address authentication can easily solve this problem. The problem is that after configuring legal MAC addresses on the controller or AAA server, terminals corresponding to these MAC addresses can be allowed to access the network, while illegal terminals that have not been configured in advance cannot access the wireless network. It greatly facilitates applications such as wireless medical systems. MAC address authentication can ensure that only the hospital's PDA working terminal can access the wireless network, while denying the patient's wireless PDA to use the dedicated wireless network.
Portal authentication: The WX2520X-LI wireless controller provides a built-in Portal authentication server. This authentication method does not require the cooperation of the client, and directly uses the browser WEB Portal page as the authentication channel. After the user is authenticated, the user can flexibly jump to the designated access home page and start the corresponding authorization and accounting. At the same time, it can also flexibly push customized Portal pages according to policy requirements to achieve the role of advertising and information transmission. It is widely used in wireless campuses, wireless cities, visitor access and other application scenarios.
 

Support IPv4/IPv6 dual protocol stack (Native IPv6)

WX2520X-LI wireless controller supports IPV6 access for wireless clients. On the AP at the starting point of the tunnel, since the device is aware of IPv6, it can map IPv6 priority to tunnel priority. On the AC side, complex control and filtering such as ACL filtering can also be performed on IPv6 packets.
The WX2520X-LI wireless controller can also be deployed in an IPv6 network, and an IPv6 tunnel is automatically negotiated between the AC and AP. When the AC and AP work completely in IPv6 state, the wireless controller can still correctly perceive IPv4 and can process IPv4 packets from wireless clients. The flexible adaptability of WX2520X-LI wireless controller to IPv4/6 can meet various complex applications of customers in the migration of IPv4 to IPv6 network. allows users to easily log in to the network through the IPv6 protocol.
In response to the endless attacks of IPv6 forged packets on campus network, WX2520X-LI wireless controller supports IPv6 SAVI (Source Address Validation, source address validity verification) technology. Obtaining the user's IP address by listening to the address allocation protocol ensures that subsequent applications can use the correct address to surf the Internet, and cannot forge other people's IP addresses, ensuring the reliability of the source address. At the same time, through the combination of IPv6 SAVI and Portal technology, the authenticity and security of all Internet users' packets are further guaranteed.
 

Provides end-to-end QoS

The WX2520X-LI wireless controller is developed based on the Comware platform, which not only fully supports the Diff-Serv standard, but also adds QoS support for the IPv6 protocol.
The QoS Diff-Serv model mainly includes traffic classification, traffic monitoring (Policing), queue management, queue scheduling (Scheduling) and so on. Operators can provide users with service guarantees with different service quality levels, making the Internet truly a comprehensive network that carries data, voice and video services at the same time.
 

Supports fast Layer 2 and Layer 3 roaming

The centralized wireless architecture of H3C company not only facilitates the implementation of Layer 2 roaming, but also facilitates the realization of roaming across Layer 3. The WLAN network deployed with Fat APs, due to the limited information transmitted between APs, leads to the collapse of Layer 3 roaming. It is very troublesome to implement. The centralized architecture is very easy to solve the problem of roaming across the three layers. The WX2520X-LI wireless controller supports the two and three layers of roaming, and the roaming domain is not restricted by the subnet. This excellent roaming feature allows customers to pay more attention to the coverage of the wireless signal without having to think too much about the planning of the existing network when planning the wireless network. This method greatly simplifies the early network planning and reduces the Network planning costs.
In the traditional mode, when the wireless user terminal uses 802.1x as a means of 802.11 access authentication and key exchange, there will be a lot of exchange packets between the wireless user terminal and the AP. When a wireless user terminal roams between two APs, if the wireless user terminal completely follows the complete 802.1x interaction process in the process of accessing the new AP, it will inevitably cause the roaming handover time to be too long. services (such as voice services), such a long switching time is unbearable. WX2520X-LI wireless controller adopts Key caching technology to complete the fast switching of users during roaming. Key caching technology makes a good balance between user's secure access and fast roaming. When roaming, it is not necessary to perform the complete 802.1x authentication interaction process again, and at the same time, it can ensure the continuity of user identity identification and key use; wireless users adopt fast roaming mode, and the roaming time in a single AC does not exceed 50ms, which meets the requirements of voice services. demanding needs.
 

Product Parameters

 

Hardware Specifications

project	WX2520X-LI
Dimensions (W×D×H)	440mm*250mm*43.6mm
Full weight	3.1kg
Throughput	4Gbps
interface	WAN 2*GE & LAN 6*GE+ 2* SFP+
power supply	Built-in open frame power supply
Operating/Storage Ambient Temperature	0°C~45°C/-40°C~70°C
Relative humidity of working/storage environment (non-condensing)	5%~95%
safety regulations	UL 60950-1 CAN/CSA C22.2 No 60950-1 IEC 60950-1 AS/NZS 60950-1 FDA 21 CFR Subchapter J GB 4943.1 UL 62368-1 CAN/CSA C22.2 No 62368-1 IEC 62368-1 EN 62368-1 AS/NZS 62368-1 GB/T9254-2008 (Class A)
EMC	EN 55024:2010 EN 55024:2010+A1:2015 EN 55032:2012 EN 55032:2012/AC:2013 EN 55023:2015 ETSI EN 300 386 V2.1.1 (2016-07) VCCI-CISPR 32:2016 FCC CFR 47 Part 15 B AS/NZS CISPR32:2015 EN 61000-3-2:2014 EN 61000-3-2:2013 ICES-003 Issue 6 EN 55035:2017
MTBF	≥145 years

 

Software Specifications

project	Support Features	WX2520X-LI
	Maximum number of managed APs	64
Basic performance	Default number of management APs	0
	License step size	1/4/8/16/32/64
	Maximum number of APs configured	128
	maximum number of users	2048
	ARP entry	4096
	ND entry	4096
802.11MAC	802.11 protocol suite	support
	The maximum number of SSIDs in the whole machine	64
	Hide SSID	support
	User limit	Support: limit the number of users based on SSID and Radio
	User online detection	support
	Automatic aging without user traffic	support
	Multi-country code deployment	support
	Wireless user isolation	support: 1. Layer 2 isolation of wireless users in wireless VLAN 2. Layer 2 isolation of wireless users based on SSID
	20MHz/40MHz automatic switching in 40MHz mode	support
	local forwarding	support
CAPWAP	Automatically enter AP serial number	support
	AC discovery (DHCP option43, DNS mode)	support
	IPv6 tunnel	support
	Clock synchronization	support
	AP dual uplink tunnel link	support
	Configure basic network parameters of AP through AC	Support: configure static IP, VLAN, connected AC address, etc.
	L2 and L3 networking between ACs and APs	support
	NAT traversal between AP and AC	support
Roaming capability	Layer 2 and Layer 3 roaming under different APs within the same AC	support
	Layer 2 and Layer 3 roaming between different ACs and different APs	support
Routing Features	NAT	support
	PPPoE	support
	DDNS	support
	SSL VPN	support
	IPSEC VPN	support
	RIP/RIPNG	support
	GRE	support
access control	Open system, Shared-Key	support
	WEP-64/128, Dynamic WEP	support
	WPA, WPA2, WAP3	support
	TKIP	support
	CCMP	support
	WAPI	support
	SSH v2.0	support
	Wireless EAD (Terminal Admission Control)	support
	local authentication	Support: 802.1X, Portal, MAC authentication
	LDAP authentication	support
	Guest access	support
QoS	priority mapping	support
	L2-L4 flow classification	support
	Traffic speed limit	support
	802.11e/WMM	support
	Access Control Based on User Profile	support
	Smart Bandwidth Limit	support
	Smart Bandwidth Guarantee	support:
	Voice optimization (WMM, SVP mapping)	support
	WMM CAC	support
	end-to-end QoS	support
Radio resource management	country code lock	support
	Static channel, power settings	support
	Dynamic channel, power settings	support
	Dynamic rate adjustment	support
	Air interface black hole detection and compensation	support
	load balancing dimension	Support: based on traffic, user, frequency band (dual frequency support)
	Smart Load Balancing	support
security defense	static blacklist	support
	Dynamic blacklist	support
	whitelist	support
	Rogue AP Detection	Support: based on SSID, BSSID, device OUI, etc.
	Illegal AP Countermeasures	support
	Anti-wireless flooding attack (Flooding Attack)	support
	Spoof Attack	support
	Anti-Weak IV attack	support
	WIPS	Support: 7-layer mobile security defense can be realized
Layer 2 protocol	ARP proxy	support
	802.1p	support
	802.1q	support
	802.1x	support
	broadcast storm suppression	support
IP protocol	IPv4 protocol	support
	Native IPv6 (native)	support
	IPv6 SAVI	support
	IPv6 Portal	support
multicast protocol	MLD Snooping	support
	IGMP Snooping	support
	number of multicast groups	256
	Multicast to Unicast (IPv4, IPv6)	Support: Unicast access threshold can be set according to the environment
Network management and configuration	management	Support: WEB, SNMP v1/v2/v3, RMON, etc.
	Configuration method	Support: WEB, CLI, TELNET, FTP, etc.
green technology	Shut down the AP radio port periodically as needed	support
	Turn off wireless service on demand	support
	Packet-by-Package Power Control (PPC)	support
WLAN integrated application	RF Ping	support
	Remote Probe Analysis	support
	Real Time Spectrum Guard (RTSG)	support
	Intelligent Wireless Service Awareness (wIAA)	Support/Stateful Firewall
	Fair Scheduling Mechanism for Packet Sending	support
	802.11n packet transmission suppression	support
	Traffic Shaping Based on Connection Status	support
	Adjust channel sharing between APs	support
	Adjust channel reuse between APs	support
	RF Interface Transmission Rate Adjustment Algorithm	support
	Ignore weak signal wireless packets	support
	Disable weak signal client access	support
	Disable multicast packet caching	support
	Blink Status Detection (Part of APs)	support

 

 

Solutions we can offer

We focus on the IDC data center field, have professional enterprise-level products, and provide complete planning and design solutions.

Main Application Scenarios:
SDS, VDI, CDN, virtualization, big data, database, cloud scenarios, AI inference, small businesses, OA, and web application.
 

 

 

Packaging & Shipping

Delivery time : 15-45 working days after payment receipt confirmed (based on actual quantity).

Original packaging to ensure product quality and safety.

Professional goods shipping forwarder.

After Sales Service

We guarantee that all products are original and authentic. All support after-sales inspection. Regarding xFusion server, we can provide remote technical services and troubleshooting.
In addition to new retail products. Others have used NEW BULK. We provide a complete test report. Please rest assured to buy. The stock is huge. Many products are not released in time. If you need more product quotations. You can email to contact us at any time. 

 

FAQ

Q1: How can I believe that your product is of good quality?
A1: We guarantee that all products are original products.We provide a complete test report.

Q2: When can I get a quote?
A2: We will usually quote you within 24 hours after receiving your inquiry. If you really want to get a quotation and more other questions, you can contact us via trademessage or email.

Q3: Why choose you?
Q3: As an Audited Supplier,we have a good reputation on our customers,because of the good quality,suitable price and good service.

Q4: What is your payment?
A4: T/T wire bank transfer.