DCWS-8504 has large capacity, high reliability and supports multiple types of business. It provides strong WLAN access control through systems such as precise user control and management, complete RF management and security mechanism, powerful QoS, seamless roaming, and authentication based on existing networks. DCWS-8504 is a ideal access controller for operators, educational departments and other hotspot coverage application.
DCWS-8504 high-end wired and wireless integrated intelligent controller supports redundancy control, can support the two main control board and two interface board block, supports up to 4096 AP management, can meet the deploy demand of large campus wireless network and wireless network operators. The board, power supply, fan support hot swappable, provides the reliability for DCWS-8504.
DCN provides network services based on authentication, this method is based on the identity of the user rather than the port or device, it realizes the mobility and security across the network. When users roam in the network, it can use WLAN to complete information interaction, and perform access and consistent security policy within the scope of the entire network, it supports safety standards of WAPI and 802.11i , effectively guarantee the safety of all kinds of information and data.
DCWS-8504 wireless access controller can be deployed in any of the existing Layer 2 or 3 combined with DCN intelligent AP; there is no need to have the network reconfiguration.
- High-density access ports and smart wired/wireless control and forwarding architecture
The DCWS-8504 employs an ASIC-based wireless forwarding technology to provide the highest port density and highest wireless throughput as compared with similar ACs in the industry. It supports both wireless and wired switching. All wireless traffic and wired traffic are uniformly forwarded in the same chip. Boasting of a wired/wireless integrated control and forwarding architecture, the DCWS-8504 combines the functions of both a wireless AC and a routing switch. Its direct connection mode greatly lowers users’ investment, improves network performance, and facilitates network management.
- High-reliability backup mechanism
The DCWS-8504 supports the following high-reliability backup mechanisms to ensure that a wireless network runs reliably:
- 1+1 fast backup
- N+1 backup
- N+N backup
- Portal 1+1 backup
- DHCP server hot backup
- End-to-end QoS
The DCWS-8504 provides ASIC-based QoS and comprehensively supports Diff-Serv, such as flow classification, traffic policing, queue management, and queue scheduling. It also supports IPv6 QoS. Of DCN wireless network products, both DCN ACs and DCN APs implement the same QoS function. They support QoS based on per-terminal control and QoS based on air interface control. The entire wireless network provides an end-to-end QoS mechanism, enabling network operators to provide different QoS guarantee of different levels for users and making the Internet really an integrated network that simultaneously bears voice, data, and video services.
- Automatic emergency mechanism of APs
In a centralized network architecture where fit APs and a wireless AC are deployed, the APs will be unable to operate normally when the wireless AC is down and then the entire wireless network will crash. DCN wireless APs support an automatic emergency mechanism. This mechanism enables an AP to intelligently detect links. When detecting that the wireless AC is down, the AP quickly switches its operating mode so that it may continue to forward data while enabling new users to access the network. This mechanism attains high availability in the entire wireless network and really helps wireless users to be always online.
- Dual-OS backup mechanism
The DCWS-8504 supports a dual-OS backup mechanism. When the DCWS-8504 fails to start from the active OS, it can immediately start from a standby OS, thereby improving the long-term running reliability of equipment in an adverse environment.
Wireless Network of Intelligent Control and Automatic Perception
- Intelligent RF management
The DCWS-8504 provides an automatic power and channel adjustment function. It employs particular RF detection and management algorithms to attain a better RF coverage effect. When the signals of an AP are interfered by strong external signals, the AP may automatically switch to an appropriate operating channel under the control of the AC to avoid such interference, thereby guaranteeing wireless network communications. The system also supports wireless network blackhole compensation. When an AP on the network accidentally stops operating, the RF management function of the AC compensates the resulting blind area of signals so that the wireless network can still operate normally.
- Intelligent control of terminals based on airtime fairness
When some outdated 802.11b and 802.11g terminals are used on a wireless network or some terminals are far way from APs, negotiation rates will be low, causing a large number of users to experience a long WLAN access delay, low rates, or poor overall AP performance. The AP performance problem in a low-rate terminal access environment, however, cannot be resolved by simply employing rate control and traffic shaping. DCN smart APs have essentially resolved this problem by using intelligent control of terminals based on airtime fairness, ensuring that a user can always enjoy the same joyful WLAN experience in the same location, no matter what type of the terminal the user is holding.
The intelligent control of terminals based on airtime fairness greatly improves the performance of both the client and the entire network. It enables all clients with high data transmission rates to attain strikingly higher performance while low-rate clients are almost not affected at all. The performance will be even more obviously higher on an open wireless network. Once high-rate clients finish data transmission, fewer clients will be transmitting data on the wireless network. In this case, there will be less contention and retry on the network, thereby greatly improving overall AP performance.
- Intelligent load balancing mechanism
In general, a wireless client will select an AP according to the signal strength of APs. When this uncontrolled access mode is applied, however, a large number of clients could be connected to the same AP simply because the AP provides strong signals. As more clients are connected to an AP, the bandwidth available to each client will be smaller, thereby greatly affecting user experience of the clients. DCN wireless products support diversified intelligent load balancing means:
- AP load balancing based on traffic
- AP load balancing based on the number of users
- AP load balancing based on frequency bands
- Access control based on signal strength of terminals
- Mandatory roaming control of terminals to direct terminals to APs with stronger signals
- Intelligent identification of terminals
DCN wireless ACs may combine with DCN smart APs and a unified authentication platform to intelligently identify the size, system type, and type of each terminal; and comprehensively support mainstream smart terminal operating systems, such as Apple iOS, Android, and Windows. They intelligently identify the size of a terminal and adaptively present a portal authentication page of the corresponding size and page pattern, freeing users from multiple times of dragging to adjust the screen and enabling users to enjoy more intelligent wireless experience. They can also intelligently identify the system type of each terminal and present the system type of each terminal such as Windows, MAC OS, or Android on the unified authentication platform, exhibiting every detail of intelligence to users. In addition, they can intelligently identify the type of each terminal such as the mobile phone, tablet, or PC, and implement dynamic policy control of terminals according to different types of the terminals, making possible more intelligent user control at a finer granularity.
- Comprehensive support for IPv4/v6 dual-stack networks
Powered by DCN cutting-edge IPv6 technology, the DCWS-8504 may be deployed on an IPv6 network, with IPv6 tunnels established through auto negotiation between a wireless AC and an AP. When the wireless AC and the AP completely operate in IPv6 mode, the wireless AC can still correctly identify IPv4 terminals and process IPv4 packets from wireless clients. Featuring flexible adaptability to IPv4/6, the DCWS-8504 caters to complex applications involved in migration from an IPv4 network to an IPv6 network. It not only provides IPv4 service to customers on an IPv6 network, but also enables users on an IPv4 network to log in to the network through the IPv6 protocol at ease.
- Network-wide seamless roaming
The DCWS-8504 supports an advanced wireless AC cluster technology. This technology enables multiple DCWS-8504 devices to synchronize online connection information and roaming records of all users with one another in real time. This technology implements not only L2/L3 seamless roaming inside a wireless AC but also fast roaming across wireless ACs. As client IP address information does not change and re-authentication is not required in the roaming process, the continuity of real-time mobile services is well guaranteed.
Secure and Controllable Wireless Network
- User isolation policy
The DCWS-8504 supports the isolation of wireless users from one another. If this user isolation function is enabled, two wireless clients cannot directly communicate with each other but can only access an upstream wired network. This further guarantees the security of wireless network applications.
- Wireless intrusion detection and intrusion defense
The DCWS-8504 supports wireless intrusion detection and intrusion defense features, such as detection of unauthorized wireless devices, intrusion detection, blacklist, and white list, as well as anti-DoS for various wireless management packets, thereby greatly improving security management of an entire wireless network.
- Wireless user management at a fine granularity
Under the management of the DCWS-8504, each AP supports a maximum of 32 WLANs to implement multi-layer multi-service management of wireless users at a fine granularity. Each WLAN supports access control and uplink/downlink rate limit based on MAC or IP addresses. These WLANs may be bound to VLANs. In addition, different authentication and accounting policies can be implemented. This feature is practically significant in a multi-WLAN environment.
- Operational-level permission management mechanism
An SSID-based user permission management mechanism enables a network to be divided into multiple virtual wireless networks based on multiple SSIDs according to actual application requirements. This mechanism sets specific management and viewing permissions for specific users, so that users are completely isolated from one another in terms of operation and management.
- Secure user admission
The DCWS-8504 provides multiple secure access, authentication, and accounting mechanisms for various application environments. These mechanisms include:
- 1x authentication
- Captive portal authentication, including built-in portal, external portal, and custom portal authentication modes
- MAC address authentication
- LDAP authentication
- WAPI encryption and authentication
- Wired/wireless integrated authentication and accounting
- Wireless SAVI
DCN wireless network products support a source address validation (SAVI) technology to deal with spoofed packet attacks that keep emerging on today’s campus networks. As users’ IP addresses are obtained through an address allocation protocol, users access the Internet using correct addresses in subsequent applications and cannot spoof others’ IP addresses, thereby guaranteeing the reliability of source addresses. In addition, the SAVI technology is combined with a portal technology to further guarantee the authenticity and security of packets of all users accessing the Internet.
- PEAP user authentication
With the popularization and application of smart terminals, wireless terminal users require authentication mechanisms of higher usability and convenience. Using a mechanism that combines portal authentication and MAC address authentication, DCN wireless network products support Protected Extensible Authentication Protocol (PEAP) authentication to attain better user experience. Initially a user needs to manually perform portal authentication and later the user gets authenticated through PEAP in automatic mode. DCN wireless network products feature high terminal adaptation and provide good authentication compatibility. They adapt to the majority of WLAN terminals and do not need to adapt to clients. DCN wireless network products are compatible with existing portal authentication modes.
- Secure access mechanism of APs
An AP is usually deployed in a public area and therefore requires a strict security mechanism to guarantee the legality of access devices. The following secure access mechanisms may be applied between a DCN wireless AC and a smart AP:
- AP MAC address authentication
- AP password authentication
- Bidirectional digital certificate authentication
- Real-time spectrum protection
DCN smart APs support a built-in RF collection module that integrates RF monitoring and real-time spectrum protection. By implementing communications and data collection through the respective AP, the RF collection module performs wireless environment quality monitoring, wireless network capability tendency evaluation, and unexpected-interference alarms. It resorts to a graphical means to actively detect and identify RF interference sources (Wi-Fi or non-Wi-Fi) and provides a real-time spectrum analysis diagram. In addition, it can automatically identify interference sources and determine the locations of problematic wireless devices, ensuring that a wireless network attains optimal performance.
Easy-to-Manage Wireless Network
- AP plug-and-play
The DCWS-8504 smart AC can be seamlessly integrated with existing switches, firewalls, authentication servers, and other network devices. DCN smart APs are able to automatically discover the DCWS-8504. A wireless network function can be enabled on an AP without performing any configuration on the AP at all.
When used with the DCWS-8504, DCN smart APs support plug-and-play and zero configuration. The wireless AC undertakes all the management, control, and configuration of the APs. Network administrators do not need to separately manage or maintain a huge number of wireless APs. All actions, such as configuration, firmware upgrade, and security policy updating, are performed uniformly under the control of the wireless AC.
- Remote probe analysis
The DCWS-8504 supports remote probe analysis of APs. It listens to and captures Wi-Fi packets in the coverage and mirrors them to a local analysis device in real time to help network administrators better perform troubleshooting or optimization analysis. The remote probe analysis function can perform non-convergence mirroring of a working channel and sampling of all channels in polling mode as well to flexibly meet various wireless network monitoring, operation, and maintenance requirements.
- Multiple management modes and uniform management platform
The DCWS-8504 supports various management modes such as command lines and web. It can be used to plan, deploy, monitor, and manage APs on an entire network centrally and effectively at low costs. It may also be used with a DCN platform for integrated management of wireless and wired devices, so that administrators can monitor and manage the entire network in a data center.
|Dimensions (W x D x H)||445mm×421mm×266mm(6U)|
|Switching capacity||1.44Tbps/3.2Tbps (can be extended to 6.4Tbps)|
|Service port||Seventy-two SFP GE ports|
|Sixty-four GE ports|
|Eight 10 GE ports|
|Management port |
|One console port (RJ-45)|
|One out-band management (RJ-45)|
|Power supply |
|AC: 110V to 240 V, 50 Hz to 60 Hz|
|Working/Storage RH||10%~90% (non-condensing)|
|Base number of manageable APs||128|
|Maximum number of manageable APs||4096|
|Number of manageable ACs in a cluster||8|
|AP upgrade step||128|
|Maximum number of concurrent wireless users||128K|
|MAC address list||128K|
|Switching time during roaming||<30ms|
|L2 protocols and standards |
IEEE802.1x(Port Control)、IEEE802.3x(Flow control)
IGMP Snooping、MLD Snooping
Broadcast storm control
|L3 protocols and standards||Static Routing|
|Wireless protocols and standards |
|802.11， 802.11a， 802.11b，802.11g，802.11n，802.11d，802.11h，802.11i， 802.11e， 802.11k|
|CAPWAP protocol |
|Supports L2/L3 network topology between an AP and an AC.|
|Enables an AP to automatically discover an accessible AC.|
|Enables an AP to automatically upgrade its software version from an AC.|
|Enables an AP to automatically download configurations from an AC.|
|IPv6 protocols and standards |
|IPv4/v6 dual-stack, manual tunnel, ISATAP, 6to4 tunnel, IPv4 over IPv6 tunnel, DHCPv6, DNSv6, ICMPv6, ACLv6, TCP/UDP for IPv6, SOCKET for IPv6, SNMP v6, Ping /Traceroute v6, RADIUS, Telnet/SSH v6, FTP/TFTP v6, NTP v6, IPv6 MIB support for SNMP, VRRP for IPv6, IPv6 QoS, static routing, OSPFv3, IPv6 SAVI|
|High reliability |
|1+1 fast backup|
|Portal 1+1 backup|
|DHCP server hot backup|
|RF management |
|Setting country codes|
|Manually/automatically setting the transmit power|
|Manually/automatically setting the working channel|
|Automatically adjusting the transmission rate|
|Blind area detection and repair|
|RF environment scanning, which enables a working AP to scan the surrounding RF environment|
|RF interference detection and avoidance|
|11n-preferred RF policy|
|20 MHz and 40 MHz channel bandwidth configuration|
|Airtime protection in hybrid access of 11bg and 11n terminals|
|Terminal-based airtime fairness scheduling|
|Terminal locating (A terminal locating algorithm can be embedded in the AC)|
|Spectral navigation (5 GHz preferred)|
|SSID-based or Radio-based limit on the number of users|
|User online detection|
|Automatic aging of traffic-free users|
|Prohibiting the access of clients with weak signals|
|Remote probe analysis|
|Forced roaming of clients with weak signals|
|Support 64/128WEP、dynamic WEP、TKIP、CCMP、SMS|
|802.11i security authentication and two modes (Enterprise and Personal) of 802.1x and PSK|
|WAPI encryption and authentication|
|MAC address authentication|
|Portal authentication, including built-in portal, external portal, and custom portal authentication modes|
|PEAP user authentication|
|Forwarding security control, such as frame filtering, white list, static blacklist, and dynamic blacklist|
|Periodic Radio/SSID enabling and disabling|
|Access control of free resources|
|Secure admission control of wireless terminals|
|Access control of various data packets such as MAC, IPv4, and IPv6 packets|
|Secure access control of APs, such as MAC authentication, password authentication, or digital certificate authentication between an AP and an AC|
|Backup authentication server|
|User access control based on AP locations|
|Wireless intrusion detection system (WIDS) and wireless intrusion prevention system (WIPS)|
|Protection against flooding attacks|
|Protection against spoofing attacks|
|IPv6 access and forwarding; constructing IPv6 WLAN access service on an IPv4 network; providing IPv4 WLAN access service on an IPv6 network; and constructing private IPv6 WLAN network service on an IPv6 network|
|Fast L2/L3 roaming between APs served by the same AC|
|Fast L2/L3 roaming between APs served by different ACs|
|IPv4 and IPv6 multicast forwarding|
|802.11e (WMM); and 4-level priority queues, ensuring that applications sensitive to the real-time effect, such as voice and video services, are transmitted first|
|Ethernet port 802.1P identification and marking|
Mapping from wireless priorities to wired priorities
|Mapping of different SSIDs/VLANs to different QoS policies|
Mapping of data streams that match with different packet fields to different QoS policies
|Access control of MAC, IPv4, and IPv6 data packets|
|Load balancing based on the number of users;|
Load balancing based on user traffic;
Load balancing based on frequency bands;
|Bandwidth limit based on APs ;|
Bandwidth limit based on SSIDs;
Bandwidth limit based on terminals ;
Bandwidth limit based on specific data streams
|Power saving mode|
|Automatic emergency mechanism of APs|
|Intelligent identification of terminals|
|Configuration through a console port|
|Both local and remote maintenance|
|Local logs, Syslog, and log file export|
|Login through Telnet|
|Login through SSH|
|Dual-image (dual-OS) backup|
|AC cluster management; automatic information synchronization between ACs in a cluster, and automatic or manual push of configuration information|
|SSID-based user permission management mechanism|
|DCWS-8504||DCN 4 slots wireless intelligent controller (2 business slots, 2 management slots，AC power supply 1+1 redundancy)，one MRS-PWR-A1-AC-B AC power supply，one fan trays without management slot.||Mandatory|
|DCWS-L128||Upgrade license of the DCN wired/wireless integrated smart AC (for upgrading 128 Aps, minimum number of upgrade step is 128 APs)||Optional|
|MWS-8504-M2XFP8GX16GB||DCWS-8504 management slot，one USB port，one RJ45 console port，1 port Gigabit network, with 2 port Gigabit (SFP+ port) + 24 Gigabit SFP port + 8*10/100/1000Base-T (Combo) port.||Optional|
|MWS-8504-2XFP12GX12GT||DCWS-8504 interface module，2 port Gigabit (XFP port) + 24 10/100/1000Base-T + 12 port Gigabit SFP||Optional|
|MRS-PWR-A1-AC-B||220V AC power supply module(400W) for DCWS-8504||Optional|
|SFP-SX-L||1000Base-SX SFP interface card，LC port，275m/550m||Optional|
|SFP-LX-L||1000Base-LX SFP interface card(maximum haul of 10 km), LC port||Optional|
|SFP-LX-20-L||1000Base-LX SFP interface card(1310nm,SMF,20km), LC port||Optional|
|SFP-LX-40-L||1000Base-LX SFP interface card (maximum haul of 40 km), LC port||Optional|
|SFP-LH-70-L||1000Base-LX SFP interface card(maximum haul of 70 km), LC port||Optional|
|SFP-LH-120-L||1000Base-LX SFP interface card (maximum haul of 40 km), LC port||Optional|
|SFP-GT||1000Base-T SFP interface card，RJ-45 port||Optional|
|SFPX-SR||10GBase-SR SFP+ multi-mode optical interface card|
(850nm，62.5μm MMF 32m，50μm 500MHz/km MMF 85m，50μm 2000MHz/km MMF 300m)
|SFPX-LR||10GBase-LR SFP+ single-mode optical interface card|
|XFP-SR||XFP-SR 10GBase-SR XFP multi-mode optical interface card(850nm，MMF 32/85m，2000MHz/km MMF 300m)，LC port||Optional|
|XFP-LR||XFP-LR 10GBase-LR XFP single-mode optical interface card(1310nm,SMF,10km)，LC port||Optional|
|XFP-ER||XFP-ER 10GBase-ER XFP single-mode optical interface card(1550nm,SMF,40km)，LC port||Optional|
|XFP-ER-70||XFP-ER 10GBase-ER XFP single-mode optical interface card(1550nm,SMF,70km)，LC port||Optional|