User's Manual

DCWL-7962OT
APs have essentially resolved this problem by using intelligent
control of terminals based on airtime fairness, ensuring that a user
can always enjoy the same joyful WLAN experience in the same
location, no matter what type of the terminal the user is holding.
The intelligent control of terminals based on airtime fairness
greatly improves the performance of both the client and the entire
network. It enables all clients with high data transmission rates
to attain strikingly higher performance while low-rate clients are
almost not affected at all. The performance will be even more
obviously higher on an open wireless network. Once high-rate
clients nish data transmission, fewer clients will be transmitting
data on the wireless network. In this case, there will be less
contention and retry on the network, thereby greatly improving
overall AP performance.
► Intelligent load balancing mechanism
In general, a wireless client will select an AP according to the
signal strength of APs. When this uncontrolled access mode is
applied, however, a large number of clients could be connected
to the same AP simply because the AP provides strong signals.
As more clients are connected to an AP, the bandwidth available
to each client will be smaller, thereby greatly affecting user
experience of the clients. DCN wireless products support
diversied intelligent load balancing means:
AP load balancing based on trafc
AP load balancing based on the number of users
AP load balancing based on frequency bands
Access control based on signal strength of terminals
Call admission control (CAC) based on the number of users
to well guarantee the access performance and bandwidths of
terminals with high-priority applications
Mandatory roaming control of terminals to direct terminals to APs
with stronger signals
► Intelligent identication of terminals
DCN smart APs may be used with DCN wireless ACs and a
unified authentication platform to intelligently identify the size,
system type, and type of each terminal; and comprehensively
support mainstream smart terminal operating systems, such as
Apple iOS, Android, and Windows. They intelligently identify the
size of a terminal and adaptively present a portal authentication
page of the corresponding size and page pattern, freeing users
from multiple times of dragging to adjust the screen and enabling
users to enjoy more intelligent wireless experience. They can also
intelligently identify the system type of each terminal and present
the system type of each terminal such as Windows, MAC OS, or
Android on the unified authentication platform, exhibiting every
detail of intelligence to users. In addition, they can intelligently
identify the type of each terminal such as the mobile phone,
tablet, or PC, and implement dynamic policy control of terminals
according to different types of the terminals, making possible
more intelligent user control at a ner granularity.
► Comprehensive support for IPv4/v6 dual-stack
networks
Powered by DCN cutting-edge IPv6 technology, DCN smart
APs may be deployed on an IPv6 network, with IPv6 tunnels
established through auto negotiation between a wireless AC and
an AP. When the wireless AC and the AP completely operate
in IPv6 mode, the wireless AC can still correctly identify IPv4
terminals and process IPv4 packets from wireless clients.
Featuring flexible adaptability to IPv4/6, DCN smart APs cater
to complex applications involved in migration from an IPv4
network to an IPv6 network. They not only provide IPv4 service to
customers on an IPv6 network, but also enable users on an IPv4
network to log in to the network through the IPv6 protocol at ease.
► Network-wide seamless roaming
DCN wireless ACs support an advanced wireless AC cluster
technology, which enables multiple ACs to synchronize online
connection information and roaming records of all users to each
other in real time. This technology implements not only L2/L3
seamless roaming inside a wireless AC but also fast roaming
across wireless ACs. As client IP address information does not
change and re-authentication is not required in the roaming
process, the continuity of real-time mobile services is well
guaranteed.
Secure and Controllable Wireless Network
► User isolation policy
DCN wireless APs support the isolation of wireless users from
one another. If this user isolation function is enabled, two wireless
clients cannot directly communicate with each other but can only
access an upstream wired network. This further guarantees the
security of wireless network applications.
► Wireless intrusion detection and intrusion defense
DCN wireless APs support wireless intrusion detection and
intrusion defense features, such as detection of unauthorized
wireless devices, intrusion detection, blacklist, and white list,
thereby greatly improving security management of an entire
wireless network.
► Wireless user management at a ne granularity
Each AP supports a maximum of 32 WLANs to implement multi-
layer multi-service management of wireless users at a fine
granularity. Each WLAN supports access control and uplink/
downlink rate limit based on MAC or IP addresses. These
WLANs may be bound to virtual local area networks (VLANs).
In addition, different authentication and accounting policies can
be implemented. This feature is practically signicant in a multi-
WLAN environment.
► Secure user admission
DCN smart APs may be used with wireless ACs to provide multiple
secure access, authentication, and accounting mechanisms for
various application environments. These mechanisms include:
802.1x authentication
Captive portal authentication, including built-in portal, external
portal, and custom portal authentication modes
MAC address authentication
LDAP authentication
WAPI encryption and authentication
Wired/wireless integrated authentication and accounting
► Wireless SAVI
DCN wireless network products support a source address
validation (SAVI) technology to deal with spoofed packet attacks
that keep emerging on today's campus networks. As users' IP
addresses are obtained through an address allocation protocol,
users access the Internet using correct addresses in subsequent
applications and cannot spoof others' IP addresses, thereby
guaranteeing the reliability of source addresses. In addition, the
SAVI technology is combined with a portal technology to further
guarantee the authenticity and security of packets of all users
accessing the Internet.
► PEAP user authentication
With the popularization and application of smart terminals,
wireless terminal users require authentication mechanisms
of higher usability and convenience. Using a mechanism that
combines portal authentication and MAC address authentication,
DCN wireless network products support Protected Extensible
Authentication Protocol (PEAP) authentication to attain better
user experience. Initially a user needs to manually perform portal
authentication and later the user gets authenticated through PEAP
in automatic mode. DCN wireless network products feature high