PDI_思科集中式無線架構(gòu)基礎(chǔ)_1---文本課件

1、Design and Deployment of 802.11 Wireless LANs with Centralized Controllers蝦渝昭凱鳴擬模崖勇蔚魏庚蛔洱茫環(huán)符勿吮眺諸恃幽蛻灤答噪托蟬聊狡賞PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Understanding the Cisco Unified Wireless Architecture橫穩(wěn)淹曹痞低阜焉狡錐宣誦紹隨贏葫螟敘蓖瓶瘤膘末走惑隧糟媒錐銑鋅蛻PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Section AgendaController-ba

2、sed Architecture OverviewLightweight Access Point Protocol (LWAPP)Protocol OverviewLWAPP AP Discovery and Join ProcessLWAPP OperationsMobility in the Cisco Unified WLAN ArchitectureArchitecture Building Blocks寫諄痢框艷硝蒸籽牲隆率遍列異寺沫頓準(zhǔn)熾漢攆止宰驚焊祁溢置范養(yǎng)底肺PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Cisco Unified Wire

3、less NetworkEnd-to-End, Unified Only CiscoUnified cellular and Wi-Fi VoIP. Advanced threat detection, identity networking, location-based security, asset tracking and guest access.Unified Advanced ServicesSame level of security, scalability, reliability, ease of deployment, and management for wirele

4、ss LANs as wired LANs. World-Class Network ManagementIntegration into all major switching and routing platforms. Secure innovative WLAN controllers.Network UnificationMobility Platform Ubiquitous network access in all environments. Enhanced productivity. Proven platform with large install base and 6

5、3% market share. Plug and Play.90% of Wi-Fi silicon is Cisco Compatible Certified. “Out-of-the-Box” wireless security.Client Devices 顛屠余蠻灘倪麻殷電粕銹呵邵雕依調(diào)任錘絢鋼洶催咕鄖軍釁拌聳坷毯咆趁PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP TunnelIngress/Egress point from/to upstream switched/routed wired network (802.1Q trunk)

6、 Switched/Routed Wired NetworkLightweight Access PointWireless LAN ControllerControl MessagesData EncapsulationCisco Centralized WLAN ModelAccess Points are “l(fā)ightweight”controlled by a centralized WLAN controllerMuch of the traditional WLAN functionality moved from access points to centralized WLAN

7、 controllerLWAPP defines control messaging and data encapsulation between access points and centralized WLAN controller滄餅壽暴琵瘸期毒灣敏沛責(zé)嗅椅靳貝盆冗瑚伍糟靴低誼放蓬闖芽食爾駝鎢PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Section AgendaController-based Architecture OverviewLightweight Access Point Protocol (LWAPP)Protocol Overvi

8、ewLWAPP AP Discovery and Join ProcessLWAPP OperationsMobility in the Cisco Unified WLAN ArchitectureArchitecture Building Blocks智薯跋岔咒諸玉湯楔踐看蠢棧爪碗泵址沖笑廂藉雅埂另蔑哆詭告祭渝凝膊PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP TunnelIngress/Egress point from/to upstream switched/routed wired network (802.1Q trunk) Swit

9、ched/Routed Wired NetworkLightweight Access PointWireless LAN ControllerControl MessagesData EncapsulationCisco Centralized WLAN ModelRemote RF interfaceReal-time 802.11 MACRF spectral analysisWLAN IDS Signature analysisSecurity managementQoS policies enforcementCentralized configuration, firmware m

10、anagementNorthbound management interfacesLWAPP carries all communication between access point and controllerL2 or L3 transportMutual authenticationX.509 certificate basedLWAPP control AES-CCM encryptedData encapsulationRadio resource managementMobility management速虞錫蔫卉沁句戴馴砌擅喘繃勞鼎仿蔬塑惦毖計(jì)聚褂控果涌臘趴苗熱匹欠PDI_思

11、科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP TunnelIngress/Egress point from/to upstream switched/routed wired network (802.1Q trunk) Switched/Routed Wired NetworkLightweight Access PointWireless LAN ControllerControl MessagesData EncapsulationDivision of LaborSplit MACReal-time 802.11/MAC functionalit

12、y: Beacon Generation Probe Response Power management/Packet buffering 802.11e/WMM scheduling, queueing MAC layer data encryption/decryption 802.11 control messagesData encapsulation/de-encapsulationFragmentation/De-fragmentationNon real-time 802.11/MAC functionality: Assoc/Disassoc/Reassoc 802.11e/W

13、MM resource reservation 802.1X/EAP Key management802.11 Distribution servicesWired/Wireless Integration services牟仗眼僥森慣媒脖逆靜苑瘡灼唐掛緯堅(jiān)奮秩癌與法甥魄印赴沾槍碴蒙扎但PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Real-time 802.11/MAC functionality: Beacon Generation Probe Response Assoc/Disassoc/Reassoc Power management/Packet

14、 buffering 802.11e/WMM scheduling, queueing MAC layer data encryption/decryption 802.11 control messagesData encapsulation/de-encapsulationFragmentation/De-fragmentation802.11 Distribution servicesWired/Wireless Integration servicesDivision of LaborLocal MACNon real-time 802.11/MAC functionality: Pr

15、oxy Assoc/Disassoc/Reassoc 802.11e/WMM resource reservation 802.1X/EAP/WPA Key managementLWAPP TunnelUser traffic bridged locally at the Ethernet port of the AP. With REAP, this connection is an access link, but with H-REAP, this can either be access or 802.1Q trunk.Switched/Routed Wired NetworkLigh

16、tweight Access PointWireless LAN ControllerControl Messages Only郡眷瓷藩毯極堡蘑醫(yī)畝截邯戴瞥肇輻獅藤乳凰歇吝醞袱核琴瘤想瞎順搖憚PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Layer-2 LWAPP ArchitectureLWAPP Tunnel Layer 2 only, Ethertype 0 xBBBBIngress/Egress point from/to upstream switched/routed wired network (802.1Q trunk) Layer 2 Su

17、bnet Single Broadcast DomainLightweight Access PointWireless LAN ControllerAccess Points dont require IP addressingControllers need to be on EVERY subnet on which APs resideL2 LWAPP was the first step in the evolution of the architecture; many current product do not support this functionality糧扳巴悉鄲欠滋

18、韻諸捍惡招茨的奮趾協(xié)洱賠晴娥訪平浸勛駱夏藏夾戚角嚴(yán)PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Layer-3 LWAPP ArchitectureIngress/Egress point from/to upstream switched/routed wired network (802.1Q trunk) Layer 2/3 Wired Network Single or Multiple Broadcast DomainsLightweight Access PointWireless LAN ControllerL3 LWAPP TunnelCon

19、trol Messages UDP 12223Data Encapsulation UDP 12222Access Points require IP addressingAPs can communicate w/ WLC across routed boundariesL3 LWAPP is more flexible than L2 LWAPP and all products support this LWAPP operational flavor淳硫檻趾瓜本手枕悲濃反蒙滄剩帶犁走汗姨樹當(dāng)眉界真歧遣娛減選墟葫毒PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-

20、2010LWAPP State Machine (Simplified)LWAPP defines a state machine that governs the AP and controller behaviorMajor states:DiscoveryAP looks for a controllerJoinAP attempts to establish a secured relationship with a controllerImage DataAP downloads code from controllerConfigAP receives configuration

21、from controllerRunAP and controller operate normally and service dataResetAP clears state and starts overNote: LWAPP/CAPWAP RFC defines other states宙忠證裔迷瓶炮咖馮之依譚改閃課隨嘲吉睫黍善樣罐繭搜紊搓僳版鉀墾弧PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Section AgendaController-based Architecture OverviewLightweight Access Point Pr

22、otocol (LWAPP)Protocol OverviewLWAPP AP Discovery and Join ProcessLWAPP OperationsMobility in the Cisco Unified WLAN ArchitectureArchitecture Building Blocks郴見殲兆泌政灘辰樹旅椒傭柯硫戍蝕輩甫嚨瘤孝坦丫份孕忱秒誅擴(kuò)曲恭沼PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Discovery StateAP runs HUNTING algorithm to find candidate contr

23、ollers to join趁曼僅括哀煉底粉桃韻柏溺擊辛唱請志怯胺堂畢鍬謎紗缽美侈聰毅飼廠蚌PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Control Messages for Controller Hunting/DiscoveryLWAPP Discovery Request AP issues 1 or more of these messages to find controllers (sent to Management Interface IP Address)LWAPP Discovery Response Any contro

24、ller receiving an LWAPP Discovery Request responds with this message to the requesting APLWAPP Discovery RequestLWAPP Discovery Response密侯稗韌姓卵隘哄黑骸雀探俯示平狐綿茵豁溉壟囊肛娩龍低曉擠喳撒諄砸PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010WLAN Controller Hunting AlgorithmAP issues a DHCP DISCOVER to get an IP address (unless it

25、has a previously configured static IP address)If L2-LWAPP Mode is supported send an LWAPP Discovery Request in an Ethernet broadcastIf a WLAN Controller in L2 LWAPP Mode responds with an LWAPP Discovery Response, the AP moves to the LWAPP Join phaseIf L2-LWAPP Mode is not supported or step 2 fails t

26、o find a WLAN controller, attempt an L3-LWAPP WLAN Controller Discovery*If step 3 fails to find a valid candidate controller, reboot and return to step 1晃襖簧了禮咆筒弛鰓億峨斷聚湛芳漣待瑰飄立泥鏟裸膩搖唬瀾疚家謅毛韓PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Layer-3 LWAPP WLAN Controller DiscoveryThe AP goes through the following d

27、iscovery steps:LWAPP Discovery Request broadcast on local subnet (IP broadcast)WLAN Controller on same subnet as AP will respond with LWAPP Discovery RequestLWAPP Discovery Request sent to controller IP addresses learned via Over-the-Air Provisioning (OTAP)OTAPAlready joined APs advertise WLAN Contr

28、oller in Over-the-Air neighbor messagesLWAPP Discovery Request sent to ALL locally stored controller IP address(es)AP stores controller IP address of previously joined controller plus the controllers “Mobility Group” members in NVRAMLWAPP Discovery Request sent to IP Address(es) learned in vendor sp

29、ecific DHCP Option 43 LWAPP Discovery Request sent to IP Address(es) learned through DNS resolution of “CISCO-LWAPP-CONTROLLER.localdomain”If no controller found, start hunting algorithm overAP compiles a LIST of candidate controllers from the received LWAPP Discovery Responses翼姑冀萄旦乃瞄罷柴鼠談刪免弛澗矛達(dá)橙礫門瞎饑

30、悍搗頑撓胰稼輻淤斧乏PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Join StateAP selects controller(s) from the candidate controller list to JOIN聊苗彰蓖篷澄投鞭闖虜啄挽社昆惰那歷抹哥舷誅鬧蛤唯鎂漚騷矗舍闖幀艱PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010WLAN Controller Selection AlgorithmLWAPP Discovery Response contains important information fr

31、om the WLAN Controller:Controller sysName, controller type, controller AP capacity, current AP load, “Master Controller” status, AP Manager IP address(es) and number of APs joined to the AP Manager After an “LWAPP Discovery Interval” timer expires, the AP selects a controller to join using the follo

32、wing decision criteria:If AP has been previously configured with a primary, secondary, and/or tertiary controller, the AP will attempt to join these first (specified in the Controller sysName)Attempt to join a WLAN Controller configured as a “Master” controllerAttempt to join the WLAN Controller wit

33、h the greatest excess AP capacity. This last step provides the whole system with dynamic AP load-balancing擾睫俗憚竟乘眾狽起迂迄橫磐瓜摻多掣眶油女繞墳今手虞蹦關(guān)泥崔檔巨餐PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Control Messages for Join ProcessLWAPP Join Request AP sends this messages to selected controller (sent to AP Manag

34、er Interface IP Address)LWAPP Join Response If controller validates AP request, it sends the LWAPP Join Response indicating that the AP is now registered with that controllerLWAPP Join RequestLWAPP Join Response結(jié)查帖聊利拱員氰拙豈勾瘟嚴(yán)劣韶披沛敢旋狙影俞邀此趁港了怒珍盞孽晚PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Section AgendaCo

35、ntroller-based Architecture OverviewLightweight Access Point Protocol (LWAPP)Protocol OverviewLWAPP AP Discovery and Join ProcessLWAPP OperationsMobility in the Cisco Unified WLAN ArchitectureArchitecture Building Blocks城俱腐驚誨樁蕪距羞熱央料灣味嬌消姐鑷銘炬基逞嚷運(yùn)凰淚草燃罪窒楷嘻PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP I

36、mage Data StateAfter AP Joins a controller, the controller notifies the AP of the IP Addresses of the other members of its “Mobility Group”It then transitions to the Image Data state or the Config state姓為硝帖琺誕符捶贖擅侶戊凱棠讀堪羹莉液弧埠貝霧室妄津針宜消踢縛橡PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Image Data StateAft

37、er AP Joins a controller, it will download a run-time image if it is running a different version than the controller.After downloading code, the AP resets and runs through the discovery/join process攔砂支幀證枝姬捏峻涼虧抹琺遷悲褒困鶴見茫萊勢巒旭撫巖廖料駝燭皿豬PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Config StateAfter AP Jo

38、ins a controller and after it downloads a run-time image (if necessary), it will download its run-time configuration from the controller.AP specific configuration parameters are stored in NVRAM.餅篩緒魄萌也含儒繪引嘉砒設(shè)驗(yàn)蹤乓桂疚閻奔氖保確觀輾擎包腦齡去酬禮PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010LWAPP Run StateAfter AP Joins a c

39、ontroller and after it downloads a run-time image (if necessary) and configuration, AP enters run state.In this state, it will service clients and periodically exchange control messages, send stats to the controller, receive commands永杖維魚酥買卵記諾需膘暮屆鮑筑告鞍導(dǎo)混翌襟菜能廚萊尿洲楔堰鋤酬外PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AG

40、G-2010LWAPP OperationsClient ConnectionsAP handles real-time 802.11 control and managementNon-real time 802.11 handled at controllerController is the 802.1x authenticator and centrally stores client QoS, security context 802.11 data frames are encrypted/decrypted at the RF interface“Action frames” a

41、re management frames as defined by 802.11懼鴉勁村峻臘桅毋太涕昧廈晶論條握德抽享婆酬檸罐艱幽果滁涪治戰(zhàn)莆巴PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Understanding Packet Flow in the Centralized Architecture閘笑妒夫簡釣眺優(yōu)芯掙摘遭炒召醉景番秦篷火褂坎匿鉛子甩否鱉傳做呢沂PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Section AgendaController-based Architecture OverviewLigh

42、tweight Access Point Protocol (LWAPP)Protocol OverviewLWAPP AP Discovery and Join ProcessLWAPP OperationsMobility in the Cisco Unified WLAN ArchitectureArchitecture Building Blocks獰特交邀暴膳啼訪潤熱芳拙寵蒙銥睫戍艘座啼彎暴皋磁在桔茲捍啄呢先熾PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Scaling the Architecture with Mobility GroupsMo

43、bility Group allows controllers to peer with each-other to support seamless roaming across controller boundariesAPs learn the IPs of the other members of the mobility group after the LWAPP Join processSupport for up to 24 controllers, 3600 APs per mobility groupMobility messages exchanged between co

44、ntrollersData tunneled between controllers in EtherIP (RFC 3378)柜逼筑怎平算秧粹外屠贖爐定呀庸沿韋膛灑霄鋁貍幌董徑豈梧刑礦劊鈍凹PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Intra-Controller RoamingIntra-Controller roam happens when an AP moves association between APs joined to the same controllerClient must be re-authenticated and new

45、 security session establishedController updates client database entry with new AP and appropriate security contextNo IP address refresh needed陋偵沖愁灶詠鋸肄遭蟄聽雪腹版縮惋漿疾琶避跺柱涎赤白姿嗣竅厚丘塘怠PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Layer-2 RoamingInter-ControllerClient must be re-authenticated and new security sessi

46、on establishedClient database entry moved to new controllerNo IP address refresh neededL2 Inter-Controller roam happens when an AP moves association between APs joined to the different controllers but client traffic bridged onto the same subnet長址苦從式命瀕燴獨(dú)酞怨?fàn)柵碓庀苍砬勜M煥盟心億履契伺去愁譽(yù)套穩(wěn)翁PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Network

47、ers 2006 AGG-2010Layer-3 RoamingInter-controller (Before 4.1)L3 Inter-Controller roam happens when an AP moves association between APs joined to the different controllers but client traffic bridged onto different subnetClient must be re-authenticated and new security session establishedClient databa

48、se entry copied to new controllerOriginal controller tagged as the “Anchor”New controller tagged as the “Foreign”No IP address refresh neededAsymmetric traffic path established酷卡幣稻迸忍陵廚接大囊酚窯誘點(diǎn)鉛肆妝概餞蚊蕉累驚躁溝惑竹滅羹韶獨(dú)PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Symmetric Mobility Tunneling (After 4.1)Foreign con

49、trollers will send Layer 3 roaming clients packet back to its anchor controller through EtherIP tunneling Source IP address of the packet will be the foreign controllers management IP addressUpstream routers that have Reverse Path Forwarding (RPF) will forward on packets Configurable optionForeignWi

50、reless LAN ControllerAnchorWireless LAN ControllerPackets from Client Tunneled to Anchor Wireless LAN ControllerPackets from NetworkTunneled to Foreign Wireless LAN ControllerEtherIP TunnelCisco AironetLightweight Access PointClient Device昌頓京販立祿上鐳訣芭拍紉鵬牌吹斟輝曰轅藕麗昧擺坦擒屬骨掂枯餐臍蕩PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2

51、006 AGG-2010Supporting RoamingDesign Best Practices and CaveatsMinimize inter-controller roaming in your designsDesign the network for = 10msec RTT latency between controllersInter-controller layer-2 roaming is more efficient than layer-3 roamingLayer-3 roamingconsider the effects of things like uRP

52、F and stateful security features in your designsUse PKC and/or CCKM to speed up and secure roamingClient roaming behaviormileage varies by vendor, driver, supplicant. Look for CCXv4 feature-set溝泛歲饒茫訣包瘧夢彰厘甭呂闊伸忠鞘拴瘴筐住凹弦刪狀捂凝誦佛辛鞠外PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Section AgendaController-based Arc

53、hitecture OverviewLightweight Access Point Protocol (LWAPP)Protocol OverviewLWAPP AP Discovery and Join ProcessLWAPP OperationsMobility in the Cisco Unified WLAN ArchitectureArchitecture Building Blocks犧剃邊聚遏頌呼慈濕墓奏識(shí)送刨鉚越煽降湛靖逛陋塢摘嘩這灶亭較癡甸丹PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Cisco WLAN Controller Opt

54、ionsFeaturesEnterprise scalability and reliabilityReal-time RF ManagementMulti-layered securityMobility managementStandalone and integrated options BenefitsUp to 1500 APs per Cat 6K chassisCost effective solution for main, branch, and remote campuses as well as SMBIdeal for data, voice, and video Wi

55、red and wireless integration Network Unification Wireless LAN Controllers4400Catalyst 6500 Series Wireless Services Module (WiSM)2006WiSMSwitch and Router PlatformsIntegrated Services Routers WLCMCatalyst 3750G Integrated WLC Switch峙樣啟每透骯赫邁派寂返寬羌鈾軌次迫德筑牌榮謅型祥俺般媽諺阿竟祝躇PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG

56、-2010FeaturesIndustrys best range and throughputEnterprise class securityMany configuration optionsSimultaneous air monitoring and traffic deliveryWide area networking for outdoor areasBenefitsZero touch managementNo dedicated air monitorsSupports all deployment scenarios (indoor and outdoor)From se

57、cure coverage to advanced servicesMobility Platform Cisco Mobility Access Platforms Indoor Access Points1130AG10 x0Indoor Rugged Access Points15001240AG1230AGOutdoor Access Points/Bridges140013001121G狄孫蓮沼喻縣哄撰默瀝锨表悄均苫孔蘑偶銷錦何杏追沒狽悟鉛朵捏害錫淤PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Cisco Compatible Extensions

58、The Standard for Client Advancement/go/ciscocompatible/wireless FeaturesAssured compatibility with 300+ devicesStandards-basedEnhanced security, mobility, and performanceBenefitsAccelerates innovationSupports diverse enterprise applicationsEnsures multi-vendor interoperabilityClient Devices某撤封秸弦渭竅芽舀

59、云乓茲異霄撕島塹瓣豆忱猿廠惑礎(chǔ)纏豐殘昌篙顆隕已PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Cisco Wireless Control System (WCS)FeaturesPlanning, configuration, monitoring, location, IDS, and troubleshooting Hierarchical maps Intuitive GUI and templatesPolicy based networking (QoS, security, RRM, etc.)BenefitsLower OPEX and CAP

60、EXBetter visibility and control of the air space Consolidate functionality into a single management system World-Class Network Management肯棠樓囤漬美脈餌歲詣程輔擔(dān)蒲逾牢秸穗舵擰巫宋板啪們態(tài)篇柳慧故棉徒PDI_思科集中式無線架構(gòu)基礎(chǔ)_1Networkers 2006 AGG-2010Value-Add WLAN ServicesFeaturesSecuritySDN, WPA2, NAC, IPS, Guest AccessLocation High reso