Appendix a, Licenses | Aruba Networks Version 3.3 specification

Appendix A

Licenses

To extend the base capabilities of ArubaOS, a number of licensed software modules provide additional functionality, including:

Voice Services Module

Delivers standards-based voice over Wi-Fi plus voice control and management innovations enabled by Aruba's application-aware architecture. VSM supports large-scale voice deployments and provides a foundation for fixed mobile convergence (FMC).

Policy Enforcement Firewall

Enforces user-based network access and application priority policies. Policies can be centrally defined and enforced on a per-user basis based on user role and authorization levels. These policies follow users as they move throughout the enterprise network.

Wireless Intrusion Protection

Identifies and protects against malicious attacks on wireless networks, as well as vulnerabilities caused by unauthorized access points and client devices.

Remote Access Point

Extends the enterprise network to small branch offices and home offices having a wired Internet connection. Remote AP software, coupled with any Aruba access point, allows seamless connectivity at home, in a hotel room, or other remote locations.

VPN Server

Extends the mobile enterprise network to large branch offices and individual users over the public Internet, eliminating the need for separate external VPN equipment.

External Services Interface

Delivers a set of control and management interfaces to seamlessly integrate third-party network devices, incremental software modules and services into Aruba's architecture.

xSec

Provides wired and wireless Federal Information Processing Standard (FIPS) 140-2 validated encryption technology designed for high-security government networks.

Campus Wireless Networks Validated Reference Design Version 3.3 Design Guide

Licenses 67

Image 67

Aruba Networks Version 3.3 manual Appendix a, Licenses

Contents

Campus Wireless Networks Validated Reference Design Version Crossman Avenue Sunnyvale, California Phone Fax Contents Chapter RF Planning and Operation Introduction Aruba Reference ArchitecturesReference Documents Contacting Aruba Networks Telephone Support Aruba’s User-Centric Network Architecture Understanding Centralized Wireless LAN Networks Centralized Wlan Model Introducing Aruba’s User-Centric Network ArubaOS ArubaOS and Mobility Controller Mobility Controller Access Point Multi-function Thin Access PointsAir Monitor Aruba’s Secure Enterprise Mesh Network Mesh Portal or Mesh Point Remote AP Mobility Management System Mobility Management System Proof-of-Concept Network PoC Network Physical Design Vlan PoC Network Logical and RF Design Proof-of-Concept Network Proof-of-Concept Network Campus Wlan Validated Reference Design Aruba Campus Wlan Physical Architecture Aruba Campus Wlan Logical Architecture Data center ManagementMaster Campus Wlan Validated Reference Design Understanding Master and Local Operation Mobility Controller Access Point Deployment Mobility Controller High Availability Master Controller Redundancy Local Controller Redundancy Second Local controller has an opposite configuration Vlan Design Do Not Use Special VLANs Do Not Make Aruba the Default Router Vlan Vlan Pools VLANs 10, 20, 30 User Mobility and Mobility Domains MD1 ArubaOS Mobility Domain Master Controller Placement Mobility Controller Physical Placement and Connectivity Local Controller Placement AP Placement, Power, and ConnectivityMobility Controller and Thin AP Communication AP Location and Density Considerations AP Power and ConnectivityOffice Deployment Active Rfid Tag Deployment Voice Deployment Required Licenses Configuration Profiles and AP GroupsMobility Controller Configuration Configuration Profiles AP group Profile Types AP Groups SSIDs, VLANs and Role DerivationProfile Planning VLANs SSIDs Role Derivation Secure Authentication Methods Authenticating with Corporate Authentication Methods for Legacy Devices Authenticating with Captive Portal Employee Role Configuring Roles for Employee, Guest and Application Users Guest Role Create a bandwidth contract and apply it to an AP group Create the block-internal-access policy Modify the guest-logon role Device Role Role Variation by Authentication Method Wireless Intrusion Detection SystemWireless Attacks Rogue APs Page Mobility Controller Configuration RF Planning and Operation RF Plan Tool Adaptive Radio Management Page Minimum Scan Time Sec Quality of Service Voice over Wi-FiWMM and QoS Voice-Aware RF Management Voice Functionality and FeaturesTraffic Prioritization Network Wide QoS Comprehensive Voice Management Voice over Wi-Fi LAN / WAN Controller Clusters Mobility Management System Multiple Master/Local Clusters Page Multiple Master/Local Clusters Licenses Appendix a Licenses Wlan Extension with Remote AP Appendix B Wlan Extension with Remote AP Alternative Deployment Architectures Small Network Deployment Mobility Controller located in the network data center Medium Network Deployment Branch Office Deployment Corporate data center DMZ Pure Remote Access Deployment