DATA SHEET www.brocade.

com

BROCADE
MOBILITY
RFS7000
CONTROLLER

CAMPUS Enabling a Secure and Reliable

NETWORK Wireless Enterprise for Campus,
Data Center, and Large Deployments
HIGHLIGHTS Designed for high-bandwidth Wireless LAN of mobility solutions. The underlying
• Provides a reliable, high-performance (WLAN) deployments, the Brocade® Mobility architecture helps unify management of
wireless LAN switching and voice RFS7000 Controller provides highly scalable network hardware, software configuration,
communications platform for mobility in large enterprises, campuses, and and network policies—complete with built-in
demanding enterprise environments data centers. The innovative architecture process monitors and troubleshooting tools.
enables a comprehensive set of services,
• Helps reduce costs through
offering unmatched security, reliability, and HIGH PERFORMANCE AND SCALABILITY
centralized management
mobility for high-performance 802.11n The Brocade Mobility RFS7000 features a
• Delivers enterprise-class performance networks. Easy to deploy and manage, the multicore, multithreaded architecture
with network resiliency Brocade Mobility RFS7000 provides a designed for large-scale, high-bandwidth
• Eliminates security gaps in wireless converged platform to deliver multimedia enterprise deployments. It easily handles
enterprises applications (data, voice, and video), wireless from 8000 to 96,000 mobile devices and
networking, and value-added mobility 256 to 3000 802.11 dual-radio a/b/g/n
• Enables toll-quality voice in wireless
services such as secure guest access and access points or 1024 adaptive access
enterprises
locationing for multi-RF networks. points (Brocade Mobility 5181 a/b/g or
• Utilizes Adaptive Mode for access Brocade Mobility 7131 a/b/g/n) per
points to increase network flexibility The Brocade Mobility RFS7000 provides
controller. The Brocade Mobility RFS7000
and site survivability the tools to simplify and minimize the costs
associated with day-to-day management
• Enhances end-to-end Quality of
Service (QoS)
provides the investment protection ensure dedicated bandwidth for voice in coverage that occur when an access
enterprises require: innovative clustering calls as well as better control over active point fails or there is a change in the
technology provides a 12X capacity voice calls for a variety of VoIP handsets. environment—such as the introduction of
increase, and smart licensing enables Layer 3 hyper-fast secure roaming combines an increased volume of liquid or metal—all
efficient, scalable network expansion. with readiness for external Fixed Mobile without any physical intervention. This
Convergence (FMC) solutions, enabling feature protects against under- or over-
ENTERPRISE-GRADE SECURITY seamless voice services with true mobility powering—scenarios that could reduce
Comprehensive network security features across the enterprise. performance and network availability. And
keep wireless transmissions secure and adjustments are completely transparent—
provide compliance for HIPAA and PCI. HIGH AVAILABILITY AND RESILIENCY there is no impact on voice calls and data
The Brocade Mobility RFS7000 provides The Brocade Mobility RFS7000 simplifies sessions in progress—protecting the quality
gap-free security for WLAN networks, following and reduces the cost of extending mobility of service and user experience.
a tiered approach to protect data at every to remote and branch offices as well as
point in the network—wired or wireless. telecommuters. Organizations can deploy A FAST ROI
Brocade independent mesh access points Enterprise-class services such as security,
This complete solution includes a
(the Brocade Mobility 5181 a/b/g and voice, performance, and resiliency are
wired/wireless firewall, an integrated
Brocade Mobility 7131 a/b/g/n) at remote built into the modular operating system
IPsec VPN gateway, AAA Radius Server,
locations yet centrally manage them in the for the Brocade Mobility RFS7000. These
and Secure Guest Access with a captive
Network Operations Center (NOC) through comprehensive services come at no
Web portal, reducing the need to purchase
the Brocade Mobility RFS7000 (single additional cost and are packaged together
and manage additional infrastructure.
controller or a cluster for scalability). to make mobility work even better.
Other security features include MAC-based
authentication, comprehensive integrated An IPsec VPN tunnel secures all traffic
SERVICES FOR AN
IDS/IPS, anomaly analysis, and more. between the access points and the
END-TO-END SOLUTION
controller. Moreover, Remote Site
Brocade Global Services offers comprehensive
TOLL-QUALITY VOICE FOR THE Survivability (RSS) mesh access points
customer support for Brocade enterprise
WIRELESS ENTERPRISE provide secure uninterrupted wireless
wireless LAN products, including hardware
Support for Voice over WLAN (VoWLAN) service—delivering unparalleled resiliency
and 24×7 software support, along with
provides cost-effective voice services that survives a WAN link outage.
software updates and new releases.
throughout the wireless enterprise, enabling
The architecture includes SMART RF
push-to-talk and other capabilities for
Management, which provides the dynamic MAXIMIZING INVESTMENTS
employees inside the building as well
RF tuning required for optimal network To help optimize technology investments,
as in outside areas. The rich feature set
performance. This feature takes self-healing Brocade and its partners offer complete
provides granular control over the many
to the next level, dramatically reducing solutions that include education, support,
wireless networking functions required to
network monitoring IT costs by enabling and services. For more information,
deliver high-performance, persistent, clear
the WLAN to intelligently adapt to the contact a Brocade sales partner or visit
connections with toll-quality voice.
ever-changing RF environment. www.brocade.com.
Quality of Service (QoS) provides superior
The ability to dynamically adjust the
performance for voice and video services.
power and channels on any access
WMM Admission Control—including TSPEC
point automatically eliminates the gaps
and SIP Call Admission Control—helps
BROCADE MOBILITY RFS7000 SPECIFICATIONS
Packet forwarding Authentication Access Control Lists (ACLS); Pre-Shared Key (PSK);
802.1D–1999 Ethernet bridging; 802.11–802.3 bridging; 802.1Q VLAN 802.1x/EAP—Transport Layer Security (TLS),
tagging and trunking; proxy ARP; IP packet steering redirection Tunneled Transport Layer Security (TTLS), Protected
EAP (PEAP); Kerberos integrated AAA/RADIUS
Wireless networking server with native support for EAP-TTLS, EAP-PEAP
Wireless LAN Supports 256 WLANs; multi-ESSID/BSSID traffic (includes a built-in user name/password database;
segmentation; VLAN-to-ESSID mapping; auto supports LDAP), and EAP-SIM
assignment of VLANs (on RADIUS authentication); Transport encryption WEP 40/128 (RC4), KeyGuard, WPA-TKIP,
power save protocol polling; pre-emptive roaming; WPA2-CCMP (AES), WPA2-TKIP
VLAN pooling and dynamic VLAN adjustment; IGMP
snooping; Layer 3 mobility (inter-subnet roaming); IPsec VPN gateway Supports DES, 3DES, and AES-128 and AES-256
radio frequency Automatic Channel Select (ACS); encryption, with site-to-site and client-to-site VPN
Transmit Power Control (TPC) management; capabilities; supports 2048 concurrent IPsec
country code-based RF configuration; 802.11b, tunnels per controller—24,576 per cluster
802.11g, 802.11a, and 802.11n Secure guest access Local Web authentication; URL redirection for user
Bandwidth Congestion control per WLAN; per user based on (hotspot provisioning) login; customizable login/welcome pages; support
management user count or bandwidth utilization; dynamic load for external authentication/billing systems
balancing of Brocade Mobility 300 access points Wireless RADIUS User-based VLANs (standard); MAC-based
and adaptive access points in a cluster
support authentication (standard); user-based QoS;
Access points Supports 256 “thin” 802.11a/b/g Brocade Mobility location-based authentication; allowed ESSIDs
300 access points for Layer 2 or 3 deployment per
NAC support Integration with third-party systems from Microsoft
controller and 3072 802.11a/b/g Brocade Mobility
and Symantec
300s per cluster; IPv6 client support
Adaptive access points Supports adoption of 1024 Brocade Mobility 5181 Real-Time Locationing System (RTLS)
802.11a/b/g and Brocade Mobility 7131 RSSI-based triangulation for Wi-Fi assets
802.11a/b/g/n access points in Adaptive Mode Tags supported: Ekahau, Aeroscout, Newbury, Gen 2 tags
per controller and 12,288 per cluster; multiple
RFID support: Compliant with LLRP protocol
country configuration support
Built-in support for the following Motorola RFID readers: fixed (XR440,
Network security XR450, XR480); mobile (RD5000) and handheld (MC9090-G RFID)
Features Role-based wired/wireless firewall (Layer 2–7) with Optimized wireless QoS
stateful inspection for wired and wireless traffic;
RF priority 802.11 traffic prioritization and precedence
active firewall sessions—205,000 per controller and
2,460,000 per cluster; protects against IP spoofing Wi-Fi Multimedia WMM-power save with TSPEC Admission Control;
and ARP cache poisoning (WMM) extensions WMM U-APSD
Access Control Lists Layer 2/3/4 ACLs IGMP snooping Optimizes network performance by preventing
(ACLs) flooding of the broadcast domain
Wireless IDS/IPS Multi-mode rogue AP detection, rogue AP SIP call admission Controls the number of active SIP sessions
containment, 802.11n rogue detection, ad-hoc control initiated by a wireless VoIP phone
network detection, Denial of Service (DoS) protection Classification and Layer 1–4 packet classification;
against wireless attacks, client blacklisting, and marking 802.1p VLAN priority; DiffServ/TOS
excessive authentication/association; excessive
System resiliency and redundancy
probes; excessive disassociation/de-authentication;
excessive decryption errors; excessive authentication Active:Standby; Active:Active and N+1 redundancy with access point and
failures; excessive 802.11 replay; excessive crypto MU load balancing; critical resource monitoring
IV failures (TKIP/CCMP replay) SMART RF: Network optimization to help ensure user quality of experience by
Geofencing Add location of users as a parameter that defines dynamic adjustments to channel and power (on detection of RF interference
access control to the network or loss of RF coverage/neighbor recovery)
Dual-firmware bank supports image failover capability
WIPS sensor Supported on the Brocade Mobility 300 and the
conversion Brocade Mobility 5181 and Brocade Mobility 7131
in Adaptive Mode
Anomaly analysis Source Media Access Control (MAC) = Dest MAC;
illegal frame sizes; source MAC is multicast;
TKIP countermeasures; all zero addresses
DATA SHEET www.brocade.com
BROCADE MOBILITY RFS7000 SPECIFICATIONS (CONTINUED)
Management
Features Command line interface (serial, telnet, SSH);
secure Web-based GUI (SSL) for the wireless
controller and the cluster; SNMP v1/v2/v3;
SNMP traps—40+ user-configurable options; Syslog;
TFTP Client; Secure Network Time Protocol (SNTP);
text-based controller configuration files; DHCP
(client/server/relay), controller auto-configuration
and firmware updates with DHCP options; multiple
user roles (for controller access); MIBs (MIB-II,
Etherstats, wireless controller-specific monitoring,
and configuration); e-mail notifications for critical
alarms; MU naming capability
Physical characteristics
Form factor 1U rack mount
Dimensions 1.75 in. H × 17.32 in. W × 15.39 in. D
(44.45 mm × 440.00 mm × 390.80 mm)
Weight 13.5 lbs. (6.1 kg)
Physical interfaces Four 10/100/1000 Cu/SFP Ethernet interfaces
One 10/100 OOB port
One CF card slot
Two USB slots
One serial port (RJ45 style)
MTBF Greater than 65,000 hours
Power requirements
AC input voltage 90 to 264 VAC 50/60Hz
Maximum AC input 6 A at 115 VAC, 3 A at 230 VAC
current
Input frequency 47 Hz to 63 Hz
Environmental
Temperature Operating: 32°F to 104°F (0° C to 40°C)
Non-operating: –40°F to 158°F (–40°C to 70°C)
Humidity Operating: 5% to 85% (without condensation)
Non-operating: 5% to 85% (without condensation)
Regulatory
Product safety UL/cUL 60950-1, IEC/EN60950-1
EMC compliance FCC (USA), Industry Canada, CE (Europe),
VCCI (Japan), C-Tick (Australia/New Zealand)

Corporate Headquarters European Headquarters Asia Pacific Headquarters

San Jose, CA USA Geneva, Switzerland Singapore
T: +1-408-333-8000 T: +41-22-799-56-40 T: +65-6538-4700
[email protected] [email protected] [email protected]

© 2010 Brocade Communications Systems, Inc. All Rights Reserved. 04/10 GA-DS-1414-02
Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronView, NetIron, SAN Health, ServerIron, and TurboIron
are registered trademarks, and Brocade Assurance, DCFM, Extraordinary Networks, and Brocade NET Health are
trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. Other brands,
products, or service names mentioned are or may be trademarks or service marks of their respective owners.
Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied,
concerning any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the
right to make changes to this document at any time, without notice, and assumes no responsibility for its use. This
informational document describes features that may not be currently available. Contact a Brocade sales office for
information on feature and product availability. Export of technical data contained in this document may require an
export license from the United States government.