Huawei AC6005 14 Gbit/s forwarding capability Access Controller
Negotiable /Piece
Min.Order:1 Piece
Shanghai Chu Cheng Information Technology Co., Ltd.
1. MODE button: switches working mode of indicators.
2. Six 10/100/1000BASE-T Ethernet electrical ports
3. Two combo ports
4. Console port
5. USB port
The AC6005-8-PWR has the same indicators on the front panel as the AC6005-8 except that the AC6005-8-PWR has a PoE indicator. The following uses the appearance of the AC6005-8-PWR as an example.
No. | Indicator/Button | Status | Description |
---|---|---|---|
1 | Power supply indicator: PWR | Off | The AC6005-8-PWR is powered off. |
Steady green | The power supply is working properly. | ||
Steady orange NOTE:Only the PWR indicator on the AC6005-8-PWR displays orange. | The PoE power supply is faulty. | ||
2 | System status indicator: SYS | Off | The system is not running. |
Green | Fast blinking: The system is starting. Slow blinking: The system is running properly. | ||
Steady red | The system cannot start normally, or an overheat alarm or fan alarm is generated. | ||
3 | State mode indicator: STAT | Off | The state mode is not selected. |
Steady green | The service port indicator works in the default mode (STAT). In this mode, the indicator indicates the port status. | ||
4 | Speed mode indicator: SPED | Off | The speed mode is not selected. |
Steady green | The service port indicator indicates the port speed. After 45 seconds, the service port indicator automatically restores to the default mode (STAT). | ||
5 | PoE mode indicator: PoE NOTE:Only the AC6005-8-PWR has this indicator. | Off | The PoE mode is not selected. |
Steady green | The service port indicator indicates the PoE status of each port. After 45 seconds, the service port indicator automatically restores to the default mode (STAT). | ||
6 | Mode switching button: MODE | - | AC6005-8-PWR: When you press the button once, the SPED indicator turns green and the service port indicators indicate the speed of the ports. When you press the button for a second time, the PoE indicator turns green and the service port indicators indicate the PoE status of the ports. When you press the button for a third time, the STAT indicator turns green. AC6005-8: When you press the button once, the SPED indicator turns green and the service port indicators indicate the speed of the ports. When you press the button for a second time, the STAT indicator turns green. If you do not press the button within 45 seconds, the indicators restore to the default mode. That is, the STAT indicator turns green, and the SPED and PoE indicators are off. |
7 | Service port indicator GE electrical ports: The first indicator indicates the status of the bottom left port. The indicators correspond to the ports from bottom to top and from left to right. GE optical ports: Each optical port has a corresponding indicator above it. | Descriptions of service port indicators vary in different modes. For details, see the following table. |
Mode | Status | Description |
STAT | Off | No link has been established to the port or the port has been shut down. |
Green | Steady on: A link has been established to the port. Blinking: The port is sending or receiving data. | |
SPED | Off | No link has been established to the port or the port has been shut down. |
Green | Steady on: The port is working at 10 or 100 Mbit/s. Blinking: The port is working at 1000 Mbit/s. | |
PoE NOTE:Only the AC6005-8-PWR has this indicator. | Off | The port is not providing PoE power. |
Steady green | The port is providing PoE power. | |
Orange | Steady on: The PoE function is disabled on the port. Blinking: The port stops providing PoE power because a fault occurs, for example, an incompatible powered device (PD) is connected to the port. | |
Blinking green and orange | The port cannot provide PoE power due to any of the following reasons: The power of the PD exceeds the power supply capability of the port or exceeds the threshold. The overall output power has reached the maximum output capability of the device. The PoE power function is not enabled on the interface in manual power-management mode. |
Feature | Description | |
---|---|---|
Ethernet features | Ethernet | Operating modes of full duplex, half duplex, and auto-negotiation Rates of an Ethernet interface: 10 Mbit/s, 100 Mbit/s, 1000 Mbit/s, and auto-negotiation Jumbo frames Link aggregation Load balancing among links of a trunk Interface isolation and forwarding restriction Broadcast storm suppression |
VLAN | Access modes of access, trunk, and hybrid Default VLAN | |
MAC | Automatic learning and aging of MAC addresses Static, dynamic, and blackhole MAC address entries Packet filtering based on source MAC addresses Interface-based MAC learning limiting | |
ARP | Static and dynamic ARP entries ARP in a VLAN Aging of ARP entries | |
LLDP | LLDP | |
Ethernet loop protection | MSTP | STP RSTP MSTP BPDU protection, root protection, and loop protection Partitioned STP |
IPv4 forwarding | IPv4 features | ARP and RARP |
Unicast routing features | Static route RIP-1 and RIP-2 OSPF BGP IS-IS Routing policies and policy-based routing URPF check DHCP client, server and relay DHCP snooping | |
Multicast routing features | IGMPv1, IGMPv2, and IGMPv3 PIM-SM Multicast routing policies RPF | |
IPv6 forwarding | IPv6 features | ND Protocol |
Unicast routing features | Static route RIPng OSPFv3 BGP4+ IS-IS IPv6 DHCPv6 DHCPv6 Snooping | |
Multicast routing features | MLD MLD Snooping | |
Device reliability | BFD | BFD |
Layer 2 multicast features | Layer 2 multicast | IGMP snooping Prompt leave Multicast traffic control Inter-VLAN multicast replication |
Ethernet OAM | EFM OAM | Neighbor discovery Link monitoring Fault notification Remote loopback |
QoS features | Traffic classification | Traffic classification based on the combination of the L2 protocol header, IP 5-tuple, outbound interface, and 802.1p priority |
Action | Access control after traffic classification Traffic policing based on traffic classification Re-marking packets based on traffic classifiers Class-based packet queuing Associating traffic classifiers with traffic behaviors | |
Queue scheduling | PQ scheduling DRR scheduling PQ+DRR scheduling WRR scheduling PQ+WRR scheduling | |
Congestion avoidance | SRED WRED | |
Configuration and maintenance | Terminal service | Configurations using command lines Error message and help information in English and Chinese Login through console and Telnet terminals Send function and data communications between terminal users |
File system | File systems Directory and file management File uploading and downloading using FTP and TFTP | |
Debugging and maintenance | Unified management over logs, alarms, and debugging information Electronic labels User operation logs Detailed debugging information for network fault diagnosis Network test tools such as traceroute and ping commands Interface mirroring and flow mirroring | |
Version upgrade | Device software loading and online software loading BootROM online upgrade In-service patching | |
Security and management | System security | Different user levels for commands, preventing unauthorized users from accessing AC6005 SSHv2.0 RADIUS and HWTACACS authentication for login users ACL filtering DHCP packet filtering (with the Option 82 field) Defense against control packet attacks Defenses against attacks such as source address spoofing, Land, SYN flood (TCP SYN), Smurf ping flood (ICMP echo), Teardrop, and Ping of Death attacks IPSec |
Network management | ICMP-based ping and traceroute SNMPv1, SNMPv2c, and SNMPv3 Standard MIB RMON |
Feature | Specifications |
---|---|
AP access control | Displays MAC addresses or SNs of APs in the whitelist. Adds a single AP or multiple APs (by specifying a range of MAC addresses or SNs) to the whitelist. Automatically discovering and manually confirming APs. Automatically discovering APs without manually confirming them. |
AP region management | Supports three AP region deployment modes: Distributed deployment: APs are deployed independently. An AP is equivalent to a region and does not interfere with other APs. APs work at the maximum power and do not perform radio calibration. Common deployment: APs are loosely deployed. The transmit power of each radio is less than 50% of the maximum transmit power. Centralized deployment: APs are densely deployed. The transmit power of each radio is less than 25% of the maximum transmit power. Specifies the default region to which automatically discovered APs are added. |
AP profile management | Specifies the default AP profile that is applied to automatically discovered APs. |
AP type management | Manages AP attributes including the number of interfaces, AP types, number of radios, radio types, maximum number of virtual access points (VAPs), maximum number of associated users, and radio gain (for APs deployed indoors). Provides default AP types. Supports user-defined AP types. |
Network topology management | Supports LLDP topology detection. |
Feature | Specifications |
---|---|
Radio profile management | The following parameters can be configured in a radio profile: Radio working mode and rate |
Unified static configuration of parameters | Radio parameters such as the channel and power of each radio are configured on the AC and then delivered to APs. |
Dynamic management | APs can automatically select working channels and power when they go online. In an AP region, APs automatically adjust working channels and power in the event of signal interference: Global calibration: The optimal working channel and power of a specified AP can be adjusted. Partial calibration: The optimal working channels and power of all the APs in a specified region can be adjusted. When an AP is removed or goes offline, the AC6005 increases the power of neighboring APs to compensate for the coverage hole. Automatic selection and calibration of radio parameters in AP regions are supported. |
Enhanced service capabilities | The AC supports 802.1a/b/g/n/ac. These modes can be used independently or jointly (an, bg, bgn, and gn). |
Feature | Specifications |
---|---|
ESS management | Allows you to enable SSID broadcast, set the maximum number of access users, and set the association aging time in an ESS. Isolates APs at Layer 2 in an ESS. Maps an ESS to a service VLAN. Associates an ESS with a security profile or a QoS profile. Enables IGMP for APs in an ESS. |
VAP-based service management | Adds multiple VAPs at a time by binding radios to ESSs. Displays information about a single VAP, VAPs with a specified ESS, or all VAPs. Supports configuration of offline APs. Creates VAPs according to batch delivered service provisioning rules in automatic AP discovery mode. |
Service provisioning management | Supports service provisioning rules configured for a specified radio of a specified AP type. Adds automatically discovered APs to the default AP region. The default AP region is configurable. Applies a service provisioning rule to a region to enable APs in the region to go online. |
Multicast service management | Supports IGMP snooping. Supports IGMP proxy. |
Load balancing | Performs load balancing among radios in a load balancing group. Supports two load balancing modes: Based on the number of STAs connected to each radio Based on the traffic volume on each radio |
Feature | Specifications |
---|---|
WMM profile management | Enables or disables Wi-Fi Multimedia (WMM). Allows a WMM profile to be applied to radios of multiple APs. |
Traffic profile management | Manages traffic from APs and maps packet priorities according to traffic profiles. Applies a QoS policy to each ESS by binding a traffic profile to each ESS. |
AC traffic control | Manages QoS profiles. Uses ACLs to perform traffic classification. Limits incoming and outgoing traffic rates for each user based on inbound and outbound CAR parameters. Limits the traffic rate based on ESSs or VAPs. |
AP traffic control | Controls traffic of multiple users and allows users to share bandwidth. Limits the rate of a specified VAP. |
Packet priority configuration | Sets the QoS priority (IP precedence or DSCP priority) for CAPWAP control channels. Sets the QoS priority for CAPWAP data channels: Allows you to specify the CAPWAP header priority. Maps 802.1p priorities of user packets to ToS priorities of tunnel packets. |
Airtime scheduling | Allocates equal time to users for occupying the channel, which improves users' Internet access experience. |
Feature | Specifications |
---|---|
WLAN security profile management | Manages authentication and encryption modes using WLAN security profiles. Binds security profiles to ESS profiles. |
Authentication modes | Open system authentication with no encryption WEP authentication/encryption WPA/WPA2 authentication and encryption: WPA/WPA2-PSK+TKIP WPA/WPA2-PSK+CCMP WPA/WPA2-802.1x+TKIP WPA/WPA2-802.1x+CCMP WAPI authentication and encryption: Supports centralized WAPI authentication. Supports three-certificate WAPI authentication, which is compatible with traditional two-certificate authentication. Issues a certificate file together with a private key. Allows users to use MAC addresses as accounts for authentication by the RADIUS server. Portal authentication: Allows an AC to function as a portal gateway. Prohibits an AC from functioning as a portal gateway. Supports only Layer 2 portal. |
Combined authentication | Combined MAC authentication: PSK+MAC authentication MAC+portal authentication: MAC authentication is used first. When MAC authentication fails, portal authentication is used. This type of authentication applies only to centralized forwarding. |
AAA | Local authentication/local accounts (MAC addresses and accounts) RADIUS authentication Multiple authentication servers: Supports backup authentication servers. Specifies authentication servers based on account. Configures authentication servers based on account. Binds user accounts to SSIDs. |
Security isolation | Port-based isolation User group-based isolation |
WIDS | Rouge device scan, identification, defense, and countermeasures, which includes dynamic blacklist configuration and detection of rogue APs, STAs, and network attacks. |
Authority control | ACL limit based on the following: Port User group User |
Other security features | SSID hiding IP source guard: Configures IP and MAC binding entries statically. Generates IP and MAC binding entries dynamically. |