Ruijie Wireless Controller Series

Smart Ruijie Wireless Experience

Intelligent Identification of Smart Devices

The built-in portal server of the Ruijie Wireless Controller Series intelligently identifies the type of smart device, delivering an adaptive authentication page that fits the screen automatically. The intelligent feature eliminates the trouble of screen size adjustment and hence offers a better wireless user experience. Ruijie Wireless supports all mainstream operating systems including Apple iOS, Android, and Windows.

Fair Scheduling

Ruijie Wireless teaming up Ruijie’s leading AP series, the Ruijie Wireless Controller Series supports equal access time for smart devices no matter they are running 802.11g, 802.11n, 802.11ac or other standards. The feature eliminates high latency, slow network speed and poor AP performance problems. Such problems are due to using an old wireless LAN card or long distance between the end devices and AP. The Wireless Controller Series ensures a fair high-speed wireless network for all devices anywhere and anytime.

Fair Scheduling Mechanism

Intelligent Load Balancing

On a high-density wireless LAN, the Ruijie Wireless Controller Series intelligently distributes users among different APs according to the number of users and data traffic in real time. This feature balances the load pressure on each AP and improves the average bandwidth and Quality of Service (QoS), offering higher network availability. In addition to the role-based and traffic-based balancing features, the Ruijie Wireless Controller Series also supports load balancing in terms of frequency range. Since the majority of Wi-Fi devices work at 2.4GHz by default while the frequency above 5GHz (802.11a/n/ac) can offer better throughput performance. With the frequency-based load balancing, the Wireless Controller Series allows users with dual-band devices to connect to the 5GHz as first priority. Bandwidth usage is greatly increased by 30-40% with no additional cost. The Wireless Controller Series hence delivers the best-in-class wireless experience to all Ruijie clients.

Intelligent Load Balancing Mechanism

High Performance and Reliability

Exclusive 24-port PoE Support

In the Wireless Controller Series, the RG-WS6024 model tops the class by offering PoE power support and all-in-one wired and wireless management. The versatile controller supports wired Gigabit Ethernet access, 10G fiber uplink, and PoE/PoE+ power supply. The RG-WS6024 offers three PoE power supply modes – auto, energy-saving and static – to meet various deployment challenges. When an interface is down for a certain period of time, the system will automatically power it down for extra energy efficiency. EEE energy-saving mode is another feature highlight. The system will automatically turn an idle port into energy-saving mode. When there is a new packet, the system will issue listening streams to the port to resume service. In addition, the controller offers management of up to 24 APs and is scalable to up to 128 APs with license upgrade. The RG-WS6024 is ideal acting as the wireless core for general education, small and medium business networks, and enterprise branches.

Outstanding Scalability and Power Redundancy

The RG-WS6816 model is another featured model. The controller supports up to 2 expansion modules, offering 4 1000BASE-T/1000BASE-X combo ports (WNM-4GE-S) and 2 10GBASE-X ports (WNM-2XS-S). The RG-WS6816 also supports up to 2 power modules for extra resiliency.

Centralized or Distributed Intelligent Switching

The Wireless Controller Series can be deployed at Layer 2 or Layer 3 level without modifying the original network architecture. Forming an integrated switching framework with the APs, the controllers handle all the AP data exchange management with ease.

With the industry-leading local forwarding technology, the Wireless Controller Series eliminates traffic bottlenecks that alternatives in the market have been struggling with. The local forwarding technology allows flexible deployment of AP data forwarding. In other words, the AP can determine whether to forward all data via the controller based on Service Set ID (SSID) and user VLAN, or to send the data directly to a wired network for local data exchange. The local forwarding technology enables large-scale, delay-sensitive, and real-time data transmission via the wired network. With the high throughput of 802.11ac, it greatly alleviates the traffic pressure on the controller. The feature also makes the wireless controllers more adaptive to heavy traffic demand applications such as high definition Video on Demand (VoD) and Voice over Wireless LAN (VoWLAN) in the future.

Flexible VLAN / IP-based Local Forwarding Policy

Intelligent RF Management

The Wireless Controller Series enables an AP to perform on-demand RF scanning in the wireless environment. By scanning the wireless frequency bands and channels, both rogue APs and networks can be identified easily. The AP will alert network administrators for immediate action once such are found, providing round-the-clock network protection. In addition, the Wireless Controller Series can control the real-time RF scanning function for signal and interference measurement. The controller software also dynamically adjusts traffic load, power, RF coverage, and channel allocation for maximized signal coverage and capacity.

Dead Zone Auto-coverage and Channel Adjustment

Seamless Roaming Experience

The advanced clustering technology enables real-time synchronization of online information and roaming records of all users among multiple Wireless Controllers. Simply put, user and authentication data are shared in the cluster, enabling wireless users to roam freely in the whole network. Users can enjoy a borderless and secure roaming experience with the IP address and authentication status remained unchanged. The Wireless Controller Series supports fast roaming and voice services with the clustering technology.

Seamless L2 & L3 Roaming

Remote Intelligent Perception Technology (RIPT)

In the traditional network architecture where FIT APs are centrally managed by a wireless controller, packets received by the AP must be transmitted to the controller before being forwarded. When the wireless controller becomes faulty, the APs will fail to work properly causing whole network breakdown. Ruijie’s latest RIPT provides you a complete disaster recovery solution and enables the Wireless Controller Series to implement intelligent link perception. Once the faulty controller is detected, the APs will quickly switch to the intelligent mode to continue data forwarding, ensuring the high availability of the wireless network and keeping wireless users always online.

Remote Intelligent Perception Technology (RIPT) – Disaster Recovery

Abundant QoS Policies

The Wireless Controller Series supports an extensive array of QoS policies. By setting bandwidth limitations, higher priority is given to critical applications over the others. The Wireless Controller Series hence delivers guaranteed bandwidth performance for network of all sizes.

Wireless IPv6 Access

The Wireless Controller Series fully supports IPv6 features and implements IPv6 forwarding in a wireless network. Both IPv4 and IPv6 users can automatically connect to the controller over tunnels, enabling IPv6 applications to be borne on the wireless network.

Flexible and Comprehensive Security Policies

Local Authentication

The Wireless Controller Series supports a local user database. Together with the built-in portal, the controllers support web authentication for wireless users with ease. Local authentication based on the actual user demand is achieved for maximized cost savings, getting rid of extra devices such as external portal and RADIUS server. The network infrastructure is also greatly simplified. The Wireless Controller Series guarantees high security for small and medium-sized networks at a possibly lowest price.

User Data Encryption

The Wireless Controller Series fully supports the advanced encryption technologies such as Wired Equivalent Privacy (WEP), Temporal Key Integrity Protocol (TKIP), and Advanced Encryption Standard (AES), ensuring end-to-end security of data transmission over the wireless network.

Standard Communication Protocol

Encrypted communication between the controller and APs is enabled with the international standard Control and Provisioning of Wireless Access Points (CAPWAP). The function ensures complete isolation from the wired network and guarantees high security for the real-time communication between the Wireless Controller and APs. CAPWAP also allows deployment of third-party APs in the future, offering superior scalability, availability and maximized user investment at the same time.

Virtual Wireless Packet Technology

With the virtual AP technology, the Wireless Controller Series can partition multiple SSIDs within the network. Network administrator can separately encrypt and isolate subnets or VLANs that have the same SSID. The deployment thereby enables specified authentication mode and encryption mechanism for each SSID.

RF Security

The Wireless Controller Series enables AP to support RF probe scanning. The feature efficiently detects unauthorized access points or other RF interference sources. Administrator will get alerts once such are detected, providing an easy way to monitor potential threats and usage status.

Protection Against Viruses and Attacks

The Wireless Controller Series provides a wide range of built-in security mechanisms against virus spread and network traffic attacks. The mechanisms ensure secure network access by the authorized users only. Such protection mechanisms include IP/MAC/WLAN binding, hardware ACL control, traffic-based bandwidth limitation and more. The Wireless Controller Series is an ideal match for large campus, hospital, or enterprise networks with high security demand for guest network access.

Secure User Access

The Wireless Controller Series supports Web Authentication, allowing users to perform authentication using any web browser.

802.1X authentication is another security highlight. A major difference from web authentication is that 802.1X enables IP/MAC/WLAN binding after authentication. The feature totally guarantees the legitimacy of the user’s identity.

The Wireless Controller Series also supports Ruijie RG-SMP Security Management Platform to provide insight into and control of Ruijie security and network devices. The RG-SMP offers comprehensive security management across a wide range of Ruijie security appliances and allows users to manage office networks of all sizes for a wide range of industries, with security compliance requirements in aspects of user identity, host health and security of network communication.

Flexible Authentication Modes

In addition to the traditional Web Authentication and 802.1X Authentication, the Wireless Controller Series also supports PEAP Authentication, SMS Authentication, and QR Code Authentication.

The PEAP Authentication allows users to perform password authentication for once only. That means users are only required to enter credentials during their first network visit.

If the SMS authentication is adopted, users first sign in with their mobile phone numbers and then receive an SMS with login username and password for network access.

QR code authentication is another wireless security highlight. After accessing a wireless network, users will obtain a QR code on their end devices and simply ask any authorized staff’s to scan it for network access.

Advanced Guest Wireless Interfaces of the QR Code Authentication

Protection Against ARP Spoofing

Address Resolution Protocol (ARP) detection effectively protects network users from ARP gateway spoofing and host spoofing for secure wireless access. Automatic binding can be enabled in both dynamic and static IP address allocation environments to greatly save manpower resources and management costs. The Wireless Controller Series can monitor and control the rate of ARP packets transmitted to prevent malicious use of scanning tools, which triggers ARP flooding and causes network congestion.

Rogue AP Countermeasure

The Wireless Controller Series enables effective rogue AP detection and containment to enhance wireless security. The controllers arrange an active AP to perform rogue detection, send probe packets and hear probe responses from other valid APs. Network administrator can hence easily single out rogue APs to ensure wireless network security.

Rogue AP and User Countermeasures

DHCP Security

With Dynamic Host Configuration Protocol (DHCP) snooping, the Wireless Controller Series permits DHCP response messages from the trusted ports only. The controllers can thus prevent unauthorized deployment of any DHCP server to disturb the allocation and management of IP addresses and affect normal operation of the network. With the DHCP monitoring function, the Wireless Controller can effectively prevent ARP host spoofing and source IP address spoofing in the dynamic IP allocation environment by dynamically monitoring ARP and checking source IP address.

Management Information Security

To ensure the security of devices and offer protection against attacks, the Secure Shell (SSH) and SNMPv3 technologies encrypt management information by Telnet and Simple Network Management Protocol (SNMP). The Wireless Controller Series offers Telnet access control based on source IP address, offering a high level of granularity on device management. Only the IP addresses authorized by network administrator can log into the controller, which further enhances the security of device network management.

Unified Network Management

Multiple Management Protocols and Unified Management Platform

The Wireless Controller Series supports a vast number of management modes including Command Line. The controllers offer centralized and efficient planning, deployment, monitoring, and management of all APs with minimized investment costs. Working with the Ruijie RG-SNC Smart Network Commander which is an all-rounded network management platform, the Wireless Controller Series delivers enriched network management services such as topology generation, AP operation status, online user status, entire network RF planning, user location, security alert, link load, device utilization rate, roaming record and report output. These functions enable network administrator to monitor and manage the operation status of the entire network in the data center.

Ruijie SNC Unified Topology Diagram

Web Interface Management

The Wireless Controller Series supports a web management interface, which provides simplified wireless configuration and high visibility for the whole network operation. With the AC web interface, the controllers do not only manage the APs, but also the associated AP users. The feature achieves control on user bandwidth control and network access. Network administrator can hence plan, operate and maintain the wireless network with ease.

Ruijie Smart Web Management Interface

Next-Gen Cloud Infrastructure & Technologies

Centralized User Management

In the Wireless Controller Series, RG-M8600E-WS-ED and RG-M18000-WS-ED (for Ruijie RG-S8600E and RG-N18000 switch series respectively) take up a core role for centralized user management in Ruijie’s ingenious Simplicity Campus Network (SCN) Solution. Teaming up with the respective switch series and built-in/external 802.1X/Portal authentication systems, both wireless controller modules support unified wired and wireless authentication on the core device. The modules support an ultra-large ARP capacity, concurrent ≥90K IPv4/IPv6 dual stack devices for centralized authentication at up to 1,000 devices per second.

RG-M18000-WS-ED and RG-M8600E-WS-ED are exclusively designed for switches above

Multi-processing Modular Operating System

Ruijie has been devoting R&D resources on modular operating system since 1998. The software platform of RG-M8600E-WS-ED and RG-M18000-WS-ED is designed based on the next-gen RGOS 11.X multi-processing modular operating system. The OS integrates service features such as firewall, wireless, IPFIX and authentication all into one cloud platform. The platform hence fully supports virtualization and offers breadth of data center and campus network features. The OS supports failure isolation among multi-processing modules. Upgrading a certain component or adding a new feature will have zero impact on the overall performance. Idle features will not occupy any system resource. The modular OS takes the software stability to a whole new level.

Architecture and Benefits of Multi-process Modular Operating System