Aironet AP Security Data Sheet
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The Cisco® Wireless Security and Spectrum Intelligence (WSSI) module, taking advantage of the flexible modular design of the Cisco Aironet® 3600 Series Access Point, delivers unprecedented, always-on security scanning and spectrum intelligence, which helps you avoid RF interference so that you get better coverage and performance on your wireless network.
● 24/7 full spectrum monitor and mitigation for aWIPS, CleanAir, Context Awareness, Rogue Detection and Radio Resource Management
● 24/7 on-channel aWIPS threat protection
● 23x more security and spectrum coverage
● 30%+ CAPEX cost savings versus dedicated monitor mode access point
● Zero touch configuration
The WSSI field-upgradeable module is a dedicated radio that off loads all monitoring and security services from the client/data serving radios to the security monitor module. This not only allows for better client performance but also reduces costs by eliminating the need for dedicated monitor mode access points and the Ethernet infrastructure required to connect those devices into their network.
Together, the 3600 Series access points and WSSI module enable the customer to concurrently provide state-of-the-art security and spectrum analysis functions for Wi-Fi clients on all channels, in both the 2.4- and 5-GHz bands.
Once deployed, the module is constantly scanning all channels to help ensure the most secure and robust wireless experience available in the industry.
Modular Flexibility and Efficiency
Building on the Cisco Aironet heritage of award-winning and robust access point design, the 3600 Series deliveries extreme flexibility with its modular design. The WSSI module is the first module to take advantage of this flexibility by delivering unparalleled security mitigation and spectrum analysis while enabling customers to dramatically reduce the infrastructure costs that would be required to deploy the same capability.
● Reduce network costs and operations. By integrating the WSSI module into the 3600 Series, customers have the ability to replace up to three separate access points and their separate functions, into a single, multipurpose 3600 Series Access Point (Figure 1).
Customers can now leverage a single Ethernet connection (cable and port) into their wired network, in place of what would typically require up to three separate Ethernet cables and access port into their wired network, significantly reducing their CAPEX.
By integrating all these features in to a single access point customers also simplify the day to day management and monitoring of their wireless infrastructure and network with a greatly reduced number of access points. The WSSI module appears to the wireless LAN controller and management systems as an additional radio supporting 802.11b/g/a/n client devices (2.4 and 5 GHz) within the specific 3600 Series Access Point.
● Zero Touch Configuration, Install, Power-up and Go. There is absolutely no configuration required to be enable the WSSI Module to be up and running, and immediately monitoring and securing your wireless network. The WSSI module is inserted and secured into any 3600 Series access point, when the access point is powered back up the module is initialized along with the other radios in the access point and immediately begins monitoring all channels on both 2.4 and 5 GHz for any potential sources of interference.
● Adaptive wIPS[1], providing accurate and efficient threat detection on all channels from over-the-air attacks, rogue access points, clients, and ad hoc connections, as well as the ability to classify, notify, mitigate and report for constant monitoring and proactive management. Works in conjunction with the Cisco Mobility Services Engine (MSE).
Enhanced Local Mode (ELM):
● Adds wIPS security scanning for 7x24 on channel scanning (2.4 and 5 Ghz), with best effort off channel support.
● The access point is additionally serving clients and with the G2 Series of Access Points enables CleanAir spectrum analysis on channel (2.4 and 5 GHz).
Monitor Mode:
● Access Point is dedicated to operate in Monitor Mode and has the option to add wIPS security scanning of all channels (2.4 and 5 GHz).
● The G2 Series of Access Points enable CleanAir spectrum analysis of all channels (2.4 and 5 GHz).
● Monitor Mode access points do not serve clients.
AP3600 with WSSI Module: The Evolution of Wireless Security and Spectrum
● The industries first Access Point enabling to ability to simultaneously “Serving clients, wIPS Security Scanning and Spectrum analysis with CleanAir Technology”.
● Dedicated 2.4 and 5 GHz radio with its own antennas enabling 7x24 scanning of all wireless channels in the 2.4 and 5 Ghz bands.
● A single Ethernet infrastructure provides simplified operation with fewer devices to manage and optimized return on investment of the AP3600 wireless infrastructure and the Ethernet wired infrastructure.
● Cisco CleanAir technology, which provides proactive, high-speed spectrum intelligence to combat performance problems due to wireless interference. The industry’s first state of the art radio frequency analysis technology that inspects and classifies the energy patterns (signatures) of devices that can significantly impact the quality of a wireless network.
● Radio resource management. Simplified, advanced RF management, automatic adapts to the wireless network environment based on the information received from Cisco’s CleanAir technology. Once interferers are identified RRM is able to move client devices to channels away from the interference and also adjust the transit power to move away from source of interference.
● Rogue detection, which detects and reports backdoor network access and access to wireless clients.
● Location and context awareness. Provides real-time awareness and the ability to track wireless endpoints.
With these features, the Cisco WSSI module along with the Cisco 3600 Series Access Point provides the most secure and robust enterprise class wireless network possible for your corporate users and corporate data.
Product Specifications
Table 1 lists the product specifications for Cisco Aironet Wireless Security and Spectrum Intelligence Module.
Table 1. Product Specifications for Cisco Aironet Wireless Security and Spectrum Intelligence Module
| Item |
Specification |
|||
| Part Numbers |
The Cisco Aironet 3600 Wireless Security and Spectrum Intelligence Module
● AIR-RM3000M=: Wireless Security and Spectrum Intelligence Module
● AIR-RM3000M-10=: Wireless Security and Spectrum Intelligence Module, 10 Pack
Wireless Intrusion Prevention System (wIPS) Licenses – to enable full wIPS support with the WSSI Module · L-WIPS-MM-1AP 1 AP WIPS MM License · L-WIPS-MM-100AP 100 AP WIPS MM License · L-WIPS-MM-1000AP 1000 AP WIPS MM License Cisco SMARTnet® Service for the Cisco Aironet Access Point Module for Wireless Security and Spectrum Intelligence CON-SNT-RM3000M: SMARTnet 8x5xNBD WSSI Module (dual-band 2.4 and 5 GHz)
● CON-SNT-RM3000M - SMARTnet 8x5xNBD WSSI Module (dual-band 2.4 and 5 GHz)
● Qty(10) CON-SNT-RM3000M - SMARTnet 8x5xNBD 10 quantity eco-pack WSSI Module (dual-band 2.4 and 5 GHz)
Cisco Wireless LAN Services
● AS-WLAN-CNSLT:
Cisco Wireless LAN Network Planning and Design Service
● AS-WLAN-CNSLT:
Cisco Wireless LAN 802.11n Migration Service
● AS-WLAN-CNSLT:
Cisco Wireless LAN Performance and Security Assessment Service
|
|||
| Software |
Cisco Unified Wireless Network Software Release 7.4 or later Mobility Service Engine release 7.4 or later - to visualize and track CleanAir, wIPS, Location results Cisco Prime Infrastructure release 1.3 or later - to enable wIPS capability |
|||
| Supported Wireless LAN Controllers |
● Cisco 2500 Series Wireless Controllers, Cisco Wireless LAN Controller Module (WLCM) on Cisco Services-Ready Engine (SRE) for Cisco Integrated Services Router Generation 2 (ISR G2), Cisco Wireless Services Module 2 (WiSM2), Cisco 5500 Series Wireless Controller, Cisco Flex 7500 Series Wireless Controllers, Cisco 8500 Series Wireless Controller, Cisco Virtual Wireless Controllers
|
|||
| Regulatory |
● The WSSI Module is a receive-only 2.4-GHz and 5-GHz radio, compatible with all regulatory domains
|
|||
| Operating Frequency Range |
2.4 GHz 2400–2483.5 MHz |
5 GHz 5150–5350, 5470–5850 MHz |
||
| Frequency Band and 20-MHz Operating Channels |
A (A regulatory domain):
● 2.412 to 2.462 GHz; 11 channels
● 5.180 to 5.320 GHz; 8 channels
● 5.500 to 5.700 GHz, 8 channels
(excludes 5.600 to 5.640 GHz)
● 5.745 to 5.825 GHz; 5 channels
C (C regulatory domain):
● 2.412 to 2.472 GHz; 13 channels
● 5.745 to 5.825 GHz; 5 channels
E (E regulatory domain):
● 2.412 to 2.472 GHz; 13 channels
● 5.180 to 5.320 GHz; 8 channels
● 5.500 to 5.700 GHz, 8 channels
(excludes 5.600 to 5.640 GHz) I (I regulatory domain):
● 2.412 to 2.472 GHz, 13 channels
● 5.180 to 5.320 GHz; 8 channels
K (K regulatory domain):
● 2.412 to 2.472 GHz; 13 channels
● 5.180 to 5.320 GHz; 8 channels
● 5.500 to 5.620 GHz, 7 channels
● 5.745 to 5.805 GHz, 4 channels
|
N (N regulatory domain):
● 2.412 to 2.462 GHz; 11 channels
● 5.180 to 5.320 GHz; 8 channels
● 5.745 to 5.825 GHz; 5 channels
Q (Q regulatory domain):
● 2.412 to 2.472 GHz; 13 channels
● 5.180 to 5.320 GHz; 8 channels
● 5.500 to 5.700 GHz; 11 channels
R (R regulatory domain):
● 2.412 to 2.472 GHz; 13 channels
● 5.180 to 5.320 GHz; 8 channels
● 5,660 to 5,805 GHz, 7 channels
S (S regulatory domain):
● 2.412 to 2.472 GHz; 13 channels
● 5.180 to 5.320 GHz; 8 channels
● 5.745 to 5.825 GHz; 5 channels
T (T regulatory domain):
● 2.412 to 2.462 GHz; 11 channels
● 5.280 to 5.320 GHz; 3 channels
● 5.500 to 5.700 GHz, 8 channels
(excludes 5.600 to 5.640 GHz)
● 5.745 to 5.825 GHz; 5 channels
|
||
| Receive Sensitivity |
● 802.11b (CCK)
◦ –101 dBm @ 1 Mb/s
◦ –98 dBm @ 2 Mb/s
◦ –92 dBm @ 5.5 Mb/s
◦ –89 dBm @ 11 Mb/s
|
● 802.11g (non HT20)
◦ –91 dBm @ 6 Mb/s
◦ –91 dBm @ 9 Mb/s
◦ –91 dBm @ 12 Mb/s
◦ –90 dBm @ 18 Mb/s
◦ –87 dBm @ 24 Mb/s
◦ –85 dBm @ 36 Mb/s
◦ –80 dBm @ 48 Mb/s
◦ –79 dBm @ 54 Mb/s
|
● 802.11a (non HT20)
◦ –90 dBm @ 6 Mb/s
◦ –90 dBm @ 9 Mb/s
◦ –90 dBm @ 12 Mb/s
◦ –89 dBm @ 18 Mb/s
◦ –86 dBm @ 24 Mb/s
◦ –83 dBm @ 36 Mb/s
◦ –78 dBm @ 48 Mb/s
◦ –77 dBm @ 54 Mb/s
|
|
|
|
2.4-GHz
● 802.11n (HT20)
◦ –90 dBm @ MCS0
◦ –90 dBm @ MCS1
◦ –90 dBm @ MCS2
◦ –88 dBm @ MCS3
◦ –85 dBm @ MCS4
◦ –80 dBm @ MCS5
◦ –78 dBm @ MCS6
◦ –77 dBm @ MCS7
◦ –90 dBm @ MCS8
◦ –90 dBm @ MCS9
◦ –89 dBm @ MCS10
◦ –86 dBm @ MCS11
◦ –82 dBm @ MCS12
◦ –78 dBm @ MCS13
◦ –77 dBm @ MCS14
◦ –75 dBm @ MCS15
◦ –90 dBm @ MCS16
◦ –89 dBm @ MCS17
◦ –87 dBm @ MCS18
◦ –84 dBm @ MCS19
◦ –81 dBm @ MCS20
◦ –76 dBm @ MCS21
◦ –75 dBm @ MCS22
◦ –74 dBm @ MCS23
|
|
5-GHz
● 802.11n (HT20)
◦ –91 dBm @ MCS0
◦ –90 dBm @ MCS1
◦ –89 dBm @ MCS2
◦ –86 dBm @ MCS3
◦ –83 dBm @ MCS4
◦ –78 dBm @ MCS5
◦ –77 dBm @ MCS6
◦ –75 dBm @ MCS7
◦ –91 dBm @ MCS8
◦ –89 dBm @ MCS9
◦ –87 dBm @ MCS10
◦ –84 dBm @ MCS11
◦ –80 dBm @ MCS12
◦ –76 dBm @ MCS13
◦ –75 dBm @ MCS14
◦ –73 dBm @ MCS15
◦ –90 dBm @ MCS16
◦ –88 dBm @ MCS17
◦ –85 dBm @ MCS18
◦ –82 dBm @ MCS19
◦ –79 dBm @ MCS20
◦ –74 dBm @ MCS21
◦ –73 dBm @ MCS22
◦ –72 dBm @ MCS23
|
5-GHz
● 802.11n (HT40)
◦ –88 dBm @ MCS0
◦ –87 dBm @ MCS1
◦ –86 dBm @ MCS2
◦ –82 dBm @ MCS3
◦ –80 dBm @ MCS4
◦ –75 dBm @ MCS5
◦ –73 dBm @ MCS6
◦ –72 dBm @ MCS7
◦ –88 dBm @ MCS8
◦ –86 dBm @ MCS9
◦ –84 dBm @ MCS10
◦ –80 dBm @ MCS11
◦ –77 dBm @ MCS12
◦ –73 dBm @ MCS13
◦ –71 dBm @ MCS14
◦ –70 dBm @ MCS15
◦ –87 dBm @ MCS16
◦ –84 dBm @ MCS17
◦ –82 dBm @ MCS18
◦ –78 dBm @ MCS19
◦ –75 dBm @ MCS20
◦ –71 dBm @ MCS21
◦ –69 dBm @ MCS22
◦ –68 dBm @ MCS23
|
| Integrated Antenna |
● 2.4 GHz, gain 2.5 dBi, internal omni, horizontal beamwidth 360°
● 5 GHz, gain 5.5 dBi, internal omni, horizontal beamwidth 360°
|
|||
| Dimensions |
● 8.46 x 2.5 x 1.97 in. (21.48 x 6.35 x 5 cm)
|
|||
| Weight |
● 1 lb (0.45 kg)
|
|||
| Environmental |
Cisco Aironet 3600i with the WSSI module installed
● Nonoperating (storage) temperature: –22 to 158°F (–30 to 70°C)
● Nonoperating (storage) Altitude Test –25˚C, 15,000 ft.
● Operating temperature: 32 to 104°F (0 to 40°C)
● Operating humidity: 10 to 90% percent (noncondensing)
● Operating Altitude Test -40˚C, 9843 ft.
Cisco Aironet 3600e with the WSSI module installed
● Nonoperating (storage) temperature: –22 to 158°F (–30 to 70°C)
● Nonoperating (storage) Altitude Test – 25˚C, 15,000 ft.
● Operating temperature: -4 to 118°F (-20 to 48°C) with module
● Operating humidity: 10 to 90 percent (noncondensing)
● Operating Altitude Test –40˚C, 9843 ft.
|
|||
| Power Draw |
3600i/3600e with the WSSI module requires 17 W |
|||
| Powering Options |
3600 Series Access Point with the WSSI module
● Enhanced Power over Ethernet (PoE): up to 20 W configurable on an Ethernet port basis
● 802.3at PoE+: 25.5 W delivered to the Access Point
● Cisco 3600 Series Power Injectors (AIR-PWRINJ4=)
● Cisco 3600 Series Local Power Supply (AIR-PWR-B=)
|
|||
| Warranty |
Limited Lifetime Hardware Warranty |
|||
| Compliance Standards |
● UL 60950-1
● CAN/CSA-C22.2 No. 60950-1
● UL 2043
● IEC 60950-1
● EN 60950-1
● EN 50155
● EMI and susceptibility (Class B)
● FCC Part 15.107 and 15.109
● ICES-003 (Canada)
● VCCI (Japan)
● EN 301.489-1 and -17 (Europe)
● EN 60601-1-2 EMC requirements for the Medical Directive 93/42/EEC
● IEEE Standard:
◦ IEEE 802.11a/b/g, IEEE 802.11n, IEEE 802.11h, IEEE 802.11d
● Multimedia:
◦ Wi-Fi Multimedia (WMM
™)
● Other:
◦ FCC Bulletin OET-65C
◦ RSS-102
|
|||
Limited Lifetime Hardware Warranty
The Cisco Aironet Access Point Module for Wireless Security and Spectrum Intelligence comes with a Limited Lifetime Warranty that provides full warranty coverage of the hardware for as long as the original end user continues to own or use the product. The warranty includes 10-day advance hardware replacement and ensures that software media is defect-free for 90 days. For more details, visit: http://www.cisco.com/go/warranty.
Cisco Wireless LAN Services
Realize the full business value of your technology investments faster with intelligent, customized services from Cisco and our partners. Backed by deep networking expertise and a broad ecosystem of partners, Cisco Wireless LAN Services enable you to deploy a sound, scalable mobility network that enables rich media collaboration while improving the operational efficiency gained from a converged wired and wireless network infrastructure based on the Cisco Unified Wireless Network. Together with our partners, we offer expert plan, build, and run services to accelerate your transition to advanced mobility services while continuously optimizing the performance, reliability, and security of that architecture after it is deployed. For more details, visit: http://www.cisco.com/go/wirelesslanservices.
For More Information
For more information about the Cisco Aironet Access Point Module for Wireless Security and Spectrum Intelligence, visit http://www.cisco.com/go/wireless or contact your local account representative.
[1] wIPS Monitor Mode license per WSSI module required, and Cisco Prime Infrastructure 1.3 and above required to enable wIPS.