Aruba S3500 Mobility Access Switches

Overview:

The Aruba Networks™ S3500 Mobility Access Switch is a new class of product that brings user role-based access to wired networks. The S3500 is an integral part of the Aruba Mobile Virtual Enterprise (MOVE) architecture, which delivers secure virtualized access services to users, independent of their location, access method, device or application.

Designed for network access deployments in building wiring closets, the S3500 is available in four models with 24 or 48 10/100/1000BASE-T ports and an optional uplink module. Power-over- Ethernet (PoE) models are available supporting up to 30 watts per port based on the IEEE 802.3af (PoE) and 82.3at (PoE+) standards.

The S3500 provides connectivity to wired Ethernet devices such as virtual desktops, IP phones, videophones, classroom peripherals, medical devices, point-of-sale devices and security cameras as well as any 802.11n wireless access point (AP).

Features:

Flexible Wired Access Deployment

What makes the S3500 unique is its ability to easily provision role-based access for wired users. Any port may be configured to tunnel traffic to an Aruba Mobility Controller, which manages network access and policy enforcement via an ICSA certified firewall. When tunneling traffic to a Mobility Controller, the S3500 operates as a wired AP, identical to Aruba 802.11n wireless APs.

As a wired AP, users and devices are authenticated and assigned a role by the Mobility Controller. A single role is defined based on user, device and application and is enforced by Layer 2 through 7 policies in the Mobility Controller whether the user is connected to the network via a wireless 802.11n AP or a port on the S3500.

As a result, security policies are consistently applied to users and devices whether they use a wired port in one building, move to another wired location or access the network through an Aruba wireless LAN (WLAN) AP. The result is control and visibility of all users and devices in the access network as well as a reduction in time spent configuring user additions and changes.

The S3500 also supports Layer 2 and Layer 3* protocols, and ports can be configured for local forwarding. Access control lists (ACLs) enable policy enforcement of bridged and routed traffic on the S3500.

Local forwarding as well as tunneled traffic may be configured on a port-by-port or per-user* basis. Depending on requirements, some traffic may be sent to the controller for role-based policy enforcement, while other traffic is bridged and enforced locally on the S3500.

The S3500 may also be configured as a controller* to manage wireless AP tunnel termination, user authentication and policy enforcement. Configurations may be pushed to S3500 local controllers by an Aruba master controller in a data center. Optionally, the S3500 may act as the master controller for small office deployments.

In addition to network access security, the S3500 supports data encryption via IEEE 802.1AE Media Access Control Security (MACsec). MACsec provides connectionless data confidentiality between MACsec-enabled devices, such as between the S3500 and Aruba AP-130 series 802.11n wireless APs.

ArubaStack Extends Beyond The Wiring Closet

With ArubaStack, the S3500 opens up new opportunities for network access designs. ArubaStack allows up to eight S3500s to be interconnected and managed as one logical device with a single IP address and single configuration file. Each S3500 supports an optional four-port 10 Gigabit Ethernet uplink module to enable stacking.

In a typical configuration, two ports on the uplink module are used for the ArubaStack, creating a stack with 40 Gbps bandwidth. The remaining two ports of each module can be used for connection to the LAN core. The S3500 uplink module supports a variety of 1 Gbps or 10 Gbps optics and the uplink module can be used to connect S3500s across wiring closets and buildings separated by several kilometers.

By interconnecting multiple wiring closets into a single ArubaStack, the S3500 reduces uplinks and expensive routed ports in the LAN core, simplifies LAN topologies, and reduces capital and operating costs by up to 30% over legacy wiring closet designs.

For maximum availability, the S3500 includes redundant, hot-swappable power supplies, a multi-blower fan tray and field-replaceable uplink modules.

ArubaStack Extends Beyond The Wiring Closet

With ArubaStack, the S3500 opens up new opportunities for network access designs. ArubaStack allows up to eight S3500s to be interconnected and managed as one logical device with a single IP address and single configuration file. Each S3500 supports an optional four-port 10 Gigabit Ethernet uplink module to enable stacking.

By interconnecting multiple wiring closets into a single ArubaStack, the S3500 reduces uplinks and expensive routed ports in the LAN core, simplifies LAN topologies, and reduces capital and operating costs by up to 30% over legacy wiring closet designs.

For maximum availability, the S3500 includes redundant, hot-swappable power supplies, a multi-blower fan tray and field-replaceable uplink modules.

Free IT Staff From Tediuos Network Configuration

Unlike legacy switches, the S3500 supports zero-touch configurations and upgrades for greater ease and efficiency. Once connected to the network, the S3500 broadcasts to the central Mobility Controller, which then sends configuration information to the S3500.

Configuration profiles and groups on the Mobility Controller simplify the configuration of all networked S3500s in a manner similar to Aruba wireless APs. Automated downloads to each S3500 ensure fast and simple deployment with no manual configuration. Subsequent configuration changes and upgrades are performed once within the Mobility Controller and are automatically pushed to each S3500.

Additionally, when configured as a wired AP, the S3500 frees network administrators from the need to configure virtual LANs (VLANs), ACLs and quality-of-service (QoS) policies at each device in the network access layer, significantly reducing the cost and complexity of administering user additions, moves and changes. No special VLANs are required at the access layer as VLAN trunks are configured on the Mobility Controller, and traffic is routed to the correct VLAN in the core. Likewise, security and QoS are enforced at the Mobility Controller employing user role-based policies.

The Aruba S3500 can be deployed in any wiring closet to deliver wired access without the hassle of managing, securing and provisioning separate wired and wireless infrastructures. The result is a secure, user role-based network with centralized management, control and visibility over the entire access infrastructure – wired and wireless.

*Roadmap item

AP Videos:

S3500 Overview Video

S3500 Interview Video

Mobility Access Switches Data Sheet Downloads

Specifications:

Documentation:

Aruba S3500 Mobility Access Switches Datasheet (.PDF)

Aruba S3500 Mobility Access Switches Tech Brief (.PDF)