Table of Contents
Advertisement
Chapter 1: An Overview of the BlueSecure Controller
An Introduction to the BlueSecure WLAN Solution
The BlueSecure Controller (BSC) product family—BSC-600, BSC-1200, BSC-2100, and
BSC-2200/3200/5200 —provides a single scalable solution to the security, Quality of
Service (QoS), and WLAN management issues facing institutions, enterprises, and
service providers who deploy 802.11-based wireless networks.
The BSC hardware resides between the Wireless LAN (WLAN) access points and the
wired LAN, and requires no changes to the existing wired LAN or user client software as
shown in Figure 1-1.
The BSC mediates access between the wireless access points (i.e, the
the network) and the enterprise network or Internet (i.e., the
network).
Two BSCs may be coupled to provide failover operation, and multiple BSCs may be
installed for large sites with higher data density requirements.
User Authentication
To verify the identity of a user, the BSC uses authentication. The user submits a username
and password, or other credential from his or her wireless device. The BSC checks its
internal user database or other authentication server in turn for a valid match.
Upon successful authentication, the BSC grants the user access to the network. If the BSC
cannot authenticate the user, the user is denied network access.
If 802.1x Transparent or NTLM/Transparent Windows authentication is available on the
network, the BSC passively monitors the connection and then transparently authenticates
the user into a role without the need for the user to first log into the BSC.
The BSC supports use of multiple authentication methods simultaneously.
RADIUS Accounting and Hotspot Support
Bluesocket allows accounting of bandwidth usage and the option for enterprises to
manage fee-based services to generate new sources of income "from the air." Along with
support of RADIUS accounting to track access and usage statistics, the BlueSecure
Controllers can also direct appropriate users to secured "walled-garden" access areas,
via web pages customized to each location or customer.
1-2
BlueSecure 1500/1540
802.11 a/b/g/n
Access Point
Third-party
802.11a/b/g/n AP
Existing
LAN Wiring
Switch/Hub
BlueSecure 1500/1540
802.11 a/b/g/n
Access Point
Managed Side
(WLAN)
Figure 1-1: The Role of the Bluesocket BSC in a Wireless LAN
Campus/Corporate
Network
BlueSecure
Controller
LDAP/RADIUS/Kerberos/
Windows Domain
Authentication Server
Protected Side
(LAN)
protected
Firewall
Internet
managed
side of
side of the
Advertisement
Table of Contents
