DATA SHEET

WIRELESS

H3C WX3000 Series Integrated Switch

WX3024

Overview

ndependently developed by Hangzhou H3C Technologies Co.,

Ltd. (hereinafter referred to as "H3C"), H3C WX3000 series
switch integrates the functions of a wireless access controller
(AC) and a gigabit Ethernet (GE) switch. H3C WX3000 series
provides GE interfaces for wired access and supports PoE+ power
supply. Each port provides a maximum of 25W power. The switch is
also compatible with the 802.11a, 802.11b, 802.11g, and 802.11n
protocols. On the rear panel of the WX3024 switch, two 10GE
interface slots are provided and solve the transmission bottleneck
of WLAN networks. Integrating wired access control and wireless
access control, the WX3000 series is positioned as a switch for
wired and wireless access to small- or medium-sized enterprise
networks as well as branches of large-sized enterprises. At present,
H3C WX3000 has only one style: H3C WX3024, which can be used
with the Fit APs (H3C WA2110/WA2200) independently developed
by H3C to meet the requirements on the above typical wireless
applications.
The following figure shows the appearance of the WX3024 switch.

Features
Managing 802.11n APs
The WX3000 series can be used to manage 802.11a/b/g APs. In
addition, it can be used with H3C 802.11n-based AP to provide
wireless access rates equivalent to six times the wireless access rates
provided by a conventional 802.11a/b/g network, enlarge coverage
and deploy wireless multimedia applications.

Providing flexible data forwarding modes

The WX3000 series supports both centralized forwarding and
distributed forwarding. If an AC provides only centralized
forwarding, although the AC can completely control packets, all
wireless service flows need to be processed by the AC and thus
the forwarding capability of the AC is very likely to become a
bottleneck. In particular, when packets are forwarded via a wide
area network (WAN), APs are deployed as data access devices in
branch offices but ACs are deployed in the headquarters. If all
user data is sent by APs to an AC and then the AC forwards all

the user data, the forwarding efficiency of the AC will be quite

low. When the 802.11n protocol is used, the traffic of the packets
passing an AP can be as high as 300 Mbps and then the processing
performance of the AC is more likely to become a bottleneck of
the wireless system. If distributed forwarding is provided, a packet
is translated by the AP into a packet in wired format and then
the packet does not pass the AC. In this way, broadband access is
provided for wireless packets.
H3C WX3000 series supports both centralized forwarding and
distributed forwarding. Users can set the forwarding mode for an
SSID as needed.

Providing location-based user access control

In view of security or charging, system administrators may hope to
control the location that a wireless user can access in the network.
H3C WX3000 series supports AP-based user access control. When
a wireless user attempts to access the network, the authentication
server may send a list of APs that the user can access to the AC,
so as to control the user's access through the AC. In this way, the
wireless user can access only the specified APs.

Providing fine wireless user management

With MAC-based authentication and access control, a customer can
configure and modify the rights of user groups on the AAA server,
and can configure the rights of specific users. This fine user rights
control method greatly enhances the availability of the wireless
network and enables network administrators to easily allocate
access rights to various levels of users or user groups.
The MAC-based VLAN function is also a distinct feature of H3C
WX3000 series. In terms of control policies, administrators can
allocate users (MAC addresses) of the same nature to the same
VLAN and configure VLAN-based security policies on the AC. This
simplifies system configuration and provides management at a userlevel granularity.

Providing an embedded 802.1x authentication server

and an embedded portal authentication server
H3C WX3000 provides an embedded 802.1x authentication server
and supports multiple 802.1x authentication modes, including

WX3000

DATA SHEET WIRELESS

TLS, PEAP, and MD5. When small- or medium-sized enterprises

do not need the charging function but need only access control
and data encryption, the embedded Radius server can be utilized
to provide 802.1x authentication. This spares the complex AAA
server deployment process, saves money, and simplifies network
deployment. H3C WX3000 series also provides an embedded portal
server to provide security authentication for users in places where
clients cannot be installed.

Providing QoS profile

In the NMS based on user authorization, a user is authenticated
before accessing a network. The authorization controls the
network areas that a user can access as well as the network
QoS such as the access bandwidth and access priority that the
user can obtain. In a network where users are moving or in a
large network, the QoS profile provides a more modularized,
much simpler management means that facilitates network
administrators' routine management tasks.

The administrators configure a group of policies based on a user

group or a group of customized polices in the profile of each
user, and allocate a profile in advance to each user group or each
specific user. When the user has passed the authentication and
is online, the port through which the user accesses the network
dynamically sends the profile data so that the user can dynamically
obtain the network areas that he or she can access as well as the
access bandwidth and access priority that he or she can obtain.
When the user is offline, the configuration data of the user is
removed from this port and the special access rights of the user is
disabled on this port.
The QoS profile can carry the following configuration data:
ACL data
QoS data (priority, bandwidth control, 802.1p and DSCP mark)
VLAN data

Specifications
Hardware specifications
Item

WX3024

Dimensions (WDH)

440 mm 429 mm 43.6 mm

Weight

< 7 kg (without any extension card)

Management port

1 console port

Service ports

Twenty-four 10/100/1000 Mbps electrical ports

Four gigabit SFP Combo ports
Two 10GE XFP or XENPAK optical ports

Input voltage

AC:
Rated voltage: 100240 V AC, 50 Hz/60 Hz
Maximum voltage: 90264 V AC, 47 Hz / 63 Hz
DC:
Raged voltage: -52 V to -55 V DC
Maximum voltage: -36 V to -72 V DC

Power consumption (when all ports

supply PoE+ power)

AC input: 450 W

Maximum PoE+ output power

(per port)

25 W

Operating environment temperature

0C45C

Operating environment humidity

(non-condensing)

10%90%

Storage temperature

-40C70C

Storage humidity

5%95% (non-condensing)

WX3000

DC input: 670 W

DATA SHEET WIRELESS

Item

WX3024

Safety specifications

UL 60950-1
CAN/CSA C22.2 No 60950-1
IEC 60950-1
EN 60950-1/A11
AS/NZS 60950
EN 60825-1
EN 60825-2
FDA 21 CFR Subchapter J

EMC

ETSI EN 300 386 V1.3.3:2005

EN 55024:1998+ A1: 2001 + A2: 2003
EN 55022:2006
VCCI V-3:2007
ICES-003:2004
EN 61000-3-2:2000+A1:2001+A2:2005
EN 61000-3-3:1995+A1:2001+A2:2005
AS/NZS CISPR 22:2004
FCC PART 15:2005

MTBF

>40 years (25C)

Software specifications (wired part)

Feature

WX3024

Switching capacity (full duplex)

88 Gbit/s

Port aggregation

Supporting dynamic Gigabit Ethernet (GE) port aggregation

Supporting dynamic 10GE port aggregation
Support dynamic LACP link aggregation
Supporting manual aggregation
Supporting static aggregation
Supporting multiple aggregation groups, the maximum number of which is the total number of ports divided by 2;
each group supports at most eight GE ports or two 10GE ports

Port flow control

Supporting port flow control

MAC address table

Supporting 16K MAC addresses

Supporting 1K static MAC addresses
Supporting 1K multicast MAC addresses
Supporting blackhole MAC addresses

VLAN

Supporting 4094 port-based VLANs

Supporting VLAN-VPN or QinQ
Supporting flexible QinQ
Supporting protocol-based VLAN
Supporting Voice VLAN
Supporting the configuration of management VLAN
Supporting GVRP
Supporting the disabling of MAC learning through configuration in a VLAN

Route

Supporting static routes

DHCP

Supporting DHCP Client

Supporting DHCP Snooping, including Option 82

WX3000

DATA SHEET WIRELESS

Feature

WX3024

Multicast

Supporting Internet Group Management Protocol (IGMP) Snooping v1/v2/v3

Supporting at most 256 multicast groups per VLAN and at most 1024 multicast groups per switch
Supporting multicast VLAN
Supporting the discard of unknown multicast packets
Supporting the egress port filtering of unknown multicast packets
Supporting manual configuration of multicast MAC addresses

Broadcast storm suppression

Supporting port-based broadcast storm control

MSTP

Supporting STP/RSTP/MSTP
Supporting 16 intra-area maximum spanning trees
Supporting STP Root Guard
Supporting BPDU Guard

QACL

Supporting IEEE 802.1p/DSCP priority

Supporting priority mapping
Supporting priority marking
Supporting traffic statistics
Supporting port trust mode
Supporting 8 queues per port
Supporting SP/SDWRR/SP+SDWRR queue scheduling
Supporting port-based and queue-based traffic shaping
Supporting traffic control based on ports or flows at the minimum granularity of 1 kbps
Supporting flow-based redirection
Supporting standard ACLs represented by digits
Supporting extended ACLs represented by digits
Supporting L2 ACLs represented by digits
Supporting the configuration of the ACLs to be issued
Supporting multiple QoS & ACL issuance modes: global issuance, VLAN-based issuance, port group-based
issuance, and port-based issuance
Supporting realtime updating of ACLs according to time span changes

Mirror

Supporting flow mirroring

Supporting VLAN-based mirroring
Supporting mirroring based on MAC addresses
Supporting port mirroring
Supporting the mirroring of multiple source ports
Supporting remote port mirroring

Security

Supporting hierarchical management of users and password protection

Supporting AAA authentication
Supporting Radius authentication
Supporting HWTACACS authentication
Supporting SSH 2.0
Supporting management VLAN
Supporting port isolation
Supporting port security
Supporting centralized MAC address authentication
Supporting ARP intrusion detection
Supporting port IP address filtering

802.1x

Supporting at most 256 users per port

Supporting port-based authentication and MAC-based authentication
Supporting Guest VLAN
Supporting trunk port authentication
Supporting dynamic issuance of VLAN and ACL rules

JUMBO frame

Supporting the maximum frame length of 4K

DLDP

Supporting the Device Link Detection Protocol (DLDP)

POE

Supporting PoE+ remote power supply (for the 24-port switch; each port providing at most 25 W power)
Supporting RPS power supply

Loading and upgrade

Supporting loading and upgrade via the XModem protocol

Supporting loading and upgrade via the File Transfer Protocol (FTP)
Supporting loading and upgrade via the Trivial File Transfer Protocol (TFTP)

WX3000

DATA SHEET WIRELESS

Feature

WX3024

Management

Supporting configuration via (Command Line Interface (CLI)

Supporting remote configuration via Telnet
Supporting configuration via the console interface
Supporting Simple Network Management Protocol (SNMP)
Supporting Remote Monitoring (RMON) alarms, events and history records
Supporting the iMC NMS
Supporting WEB NMS
Supporting system logs
Supporting alarm severity
Supporting remote dialup via a modem
Supporting NTP
Supporting power status detection
Supporting power alarms
Supporting fan alarms

Maintenance

Supporting debugging information output

Supporting packet internet groper (PING) and tracert
Supporting HWPing
Supporting remote maintenance via Telnet

Software specifications (wireless part)

Feature
Network
interconnection

Network security

WX3024
802.3 LAN
protocol

ARP (free ARP)

VLAN (PORT-BASED VLAN/MAC-BASED VLAN)
802.1p, 802.1q, 802.1x

802.11 LAN
protocol

802.11, 802.11b, 802.11a, 802.11g, 802.11d, 802.11h, 802.11i, 802.11e, 802.11n

CAPWAP
protocol

Supporting L2/L3 network topology between APs and ACs

APs can automatically discover accessible ACs
APs can automatically update the software version from ACs
APs can automatically download configurations from ACs
Supporting IPv4/IPv6 networks between APs and ACs

Roaming

Supporting roaming inside an AC

Supporting roaming between ACs
Supporting Key cache fast roaming

IP application

Ping, TraceRT, DHCP Server, DHCP Client, DHCP Relay, DHCP Snooping, DNS Client, NTP, Telnet, TFTP Client, FTP
Client, FTP Server

IP route

Static route

Multicast

IGMP Snooping

Security
authentication

MAC address authentication

802.1x authentication (EAP-TLS, EAP-TTLS, EAP-PEAP, EAP-SIM, EAP-MD5, EAP-FAST)
Portal authentication
Supporting wireless EAD
Supporting AP-based user access control

AAA

Radius Client
HWTacacs
Supporting multi-domain configuration of the authentication server
Supporting the backup authentication server
Supporting authentication server selection based on ESS
Supporting the local Radius authentication server
Supporting the local portal authentication server
Supporting the binding of SSID and user account ID

WX3000

DATA SHEET WIRELESS

Feature
Network security

WX3024
802.11 security
and encryption

Supporting multiple SSIDs

Supporting concealed SSID
Supporting the 802.11 standard (including 802.1x authentication and PSK authentication)
Supporting WPA and WPA2 standards
WEP (WEP64/WEP128)
TKIP
CCMP

WIDS/WIPS

Supporting the whitelist

Supporting static and dynamic blacklists
Supporting the detection and monitoring of illegal wireless devices so as to defend against attacks from illegal
wireless devices
Supporting the wireless anti-attack function

Others

SSH V1.5/2.0

Forwarding

Supporting centralized forwarding and local forwarding

AP-based bandwidth control
Isolation of users with the same SSID

RF management

Supporting country code setting

Supporting manual setting of transmit power
Supporting auto setting of transmit power
Supporting manual setting of the working channel
Supporting auto setting of the working channel
Supporting auto adjustment of the transmission rate
Supporting blackhole compensation
Supporting AP load sharing based on traffic and the number of subscribers
Supporting RF interference monitoring and avoidance

QoS

Supporting L2 L4 packet filtering and flow classification

Supporting rate limit based on users and SSIDs at the granularity of 64 kbit/s
Supporting WMM (802.11e)
Supporting mapping from wireless subscriber priorities to wired subscriber priorities
Supporting mapping from wireless subscriber priorities to CAPWAP tunnel priorities
Supporting QoS Profile

Maintainability

Performance
indices

WX3000

Network
management

SNMP V1/V2/V3
WEB management
SYSLOG

User access
management

Supporting login via the console interface

Supporting login via Telnet
Supporting login via SSH
Supporting uploading via FTP

Baseline number
of APs that can
be managed

24

Maximum
number of APs
that can be
managed

48 (by upgrading the license)

License step
(Number of APs)

12

Switching capacity

1 Gbit/s

VLAN

4K

ACL

2K

Number of
wireless users

1K

MAC address
table

2K

Jumbo frame size

4K

ARP table

1K

Switching time
in user roaming

< 50 ms

DATA SHEET WIRELESS

Networking Application
1. Mobile Network Solution Integrating Wired and Wireless Access for Small- and Medium-Sized Enterprises
The mobile network solution integrating wired and wireless access for
small- and medium-sized enterprises is the most typical application of
the WX3000 series integrated switch. At present, the WX3000 series
can be used only with H3C Fit AP series. The WX3000 series, serving
as the wireless data control and forwarding center, is placed in the
central equipment room or cabling room of an enterprise. The Fit APs
are placed in the ceilings, or mounted on the wall, or even installed
outdoors. As the WX3000 series supports PoE+ power supply (each
port provides at most 25 W power), in most cases it can be directly
connected with the Fit APs, no matter whether these APs are based
on the 802.11a/b/g protocol or the 802.11n protocol. The Fit APs and
the WX3000 switch can be located in the same network segment or
in different network segments. They automatically establish tunnels
with each other using the CAPWAP protocol. These tunnels are
based on UDP. They can cross an L3 network but cannot cross an
NAT network. Furthermore, the WX3000 switch provides Ethernet
electrical interfaces to supply power to portal computers, IP phones
and other terminals whose total power consumption is less than
25W. This spares the use of any terminal power adapter. Therefore,
the WX3000 series provides a simple and convenient mobile network
solution integrating wired and wireless access for small- and mediumsized enterprise customers.

The Fit APs and the WX3000 communicate with each other through
the CAPWAP protocol. A Fit AP obtains an IP address through the
DHCP server and can automatically bind its IP address with the
WX3000. The WX3000 provides auto management of the software
version of Fit APs. Network maintenance is thus easy and convenient.

Internet
L3 switch

SIP server

Router

WX3000

IP phone

L2 switch
AP

PC

Laptop
PC
PC
Mobile phone

PC

2. Mobile Network Solution Integrating Wired and Wireless Access for Branches of Large-Sized Enterprises
The mobile network solution integrating wired and wireless access
for branches of large-sized enterprises is another typical application
of the WX3000 series integrated switch. The WX3000 series
integrated switch can be used with the WX6100 large-capacity
integrated switch or the S7500E/S9500 series AC card to provide
a perfect solution for networking between the headquarters and
branches of a large-sized enterprise. The WX6100 series AC and
the S7500E/S9500 series AC card provide large capacity and high
processing performance. They support a large number of APs,
so that wireless signals can cover any place as needed. With this
solution, the headquarters of a large-sized enterprise can easily
construct a large-capacity wireless IT network as needed. In general,
the office area of each branch of a large-sized enterprise is not
large. The WX3000 series integrating wired gigabit switching,
wireless switching and PoE+ power supply functions is the best lowcost choice for wired and wireless access.

services are monitored through the same intelligent management

center (iMC). The management interfaces are unified. This simplifies
management and saves the manpower input in deployment and
network management.
Integrated security
The wired and wireless services share the same endpoint admission
defense (EAD) solution and unified account management. Wired and
wireless users are authenticated and authorized in a unified way. In
addition, unified security management policies are employed.
PC

WA2110

PC

WA2110

WA2110

WA2110

PC

S7500E + AC plug-in Card

S3600

S3600

S3600
IMC
CAMS

S9500+
Dual-AC plug-in Card

The mobile network solution integrating wired and wireless access

provides the following features:
Integrated hardware
The WX3000 series integrates wireless control, wired switching,
and PoE+ power supply functions. It provides unified management
of power, temperature, and key components. This reduces failure
points and saves investment.

Headquarters

DHCP server

WAN
Small branch

Local application
server
S7500E+AC
WX3024

Local DHCP
server

S3600

Integrated management

S3600
WA2110

The WX3000 series is embedded with a Web NMS, a local Radius

server, a portal server, and a DHCP server. The wired and wireless

Application
server

S5000

PC
WA2110

Large branch

WX3000

DATA SHEET WIRELESS

Order Information
Item

Specifications

Quantity

Remarks

WX3024

WX3024 integrated switch (if AC power supply is used, the input voltage range
is 100V to 240 V and the frequency is 50 Hz or 60Hz; if DC power supply is
used, the input voltage range is -52 V to -55 V)

Mandatory

LS51XP1P

1-port 10GE optical interface board (this interface board is an XFP interface
board and is not required if the XENPAK optical module is chosen; the XENPAK
optical module can be directly inserted into the host of the WX3024)

Optional

1000BASE-SX-SFP

SFP module of the WX3000 series integrated switch

04

Optional

1000BASE-LX-SFP

SFP module of the WX3000 series integrated switch

04

Optional

XFP-SX-MM850

XFP optical module of the WX3000 series integrated switch

02

Optional

XFP-LX-SM1310

XFP optical module of the WX3000 series integrated switch

02

Optional

XENPAK-SX-MM850

XENPAK optical module of the WX3000 series integrated switch

02

Optional

XENPAK-LX-SM1310

XENPAK optical module of the WX3000 series integrated switch

02

Optional

LIS-WX-12

License fee for the WX3000 series integrated switch-For managing 12 APs

02

Optional

Hangzhou H3C Technologies Co., Ltd.

Add: 310 Liuhe Road, Zhijiang Science Park,
Hangzhou 310053, P.R.China
Tel: +86-571-86760000
Fax: +86-571-86760001
Email: customer_service@h3c.com
Version No. :GE-082130-20081008-BR-V1.0

WX3000

Copyright2005-2008 by Hangzhou H3C Technologies Co., Ltd.

All product photography in this literature is intended for reference only. All rights reserved. No part of this document
may be reproduced or transmitted in any form or by any company or person and product names may be trademarks
of their respective companies. While every effort is made to ensure the information given is accurate, Hangzhou H3C
Technologies Co., Ltd. does not accept liability for any errors or mistakes which may arise.
Specifications and other information in this document may be subject to change without notice.

www.h3c.com