Trapeze Networks Delivers New Software to Enable New Wireless Deployment Models, Simplify Wireless Access and Administration, and Ease Guest Provisioning

Business Wire, Nov 22, 2004

PLEASANTON, Calif. -- Trapeze Networks(TM), maker of award-winning wireless local area networking (WLAN) systems, today announced upgrades to its Mobility System Software(TM) that enable a new model of wireless deployment. Using Virtual Service Sets(TM), networks built with Trapeze equipment can deliver public and private WLAN services anywhere, over a single infrastructure to different constituencies while securing and isolating each group's traffic and controlling where they roam and the resources they use. Trapeze Web Services for Wireless, another new feature set, are a complete package of browser based services for authenticating users and precisely regulating their access to network resources, accounting for network usage, and offering advertising and promotional services. Trapeze is also delivering a Guest Provisioning Application that makes it simple to enable visitor access to a wireless network.

These new capabilities are targeted at mixed use environments including: transportation hubs such as airports and rail stations, shopping malls, colleges and universities, and multi-tenant commercial and residential properties.

Virtual Service Sets: One Network, Many Services

Virtual Service Sets allow a wireless network to be virtualized so disparate services can coexist on the same wireless infrastructure. Each component that comprises a service is configured separately:

--Up to 64 BSSIDs (32 per radio) are available in a single access point, each of which can support a different service

--Any mix of authentication or encryption can be used on any BSSID, making it simple to support diverse security requirements or to migrate from one method to another

--VLAN configurations can be controlled separately to guarantee compatibility with whatever network they are attached to

--Unique mobility policies can be defined for every service set

--Completely separate Authentication, Authorization, and Accounting (AAA) services can be configured, or AAA can be shared

--Fully customized web pages can be presented for each service set

"We have found Trapeze's Virtual Service Sets to be a very useful tool in our network," said Chris Hessing, Head of Networking at the J. Willard Marriott Library at the University of Utah. "One way we use them is to provide the 802.1X client plug-ins that our users need. In certain areas of the building we broadcast both a secure and insecure network. The insecure network is restricted to getting information and software to connect to the secure network. This helps us eliminate the chicken and the egg problem of providing 802.1X software over the network, but requiring 802.1X to get it."

Web Services for Wireless

Trapeze Web Services for Wireless give network providers tools to create customized web browser based login portals. Web based access is necessary to accommodate users and devices that cannot use 802.1X or in support of managed guest access services. Trapeze Web Services for Wireless extend basic Web Authentication by offering complete Authorization and Accounting. With WebAAA(TM) network access can be carefully regulated, users can be placed on a specific virtual LAN based on their login, their access can be further secured with customized Access Control Lists (ACLs), and start and stop times and many other attributes can be defined. Usage statistics can be collected per user and individual roaming history can be tracked. Web Services for Wireless allow network providers to generate revenue by offering fully customizable login pages for promotional purposes. For instance, airport vendors can target air travelers with advertisements for their products and services. Full web based management is also provided.

Simple Provisioning of Guest Access

Up until now there hasn't been an easy way to provision access for guests who need access on a wireless network without intervention from network staff. With Trapeze's new Guest Provisioning Application, receptionists or security guards can use a simple java application to set up user accounts for guests without any intervention from IT. The Guest Provisioning Application relies on the local authentication features built into the Trapeze Mobility System, permitting authentication records to be set up on demand in a Mobility Exchange(TM) switch. It is not necessary to touch a corporate AAA server, an important security consideration. Different security levels can be configured for different groups of users based on IT-supplied templates. Full control over each guest's access is enabled -- authentication based on username and password and authorization based on time of day, day of week, beginning and ending date, VLAN/subnet, ACLs, crypto type and location. Full accounting statistics may also be collected.

"The Trapeze Guest Provisioning Application was invaluable at the 31st International Telindus Symposium last month," said Philippe Cuvelier, WLAN Business Consultant at Telindus. "We provisioned more than 2,000 attendees and over 40 exhibitors with secure guest access to the Trapeze WLAN. The process was quick and efficient."