DCN - Access Controller
DCN Intelligent Access Controller(default with 32 units AP license, support controlling max. 1024 AP, support N+1, N+N redundancy), 16*GbE Combo(SFP/RJ45)+8*1000M SFP ports+4*10GbE SFP+ ports, two modular power, default with one AC power.
DCN- Yunke China Information Technology Limited
Yunke China Information Technology Limited, as subsidiary of Digital China (Parent company) Group (Stock code: SZ000034), is a leading data communications equipment and solution provider. Deriving from Lenovo, DCN was launched into the network market in 1997 with company philosophy of “Client-oriented, Technology-driven and Service-preference”.
DCN focuses on data communication field with full product lines, including Switch, Wireless, Router, Security firewall and multi-core edge, storage and Cloud services. With continues invest on R&D, DCN is the leading IPv6 solution provider, the first Chinese company won IPv6 Ready Gold certificate and first manufacturer won OpenFlow v1.3 Certificate.
DCN provides product and solution to 60+ countries worldwide, and have established represent and service center at CIS, Europe, Asia, North America, South America and Middle East regions. DCN serves clients successfully from Education, Government, Operators, ISP, Hospitality, and SMB.
Based on independent development and sustainable innovation, DCN is continuous to provide network solution with intelligent, reliable and integrated network products and quality service for the clients.
DCN Access Controller - Key Features and Highlights
The DCWS-6028(R2) is a high-performance smart wireless access controller (AC) for medium wireless networks, which can manage up to 1024 access points (APs). It provides complete RF management and security mechanism, powerful QoS, seamless roaming and complete control of APs, can be used to construct medium-sized network for campus, hotel, enterprise office, hospital, etc.
With hardware ASIC, DCWS-6028(R2) could support line-rate forwarding of IPv4/IPv6 data packets and support dynamic routing protocols such as RIP, OSPF, BGP and PIM, as well as IPv6 RIPng, OSPFv3 and PIM6. It also integrates Ethernet switch function, and provides unified access control for wired and wireless users. It offers 16 GE combo ports, 8 fixed SFP ports, and 4* 10G SFP+ ports.

Key Features and Highlights
- Combination of routing switch and wireless AC: The DCWS-6028(R2) can be used as a routing switch and a wireless access controller simultaneously in a trunk deployment mode, with an ASIC-based forwarding architecture and high-density access-port; it can provide line-speed forwarding for both wired and wireless traffic.
- High-reliability backup mechanism: Supports N+1 backup and N+N backup to ensure a wireless network runs reliably.
- 1+1 modular redundant input power: Supports two modular AC input power, which provides 1+1 input power redundancy.
- Enables an AP to intelligently detect a link between AC and AP. When detecting the breakdown of the link the AP quickly switches its operating mode so that it can continue to forward data and allow new users to access the network. This mechanism makes sure that the access is available for all users when the AC is down.
- Intelligent RF management: Provides automatic power and channel adjustment, employs RF detection and management algorithms for better RF coverage, and supports blackhole compensation to avoid AP blind areas.
- Intelligent control of terminals based on airtime fairness: Ensures both low-rate and high-rate clients get relatively the same accessing time, avoiding low-rate clients affecting AP performance.
- Intelligent load balancing mechanism: Supports load balancing between APs based on traffic, number of users, and between radios within the AP.
- Intelligent identification of terminals: Identifies terminals by OS, type, and device, and can implement dynamic policies and present authentication pages accordingly.
- PEAP user authentication: Supports Protected Extensible Authentication Protocol (PEAP) for a better user experience and automatic subsequent certifications.
- User isolation policy: Supports isolation of wireless users, allowing only communication between clients and gateway, increasing network security.
- Wireless intrusion detection and intrusion defense: Supports detection of unauthorized wireless devices, intrusion detection, blacklist/whitelist, anti-DoS, and other wireless security management features.
- Secure user admission: Provides multiple secure access, authentication, and accounting mechanisms including 802.1x, captive portal, MAC, LDAP, WAPI, and integrated authentication/accounting.
- AP plug-and-play: DCN smart APs support plug-and-play and zero configuration. The controller undertakes all management, control, and configuration of the APs.
- Remote probe analysis: Supports remote probe analysis of APs, enabling APs to capture Wi-Fi packets and mirror them to a local analysis device in real-time for flexible wireless network monitoring.
DCWS-6028(R2) Hardware Specifications
Item | DCWS-6028(R2) |
---|---|
Dimensions(L*W*H) | 440mm×350mm×44mm; 19 inches, 1 U high, supporting rack installation |
Switching capacity | 208 Gbps |
Service port |
16 GE combo ports (GE/SFP) 8 GE SFP ports 4 10G SFP+ ports |
Management port | 1 console port (RJ-45), 1 out-of-band management port, 1 USB port |
Power supply | 2 power slots, 1+1 Modular Redundancy |
Power consumption | 90 W |
Working/Storage temperature | 0℃ to +50℃ / -40℃ to +75℃ |
Working/Storage RH | 10% to 90% (non-condensing) |
DCWS-6028(R2) Software Specifications
Item | DCWS-6028(R2) |
---|---|
Base number of manageable APs | 32 |
Maximum number of manageable APs | 2048 (bypass mode, no user authentication), 1024 (bypass mode, with user authentication), 256 (trunk mode) |
Number of manageable ACs in a cluster | 64 |
AP upgrade step | 16, 32, 128 |
Maximum number of concurrent wireless users | 10K (no user authentication), 2K (with user authentication) |
VLANs | 4K |
ACL | 4K |
MAC address list | 32K |
ARP table | 16K |
Switching time during roaming | < 30 ms |
L2 protocols and standards | IEEE802.3 (10Base-T), IEEE802.3u (100Base-TX), IEEE802.3z (1000BASE-X), IEEE802.3ab (1000Base-T), IEEE802.3ae (10GBase-T) |
IEEE802.3ak (10GBASE-CX4), IEEE802.1Q (VLAN) | |
IEEE802.1d (STP), IEEE802.1W (RSTP), IEEE802.1s (MSTP) | |
IEEE802.1p (COS) | |
IEEE802.1x (Port Control), IEEE802.3x (Flow Control) | |
IEEE802.3ad (LACP), Port Mirror IGMP Snooping, MLD Snooping QinQ, GVRP, PVLAN Broadcast storm control |
|
L3 protocols and standards | Static Routing, RIP/v1/v2, OSPF, BGP, VRRP, IGMP v1/v2/v3, ARP, ARP Proxy, PIM-SM, PIM-DM, PIM-SSM |
802.11, 802.11a, 802.11g, 802.11n, 802.11d, 802.11h, 802.11i, 802.11e, 802.11k | |
CAPWAP protocol |
Supports L2/L3 network topology between an AP and an AC. Enables an AP to automatically discover an accessible AC. Enables an AP to automatically upgrade its software version from an AC. Enables an AP to automatically download configurations from an AC. |
IPv6 protocols and standards | IPv4/v6 dual-stack, manual tunnel, ISATAP, 6to4 tunnel, IPv4 over IPv6 tunnel, DHCPv6, DNSv6, ICMPv6, ACLv6, TCP/UDP for IPv6, SOCKET for IPv6, SNMP v6, Ping/Traceroute v6, RADIUS, Telnet/SSH v6, FTP/TFTP v6, NTP v6, IPv6 MIB support for SNMP, VRRP for IPv6, IPv6 QoS, static routing, OSPFv3, IPv6 SAVI |
High reliability |
N+1 backup N+N backup |
RF management | Setting country codes |
Manually/automatically setting the transmit power | |
Manually/automatically setting the working channel | |
Automatically adjusting the transmission rate | |
Blind area detection and repair | |
RF environment scanning, which enables a working AP to scan the surrounding RF environment | |
RF interference detection and avoidance | |
11n-preferred RF policy | |
SSID hiding | |
20 MHz and 40 MHz channel bandwidth configuration | |
EMC protection in hybrid access of 11bg and 11n terminals | |
Terminal-based airtime fairness scheduling | |
Terminal locating (A terminal locating algorithm can be embedded in the AC) | |
Spectral navigation (5 GHz preferred) | |
11n only | |
SSID-based or Radio-based limit on the number of users | |
User online detection | |
Automatic aging of traffic-free users Prohibiting the access of clients with weak signals Remote probe analysis |
|
Security |
64/128 WEP, dynamic WEP, TKIP, CCMP, and SMS encryption 802.11i security authentication and two modes: (Enterprise and Personal) of 802.1x and PSK WAPI encryption and authentication LDAP authentication MAC address authentication Portal authentication, including built-in portal, external portal, and custom portal authentication modes PEAP user authentication |
Forwarding security control, such as frame filtering, white list, static blacklist, and dynamic blacklist User isolation Radio/SSID enabling and disabling Access control of free resources Secure admission control of wireless terminals Access control of various data packets such as MAC, IPv4, and IPv6 packets Secure access control of APs, such as MAC authentication, password authentication, or digital certificate authentication between an AP and an AC Radius Client Backup authentication server Wireless SAVI User access control based on AP locations Wireless intrusion detection system (WIDS) and wireless intrusion prevention system (WIPS) Protection against flooding attacks Protection against spoofing attacks |
|
forwarding | IPv6 access and forwarding: constructing IPv6 WLAN access service on an IPv4 network; providing IPv4 WLAN access service on an IPv6 network; and constructing private IPv6 WLAN network service on an IPv6 network |
IPv4 and IPv6 multicast forwarding | |
WDS AP | |
QoS | 802.11e (WMM); and 4-level priority queues, ensuring that applications sensitive to the real-time effect, such as voice and video services, are transmitted first |
Ethernet port 802.1P identification and marking Mapping from wireless priorities to wired priorities Mapping of different SSID/VLANs to different QoS policies, Mapping of data streams that match with different packet fields to different QoS policies Access control of MAC, IPv4, and IPv6 data packets Load balancing based on the number of users, Load balancing based on user traffic, Load balancing based on frequency bands Bandwidth limit based on APs, Bandwidth limit based on SSIDs, Bandwidth limit based on terminals, Bandwidth limit based on specific data streams Power saving mode Multicast-to-unicast mechanism Automatic emergency mechanism of APs Intelligent identification of terminals |
|
Management |
Web management Configuration through a console port SNMP v1/v2c/v3 Both local and remote maintenance Local logs, Syslog, and log file export Alarm Fault detection Statistics Login through Telnet Login through SSH Dual-image (dual-OS) backup Hardware watchdog AC cluster management; automatic information synchronization between ACs in a cluster, and automatic or manual push of configuration information SSID-based user permission management mechanism |

Typical Application
Bypass Deployment Scenario

Typical Application
Trunk Deployment Scenario
Here the DCWS-6028 is deployed as both a core switch and access controller.
Order Information
Product Model | Description | Remarks |
---|---|---|
DCWS-6028(R2) | DCN Intelligent Access Controller (default with 32 units AP license, support controlling max. 1024 APs, support N+1, N+N redundancy)), 16*GbE Combo (SFP/RJ45) +8*1000M SFP ports+4*10GbE SFP+ ports, two modular power, default with one AC power. | Mandatory |
DCWS-L16 | Upgrade license of the DCN wired/wireless integrated smart AC (for upgrading 16 APs, a minimum number of upgrade step is 16 APs) | Optional |
DCWS-L32 | Upgrade license of the DCN wired/wireless integrated smart AC (for upgrading 32 APs, a minimum number of upgrade step is 32 APs) | Optional |
DCWS-L128 | Upgrade license of the DCN wired/wireless integrated smart AC (for upgrading 128 APs, a minimum number of upgrade step is 128 APs) | Optional |
M6200-AC-A | AC Power Supply Module (150W) for DCWS-6028(R2) 100V-240V, could be purchased alone as an accessory | Optional |