Data Sheet Cisco 2500 Series Wireless Controllers Product Overview The Cisco® 2500 Series Wireless Controller enables systemwide wireless functions in small to medium-sized enterprises and branch offices. Designed for 802.11n and 802.11ac performance, Cisco 2500 Series Wireless Controllers are entry-level controllers that provide real-time communications between Cisco Aironet® access points to simplify the deployment and operation of wireless networks (Figure 1). As a component of the Cisco Unified Wireless Network, this controller delivers centralized security policies, wireless intrusion prevention system (wIPS) capabilities, award-winning RF management, and quality of service (QoS) for voice and video. Delivering 802.11 ac performance and scalability, the Cisco 2500 Series provides low total cost of ownership and flexibility to scale as network requirements grow. The Cisco 2504 Wireless Controller supports Cisco Application Visibility and Control (AVC), the technology that includes Cisco's Network-Based Application Recognition 2 (NBAR-2) engine. N-BAR-2 does deep packet inspection (DPI) to classify applications and tie into quality of service (QoS) to either drop or mark the traffic, thereby prioritizing business-critical applications in the network. Cisco AVC uses NetFlow Version 9 to export the flows to Cisco Prime™ Infrastructure or a third-party NetFlow Collector. The Cisco 2504 Wireless Controller also supports Bonjour Services Directory, which enables Bonjour (Apple) Services to be advertised and utilized in a separate Layer 3 network. Wireless Policy engine is a wireless profiler and policy feature on the Cisco 2500 Series Wireless Controller that enables profiling of wireless devices and enforcement of policies such as VLAN assignment, QoS, ACL, and time-of-day-based access. Cisco 2500 Series Wireless Controller-based access point licensing offers flexibility with 5, 15, 25, or 50 access points. Additional access point support can be added in increments of 1, 5, or 25. © 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 o

Table 1. Cisco 2500 Series Wireless Controller Features and Benefits © 2016 Cisco and/or its affiliates. All rights reserved. This document is

Data Request for Comments (RFCs) Security Standards Authentication, Authorization, and Accounting (AAA) • RFC 768 UDP • RFC 791 IP • RFC 2460 IPv6 (passthrough bridging mode only) • RFC 792 ICMP • RFC 793 TCP • RFC 826 ARP • RFC 1122 Requirements for Internet Hosts • RFC 1519 CIDR • RFC 1542 BOOTP • RFC 2131 DHCP • RFC 5415 CAPWAP Protocol Specification • Wi-Fi Protected Access (WPA) • IEEE 802.11i (WPA2, RSN) • RFC 1321 MD5 Message-Digest Algorithm • RFC 1851 The ESP Triple DES Transform • RFC 2104 HMAC: Keyed Hashing for Message Authentication • RFC 2246 TLS Protocol Version 1.0 • RFC 2401...

Management Interfaces Regulatory Compliance SNMP v1, v2c, v3 RFC 854 Telnet RFC 1155 Management Information for TCP/IP-Based Internets RFC 1156 MIB RFC 1157 SNMP RFC 1213 SNMP MIB II RFC 1350 TFTP RFC 1643 Ethernet MIB RFC 2030 SNTP RFC 2616 HTTP RFC 2665 Ethernet-Like Interface types MIB RFC 2674 Definitions of Managed Objects for Bridges with Traffic Classes, Multicast Filtering, and Virtual Extensions RFC 2819 RMON MIB RFC 2863 Interfaces Group MIB RFC 3164 Syslog RFC 3414 User-Based Security Model (USM) for SNMPv3 RFC 3418 MIB for SNMP RFC 3636 Definitions of Managed Objects for IEEE 802.3...

Ordering Information Tables 3 and 4 provide ordering information for the Cisco 2500 Series Wireless Controllers. To place an order, visit the Cisco ordering website: http://www.cisco.com/en/US/ordering/index.shtml. Table 3. Ordering Information for Cisco 2500 Series Wireless Controllers Table 7 shows the optional DTLS license for Cisco 2500 Series Wireless Controllers. When the customer orders the 2500 Series and chooses “none selected (the default) in the Optional Licenses tab, data DTLS encryption is disabled. © 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public...

Datagram T ransport Layer Security (DTLS) is required for all Cisco OfficeExtend deployments to encrypt the data plane traffic. To enable this functionality, you must obtain a $0 DTLS license. Customers planning to install this device physically in Russia must obtain a physical PAK in order to enable a DTLS license and should not download the license from Cisco.com. Please consult your local government regulations to ensure that data DTLS encryption is permitted. The DTLS Paper PAK license is designated for customers who purchase a controller with DTLS disabled due to import restrictions but...

Cisco Capital Financing to Help You Achieve Your Objectives Cisco Capital® financing can help you acquire the technology you need to achieve your objectives and stay competitive. We can help you reduce CapEx, accelerate your growth, and optimize your investment dollars and ROI. Cisco Capital financing gives you flexibility in acquiring hardware, software, services, and complementary third-party equipment. And there's just one predictable payment. Cisco Capital is available in more than 100 countries. Learn more. For More Information For more information about Cisco wireless controllers, contact...