EWS101

WIRELESS LAN CONTROLLER

INTRODUCTION
The EWS101 is an entry-level wireless LAN controller that provides enterprise-grade
functionality for SMBs, retail/chainstores, and distributed sites. With AP management, user
authentication, policy assignment, traffic shaping, firewall features all packaged into a single
box, the EWS101 allows smaller organizations with minimal IT resources to enable the same
level of network security and management capabilities as their large enterprise counterparts.
The EWS101 is extremely affordable, easy to deploy, and simple to manage, making it the
ideal choice for SMBs needing a comprehensive Wi-Fi solution.

The EWS101 is capable of managing up to 50 ECW/ECWO-series Wireless Access Points,

which can be deployed and configured easily by anyone, including non-wireless savvy
users. For example, automated AP discovery prevents network administrators from having
to go through the hassle of individually adding and configuring each access point. Access
points as well as connected Wi-Fi devices can then be monitored and managed from a
centralized point, with extensive logging & reporting features to assist in troubleshooting and
maintenance.

As Wi-Fi enabled handheld devices such as smartphones and tablets become ever so
prevalent in our daily lives, businesses and network operators alike are faced with a mind-
boggling dilemma – how to simultaneously address the needs of BYOD (Bring Your Own
Device), manage Wi-Fi users, and maintain network service quality for mission critical
applications. The EWS101 is designed exactly with these requirements in mind, and with
a total cost of ownership that satisfies even the most price conscious, organizations are
guaranteed to receive an unmatched ROI on their wireless LAN infrastructure.

2.4G
EWS101
SW
AP
5G
Reception

2.4G
5G
AP Guest Rooms

5G
AP
Lobby
2.4G

For a world always connected…

 ENTERPRISE-GRADE WIRELESS LAN CONTROLLER EWS101

FEATURES ◈ Customizable Billing

Plans
On-demand Account ◈ Account Credentials
Flexibility
SECURITY ◈ Access Codes
◈ Smart Login
Security is often one of the most important concerns when ◈ Limitation by duration
it comes to enterprise wireless networks. From the most
and volume
basic need of preventing network access by unauthorized
users to performing rogue AP detection and enforcing ◈ Configurable
Guest Wi-Fi Account
network isolation, the Edgecore controllers provide a reactivation time
complex set of features that prevent malicious activities in ◈ E-mail registration and
an organization's network. activation
For deployment flexibility, the Edgecore controllers Social Media Login ◈ Yes
support user authentication via both the industry NETWORK SECURITY
standard 802.1X as well as web-based captive portals. The ◈ Remote
highly customizable captive portals with integrated walled VPN
◈ Site-to-Site
garden capability can be adapted to suit the needs of
hotels, schools, and other public venues. For unregistered
◈ IPSec
Tunneling Protocols
users without an account, guest access can be provided by ◈ IKEv2
simply entering an e-mail address, logging in with social ◈ Intra-VLAN or Port
media accounts, or purchasing a data plan through PayPal. Network Isolation
◈ Inter-VLAN or Port
With various account generation methods, the Edgecore Rogue AP Detection ◈ Yes
controllers are able to identify users and track user Certificates ◈ Built-in Root CA
activities, ensuring network security in public Wi-Fi.

The Edgecore controllers also support remote access via MOBILITY

VPN, which is crucial for travelling businessmen. At the
same time, site-to-site VPN establishes secure connections The advent of the era of smartphones and tablets has
between corporate headquarters and branch offices. opened a chasm between how the Internet is used and
how organizations provide Internet connectivity. Wireless
networks have transformed from a luxury to a necessity,
USER SECURITY in order to support devices that don't have legacy wired
◈ 802.1X capability. Furthermore, additional features need to be
provided in order to address the rapidly changing usage
Authentication Types ◈ UAM (browser-based)
behavior.
◈ IP or MAC-based
◈ Local The Edgecore Controllers support a variety of mobility
◈ On-Demand features that aim to make enterprise Wi-Fi both easier to
◈ Guest use and simpler to manage. For example, by supporting
fast roaming, users on mobile devices can be on-the-
◈ RADIUS
Authentication Servers go without worrying about interrupted connections. It
◈ LDAP is also not uncommon to see a single user with multiple
◈ NT Domain handheld devices - with the Edgecore Controller all of
◈ SIP the devices can login to Wi-Fi using the same username
◈ POP3 and password. Finally, mobile-optimized captive portals
and ticket-printed QR code automatic login are both easy
Customizable Captive Portal ◈ Yes methods for a user to get online from their mobile device.
Customizable Wild Card ◈ Yes
Walled Garden
DEVICE MOBILITY
User Blacklisting ◈ Yes
Fast Roaming Between Access Points ◈ Yes
ACCOUNT GENERATION
Cross Gateway Roaming ◈ Yes
◈ SMS registration
◈ Purchase via PayPal WISPr Smart Client ◈ Yes
On-demand Account Hotel PMS integration Mobile Device Recognition for
◈
◈ Yes
◈ Selectable Billing Plans Optimized Captive Portal
◈ Account Ticket Printer Multiple Device Logins Per Account ◈ Yes
QR Code Automatic Login ◈ Yes
Device Plug-and-Play ◈ Yes
On-Demand Smart Login without ◈ Yes
Re-Authentication

2
 ENTERPRISE-GRADE WIRELESS LAN CONTROLLER EWS101

MANAGEMENT ◈ User-based
Bandwidth Limitation ◈ Group-based
In a wireless LAN, the Edgecore Controller is the central ◈ Bandwidth throttling
point of management for network administrators, whether Traffic Classification /
it is monitoring current online users or troubleshooting ◈ Yes; 802.1p / DSCP
Remarking
network connectivity issues. The management console ◈ Yes; each rule with
of the Edgecore Controller is a browser-based GUI that
is simple and intuitive to operate. From this interface, Stateful Firewall individual enforcement
network administrators can configure traffic shaping schedules
profiles, track previous network usage, perform system Static Route Assignment ◈ Yes
backup and restore, and much more. Concurrent Session Limit ◈ Yes
From the user management perspective, one of the
◈ Allow clients to obtain
core benefits of the Edgecore Controller is its ability IP Address Reassignment different IP addresses
to enforce different traffic profiles based on both the after authentication
location (Service Zone) of the user and the time of access.
For example, the profiles applied during work hours can
be different from that of during after-work hours. From
bandwidth limitations to specific routing rules, network SERVICES
administrators gain fine-grained control over Wi-Fi users.
As wireless networks increasingly become the primary
For access points, Edgecore Controllers support automatic network used by organizations, it is crucial to take into
discovery and provisioning, eliminating many repetitive consideration fundamental network services, such as
and cumbersome tasks often faced during initial network DHCP, NAT, and routing. In addition to providing these
deployment. Centralized AP configuration and monitoring functions, the Edgecore Controller also implements the
also greatly reduces maintenance overhead for IT staff. concept of a "Service Zone", which essentially segments
the controller into multiple virtual controllers, each
SYSTEM MANAGEMENT with its own associated network services, user policies,
authentication settings, etc.
Browser-Based Configuration ◈ Yes
◈ Multiple tiered access Finally, the Edgecore Controller provides unique value-
privileges added capabilities, such as a direct integration with
Administrator Accounts
◈ Monitor each admin’s Micros Opera PMS that greatly simplifies the overhead of
current accessed page providing managed Wi-Fi in hotels.
◈ NTP synchronization
System Time
◈ Manually configured
NETWORK SERVICES
System Backup & Restore ◈ Yes
Redundancy
SNMP ◈ Yes; v2c ◈ No
(High Availability)
◈ Yes; built-in packet
Network Utilities ◈ IPv4
capture Internet Protocols Supported
◈ IPv6
AP MANAGEMENT DHCP Server / DHCP Relay ◈ Yes
Automatic AP Discovery ◈ Yes
Network Address Translation ◈ Yes
Automatic AP Provisioning ◈ Yes; template-based
Built-in HTTP Proxy Server ◈ Yes
AP Configuration Backup & ◈ Yes Dynamic Routing ◈ Yes
Restore
Local DNS Records ◈ Yes
AP Firmware Batch Upgrade ◈ Yes
◈ Innkey PMS
Tunneled AP Management ◈ Yes; both L2 & L3 APs
Hotel PMS Integration ◈ Micros Opera PMS
AP Load Balancing ◈ Yes ◈ IDS Next
Automatic AP Firmware ◈ Yes Integrated Billing &
Upgrade ◈ Yes
Accounting System
Automatic Periodically AP ◈ Yes ◈ By duration
Backup Billing Quota Types
◈ By traffic volume
USER MANAGEMENT
◈ Role-based
User Policy Assignment ◈ Time & location
dependent

3
 ENTERPRISE-GRADE WIRELESS LAN CONTROLLER EWS101

REPORTING SPECIFICATIONS
Whether it is real-time monitoring of network activity
or tracking the usage of previous Wi-Fi users, network
SYSTEM CAPACITY*1
administrators need the appropriate tools at their disposal
to increase efficiency and reduce workload. The Edgecore Managed APs ◈ Up to 50
Controllers have an extensive set of logging and reporting Local Accounts ◈ Up to 2,000
features that allow network administrators to easily find On-Demand
any information related to the wireless network. ◈ Up to 2,000
Accounts
The built-in system dashboard provides a quick overview Max. Number of ◈ Up to 200
of the current system status, along with graphical reports Online Users
of network traffic and system performance. In addition, HARDWARE SPECIFICATIONS
there is a simple interface for viewing online devices
Form Factor ◈ Desktop
and their associated detailed statistics, including but not
limited to the roles they belong to, enforced network Dimensions ◈ 19.0 cm x 13.3 cm x 3.3 cm
policies, and packets transferred. (W x D x H)
Weight ◈ 0.6 kg (1.32 lbs)
Alongside network monitoring, the Edgecore Controller ◈ DC Input: 12V / 1A (Power adapter
also performs detailed logging of all network activity. Power
For example, the User HTTP Web Log allows network included)
administrators to track users who visited malicious ◈ WAN: 1 x 10/100/1000Base-T
websites, while the DHCP Lease Log can assist in Ethernet, Auto-MDIX, RJ-45
troubleshooting clients who cannot receive an IP address. ◈ LAN: 4 x 10/100/1000Base-T
Lastly, the Configuration Change Log shows administrators Interfaces
Ethernet, Auto-MDIX, RJ-45
which settings have been modified in the past, in case
there are configuration errors that need to be reverted.
◈ Console: 1 x RJ-45
◈ USB: 1 x USB 3.0
SYSTEM & NETWORK STATUS ◈ Power
LED Indicators
System Dashboard ◈ Yes ◈ Status
Graphical System Buttons ◈ Reset
◈ Yes
Performance Reports LCD Display ◈ No
Traffic Volume Reports ◈ Yes ◈ Operating Temperature: 0°C (32°F)
System Process Monitor ◈ Yes Environmental to 40°C (104°F)
Online Device Monitoring ◈ Yes Conditions ◈ Operating Humidity: 5% to 95%
Active Sessions List ◈ Yes non-condensing
Configurable SYSLOG Severity ◈ Yes *1: Capacity limits may vary depending on configuration parameters
SMTP (E-mail) Notifications ◈ Yes
Multiple Concurrent E-mail ◈ Yes
Notification Receivers
NETWORK ACTIVITY LOGS
System Log (SYSLOG) ◈ Yes
CAPWAP Log ◈ Yes
Configuration Change Log ◈ Yes
RADIUS Server Log ◈ Yes
User Events Log ◈ Yes
User HTTP Web Log ◈ Yes
Firewall Log ◈ Yes
DHCP Server/Lease Log ◈ Yes
PMS Interface Log ◈ Yes
On-Demand Billing Report ◈ Yes
AP Status E-mail Notification ◈ Yes
AP Management Event Log ◈ Yes
Logging to External FTP ◈ Yes
Configurable Logs & ◈ Yes
Reporting Intervals

TEL: 886-3-5638888 FAX: 886-3-6686111

1, Creation Rd. III, Hsinchu Science Park, Taiwan 30077
[email protected]
4 www.edge-core.com © Copyright 2020 Edgecore Networks Corporation. EC_DS_220208