Aruba Networks is unveiling wireless LAN hardware and software that are intended to extend corporate security and quality of service to mobile workers on the road or in remote sites.

A combination of new features in the Aruba operating system and new access points, including a miniaturized portable model, eliminates the need for separate VPN and firewall products, according to the company. The products can be deployed without having to makes changes to the enterprise switch fabric.

The key additions to the new version, 2.5, of the Aruba operating system software are:

• IPSec, to create a control channel between Aruba thin access points in remote locations and a centralized Aruba controller. It also eliminates the need for client VPN software between Aruba controllers at different sites and eliminates the need for separate VPN/firewall products.
• Call Admission Control, a voice quality-of-service protocol that reserves bandwidth specifically for VoIP packets.
• Local guest access, so visitors at a remote site can have local and Internet connectivity though the same access point that connects employees to a corporate Aruba controller.

Making use of these software changes are two new access points. The AP-65,  at 3-inches by 3-inches, is designed as a portable device that can be carried around by mobile workers. It has an 802.11a and an 11b/g radio, and a price tag of $495. The AP-41 is somewhat larger, intended for use in a home or small office. It has one radio, with a chipset that can support 11a, b or g clients.

Both devices need only an Internet connection. Once they have it, they automatically set up an IPSec tunnel, connect to the corporate Aruba controller, authenticate, download configuration and security settings, and start operating.

Also new, is a security protocol that lets enterprises set up the equivalent of 802.11i authentication and encryption for wired LAN clients, by using Aruba controllers instead of upgrading LAN switches. The protocol, xSec, was jointly created by Funk Software and Aruba for a Department of Defense contract. Client software loads on a Windows PC and passes through the existing LAN switch fabric to authenticate with corresponding code on the Aruba switch, using 802.1x. Then, xSec goes beyond 802.1x by encrypting the connection with Advanced Encryption Standard (AES).

The new Aruba products will be available in November.