Country / Region
H3C WX2800X Series Wireless Controllers are equipped with the H3C Comware system platform, boasting five core advantages: modular architecture, high scalability, ultra-large capacity, high reliability, and rich service capabilities. By means of deep integration with the H3C Intelligent O&M Platform, this series of controllers can deliver an unparalleled high-quality wireless experience, precisely meeting the ever-growing business needs of customers. Meanwhile, leveraging the AI capabilities of the Intelligent O&M Platform, they deliver intelligent problem analysis and in-depth insights, and automatically execute complex O&M tasks, and comprehensively ensure an optimal user experience.
The following contents are complex, and it is recommended to browse on PC.

Enter c.h3c.com.cn on the PC browser and operate according to the page to synchronize to the PC and continue browsing.
Continue by mobile
H3C X series Wireless Controllers are specifically designed for demanding users, corely delivering secure, highly resilient, and high-performance Wi-Fi connectivity—accurately meeting the rigorous wireless experience requirements of enterprise-grade scenarios.
H3C X Series ACs support both Wi-Fi 6 and Wi-Fi 7 APs, and can either operate independently or work in collaboration with H3C intelligent O&M platform. They seamlessly integrate with H3C Cloudnet cloud deployment platform and AD-Campus on-premises platform — both featuring intelligent automated management, AI-driven insights, and unified infrastructure control capabilities. With these two flexible deployment choices, users can effortlessly implement full-lifecycle management of Wi-Fi devices, maximizing intelligent O&M efficiency and ultimately meeting the diverse application scenario needs of various enterprises.
The WX2812X-PWR is a high-performance wireless controller with the ability to support up to 18 access points and 1024 clients with up to 4 Gbps of maximum throughput. The WX2812X-PWR includes AP license as following by default, which protects customer’s investment to maximum, which also give SMB/SME a great opportunity to add new AP with the wireless network expansion without additional cost.
In addition to 802.11a/b/g/n/ac/ax AP management, the WX2812X-PWR can work together with H3C 802.11be based APs to provide wireless access speed several times faster than a traditional 802.11a/b/g/n/ac/ax network. With 802.11be large proximity which makes WLAN multimedia applications deployment a reality.
High Availability Enabled: 1:1 Master/backup Dual-link backup and N+1 Redundancy ensure non-stop network, services & client connectivity—no matter unplanned events.
APs automatically discover the AC and establish Capwap tunnel connection once powered on. If the AP’s software version is incompatible with the AC’s, it automatically downloads the corresponding version from the AC and finishes the upgrade independently.
The AC supports phased intelligent AP upgrades, allowing for either individual AP upgrades or unified upgrades for AP group members. Intelligent upgrade technology eliminates full network restart requirements.
Hot patching is a preferred solution for rapidly fixing product software defects at low cost, enabling repairs without restarting the device or disrupting ongoing services.
Two ACs in the cloud cluster share the AP licenses. An AP license installed on one AC can be used by the other AC. AC1 has N licenses installed; AC2 has M licenses installed. After AC1 and AC2 form a cloud cluster, the cloud cluster has N+M licenses. After AC1 fails or disconnects in the cloud cluster, AC2 still possesses N+M licenses to provide time for AC1 repair, allowing up to N+M APs to connect. If AC1 is disconnected for more than 30 days, AC2 cannot use the licenses on AC1 and can allow only M APs to connect.
The ACs support WPA2-Personal, WPA2-Enterprise, WPA3-Personal, WPA3-Enterprise authentication and encryption modes to ensure security of the wireless network.
The CAPWAP link protection and DTLS encryption provide security assurance, improving data transmission security between the AP and the AC.
Trusted systems built on H3C Secure Boot provide a strong security foundation for H3C products.All device software compilations utilize RSA asymmetric encryption to ensure the integrity and authenticity of firmware and boot programs. The basic boot code in tamper-resistant partitions establishes a Root of Trust, and forms a Chain of Trust by verifying subsequent stages to enable secure system boot and validate software trustworthiness, thus effectively defending against man-in-the-middle attacks targeting software and firmware.
Support intra-AC roaming, cross-AC roaming, and cross-VLAN Layer 3 roaming.
Support 802.11k/v/r fast roaming protocols.
Support Portal roaming and 802.1X roaming.
Client reassociation — this feature enables an AP to send unsolicited deauthentication frames to a client when the client’s signal strength is lower than the specified RSSI threshold. Then, the client can reassociate with the original AP or roam to another AP.
There are many possible interference sources that can affect the normal operation of APs in a WLAN, such as rogue APs, radars and microwave ovens. The intelligent channel switching technique can ensure the allocation of an optimal channel to each AP, thereby minimizing adjacent channel interference. Besides, the real-time interference detection function can help keep APs away from interference sources such as the aforementioned radars and microwave ovens.
The intelligent AP load balancing function can analyze the locations of wireless clients in real time, dynamically determine which APs at the current location can share load with one another, and implement load balancing among these APs. In addition to load balancing based on the number of online sessions, the system also supports load balancing based on the traffic of online wireless users.
The system supports the automatic SSID hiding function based on radio resource utilization. When radio resources reach or exceed the configured threshold, the SSID is automatically hidden to provide users with stable and reliable wireless services.
In a wireless network using centralized forwarding mode, all wireless traffic is sent to an AC for processing, and thus the AC’s forwarding capability may become a bottleneck. This is especially true for wireless networks where APs are deployed at branches, ACs at headquarters, and APs and ACs are connected over a WAN. In this scenario, distributed forwarding is more suitable. The WX2812X-PWR supports both distributed and centralized forwarding modes, and it can configure SSID-based forwarding as needed.
Radio Resource Management (RRM), the AP monitors air interface channel utilization, channel interference, and signal conflict in real time, and works with H3C intelligent O&M platform to adjust RF parameters such as working channel, bandwidth, and power in a timely manner to maintain the optimal RF resource status.
The Station Access Control Policy (SACP) restricts, controls, and guides the access of wireless terminals to better AP or wireless services. In addition, terminal traffic is controlled and scheduled according to network applications to improve the overall performance of the wireless network and improve the experience and effect of wireless access applications.
Wireless AP fully supports the Fast BSS Transition function defined in the 802.11r standard, which can accelerate the roaming process of wireless users, reduce the probability of connection interruption, and improve the roaming service quality. Through 802.11k protocol mechanism, AP and wireless client interact with each other to perceive the network topology in multiple dimensions. The AC recognizes and calculates the roaming time and roaming access location of the wireless client in full view, and negotiates the switch with the client through 802.11v and 802.11r mechanisms.
Coupled with WX2812X-PWR, the APs can identify a large number of common applications in various office scenarios. Based on the identification results, policy control can be implemented on user services, including priority adjustment, scheduling, blocking, and rate limiting to ensure efficient bandwidth resource and improve quality of key services.
H3C WX2812X-PWR can collaborate with H3C AD-Campus platform. If WX2812X-PWR is combined with the H3C AD-Campus platform, enterprises can achieve unified monitoring and management of wired and wireless networks, and obtain an integrated operation and maintenance experience.The AD-Campus platform is equipped with an intuitive, user-friendly web interface, supports network control, and provides a unified view of the network topology while enabling policy-based network management.
The AC supports two Web access methods: HTTP and HTTPS. Users can easily select function menus in the navigation bar to view the device’s current status and statistical information in real time, including logs, current AP information, system utilization, wireless services, clients, interface traffic, and other system data.
The AC supports powerful open APIs via the Network Configuration Protocol (NETCONF), injecting high efficiency and flexibility into network operation, maintenance, and integration scenarios. Leveraging these protocol-based open APIs, the AC breaks the closed nature of device management, providing standardized access interfaces for third-party systems, automation tools, and custom platforms.
Weight | 2.9kg (installed with dual power supplies) |
Dimensions (W × D × H) | 440 mm × 220 mm × 43.6 mm |
Interface | LAN: 12 × GE PoE+ ports 2 × SFP+ ports WAN: 2 × GE ports |
Console port | 1 x Console port |
USB port | 1 x USB 2.0 |
Throughput | 4Gbps |
Power supply | 100V AC~240V AC:50/60Hz |
Power consumption | 11.8W to 173W |
802.11b: Direct-sequence spread spectrum (DSSS) 802.11a/g/n/ac: Orthogonal frequency-division multiplexing (OFDM) 802.11ax/be: Orthogonal frequency-division multiple access (OFDMA) | |
Modulation mode | 11b: BPSK, QPSK, CCK 11a/g/n: BPSK, QPSK, 16QAM, 64QAM 11ac: BPSK, QPSK, 16QAM, 64QAM, 256QAM 11ax: BPSK, QPSK, 16QAM, 64QAM, 256QAM, 1024QAM 11be: BPSK, QPSK, 16QAM, 64QAM, 256QAM, 1024QAM, 4096QAM |
Data rates (Mbps) | 802.11b: 1, 2, 5.5, 11 802.11a/g: 6, 9, 12, 18, 24, 36, 48, 54 802.11n: 6.5 to 600 (NSS = 1 to 4, HT20 to HT40) 802.11ac: 6.5 to 6,933 (MCS0 to MCS9, NSS = 1 to 8, VHT20 to VHT160) 802.11ax: 7.3 to 9,608 (MCS0 to MCS11, NSS = 1 to 8, HE20 to HE160) 802.11be: 7.3 to 23,059 (MCS0 to MCS13, NSS = 1 to 8, EHT20 to EHT320) |
Reset button | Restoration to factory default |
Fan | Internal fans |
Indicators (LED) | LEDs corresponding to different operating states indicate the boot loader status, system status, port status, power module status, and system fault status |
Temperature | Operating temperature: 0°C to +45°C Storage temperature: –40°C to +70°C |
Humidity | Operating humidity: 5% to 95% (non-condensing) Storage humidity: 5% to 95% (non-condensing) |
Protection class | IP20 |
Operating Altitude | 5000 meters |
Safety standards | FDA 21 CFR Subchapter J GB 4943.1 UL 62368-1 CAN/CSA C22.2 No 62368-1 IEC 62368-1 EN 62368-1 AS/NZS 62368-1 |
EMC standards | EN 55032 EN 55035 EN IEC 61000-3-2 EN 61000-3-3 |
CISPR 32 CISPR 35 GB/T 9254.1 GB/T 9254.2 GB 17626.1 GB 17626.2 | |
IEC 61000-4-2 IEC 61000-4-3 IEC 61000-4-4 IEC 61000-4-5 IEC 61000-4-6 IEC 61000-4-8 IEC 61000-4-11 ETSI EN 300 386 | |
MTBF (25°C) | 98.7 years |
MTTR | 1 hours |
Item | Specification | |
Product capabilities | Basic information | Support 802.11a/b/g/n/ac/ac Wave 2/ax/be |
AC Operating Mode | AC Mode, managed by H3C intelligent O&M platform | |
Supported Wireless AP | H3C WA6300, WA6500, WA6600, WA7600, WA7500, WA7300, WA7200 Series AP | |
Number of managed APs by default | 18 | |
Maximum number of access points | 18 | |
Maximum number of clients | 1024 | |
Maximum throughput | Up to 4 Gbps | |
Maximum VLANs | 4094 | |
Maximum MACs | 2048 | |
Maximum AP Groups | 128 | |
Maximum SSIDs | 18 | |
Maximum BSSIDs | 432 | |
Maximum static blacklists | 1024 | |
Maximum whitelist | 1024 | |
Maximum rules of ACL | 2048 | |
Maximum DHCPv4 allocable Addresses | 2048 | |
Maximum DHCPv6 allocable Addresses | 2048 | |
Maximum Sessions | 102400 | |
Maximum NAT Sessions | 102400 | |
Tunnel management | CAPWAP tunnel | Unicast/broadcast/DNS/DHCP/static IP method for discovering AC |
NAT | NAT between AC and AP | |
DTLS | Tunnel between AC and AP support DTLS encryption | |
IPv4/IPv6 | Tunnel between AC and AP support IPv4 and IPv6 | |
Time synchronization | Synchronizing clock information from AC | |
Dual tunnel | Establishing CAPWAP tunnels with two ACs | |
WLAN extension | RF adjustment | Automatic channel/power/bandwidth adjustment |
SSID hiding | Restrict access and improve wireless network security by SSID hiding | |
User access count restriction based on SSID and RF | ||
Forwarding mode | Centralized forwarding/local forwarding/policy forwarding | |
Local forwarding | Local forwarding based on SSID and VLAN | |
VLAN binding | Binding VLAN based on interface/SSID/MAC | |
User isolation | VLAN-based user isolation SSID-based user isolation | |
Load balancing | Traffic-based load balancing User-based load balancing Frequency band-based load balancing, dual-5G devices only | |
Band steering | ||
Roaming | 802.11k and 802.11v smart roaming 802.11r fast transition roaming | |
Multicast enhancement | IPv4/IPv6 MLD Snooping/IGMP Snooping Convert multicast data into unicast data for transmission, reducing network congestion | |
Wireless location | Fit AP mode support BLE location Fit AP mode support RSSI location | |
Mesh | Mesh link Mesh link security Multi-hop Mesh | |
Wireless probing | Monitor the wireless network environment by monitoring wireless network messages | |
Hotspot 2.0 | Fit AP mode support Hotspot 2.0 | |
BYOD | Identifies device types according to the OUI in the MAC address Identifies device types according to the user agent (UA) field in an HTTP packet Identifies device types according to DHCP Option information | |
Bonjour gateway | Forwarding mDNS packets across VLANs | |
User authentication | 802.1X authentication | Local and remote 802.1X authentication |
MAC authentication | Local and remote MAC authentication | |
Portal authentication | Local and remote Portal authentication Guest/Captive portal Portal mac-trigger | |
PSK | Support PSK and Private-PSK Support Multiple SSIDs and multiple PSKs Each SSID use a unique PSK password | |
PPSK | Fit AP mode support Private Pre-Shared Key, obtain passwords to access wireless networks through the H3C intelligent O&M platform | |
Social Media APPs Authentication | Support Google/Facebook/Twitter through the H3C intelligent O&M platform | |
Extensible Authentication Protocol (EAP) | EAP-Transport Layer Security (EAP-TLS) EAP-Tunneled TLS (EAP-TTLS) Protected EAP (PEAP) v0 or EAP-MSCHAP v2 EAP-Challenge Handshake Authentication Protocol (EAP-CHAP) EAP-Subscriber Identity Module (EAP-SIM) EAP-Authentication and Key Agreement (EAP-AKA) PEAP v1 or EAP-Generic Token Card (EAP-GTC) EAP-Flexible Authentication via Secure Tunneling (EAP-FAST) Microsoft Challenge Handshake Authentication Protocol (MSCHAP) v2 EAP-Pre-Shared Key (EAP-PSK) | |
Wireless security | Encryption | TKIP, CCMP WEP40, WEP104 WPA2-Personal (802.11i) WPA2-Enterprise with 802.1X WPA3-Personal, WPA3-Enterprise WPA3-Enhanced Open (OWE) Advanced Encryption Standard (AES) |
WPA/WPA2 authentication and encryption | WPA/WPA2-PSK+TKIP WPA/WPA2-PSK+CCMP WPA/WPA2-802.1X+TKIP WPA/WPA2-802.1X+CCMP WPA/WPA2-PSK+TKIP-CCMP WPA/WPA2-802.1X+TKIP-CCMP | |
Forwarding security | Packet filtering MAC address filtering Broadcast storm suppression | |
Wireless EAD | Coupled with EAD (End user Admission Domination) solution, implement security policies for terminals accessing the network to improve wireless network security | |
Management frame protection | Provide management frame protection for wireless clients to enhance wireless network security | |
WIPS | Wireless Intrusion Prevention System, protect the network from unauthorized access, such as Rogue AP, Rogue client, Rogue Wireless Bridge, Ad-hoc | |
IPSG | IP source guard (IPSG) prevents spoofing attacks by using an IPSG binding table to filter out illegitimate packets | |
Layer 2 and Layer 3 | IP address configuration | Static IP, DHCP assigned IP |
Ethernet | Link aggregation, Port isolation, Loop detection, Port mirroring, Storm suppression | |
DHCP | DHCP server, DHCP Relay, DHCP Client, DHCP Snooping | |
DNS | DNS client, DNS proxy, DNS fast-reply, DNS Snooping | |
VLAN | Default VLAN, Port-based VLAN Access mode, trunk mode, and hybrid mode | |
VLAN Pool | A VLAN group supports adding multiple VLAN lists | |
MAC | Static MAC, Dnamic MAC, Blackhole MAC | |
ARP | Static ARP, Dynamic ARP, Gratuitous ARP Proxy ARP, ARP snooping, ARP fast-reply, ARP suppression | |
NAT | Static NAT, NAT66, NAT LOG | |
LLDP | Link Layer Discovery Protocol, discovering and identifying other LLDP enabled devices and neighboring devices in the network | |
STP | Spanning Tree Protocol STP, RSTP, PVST, MSTP | |
IP routing | Static routing, OSPFv2, Policy-based routing | |
IP Multicast | MLD Snooping, IGMP Snooping | |
ACL | Basic ACL, Advanced ACL, Layer 2 ACL | |
QoS | Qos policy, Priority mapping, Traffic policing, Priority marking | |
VPN | Gre, L2TP, SSL VPN, IPsec VPN | |
IPv4 | ICMP/ACL/DHCP/TFTP/FTP/DNS | |
IPv6 | ICMP/ACL/DHCP/TFTP/FTP/DNS | |
Service assurance | Remote AP | After the tunnel between AC and AP is disconnected, AP continues to provide services to clients |
Doctor AP* | Fit AP mode support Doctor AP, simulates wireless client access process, diagnoses network issues, and improves network experience | |
Spectrum Analysis | Displaying the non-Wi-Fi interference sources through the H3C intelligent O&M platform | |
Only 802.11ax accessing | Only wireless clients that support 802.11ax can access the network, improving the network experience | |
Intelligent bandwidth guarantee | Ensure that different wireless services can obtain the lowest guaranteed bandwidth during network congestion | |
Port Aggregation | Multiple uplink ports for port aggregation to increase uplink bandwidth (only applicable to multiple uplink port APs) | |
Broadcast suppression | Discard ARP request and response packets from wireless clients during the suppression cycle | |
Prohibit weak signal client access | AP prohibits wireless clients with signals below the threshold from accessing, to avoid low-signal clients occupying more channel resources | |
Terminal roaming navigation | Adjust the AP transmission power to create more roaming conditions and improve the roaming experience | |
Actively triggering client relinking | AP actively sends messages to allow wireless clients to reconnect or roam actively | |
Adjust channel reuse between APs | RF chip adjusts the environmental noise perceived by the device to improve AP transmission efficiency | |
Fast forwarding function for client data services | Intelligent optimization of RF chip business processing can improve performance | |
Shorten client sleep time | RF chips shorten client sleep time and improve transmission efficiency through beacons | |
Software version anomaly repairing | After the software version is damaged due to abnormal circumstances, AP can automatically download the available software version through AC or cloud platform | |
Service quality | WMM | Wi-Fi Multimedia, Improve the service quality of audio and video transmission in wireless networks through EDCA scheduling algorithm |
QoS | Priority Class, by marking TOS/DSCP fields to distinguish data streams with different priorities, high priority data streams can be quickly distributed, thereby improving service quality Priority Class, support mapping from wireless priority to wired priority QoS policy mapping, support QoS policy mapping based on SSID and VLAN Layer 2 to Layer 4 packet filtering and traffic classification CAR (Committed Access Rate), by limiting data transmission rate, avoid network congestion caused by traffic congestion | |
User bandwidth management | Allocate available bandwidth per STA Allocate total bandwidth for all STA shares based on SSID Dynamically adjust the available bandwidth of STA based on business | |
ATF | Air Time Fairness, by allocating an equal amount of RF usage time, reducing wireless channel congestion and improving the efficiency and fairness of wireless networks | |
CAC | Call Admission Control, improve the quality of service for wireless clients that have already received high priority by limiting the number of wireless clients that have received high priority Support number of users/Channel utilization based | |
Application Identification | SQA (Software Quality Assurance), identifies audio and video services based on SIP protocol, prioritizing service quality assurance UCC (Unified Communications and Collaboration), increase the processing priority of audio and video services and prioritize ensuring service quality | |
High availability (HA) | Dual-link backup | 1:1 Master/backup To ensure high availability, deploy two ACs in a master-backup configuration: assign a higher AP connection priority to the master AC for APs, and enable tunnel preemption on the master AC. This deployment enables automatic AC failover and service switchback, making it suitable for scenarios that require a certain level of service availability but not extreme zero-interruption |
N+1 backup | N+1 backup is an extension of master/backup. It requires two to four ACs | |
Remote AP | The Remote AP feature enables the AP to continue providing services for clients after the tunnel between the AP and AC is disconnected | |
Management and maintenance | GUI | Support WEB management via HTTP/HTTPS |
RESTful | Support RESTful via HTTP/HTTPS | |
Netconf | Support Netconf provides programmable and scalable methods to manage network devices | |
MIB | RFC 1213 MlB-II Stands for Management Information Base RFC 3418 Management Information Base (MlB) for the Simple Network Management Protocol (SNMP) H3C private MIBs | |
Remote debugging | SSH V2.0/Telnet/FTP/TFTP | |
Local debugging | Support CLI | |
Information maintenance | Support Syslog | |
Secure boot | Supporting firmware protection, ensuring the integrity of the subsequent running program codes through the trusted Boot-Loader, forming a trusted device boot chain | |
IEEE standards | 802.11 | IEEE 802.11a/b/g/n/ac/ac Wave 2/ax/be IEEE 802.11d/e/h/i/w/u IEEE 802.11k/v/r |
Wi-Fi certified | Wi-Fi Alliance:Wi-Fi 7, Wi-Fi 6E, Wi-Fi 6, WMM, WPA, WPA2 and WPA3 – Enterprise, Personal (SAE), Enhanced Open (OWE) | |
The features marked with * can be implemented through software upgrade.
The options may be different depending on the specific requirement. Restrictions and limitations may apply. To confirm availability, refer to related user guide or visit H3C website https://www.h3c.com/en/home/htb/.
Product code | Description |
EWP-WX2812X-PWR | H3C WX2812X-PWR Access Controller |
SFP-GE-LX-SM1310-D | 1000BASE-LX SFP Transceiver, Single Mode (1310nm, 10km, LC) |
SFP-GE-SX-MM850-D | 1000BASE-SX SFP Transceiver, Multi-Mode (850nm, 550m, LC) |