Cisco AIR-OEAP600-x-K9 Full English Description
Listing Title
Cisco Aironet OEAP600-x-K9 OfficeExtend Dual-Band 802.11n Lightweight Access Point, Global Single-SKU Remote Teleworker AP with Integrated Omnidirectional Antennas, Simultaneous 2.4GHz + 5GHz Radios, DTLS Encrypted CAPWAP Tunnel to Corporate WLAN Controllers, Split-Tunnel Traffic Segmentation, Isolated Personal Home SSID & Corporate Remote-LAN Wired Ports, 5 Gigabit Ethernet Ports, NAT Traversal Support, QoS Voice Prioritization, Designed for Home Remote Workers, Remote Satellite Offices, Hotel Temporary Workspaces, Distributed Enterprise Telework Deployments; suffix x = regional RF regulatory domain code
Full Commercial Product Description
The Cisco Aironet OEAP600-x-K9 (600 Series OfficeExtend Access Point) is a purpose-built lightweight wireless access point engineered exclusively for enterprise remote teleworker deployments, securely extending corporate wireless and wired network services to employee residences, remote satellite offices and transient hotel work locations over standard residential broadband internet connections. The suffixxdenotes country-specific RF regulatory domain identifiers (A/E/K/R etc.) to satisfy global radio emission compliance standards; the primary hardware model is AIR-OEAP602I-x-K9, the integrated internal antenna variant of the OEAP600 platform.
This AP operates under Cisco’s unified CAPWAP lightweight architecture and maintains a permanent DTLS encrypted tunnel back to centralized corporate wireless LAN controllers (WLCs) such as 2504, 5508 and WiSM-2 controller hardware, running minimum firmware release 7.0.116.0Cisco. All corporate wireless policy, SSID configuration, RF parameters and security rules are pushed dynamically from the WLC to each remote OEAP unit, delivering an identical enterprise mobility experience for remote staff as onsite office workers.
A core design differentiator is native dual-traffic segmentation, fully separating corporate business traffic from personal household internet traffic to eliminate security exposure of corporate assets:
-
Corporate Segmented Domain: Dedicated corporate WLAN SSIDs and isolated Remote-LAN wired port (Port 4) tunnel all data back to the corporate datacenter via encrypted CAPWAP tunnel, supporting corporate laptops, IP desk phones, printers and business IoT devices
-
Personal Home Domain: Independent personal SSIDs and local wired ports (Ports 1–3) route internet traffic directly through the home broadband gateway without traversing the corporate tunnel, isolating employee personal smart home devices, gaming consoles and consumer electronics from enterprise network infrastructureCisco.
The OEAP600 fully supports NAT traversal, enabling deployment behind residential DSL/cable routers and home gateways performing network address translation, a standard characteristic of consumer broadband networks. Split-tunnel routing capabilities grant IT administrators granular control over traffic forwarding: corporate intranet traffic tunnels back to headquarters, while public internet traffic breaks out locally at the remote site to conserve corporate WAN bandwidth. Voice QoS prioritization ensures low-latency transmission for remote worker VoIP calls and unified communications workloadsCisco.
The compact desktop/wall-mountable form factor is optimized for home office environments, equipped with factory-integrated omnidirectional internal antennas, eliminating external RF cabling and antenna hardware for simplified end-user installation. The platform doesnotsupport PoE operation and relies on a dedicated 12V DC external power adapter for power deliveryCisco.
Dual Concurrent Radio Architecture
The OEAP600 series features simultaneous dual-band 802.11n MIMO radios, fully backward compatible with legacy 802.11a/b/g client devices, and intentionally excludes DFS radar channels to simplify remote site RF operationCisco.
-
2.4 GHz Industrial/Home Radio: 2×2 MIMO, two spatial streams, fixed 20MHz channel bandwidth, integrated 3.5 dBi omnidirectional antenna. Optimized for legacy IoT sensors, handheld scanners and low-bandwidth personal consumer devices; maximum single-band PHY throughput 150 Mbps.
-
5 GHz High-Speed Corporate Radio: 2×2 MIMO, two spatial streams, supports 20/40MHz channel widths, integrated 4.0 dBi omnidirectional antenna. Dedicated to corporate business laptops, video conferencing and high-throughput enterprise workloads to avoid 2.4GHz household device interference; maximum single-band PHY throughput 150 Mbps.
Total aggregate dual-band Wi-Fi PHY throughput reaches300 Mbps.
Integrated Internal Antenna Hardware
No external N-type or RP-TNC antenna ports are provided; the OEAP600-x-K9 uses factory-sealed built-in omnidirectional antenna array fully enclosed within the compact plastic chassis:
-
2.4GHz antenna gain: 3.5 dBi, full 360° horizontal coverage
-
5GHz antenna gain: 4.0 dBi, full 360° horizontal coverage
Simplified desktop or wall mounting eliminates complex RF cable routing for non-technical remote employeesCisco.
Physical Wired Interface Specifications
-
1 × WAN Gigabit RJ45 Port: Connects to residential broadband modem or home router to establish internet uplink for CAPWAP tunnel origination
-
4 × Local Gigabit RJ45 Ports:
-
Ports 1,2,3: Personal local LAN ports for employee personal wired devices, traffic routed locally to internet without corporate tunnel traversal
-
Port 4: Dedicated Corporate Remote-LAN wired port, all traffic encapsulated into DTLS CAPWAP tunnel to corporate network; supports dual Remote-LAN port functionality via controller CLI configuration for extended corporate wired device connectivityCisco
-
Sealed RS232 Console Port: Local CLI troubleshooting access with dust protective cap
-
Status LED Array: Multi-color visual indicators for boot status, CAPWAP controller association state, radio operational status, Ethernet port link activity and fault alarms
Core Software & Enterprise Feature Set
-
Permanent DTLS Encrypted CAPWAP Tunnel: Mandatory, non-disablable DTLS tunnel between OEAP and corporate WLC; all corporate wireless/wired traffic encrypted end-to-end to prevent interception over public internet linksCisco.
-
NAT Traversal Compatibility: Operates seamlessly behind consumer home routers performing NAT; single or multiple OEAP units can be deployed behind a single residential NAT gateway.
-
Split-Tunnel Traffic Routing: IT administrators define split-tunnel routing rules on the WLC: corporate intranet subnets tunnel back to headquarters, all other internet traffic breaks out locally at the remote worker’s broadband connection to reduce corporate WAN load. Split-tunnel printing support enables local printing without tunnel backhaul.
-
Isolated Dual SSID Domains:
-
Corporate SSIDs: Enterprise authenticated wireless networks pushed from WLC, tunnel all client traffic to corporate datacenter
-
Personal SSID: Locally managed wireless network for employee personal devices, fully isolated from corporate network assets
-
Voice QoS Prioritization: Classifies VoIP voice packets as highest-priority traffic to guarantee low-latency, jitter-free unified communications for remote workers using corporate IP phones.
-
RF Management Flexibility: RF channel and transmit power control supports two operating modes: WLC custom configured mode (centralized RF orchestration) or AP-controlled autonomous RF mode for simplified remote site operation; DFS radar channels are unsupported on this platform to avoid remote RF regulatory conflictsCisco.
-
Remote LAN Wired Port Segmentation: Port 4 acts as dedicated corporate wired access for IP phones, corporate printers and wired business devices, isolated from personal local wired ports. Dual Remote-LAN port feature available via controller CLI for additional corporate wired device support.
-
Enterprise Wireless Security Suite:
-
Encryption Standards: WPA2-Enterprise, WPA2-PSK, WPA, AES hardware acceleration for all wireless client traffic
-
Enterprise Authentication: IEEE 802.1X AAA authentication with full EAP suite (EAP-TLS, PEAP, EAP-FAST), integrated with corporate ISE identity management platforms
-
VLAN Segmentation: Granular SSID-to-VLAN mapping to fully isolate corporate business traffic from personal household network traffic
-
Rogue AP Detection & Air Marshal WIDS/WIPS: Continuous RF spectrum scanning to detect unauthorized rogue wireless transmitters in home/remote site environments, automatic containment of rogue signals
-
Wireless Client Isolation: Prevents direct peer-to-peer communication between wireless endpoints to reduce network attack surface
Power Specifications
-
Power Input: Dedicated external 12V DC power adapter (PoE is not supported on the OEAP600 series)
-
Typical Full-Load Power Consumption: 12–15W under simultaneous dual-radio active operation with all wired ports populated
-
Power supply included as standard with each OEAP600-x-K9 unit for plug-and-play home office deployment
Physical & Environmental Specifications
-
Dimensions (without mounting bracket): 195.3 mm × 176.3 mm × 39.65 mm (7.75 × 7 × 1.6 inches)
-
Dimensions (with wall mounting bracket): 206.15 mm × 176.3 mm × 67 mm (8.1 × 7 × 2.7 inches)
-
Unit Weight (without bracket): 0.452 kg (0.99 lbs); with mounting bracket: 0.653 kg (1.44 lbs)
-
Mounting Options: Desktop placement with integrated rubber anti-slip feet, vertical wall mounting via supplied bracket
-
Operating Temperature Range: 0°C ~ +40°C (indoor home/office environment only; not rated for outdoor deployment)
-
Storage Temperature Range: -40°C ~ +70°C
-
Operating Humidity: 10% – 90% non-condensing
-
Regulatory RF Certifications: Global single-SKU compliance with FCC Part 15, RSS-210 Canada, ETSI EN 300328 / EN 301893 Europe, ARIB Japan, AS/NZS Australia/New Zealand EMI Class B household device certificationCisco
-
System Memory & Storage: Dedicated wireless processing SoC, 128MB NAND flash storage for CAPWAP lightweight firmware and persistent local configuration
Supported Controller Platforms & Operation Modes
-
Supported Wireless LAN Controllers: Cisco 2504, 5508 WLC hardware, WiSM-2 blade controllers; minimum controller IOS-XE firmware release 7.0.116.0
-
Core Operation Mode: CAPWAP Lightweight OfficeExtend Mode (factory default), all corporate wireless policies centrally managed from corporate WLC; standalone autonomous AP mode is not supported on this platform
-
Diagnostic Modes: Local web-based management GUI for end-user basic network status viewing, controller-side SNMPv2c/v3 monitoring, centralized Syslog event logging for corporate audit trails
Key Specification Bullet Points
-
Model: AIR-OEAP600-x-K9 (Cisco Aironet 600 Series OfficeExtend Remote Teleworker Lightweight Access Point; suffix x = regional RF regulatory domain code, primary hardware variant AIR-OEAP602I-x-K9)
-
Wi-Fi Standard: IEEE 802.11a/b/g/n simultaneous dual-band 2.4GHz + 5GHz, 2×2 MIMO per radio
-
Total Aggregate PHY Throughput: Up to 300 Mbps (150 Mbps per radio)
-
Antenna Design: Integrated factory omnidirectional internal antennas, no external RF ports; 3.5 dBi (2.4GHz), 4.0 dBi (5GHz) gain
-
Wired Interfaces: 1× Gigabit WAN port, 4× Gigabit local LAN ports (Ports 1–3 personal LAN, Port 4 dedicated Corporate Remote-LAN port), RS232 sealed console port
-
Power: 12V DC external power adapter (PoE unsupported)
-
Core Unique Capabilities: Permanent mandatory DTLS encrypted CAPWAP tunnel to corporate WLC, NAT traversal support, split-tunnel traffic routing, fully isolated corporate/personal SSID and wired port segmentation, voice VoIP QoS prioritization
-
Wireless Security: WPA2 AES encryption, 802.1X EAP enterprise authentication, SSID VLAN segmentation, Air Marshal rogue AP detection and containment, wireless client isolation
-
Deployment Scenarios: Enterprise remote employee home offices, distributed remote satellite branch offices, transient hotel temporary workspaces, distributed telework enterprise networks
-
Mounting: Desktop rubber foot placement, vertical wall mounting via supplied bracket; indoor-only operation, no outdoor environmental rating
-
Management: Centralized CAPWAP WLC policy orchestration, local end-user web GUI, SNMP monitoring, centralized Syslog logging
Model Quick Reference
-
AIR-OEAP602I-x-K9: Primary mass-production integrated internal antenna model of the OEAP600 OfficeExtend series
-
Suffix x: Regional RF regulatory domain letter code (A/E/K/R etc.) for country-specific radio emission compliance
-
Platform Distinction vs Standard Indoor Lightweight APs: OEAP600 is purpose-built exclusively for remote teleworker deployments, featuring native corporate/personal traffic segmentation, NAT traversal and permanent DTLS CAPWAP tunneling; standard indoor lightweight APs lack dedicated OfficeExtend remote worker traffic isolation functionality
-
Discontinuation Note: Cisco Aironet 600 Series OEAP hardware reached end-of-sale effective October 7, 2020, replaced by newer OfficeExtend AP generations for modern remote work deployments
|
