The Ultimate WLAN Management and Security Solution for Large and Distributed Deployments Centralized WLAN management and auto provisioning Manages up to 0 APs with granular access control Advanced RF management for optimized Wi-Fi performance Secured wireless edge with IDP, anti-virus and firewall Flexible traffic forwarding with tunnel and distributed modes Comprehensive guest network management features User-centric management solution for BYOD trend The ZyXEL is designed to provide quality Wi-Fi to a large and growing amount of mobile devices, make large WLAN deployments easily manageable, and solve the security issues that come with the trend of Bring Your Own Device (BYOD). This controller works with ZyXEL Unified, Unified Pro and Series s to form a high-performance and versatile controller-based WLAN solution that provides centralized management of up to 0 APs. Featuring advanced RF management functions, flexible tunnel and distributed traffic forwarding modes, and robust security for the wireless edge, the is truly the ultimate WLAN management and security solution for large and distributed deployments in enterprises, campuses and hotel chains. Benefits Manage up to 0 APs with ease The ZyXEL is designed to work with ZyXEL Unified, Unified Pro and Series s to form a robust controller-based WLAN solution. This solution offers the convenience of centralized management of up to 0 APs, as well as auto AP provisioning over both LAN and WAN connections. After being installed and powered on, the APs automatically look for the and establish secured connections. Utilizing the protocol, connections can be established between the controller and APs without needing to change the existing LAN infrastructure, which enables users to expand WLAN deployments with ease. Licenses are also available to increase the number of manageable APs to up to 0, allowing enterprises, small- and medium-sized businesses, educational institutions, or hotels to scale up as Wi-Fi demand grows without needing to upgrade equipment. High-quality Wi-Fi experience The ZyXEL is equipped with a range of advanced RF management functions that can help administrators provide optimized Wi-Fi quality and performance with little effort. Its auto channel selection function can provide continuous and automated RF optimization, which relieves administrators from the need to worry about channel settings and optimization diagnostics after deployment. AP load-balancing parameters can also be set to distribute traffic and the number of served clients among multiple APs so as to provide better Wi-Fi quality for every user. The provided diagnostic functionality, IT administrators can detect and contain rogue APs, capture wireless packets to diagnose WLAN problems, and provide trouble-shooting services from remote locations.
Secured wireless edge blocks threats from mobile devices The ZyXEL and APs can help enterprises and businesses address the wireless security issues that arise with BYOD. They can guard company networks and resources against incoming threats from mobile Internet devices with industry-standard WPA/WPAEnterprise authentication and a variety of Extensible Authentication Protocol (EAP) frameworks. The built-in firewall of the can perform Stateful Packet Inspection (SPI) of data streams to reject illegitimate packets coming from mobile Internet devices. With optional anti-virus and Intrusion Detection and Prevention (IDP) licenses, the can provide the most robust protection for the wireless network edge. Flexible traffic forwarding with tunnel and distributed modes The ZyXEL features both tunnel and distributed traffic forwarding modes, providing IT administrators the flexibility to tunnel wireless traffic between controller and AP, or bridge traffic among multiple APs locally. Local bridge mode: When there is no need to direct wireless traffic to the controller, IT administrators can distribute wireless traffic among multiple APs locally to provide higher WLAN efficiency and low latency. Tunnel mode: The supports tunnel mode with Unified Pro and Series APs, which allows IT administrators to easily scale up the wireless network, or extend it to remote locations, without needing to change the existing network infrastructure. The also provides superior wireless security in tunnel mode. All traffic tunneled to the controller can be scanned and decontaminated with anti-virus and IDP engines (licenses available). Easy guest network management The ZyXEL is the ideal solution for hotels, enterprises or other organizations that need to provide Internet services to large amounts of guests. The built-in account generator can also dynamically create user accounts for guests to easily access the Internet via the built-in or external Web authentication portal. Effective access management for the BYOD trend The ZyXEL can help businesses and enterprises meet the challenges of BYOD. As more and more people bring their own devices to work, the workplace has gradually changed from one person, one device to one person, multiple devices. The provides MAC authentication to add more network access convenience for mobile device users. Capable of authenticating with AD, LDAP or a RADIUS server, the can turn the management polices from device-centric to user-centric to prepare businesses and enterprises for future trends. IT administrators can set access and data-forwarding policies according to group and user, allowing the same person to get the same access privilege, whether it is on a laptop computer, tablet, or smartphone. Key Application Switch Wireless LAN Controller Internet Built-in firewall Clean Core Clean Wireless Access Clean Remote Wireless Access Anti-virus and intrusion detection and prevention Manages up to 0 APs with granular access control Remote site auto AP provisioning
Specifications Model Product name Port Density 0/00/000 Mbps LAN ports (8 with expansion slot)* Performance Bridge throughput (Gbps).7 throughput (Gbps). AV & IDP throughput (Mbps) 700 Tunnel throughput (Gbps) Max. managed APs 0 Tunneled APs 6** WLAN Features WMM (Wi-Fi certified) WEP WPA/WPA-PSK WPA (Wi-Fi certified) WPA/WPA-Enterprise Security Features IEEE 80.X Web authentication MAC filtering RADIUS authentication RADIUS accounting Microsoft AD authentication LDAP authentication Embedded RADIUS server Rogue AP detection Rogue AP containment Intrusion detection & prevention Anti-virus VLANs DHCP client DHCP relay, server NAT Static routing Access Control Policy setting per user Policy setting per SSID Customizable web login portal QoS WMM WMM power saving DiffServ marking AP load balancing Application patrol * -port RJ-5 GbE and -port SFP GbE LAN expansion modules available ** Suggested value for quality and performance
Secured wireless edge blocks threats from mobile devices The ZyXEL and APs can help enterprises and businesses address the wireless security issues that arise with BYOD. They can guard company networks and resources against incoming threats from mobile Internet devices with industry-standard WPA/WPAEnterprise authentication and a variety of Extensible Authentication Protocol (EAP) frameworks. The built-in firewall of the can perform Stateful Packet Inspection (SPI) of data streams to reject illegitimate packets coming from mobile Internet devices. With optional anti-virus and Intrusion Detection and Prevention (IDP) licenses, the can provide the most robust protection for the wireless network edge. Specifications Model Product name Flexible traffic forwarding with tunnel and distributed modes The ZyXEL features both tunnel and distributed traffic forwarding modes, providing IT administrators the flexibility to tunnel wireless traffic between controller and AP, or bridge traffic among multiple APs locally. Model Management Features CLI with SSH Web UI with SSL SNMP Multi-level administration roles Administrator authentication via RADIUS server Port Density AP number (default/max.) 8/0 Local bridge mode: When there is no need to direct wireless traffic to the controller, IT administrators can distribute wireless traffic among multiple APs locally to provide higher WLAN efficiency and low latency. 0/00/000 Mbps LAN ports Dynamic channel selection Tunnel mode: The supports tunnel mode with Unified Pro and Series APs, which allows IT administrators to easily scale up the wireless network, or extend it to remote locations, without needing to change the existing network infrastructure. The also provides superior wireless security in tunnel mode. All traffic tunneled to the controller can be scanned and decontaminated with anti-virus and IDP engines (licenses available). Bridge throughput (Gbps).7 Device HA throughput (Gbps). System diagnostic tool AV & IDP throughput (Mbps) 700 Standard Compliance Easy guest network management Effective access management for the BYOD trend The ZyXEL can help businesses and enterprises meet the challenges of BYOD. As more and more people bring their own devices to work, the workplace has gradually changed from one person, one device to one person, multiple devices. The provides MAC authentication to add more network access convenience for mobile device users. Capable of authenticating with AD, LDAP or a RADIUS server, the can turn the management polices from device-centric to user-centric to prepare businesses and enterprises for future trends. IT administrators can set access and data-forwarding policies according to group and user, allowing the same person to get the same access privilege, whether it is on a laptop computer, tablet, or smartphone. Key Application Switch Wireless LAN Controller Internet Clean Remote Wireless Access Ethernet 0 Certification 6** WLAN Features Anti-virus and intrusion detection and prevention Manages up to 0 APs with granular access control Remote site auto AP provisioning IEEE 80., IEEE 80.u, IEEE 80.ab, IEEE 80.z, IEEE 80.az FCC Part 5B, EN 0 89-7 V..: 08-00 (Class B) EN 0 89- V.5.: -00 (Class B) EMC WMM (Wi-Fi certified) Safety WEP Power Requirement WPA/WPA-PSK Power supply WPA (Wi-Fi certified) Physical Specifications WPA/WPA-Enterprise Security Features EN 60950- (Class B), EN 6060--: 00 (Medical Electrical Equipment)(Class B) 00-0 V AC, 50/60 Hz Dimensions (WxDxH)(mm/in.) MAC filtering Environmental Specifications RADIUS authentication Operating environment Temperature RADIUS accounting Microsoft AD authentication Temperature LDAP authentication Storage environment Embedded RADIUS server MTBF (hr) Rogue AP detection Rogue AP containment Intrusion detection & prevention Anti-virus VLANs DHCP client DHCP relay, server NAT Static routing Policy setting per user Policy setting per SSID Customizable web login portal WMM WMM power saving DiffServ marking AP load balancing Application patrol /6.6 Dimensions (WxDxH)(mm/in.) Web authentication Packing x 50 x /6.96 x 0.7 x.7 Weight (kg/lb.) IEEE 80.X QoS Clean Wireless Access Max. managed APs Access Control Clean Core Built-in firewall Others Tunnel throughput (Gbps) Tunneled APs The ZyXEL is the ideal solution for hotels, enterprises or other organizations that need to provide Internet services to large amounts of guests. The built-in account generator can also dynamically create user accounts for guests to easily access the Internet via the built-in or external Web authentication portal. (8 with expansion slot)* Performance 6 x 56 x 8/5.5 x.09 x 7.0 Weight (kg/lb.) /0.86 0 C to 0 C/ F to 0 F Humidity 0% to 90% (non-condensing) -0 C to 70 C/- F to 58 F Humidity 0% to 90% (non-condensing) 66 Compatibility List NWA000-N Series NWA5000 Series NWA50 Series Unified Pro Unified NWA60-N NWA560-N NWA550-N NWA5550-N NWA5-NI NWA5-N NWA5-NI Auto provisioning over WAN & LAN Auto channel selection AP load-balancing Monitoring mode No Detection and containment Detection and containment Detection (Standalone mode) Series Models Functions Rogue AP Packet capture Data forwarding No Local bridge and tunnel mode Local bridge and tunnel mode Local bridge Note: The does not support NWA000-N Series APs by default. Purchase of a AP Scalability license is required to manage NWA000-N Series APs. * -port RJ-5 GbE and -port SFP GbE LAN expansion modules available ** Suggested value for quality and performance
Ordering Information Licenses AP Scalability Description The AP License increases the number of APs that can be managed by the WLAN controller. The maximum number of APs supported is 0. Intrusion Detection and Prevention (IDP) The Intrusion Detection and Prevention service is an easy-to-manage, signature-based feature that mitigates threats from ever-evolving attacks and exploits. Anti-Virus (AV) The Anti-Virus service is an easy-to-manage, signature-based feature that stops virus/ spyware from entering your network. LAN modules WEM0 WEM0F Photo Description -port RJ-5 GbE LAN Module -port SFP GbE LAN Module Other Rack mount kit for the Physical Specifications Dimensions (WxDxH)(mm/in.) 559 x 9.6 x 5./ x 0.8 x.9 Weight (kg/lb.).5/5.5 Dimensions (WxDxH)(mm/in.) 77 x 76 x 7/8. x.8 x 6.8 Packing Weight (kg/lb.).6/.9 5
F o r m o r e p r o d u c t i n f o r m a t i o n, v i s i t u s o n t h e w e b a t w w w. Z y X E L. c o m Copyright 0 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice. 5-00-007009 06/