Wireless Mobility for Small Business More Than Just WiFi - ZyXEL

Wireless Mobility for Small Business 

More Than Just WiFi 

ZyXEL WLAN 

Controller 

Application Guide 

• Robust, Scalable WiFi Solutions 

• Reliable, Secure Internet Connectivity 

• Complete Peace of Mind Providing Investment Protection

Table of Contents 

Editorial 4 

Scenarios 

Initial Need for a High-speed Wireless Infrastructure 6 

How to Ensure that the Users in the Business Get the Right Level of Connectivity? 8 

How to Manage the Complexity of Different User Access Rights to the WLAN Network? 10 

How to Protect the Network from the Threat of Mobile Users without 

Compromising Connectivity? 11 

How to Securely Facilitate and Manage the Guest Access Connection? 12 

How to Meet the Expectation of Users Connectivity Throughput? 14 

How to Prevent Unsecure WLAN Networks Being Setup within the Business? 15 

How to Extend the WLAN Infra to Branch Offices in a Growing Business? 16 

ZyXEL Managed WLAN in Hospitality 18 

ZyXEL Managed WLAN in Health-care 20 

ZyXEL Managed WLAN in Education 22 

Products at a Glance 24 

3

4 

Editorial 

Dear Reseller, 

Wireless connectivity has been many people’s first choice in 

new or extended business networks and the ratification of 

the IEEE 802.11n standard is another boost to the massive 

growth of WLAN deployments. Through the introduction 

of the latest technology ZyXEL is able to offer a range 

of solutions with the new 802.11n models available in 

standalone, managed AP, Hybrid controller and Controller/ 

Thin AP. The introduction of the 802.11n technology enables 

businesses to adapt and grow its wireless infrastructure to 

enhance performance, improve connectivity and increase 

productivity. The new technology enables support of the 

latest innovative WiFi devices such as PDA’s, net books, 

tablets and mobile devices to connect and gain access either 

to the business network or be directed securely straight to 

the Internet as a guest user. One thing that is guaranteed 

is that the new 802.11n technology is the perfect solution 

to match the demands of the latest bandwidth hungry 

applications – truly a technology to match business growth. 

As a technology 802.11n has been around for a few years 

however the deployments have mostly been restricted to 

the casual user or home user while the standard has been 

ratified and approved. Once the 802.11n standard had 

been approved in 2010 the technology has achieved good 

growth in the commercial environment. The popularity 

of 802.11n is attracting more businesses to wireless LAN 

equipment and helping them cope with the various 

challenges of increasing complicated and bandwidth 

hungry applications. The obvious benefits of IEEE 802.11n 

are in the improved throughput and coverage over the more 

widespread 802.11g wireless technology. The IEEE 802.11n 

technology promises a theoretical maximum data rate of up 

to 300 Mbit/s and a greater coverage range than its 802.11g 

predecessor, however, both technologies can co-exist in 

the business to enable connectivity for existing mobile 

devices. Beyond the enhanced throughput and coverage, 

IEEE 802.11n has the following benefits: 

– Eliminate bandwidth contention 

– More users and more floor space 

– Improved support in the future 

As part of the introduction of the next generation of N wireless 

Access points ZyXEL has introduced a range of models to 

compliment business size and complexity. The NWA1100-N, 

perfect for the small business environment, the NWA3160-N, 

NWA3560-N and NWA3550-N designed for larger SMB 

installations and supporting the standalone, managed and 

the ZyXEL hybrid AP Controller functionality. For hospitality 

applications ZyXEL introduced the NWA1300-NJ which has 

been designed specifically to fit into a wall socket to offer 

localised N WLAN range for hotel rooms or similar locations 

in hospitality or business. For businesses that require the 

AP to blend seamlessly into the environment ZyXEL has

designed the NWA1121-NI smoke detector style AP. For 

the larger SMB and Campus business the ZyXEL NXC5200 

Wireless LAN Controller solution is designed to deliver high 

performance 11n wireless to provide seamless mobility in 

medium to large campus and secure distributed enterprise 

environments. The NXC5200 integrates ZyXEL industryleading 

ZyWALL Firewall features, such as stateful packet 

inspection, to monitor data incoming from mobile wireless 

users. In addition, by adopting optional license-based 

Intrusion Detection/Prevention and anti-virus functions, 

the NXC5200 can also act as a gatekeeper to the wireless 

edge. The Controller is a powerful secure WLAN device that 

acts as the Wireless platform to support applications such 

as RTLS (Real Time Location Services) where businesses can 

use WiFi tags as Personnel badges or Asset tags so that key 

personnel and Expensive Assets can be tracked throughout 

the building. 

We hope that this guide will help you to find the right 

controller based WLAN mobility solution that is suitable 

to the business needs. The guide shows a number of ways 

that such solutions can be deployed in a variety of business 

scenarios, providing you with detailed descriptions and a 

diagram for each situation. Please also use the ZyXEL web 

site and refer to the new WLAN Product finder to help you 

pick the right product to match your requirements. 

Best regards, 

Jon Pearce 

Head of ESBU Market Development 

jon.pearce@zyxel.co.uk 

5

6 

Initial Need for a High-speed 

Wireless Infrastructure 

Scenario briefing 

In today’s life, wireless connectivity in small to medium 

businesses, schools or hotels is a must-have to ensure 

staff’s productivity and to provide a satisfiying customer 

experience. 3G networks cannot always cover the required 

bandwidth so a WiFi enabled infrastructure is the perfect 

deployment choice. In an ever increasingly complicated 

environment with many more devices such as smart 

phones, tablets and laptops requiring connection the WiFi 

infrastructure requires close control and management. 

When building a scalable WiFi network, the ZyXEL 3000-N 

Series AP offers the most flexible solution for growing 

business facing the challenge of managing the WiFi network 

without compromising the connectivity. The 3000-N 

AP Series includes the 300Mbps NWA3160-N, 600Mbps 

NWA3560-N and 600Mbps outdoor NWA3550-N access 

points and delivers scalable flexibility by offering three 

separate modes of operation: Standalone AP, Hybrid AP 

offering the management scale of up to 24 access points that 

can be managed by one controller AP in a 25 AP deployment 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

Redundancy 

Assignment 

NWA3160-N 

RESET 

POWER CONSOLE 

12VDC 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

802.11 a/b/g/n 

Business Access Point 

WDS 

WLAN 

ETHN 

PWR/SYS 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

NWA3560-N 

802.11 a/b/g/n 

Dual Radio Business Access Point 

1 Controller + 24 Managed APs 

WLAN Controller 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

and managed AP for larger scale deployments offered with 

the Enterprise Network Centre (ENC) for management. 

With the ZyXEL NWA3000-N Series solution, users can enjoy 

a centralised WLAN management network, which provides 

a user-friendly graphical interface for IT administrators. It 

reduces the multiple configuration hassle and groups all of 

the managed devices into a single management console for 

monitoring. 

The unique feature of the ZyXEL NWA3000-N access points 

in providing 3 functions enable IT administrators complete 

flexibly to define the individual AP role according to the 

network need and complexity. Moreover, as the network 

expands or as the business increases in scale and location 

the NWA3000-N Series can be managed by ZyXEL’s ENC 

management platform to enlarge the scalability of additonal 

access points for in the future. The ZyXEL NWA3000-N Series 

offers complete peace of mind by providing extensive 

investment protection for the business, while offering their 

customers a trusted, high speed, connectivity solution. 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

RESET 

POWER CONSOLE 

12VDC 

RESET 

POWER CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

WDS 

WLAN 

ETHN 

PWR/SYS 

NWA3550-N 

802.11 a/b/g/n 

Dual-Radio Outdoor 


Scenario 1

Simplified indoor, outdoor ENC 

Internet 

Feature Highlights 

ZyWALL USG 100 

Unified Security 

Gateway 

N4100 and SP300E 

Hotspot Service Gateway 

and Service Gateway Printer 

for authentication 

3-in-1 access point acting as stand-alone AP, controller 

AP and managed AP 

Consistent feature set and functionality across the whole 

range 

Full scalability from standalone to Hybrid to managed AP 

Seamless integration with the ZyXEL ENC management 

platform 

Covers indoor single and dual radio access points as well 

as outdoor appliance 

Centralised hybrid AP management for up to 24 

additional access points 

GS2200-24P 

GbE L2 PoE Switch 

NWA3160-N 

802.11a/b/g/n 


PDA with WLAN 

NWA3560-N 

802.11a/b/g/n 

Dual Radio Business 

Access Point 

Benefits to your customers 

NWA3550-N 

802.11a/b/g/n 

Dual-Radio Outdoor 


Laptop Laptop 

Enjoy high speed 11n high bandwidth and seamless 

application connectivity 

Adaptive and scalable deployment to match the 

business growth potential 

Simplified and consistent management features across 

the range 

Investment protection of a solution that can grow 

7

8 

How to Ensure that the Users 

in the Business Get the Right 

Level of Connectivity? 


Before deploying a wireless LAN connectivity solution in 

a medium sized business it is critical that a site-survey is 

carried out to decide the location and quantity of access 

points to be installed. To enable resellers and end users the 

assurance of the correct deployment ZyXEL has entered 

in partnership with Ekahau a leading global vendor in the 

field of WLAN site survey tools and application software. The 

ZyXEL NWA range of wireless AP’s are incorporated within 

Ekahau’s “Site Survey” application software. The partnership 

ensures that the customer is given a guaranteed mobility 

solution. 

Once the site survey is completed the business can 

understand the quantity, type and location of the AP’s 

required. To ensure ubiquitous connectivity for a medium 

sized business it would be reasonable to expect a site survey 

to show the need for over 50 access points across the central 

office, a number of branch offices and for future sales offices 

and expansion. This poses a problem for the IT manager in 

how do they take care of the network when it comes to the 

configuration, monitoring and management of this amount 

of devices. Once the network scales beyond a certain size 

it would make sense for the IT manager to migrate the IT 

Scenario 2 

WLAN infrastructure from a managed AP scenario to a 

thin AP controller based scenario. This is where all of the 

intelligence is held within the controller and not within the 

AP’s. For the IT manager this means that they can configure 

all AP’s on the controller and have the information pushed 

to all secure connected AP’s in the network. To address 

smaller installations ZyXEL would recommend the 3000-N 

Series and use the hybrid controller feature to manage 

up to 24 additional AP’s. For the installations requiring 

more than 24 AP’s the customer should consider a fully 

secure managed controller. In this scenario introducing the 

NXC5200 Controller and 5000 Series AP range would deliver 

the peace of mind and management and implementation 

of a secure WLAN solution. The ZyXEL NXC5200 can support 

48 AP’s as standard and scales up to 240 access points per 

controller with flexible licensing for additional AP’s and 

various security applications as required, which proves full 

investment protection to the customer. 

In addition, ZyXEL’s NXC5200 is fully compliant with the 

CAPWAP (Control And Provisioning of Wireless Access 

Points) standard, which enables an IT manager or reseller to 

quickly deploy large scale WLAN connectivity with minimal 

effort and changes to the existing network infrastructure.

Multiple Layer Connectivity 

NXC5200 


Feature highlights 

No touch to the existing network. 

ZyXEL NXC5200 Controller 

– Placed anywhere on an IP Network 

– Tunnels traffic to and from controller 

– Manages user sessions and policies 

– Integrated firewall 

IP Network 

ZyXEL NWA5000 AP 

– Placed anywhere on an IP Network 

– Communicate to WLAN Switch via 

IP-based GRE 

Scalable solution from standalone to Hybrid controller to 

full controller 

Scalable centralised WLAN management for up to 240 

access points 

Ekahau Site Survey incorporated to ensure the correct 

deployment 

CAPWAP standard complaint to diminish the integration 

efforts to customer networks 

NWA5000 

Access Point 

NWA5000 

Access Point 

IP Network 

IP Network 

NWA5000 

Access Point 

Guest Notebook 

NWA5000 

Access Point 

NWA5000 

Access Point 

NWA5000 

Access Point 

Mobile Users 

– Connect to any Access Point 

– Roam between Access Points 

– IP address and session is maintained 


Employee Notebook 

Wi-Fi Phone 

Administrator Notebook / PDA 

VLAN 1 

VLAN 2 

VLAN 3 

Minimised changes to the existing network infrastructure 

Scalable AP management for investment protection 

Allianced with Ekahau to provide complete deployment 

solutions 

9

10 

How to Manage the Complexity 

of Different User Access Rights 

to the WLAN Network? 


Networks of today are incredibly complicated. The IT manager 

needs to manage several types of users within the company 

including senior managers, finance, mobile workers and 

general users which all have the need for different access 

rights to the company’s databases and network resources. 

To simplify authentication and administration it is important 

that the company has a solution which offers a seamless 

login and validation of users whether they connect via 

the WLAN infrastructure of Ethernet wired network. The 

employee or guest to the network need to be isolated and 

securely connected to the target resource. 

Staff 

Guest 

IP Phones, 

Specialzed 

Equipment 


Simplified user and group management 

Seamless authentication on Wired and Wireless 

SSID based group identity setting 

NWA 5000 Managed AP NXC5200 Controller 

AP Profil 1 

SSID: Staff 

AP Profil 2 

SSID: Guest 

AP Profil 3 

SSID: VoIP 

Flexible data forwarding including distributed and 

tunnel modes 

Finance 

Staff 

Engineer 

User Identity Check 

Policy Enforcement 

Within the ZyXEL NXC5200 Controller, it is possible to 

configure the individual or departmental users group access 

privilege in advance. These profiles can be setup differently 

per user or group and the parameters link to the WLAN SSIDs 

(Service Set Identifiers) defined in the AP’s. Key in deploying 

the different profiles is how the data is handled, within the 

NXC5200 each profile can be defined as to whether the data 

is pushed directly to the switch network without additional 

security. If the user profile such as guests on the network 

require additional security or application level inspection 

then the traffic flow can be defined to be checked within the 

controller itself prior to forwarding. The NXC5200 has an inbuilt 

mechanism to support both distributed and tunnelled 

data forwarding per SSID. 


AD/LDAP/ 

RADIUS Servers Data Center 

Scenario 3 

Internet 

Limit and manage access privilege for different group 

user in wireless connection 

Efficiently use the wireless connection without traffic 

bottlenecks

Scenario 4 

How to Protect the Network from 

the Threat of Mobile Users without 

Compromising Connectivity? 


Enabling mobility of guest and mobile users on the existing 

network requires a mindset change in the definition and 

design of the network. The company’s network is at a higher 

risk of security issues through mobile users as it allows 

connectivity over the network. To address this critical issue, 

the NXC5200 comes with advanced security features to 

perform as the gatekeeper of the wireless network. 

By default the ZyXEL NXC5200 incorporates an in-built 

firewall and can be configured to provide all connected 

Internet 


Block 

Firewall 

1 Build-in Firewall 2 Build-in Wireless Anti-Virus, 3 

Intrusion Detection and Prevention 

Embedded stateful inspection firewall as standard 

SSID based profiles for inspection or bypass 

Optional License-based Anti-virus and intrusion 

detection and protection 

Switch 

Clean Wired 

Access Network 

users with a stateful packet check to regulate and monitor 

all data incoming from mobile WLAN users. 

Additionally, by including the extra license-based Intrusion 

Detection/Prevention and anti-virus functions, the NXC5200 

blocks threats coming from mobile users from entering the 

core business network. The ZyXEL NXC5200 and NWA5000 

Series offers businesses more than just a WLAN connection 

controller but introduces unique security features to 

offer seamless authentication and connectivity without 

compromising the security of the network to address the IT 

managers concerns. 

Block 1 

NXC5200 


2 


NWA5160N 

Managed AP 

NWA5160N 

Managed AP 

Clean Wireless 

Access Network 

Easily define user types and groups to access the 

network resources 

Set up a secured wireless edge and prevent threats 

entering the core network 

Enable the customer to define the security protection 

level per SSID 

3 

Managed up to 240 APs with 

granular access control 

11

12 

How to Securely Facilitate and 

Manage the Guest Access 

Connection? 


The user’s experience today is all about connectivity. It is 

impossible for a company not to have guests in the shape 

of mobile employees or visitors accessing the business 

network and therefore it is important to provide an adequate 

connection for them to work effectively and connect to the 

required resources within the business and then to the 

larger Internet and cloud environment. The ZyXEL NXC 

controller is equipped with sophisticated authentication 

and user access control features to offer a secure isolated 

guest network solution without compromising the internal 

resources. 

From the moment that guest users enter the company’s 

network environment whether connecting via the WLAN or 

a wired connection, the NXC5200 provides an easy check-in 

application linked to a user friendly interface for reception, 

IT managers or departmental heads to easily create guest 

Scenario 5 

accounts, while collecting the correct user information for 

auditing. 

The NXC5200 not only handles the authentication and 

control of WLAN users, with the innovative integration 

between ZyXEL’s NXC5200 and switches, the guest 

authentication and their access rights can be unified 

regardless of a connection via wireless AP or wired fix ports. 

In effect the same secure login is used on both wired and 

wireless within the business so users and IT resources do not 

need to waste time continually managing and setting up 

temporary access. 

All the temporary guest connections can also be monitored 

and managed via the NXC5200 web user interface to reduce 

tracking and administrative efforts from IT managers. This is 

important in the countries who are legally required to collect 

and store user access to the Internet over their network.

Guest Access Connection 

Guest 

Account 

SSID: 

Guest 

PUBLIC AREA 

(Wireless Connection) 


Captive Portal 

Role 

Privilege 

Role 

Privilege 

Confi gure the data of 

GUEST VLAN to controller 

Jon Jon 

Dynamic guest account generator 

Unified guest access authentication via both wireless or 

wired connections 

Web-based guest user monitoring and management 

Simplified and distributed administration of accounts 


-> GUEST VLAN enabled 

Open the browser 

SSID: 

Guest 

LIBRARY 

(Ethernet Connection) 

Easy steps to create guest accounts and keep 

identification information 

Regulate the guest traffic and prevents them from 

harming the internal network 

Simplify and unify the authentication and rules to the 

guest users 

Effortless guest user activity tracking and management 

13

14 

How to Meet the Expectation 

of Users Connectivity 

Throughput? 


The age of mobility has arrived. In both the consumer 

and the business environment, mobile devices such as 

smartphones, tablets and laptops are used every day and 

require more and more continual Internet connectivity. The 

impact of users carrying all these devices are having a major 

impact on the network being used to deliver application 

connectivity. This leads businesses to face the need to 

deliver more bandwidth to fulfill specific applications, such 

as voice, video conferencing or social media interaction. The 

ratification of 802.11n technology has addressed the need 

for better throughput and bandwidth over Wireless. 

Server Farm 

NXC5200 


Internet 


USG Series 


Gateway 

Staff 

SSID 

NWA5160N 

Managed AP NWA5160N 


Managed AP 

XGS-4526 

GbE L3 Switch 

Main Building 

GS2200-24P 


300Mbps 11n access point NWA3160-N 

600Mbps 11n access point NWA3560-N 

Guest 

SSID 

600Mbps 11n outdoor access point NWA3550-N 

However, the prevalence of 11n wireless networks has put 

the capacity of traditional controllers to the test. Within 

the site survey the installer needs to identify the correct AP 

for each area of the business. ZyXEL’s new 11n 5000 Series 

AP portfolio including the ZyXEL NWA5160N single radio 

AP, NWA5560-N dual radio AP, and NWA5550-N dual radio 

external AP provides a range of managed APs that scale 

up to 240 APs providing comprehensive wireless coverage 

in all of the scenarios required in business today. Real-time 

functions such as data roaming, authentication and load 

balancing are performed on the NXC5200 and propagated 

to the individual AP’s while the NWA5160-N, NWA5560-N, 

and NWA5550-N function strictly as signal converters 

delivering the application and policy to the users. 

Outdoors 

NWA5550-N 

Managed AP 

Guest 

SSID 

NWA5560-N 

Managed AP 

GS2200-24P 


Staff 

SSID 


External Building 

Guest 

SSID 

Staff 

SSID 

Scenario 6 

Ethernet Network 

High bandwidth for up to 600Mbps to handle increased 

network demand 

All types of AP portfolio to fulfill high-density and outdoor 

deployment 

Simplified management within the controller 

Policy and application awareness 

Fiber

Scenario 7 

How to Prevent Unsecure 

WLAN Networks Being Setup 

within the Business? 


During the site-survey and deployment stage, several unidentified 

access points in the neighborhood are discovered 

and identified. They may pose a threat to the company 

if the staff unknowingly connect to those APs without 

realizing the risk and implications of the breach in security. 

It could result in the leakage of business confidential data to 

premeditated hackers. 

The ZyXEL NXC5200 takes this risk into consideration by 

offering a rogue AP detection and containment feature. 

NXC5200 


Authorized User 


NWA5160N 

Managed AP 

Intelligent identification of rogue APs Configurable 

WLAN frequencies to performance detection and 

containment 

Friendly 

Corporate Territory 

Firstly, the IT manager can commission a number of 

the access points as monitors which scan the WLAN for 

unidentified APs and can then classify them as friendly or 

rogue APs. Furthermore, the monitoring AP can also break 

off the connection attempt of guest or employee WLAN 

clients when they try to establish a connection and associate 

with one of the rogue APs. In this way, the NXC5200 adds 

additional security enhancements as part of the proposition 

to secure the WLAN edge of the network. 

X 

Detection 

Containment 

Monitoring AP 


Rogue 

Classification 

Unknown 

Prevent hijack hacking attacks and confidential 

information leakage by blocking rogue access points 

Configurable frequencies to enhance the detection and 

containment of rogue APs to look after network security 

and efficiency 

Flexible deployment, with the dual-radio NWA5560-N, 

one radio can function as an access point while the other 

can perform the rogue AP detection tasks 

15

16 

How to Extend the WLAN Infra 

to Branch Offices in a Growing 

Business? 


A new sales office is set up and the same WLAN and 

application management is required for users across 

multiple locations with the same access privileges, while 

offering guest access. 

The ZyXEL NXC5200 can support remote office deployment 

and extend the management to those remote offices 

wherever the IP network exists. The access points can 

automatically search for an NXC controller across the Internet 

through secure VPN or wide area network links between the 

branches and then register to be managed by the identified 

controller. Using the same SSID set up for the access points 

in the branch offices as the head office will enable the 

controller to assign the same user or group privileges in the 

remote office as those users in the head office. 

Scenario 8 

In the event of a wide area network failure when the WAN 

connection between different offices is broken, the access 

points will still provide the branch office with a secure WLAN 

service with temporarily stored local configurations until 

the WAN connection is restored and communication with 

the head office NXC controller is re-established. 

The management of the remote access points is also 

simple. Configuration changes or firmware upgrades can 

be executed via the controller user interface of the device 

located in the head office. Along with ZyXEL’s USG security 

gateways, it can form seamless data protection between 

remote sites and central sites. The ZyXEL NXC5200 is the most 

flexible solution to achieve multi-site WLAN deployment.

Extension of the WLAN Infrastructure 

Guest 

Corp. 

Voice 


Access points at remote sites to be managed by 

controller across Internet 

Management to the SSID can be applied the same way 

as central sites 

Intelligent design to allow remote AP to serve with 

temporary configurations 

Combined with USG security gateway to provide VPN 

encrypted protection 

Branch Office Corporate HQ 

Gateway/Firewall/NAT 

NWA5160N 

Managed AP 

Managed APs can connect to any 

port within IP Network. 

Firewall 

IPSec Tunnel 

GRE Tunnel Management Frame 

WPA2/AES Encrypted Data Frames 

Internet 

Gateway/Firewall/NAT 

Voice 


NXC5200 


NWA5160N 

Managed AP 

Corp. 

All security policies centrally defined 

and enforced at the NXC5200 controller. 

Extended WLAN service in multiple sites across the 

Internet seamlessly unified access privilege and 

management across the company 

Non-stop service in the event of the WAN connection 

breaking up 

Secured tunnel to protect sensitive information among 

distributed sites 

17

18 

ZyXEL’s Professional Wireless LAN 

Solution in Hospitality 

Introduction (challenges) 

Users amongst hospitality environments such as hotels, 

resorts or airports, need easy, fast and secure Internet 

connectivity, either to search for touristic information or to 

gain access to their companies whilst travelling. Equally, in 

recent years, mobile devices seem to have doubled their 

speed; most mobile devices do not have fixed Ethernet ports 

and require wireless connectivity. Due to the bandwidth 

limitation of the 3G mobile network, the IEEE 802.11 

network has been a predominant solution in hospitality to 

provide visitors with efficient connectivity. In addition, most 

establishments within the hospitality industry are either 

historical buildings or stylishly designed which is a limiting 

when it comes to deploying or extending a network. ZyXEL’s 

Managed Wireless Solutions provide scalability, centralised 

management and comprehensive guest network features 

that are the first choice to hospitality service providers to 

enhance their guests’ experience and lower their operation 

costs. 

ZyXEL’s Solution features 

NWA3000 -N Series Hybrid AP 

Centralised wireless LAN management of up to 24 APs 

3-in-1 wireless management modes integrated in 

1 access point, including stand-alone AP, controller AP 

and managed AP 

Full range of 802.11n AP portfolio to fulfill indoor, 

outdoor and high-density deployment 

Plenum rating 

NXC5200 controller and NWA5000 Series managed AP 

Centralised wireless LAN management up to 240 APs 

User-centric wireless network to increase mobility 

Integrate seamlessly with wireless location tracking 

equipments (Ekahau) 



Embedded firewall and additional licensed IDP and AV 

features 

Dynamic guest account generator and guest 

management

Solution benefits 

Full range of 802.11n solutions to ensure efficient 

network performance 

Centralised management provides a low maintenance 

solution 

Minimal impact on the existing infrastructure and 

network topology 


Fibre 

RS232 Cable 

PMS 

Server Farm 

RADIUS Server 

NSA Syslog Server/DMZ 

NXC5200 


Internet 

VSG-1200 V2 

Service Gateway 

USG Series 


Gateway 

2 alternative managed wireless LAN solutions streamline 

and simplify deployment 

Integrated Captive Portal can enforce the authentication 

to guest users and justify the service 

Guest account generator to reduce the predefined 

efforts of temporary users 

Staff 

SSID 

NWA5160N 



Managed AP 

XGS-4526 

GbE L3 Switch 

Main Building 

GS2200-24P 


Guest 

SSID 

NWA5160N 

Managed AP 

Hotel 2 nd Building 

GS2200-24P 


Guest 

SSID 

Staff 

SSID 

19

20 


Solution in Healthcare 


In the modern healthcare environments, mobility has 

become more and more important to every day operations. 

To minimise patient’s stress. medical carts are required 

to be brought to bedsides rather than moving patients to 

specially equipped wards. Mobile Equipment is an Expensive 

Asset and it is critical to be able to track their location. 

Simultaneously, the need to respond quickly to emergencies 

demands that critical members of staff are traceable and 

able to receive instant messages. More comprehensively, 

some medical institutions require network access to deliver 

sensible medical records and information whilst still offer 

Internet access to patients and visitors. ZyXEL’s pro-wirekess 

LAN Solutions, including the 3000 Series Hybrid and the 

5000 Controller Series fit smoothly into the healthcare 

environment to centralise the wireless infrastructure and 

lower operation costs, tighten security and automate 

management and troubleshooting. 

ZyXEL solution features 

NWA3000-N Series Hybrid AP 

Centralised wireless LAN management of up to 24 AP’s 






EN60601-1-2 safety and performance compliance for 

medical electrical equipment 

NXC5200 controller and NWA5000 Series managed AP 

Centralised wireless LAN management of up to 240 AP’s 

User-centric wireless network for increased mobility 






features 

EN60601-1-2 safety and performance compliance for 

medical electrical equipment


Simplify network management while ensuring highly 

reliable wireless communications 

Overlay a platform for wireless VoIP and other 

applications with minimised changes to the existing 

network 


Wi-Fi Signal 

CAPWAP Tunnel 

NWA5160N 

Managed AP 

NXC5200 


Server Farm 

RADIUS Server 

NSA Syslog Server/DMZ 

Internet 

Ward 

WiFi Tag 

GS2200-24P 


XGS-4526 

GbE L3 Switch 

USG Series 


Gateway 

Built-in ICSA-tech-driven firewall and additional featured 

security licenses addressing security requirements for 

guest access and regulatory compliance 

Reduce reliance on paper while allowing real-time 

electronic updates to patient ’s records 

Secure transmission of confidential data across the 

WLAN 

WiFi 

Pager r 

Surgery 

NWA5160N 


Managed AP 

GS2200-24P 


RTLS 

Positioning ning 

Engine Server ENC 

Enterprise E t i 

Network Center 

Pharmacy 

WiFi Tag 

NWA5160N 

Managed AP 

21

22 


Solution in Education 


The learning environment is continuously changing. Today, 

the Education Industry is fully focused on leveraging 

technology to improve the learning experience. Equipping 

classrooms with computers as well as providing e-learning 

facilities, collaborative technologies and continuous Internet 

access are today’s challenges to maintain competitive 

edge. Schools need reliable, secure, and scalable network 

infrastructure in order deliver these resources. Moreover, 

pupil’s social behavior has evolved too, with more and wider 

ranges of mobile devices brought to campus requiring 

connectivity, the School’s network’s bandwidth has more 

constrains. As a result of these changes, wireless LAN has 

become the fist and best choice when deploying the new 

generation of campuses’ networks. ZyXEL’s Pro Wireless LAN 

Solutions feature scalability management, performance and 

security prove to be the optimum and flexible choice for the 

new network era. 

ZyXEL’s Solution features 

NWA3000-N series hybrid AP 







NXC5200 Controller and NWA5000 Series managed AP 


User-centric wireless network to increase mobility 






features 

Dynamic guest account generator and guest 

management


High reliability, with WiFi access that is as stable as the 

wired network 

Improve manageability so that minimal staff can 

effectively support a larger, extended network 

Lower the environmental impact when extending the 

new network topology 

Internet 

XGS-4526 

L3 Switch 

GS2200-48 

L2 Switch 

1 controller + 24 managed APs 

NWA3160-N 

WLAN AP 

GS2200-24P 

PoE Switch 

NWA3550-N 

WLAN AP 

Provide high-reliability 802.11n WiFi connectivity both in 

buildings and to outdoor common areas 

Comprehensive implementation of user-based security 

policies to guard the wireless edge 

Deploy multi-layered wireless security from 

authentication, encryption, to rogue AP detection and 

containment 

Computerroom 

Outdoor 

NWA3160-N 

WLAN AP 

NWA3560-N 

WLAN AP 

Classroom 

Dormitory 

Library 

Seamless 

Roaming 

23

24 

Products at a Glance 

NXC5200 Wireless LAN Controller 

Guests and mobile employees requiring wireless access 

without compromising the business’ network security. ZyXEL 

has developed a Wireless LAN Controller Solution comprising 

the NXC5200 WLAN Controller and the NWA5000-N Series of 

Managed Access Point (AP) with three models: NWA5160N, 

the dual radio NWA5560-N and, the dual radio outdoor 

NWA5550-N. The Solution is designed to deliver high 11n 

wireless performance to provide seamless mobility and 

security in medium to large-scale distributed enterprises. 

Key Features 

Manage up to 240 APs with granular access control 

Comprehensive guest network management with 

auto guest account generator and Web authentication 

support 

Centralised WLAN management on both 

configurations and data 

Flexibility supporting both distributed and tunnelled 

data forwarding 

Built-in Firewall, IDP (Intrusion Detection and 

Prevention) and Anti-Virus 

Network interface: 

1 x 10/100/1000 Mbit BASE-T auto-sensing LAN port 

WLAN standard: 

IEEE 802.11 a/b/g/n, wireless LAN standard 

Data transfer/data throughput: 

300 Mbps, up to 120 Mbps (NWA5160-N) 

300 Mbps, up to 140 Mbps (NWA5560-N and 

NWA5550-N) 

Operating modes: 

Managed AP 

Security: 

WEP, WPA/WPA2-PSK, WPA/WPA2-enterprise

E-iCard 12 AP NXC5200 

E-iCard 48 AP NXC5200 

Power over Ethernet: 

802.3af standard, 802.3at standard (NWA5160-N, 

NWA5560-N); PoE proprietary (NWA5550-N) 

Special features: 

Plenum rating (NWA5160-N and NWA5560-N) 

Power supply: 

PoE power draw 12/14/28 W 

(NWA5160-N / NWA5560-N / NWA5550-N) 

Managed AP Scalability 

The NXC5200 Managed AP License is a service that enables 

the flexibility to increase the number of 5000 Series WLAN 

APs in service. The maximum number of managed APs 

supported is 240. 

NWA3000-N AP Series 

To catch the wave of 802.11n, ZyXEL introduced the 

enterprise-level NWA300-N Series Access Point (AP) and 

meet the requirement of the new “n generation”. This 

Series provides various AP portfolios from single radio 

to concurrent radio, as well as dual-frequency APs (dual 

band NWA3160-N, dual-radio NWA3560-N, and dual-radio 

outdoor NWA3550-N). Designed to meet the small to 

medium sized enterprises, the NWA3000-N Series is ideal for 

advanced service delivery on mission-critical networks. 

Key Features 

Higher bandwidth and superior 802.11n performance 

3-in-1 hybrid AP WLAN including AP controller mode, 

managed AP mode and standalone AP mode 

Brand new centralised graphic management interface 

for up to 24 WLAN APs 

Secured tunnels for communication between 

controller and managed AP to prevent configuration 

leakage 

Built with Low Smoke, Zero Halogen (LSOH) materials 

for plenum rating for UL 2043 support 

25

26 

Products at a Glance 

GS2200 Switches Series 

The ZyXEL GS2200 Series consists of five models: GS2200-8, 

GS2200-8HP, GS2200-24, GS2200-24P and GS2200-48 

providing 8/24/44 100/1000 BASE-T PoE or non-PoE copper 

ports with 2/4 dual-personality GbE interfaces for RJ-45 

100/1000 BASE-T or fibre connectivity. The GS2200-8/-24/-48 

Series is ideal for secure 100BASE and Gigabit connectivity, 

and it offers access security, advanced prioritization and 

traffic-monitoring capabilities. 

Key Features 

Advanced full L2 switching features 

20/56/100 Gbps non-blocking switch fabric (GS2200-8 

and GS2200-8HP/GS2200-24 and GS2200-24P/ 

GS2200-48) 

2/4 dual-personality (RJ-45/SFP) GbE interfaces 

Port security and enhanced 802.1x port authentication 

MAC freeze and intrusion lock 

IEEE 802.1p hardware priority queues 

WFQ, WRR and SPQ queuing algorithms 

IEEE 802.3at Power over Ethernet (PoE) (GS2200-8HP) 

IEEE 802.3af PoE (GS2200-24P) 

PoE Power consumption mode for energy saving 

(GS2200-8HP/-24P) 

IPv6 ready 

XGS-4526 

The ZyXEL XGS Series of L3 switches enable enterprise and 

SMB businesses to deploy high availability networks to 

meet the need to migrate to a virtualized and consolidated 

solution. The evolution to the virtualized network meets 

the increasing demands in server utilization and availability 

within the business today. The XGS-4526 Series compliments 

the network infrastructure of virtualization as both Series 

deliver not only robust, reliable enterprise-class L2/L3 switch 

features but are also designed to accomplish high-availability 

routing for better utilization of network bandwidth.

Enterprise Network Center (ENC) 

Key Features 

IPv4/IPv6 routing 

L3 advanced routing protocols, OSPF, DVMRP, VRRP and 

ECMP 

Optional modular 10 Gigabit Ethernet support 

Multilayer-aware (L2/L3/L4) ACL for security protection 

and traffic optimization 

Guest VLAN 

IGMP Snooping v1, v2, v3, MVR 

sFlow, CPU protection 

RSTP, MSTP, MRSTP, VRRP 

Enterprise Network Center (ENC) 

The ZyXEL Enterprise Network Center (ENC) is a network 

management system for a centralised management of ZyXEL’s 

networking equipment for businesses; it’s a comprehensive 

network management tool that can be quickly installed and 

easily accessed across the IP networks. ZyXEL’s ENC is designed 

for small and medium-sized businesses with a single console 

to enjoy extensive, scalable and seamless management 

across the entire corporate network. Featuring intelligent 

discovery, ingenious monitoring and smart management, the 

ZyXEL ENC assists IT staff to minimize overheads and errors 

while improving operational efficiency. 

Key Features 

Scalability management up to 2000 devices 

Network and device auto-discovery 

Firmware upgrade/backup and device configurations 

Performance alerts and monitoring 

ZyXEL switch specialized in RMON management and 

visual VLAN management 

ZyXEL in-wall Access Point (AP) specialized in 

detection and provisioning applications (ENC V1.2 

and above) 

27

Corporate 

Headquarters 

ZyXEL Communications Corp. 

Tel: +886 3 578 3942 

Fax: +886 3 578 2439 

Email: sales@zyxel.com.tw 

www.zyxel.com 

Asia 

ZyXEL China (Shanghai) 

China Headquarters 

Tel: +86 21 6119 9055 

Fax: +86 21 5206 9033 

Email: sales@zyxel.cn 

www.zyxel.cn 

ZyXEL China (Beijing) 

Tel: +86 10 6260 2249 


www.zyxel.cn 

ZyXEL China (Tianjin) 

Tel: +86 22 8789 0440 

Fax: +86 22 8789 2304 


www.zyxel.cn 

ZyXEL India 

Tel: +91 11 4760 8800 

Fax: +91 11 4052 3393 

Email: info@zyxel.in 

www.zyxel.in 

ZyXEL Kazakhstan 

Tel: +7 727 259 0699 

Email: info@zyxel.kz 

www.zyxel.kz 

ZyXEL Malaysia 

Tel: +60 3 7960 0088 

Fax: +60 3 7960 8802 

Email: info@zyxel.com.my 

www.zyxel.com.my 

ZyXEL Pakistan 

Tel: +92 21 3431 0194-5 

Fax: +92 21 3431 0196 

Email: info@zyxel.com.pk 

www.zyxel.com.pk 

ZyXEL Singapore 

Tel: +65 6899 6678 

Fax: +65 6899 8887 

Email: sales@zyxel.com.sg 

www.zyxel.com.sg 

ZyXEL Taiwan (Taipei) 

Tel: +886 2 2739 9889 

Fax: +886 2 2735 3220 

Email: sales_tw@zyxel.com.tw 

www.zyxel.com.tw 

ZyXEL Thailand 

Tel: +66 2 831 5315 

Fax: +66 2 831 5395 

Email: info@zyxel.co.th 

www.zyxel.co.th 

Europe 

ZyXEL Belarus 

Tel: +375 17 334 6099 

Email: sales@zyxel.by 

www.zyxel.by 

ZyXEL BeNeLux 

Tel: +31 23 555 3689 

Fax: +31 23 557 8492 

Email: sales@zyxel.nl 

www.zyxel.nl 

www.zyxel.be 

ZyXEL Bulgaria 

Tel: +359 2 444 3343 

Email: info@zyxel.bg 

www.zyxel.bg 

ZyXEL Czech Republic 

Tel: +420 2 4109 1350 

Fax: +420 2 4109 1359 

Email: info@cz.zyxel.com 

www.zyxel.cz 

ZyXEL Denmark A/S 

Tel: +45 3955 0700 

Email: sales@zyxel.dk 

www.zyxel.dk 

ZyXEL Estonia 

Tel.: +372 622 6380 

Email: tech@zyxel.ee 

ZyXEL Finland 

Tel: +358 9 4780 8400 

Email: myynti@zyxel.fi 

www.zyxel.fi 

ZyXEL France 

Tel: +33 47 252 9797 

Fax: +33 47 252 1920 

Email: info@zyxel.fr 

www.zyxel.fr 

ZyXEL Germany GmbH 

Tel: +49 2 4056 9090 

Fax: +49 2 4056 9099-9 

Email: sales@zyxel.de 

www.zyxel.de 

ZyXEL Hungary & SEE 

Tel: +36 1 336 1640 

Fax: +36 1 325 9100 

Email: info@zyxel.hu 

www.zyxel.hu 

ZyXEL Italy 

Tel: 800 992 604 

Fax: +39 011 274 7647 

Email: sales@zyxel.it 

www.zyxel.it 

ZyXEL Latvia 

Tel.: +371 6 601 3019 

Email: tech@lv.zyxel.com 

ZyXEL Lithuania 

Tel.: +370 5205 4297 

Email: tech@lt.zyxel.com 

ZyXEL Norway 

Tel: +47 2 280-6180 

Fax: +47 2 280-6181 

Email: salg@zyxel.no 

www.zyxel.no 

ZyXEL Poland 

Tel: +48 22 333 8250 

Fax: +48 22 333 8251 

Email: info@pl.zyxel.com 

www.zyxel.pl 

ZyXEL Romania 

Tel: +40 31080 9888 

Fax: +40 31080 9890 

Email: info@ro.zyxel.com 

www.zyxel.ro 

ZyXEL Russia 

Tel: +7 495 542 8920 

Fax: +7 495 542 8925 

Email: info@zyxel.ru 

www.zyxel.ru 

ZyXEL Slovakia 

Tel: +421 2 4319 3989 

Fax: +421 2 4319 3990 

Email: info@sk.zyxel.com 

www.zyxel.sk 

ZyXEL Spain 

Tel: +34 91 300 5345 

Fax: +34 91 300 5345 

Email: sales@zyxel.es 

www.zyxel.es 

ZyXEL Sweden 

Tel: +46 8 5577 6060 

Fax: +46 8 5577 6061 

Email: sales@zyxel.se 

www.zyxel.se 

ZyXEL Switzerland 

Tel: +41 44 806 5100 

Fax: +41 44 806 5200 

Email: info@zyxel.ch 

www.zyxel.ch 

ZyXEL Turkey A.Ş. 

Tel: +90 212 314 1800 

Fax: +90 212 220 2526 

Email: bilgi@zyxel.com.tr 

www.zyxel.com.tr 

ZyXEL UK Ltd. 

Tel: +44 1189 121 700 

Fax: +44 1189 797 277 

Email: sales@zyxel.co.uk 

www.zyxel.co.uk 

ZyXEL Ukraine 

Tel: +380 44 494 4931 

Fax: +380 44 494 4932 

Email: sales@ua.zyxel.com 

www.ua.zyxel.com 

For more product information, visit us on the web at www.ZyXEL.com 

Copyright © 2012 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, 

product names, or trademarks mentioned are the property of their respective owners. All specifi cations are subject to change without notice. 

The Americas 

ZyXEL USA 

North America Headquarters 

Tel: +1 714 632 0882 

Fax: +1 714 632 0858 

Email: sales@zyxel.com 

www.us.zyxel.com 

01/12

Wireless Mobility for Small Business More Than Just WiFi - ZyXEL

Create successful ePaper yourself

Delete template?

Save as template?