Wireless LAN Solution Scenario - ZyXEL UK

SME 

Product Guide 

2009 

Seamless Collaboration 

Empower to Perform 

Security Solution 

LAN Switches Solution 

Wireless LAN Solution

Why ZyXEL? 

Over 400,000 European companies choose ZyXEL for enterprise solutions 

A history of delivering the finest Telco technology available today for business 

Providing our customers with the ability to develop their business with 

industry-leading support 

SME Product Guide 2009 

Table of Contents 

Security Solution Introduction 4 

Security Solution Scenario 6 

Security Quick Finder 8 

Security Feature Matrix 10 

Security Product Highlight 13 

LAN Switches Solution Scenario 14 

LAN Switches Quick Finder 16 

LAN Switches Feature Matrix 18 

LAN Switches Product Highlight 24 

Wireless LAN Solution Introduction 27 

Wireless LAN Solution Scenario 28 

Wireless LAN Quick Finder 30 

Wireless LAN Feature Matrix 32 

Wireless LAN Product Highlight 35

Security Solution Introduction 

Maintain Control: Unified Security Gateway helps you win the battle 

Challenges that may Drain Your IT Resource 

The ZyWALL USG Series is a high performance, deep packet inspection security solution for small business to enterprise. It 

embodies a Stateful Packet Inspection (SPI) firewall, Anti-Virus, Intrusion Detection and Prevention (IDP), Content Filtering, Anti- 

Spam, and VPN (IPSec/SSL/L2TP) in one box. This multilayered security safeguards your organisation’s customer and company 

records, intellectual property, and critical resources from external and internal threats. 

Leading, High Performance UTM Solution 

ZyWALL USG Series deploys hardware-acceleration technology in one box. Powered by high-performance SecuASIC technology and a 

hardware-based encryption accelerator, the ZyWALL USG series delivers leading high performance and multi-layer threat protection for 

small business to enterprises. All ZyWALL USG series support Gigabit Ethernet interfaces. 

Robust Hybrid VPN (IPSec and SSL) 

The ZyWALL USG Series can provide secure access from remote locations to corporate resources through the Internet for organisations 

of any size. Using IPSec VPN companies can secure connections to branch offices, partners, and headquarters. Road warriors and 

telecommuters can use SSL or L2TP VPN to securely access the company network without having to install VPN software. 

Managing IM/P2P Abuse 

For increasing network efficiency and business productivity, the IM/P2P application needs to be well managed. The ZyWALL USG series 

support Application Patrol which controls who can use IM and P2P applications like MSNTM and BitTorrentTM , and even who can use specific 

features within an application. 

Non-Stop Internet Access with Multiple WAN and 3G as Backup 

The ZyWALL USG not only supports multiple WAN ports but also supports USB 3G or PCMCIA 3G card. This enables it to provide “activeactive” 

load sharing or “active-passive” failover configuration to deliver highly reliable network connectivity. To minimise the impact of 

single-point failures, the ZyWALL USG Series support device HA (High Availability) to assure network availability. 

ICSA Firewall, IPSec, Antivirus Certification 

With ICSA certified SPI Firewall, Anti-Virus and IPSec VPN, the ZyWALL USG Series enables organisations to take complete control of their 

network infrastructure and provide the most up-to-date protection against the network threats. 

Comprehensive Report System 

ZyWALL USG Series build-in report system which offers a comprehensive set of real-time and historical reports, including firewall, virus and 

intrusion attacks, bandwidth usage, web site usage, and user activity. Furthermore, with the web-based reporting system, Vantage Report 

(VRPT), administrators can easily collect traffic data and analyse a distributed network, so organisations are aware of suspicious activity 

and to ensure increase business productivity. 

ZyWALL USG Series Advantages 

Secure Connectivity 

Given the prevalence and importance of information technology (IT) systems today and the nature and scale of both the opportunities 

and risks associated with significant deployments of new networking technologies, organisations are forced to evaluate solutions to build 

up a safer infrastructure to secure online transactions, in which involve exchange of valuable information. The infrastructure should be 

tailored to meet operation requirements for expanding remote sites as well as mobile teleworkers. 

Proactive Protection 

Malicious virus, worm, exploits could cripple corporate networks and halt business transactions. In addition to severe financial loss, you also 

risk leakage of confidential information. 

As mass-mailing software companies mushroom on the Internet, your network is bombarded with massive amounts of junk mails (spam). 

Without intelligent detection and proactive blocking, users have to go through the tedious and time-consuming task of sieving through 

the overflowing mailbox, and such scenario leads to serious productivity loss. 

Policy Compliance 

With numerous file-sharing (P2P) and Instant Messaging (IM) applications, it is easier for company employees to share files and chat online 

during work hours. Rapid file sharing not only compromises network safety with the sharing of questionable files containing malicious 

viruses, but may also violate copyright issues and create legal hassles. 

Network Resilience 

ISP links broken, hardware and software failure on the gateway, dead VPN tunnels—these are severe challenges IT staff face when 

designing the network infrastructure. In short, we need to take fault tolerance on the network path into consideration when build up a 

highly available network infrastructure for non-stop operations. 

4 5

Security Solution Scenario 

Less than 10 PC Users 

To secure an office with a single 

broadband Internet connection, provide 

secure remote access, and protect 

endpoint devices. Measures mitigating 

application-level attacks should be taken. 

10 to 50 PC Users 

Requires site-to-site and remote VPN access 

capabilities with firewall protection at the 

main and branch offices. In addition, each 

endpoint device needs to be secured. 

Measures to mitigate application-level 

attacks should be taken so that valuable 

information assets will be well protected. 

ZyWALL 2WG 

ZyWALL 2WG 

ZyWALL 2WG 

LAN/DMZ 

PWR 1 2 3 4 

WAN AUX WLAN CARD 

10/100 10/100 10/100 10/100 

LAN/DMZ 

PWR 1 2 3 4 

WAN AUX WLAN CARD 

10/100 10/100 10/100 10/100 

ZyWALL 2WG 

Vantage CNM 

ES-3124 

3G 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

BPS 

PWR 

SYS 

ALM 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

ACT 

PoE 

LNK/ 

ACT 

PoE 

1 3 5 7 9 11 13 15 17 19 21 23 

ES-3124 

3G 

3G 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

BPS 

PWR 

SYS 

ALM 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

FDX 

9 FDX 

11 13 15 

17 19 21 23 

ACT 

ACT MGMT 

ACT 

PoE 

LNK/ 

ACT 

PoE 

1 3 5 7 9 11 13 15 17 19 21 23 

LAN 

3G 

26 

28 

25 

27 

27 


Main Office 

28 

26 

28 

25 

27 

ZyWALL USG 200 

PWR AUX 

SYS CARD RESET 


Main Office 

27 

28 

DMZ 

SMTP, Web, DNS, 

FTP Server 

USB 

WAN1 WAN2 OPT 

LAN1/LAN2/DMX 

P1 P2 P3 P4 P5 P6 P7 

1 2 


PWR AUX 


ZyWALL USG 100/200 

Remote 

Access 

VPN 

3G 

USB 

WAN1 WAN2 OPT 


P1 P2 P3 P4 P5 P6 P7 

1 2 

3G 

VPN Tunnel 

Internet 

Internet 

Teleworker 

Teleworker 

Site-to-Site VPN 


PWR AUX 


USB 

WAN1 WAN2 


P1 P2 P3 P4 P5 P6 P7 

1 2 

VPN Tunnel 


PWR AUX 



USB 

WAN1 WAN2 OPT 


P1 P2 P3 P4 P5 P6 P7 

1 2 

VPN Gateway 

Partner Site 

Branch Office 


A comprehensive protection 

mechanism should be deployed 

to protect the entire cooperate 

network from viruses, worms, trojans 

and remote attacks. Requires site 

to-site and remote VPN access 

capabilities with firewall protection 

in a distributed network. Also, each 


There is a need for high availability of 

Internet access and quality of service 

management at the main office. 


Requires site-to-site and remote 

access VPN capabilities with firewall 

protection in a distributed network. 

Threats from the Internet should be 

stopped at the network perimeter. 

For a network of this size, centralised 

management is desired. Also, each 


There is a need to ensure reliable 

performance and uninterrupted 

access to resources. The quality of 

service management is also required 

at the main office. 

Wireless AP 

Vantage 

CNM 

Main Office 

Clientless Secure Access 

6 7 

ZyAIR 

ES-3124 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

BPS 

PWR 

SYS 

ALM 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

ACT 

PoE 

LNK/ 

ACT 

PoE 


USB 

WAN1 WAN2 OPT 


P1 P2 P3 P4 P5 P6 P7 

PWR AUX 


1 2 

Wireless 

AP Vantage 

CNM 

ZyAIR 

ES-3124 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

BPS 

PWR 

SYS 

ALM 

26 

28 

25 

27 

27 

ZyWALL 

USG 100/200 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

ACT 

PoE 

LNK/ 

ACT 

PoE 

1 3 5 7 9 11 13 15 17 19 21 23 


PWR AUX 

SYS CARD1 RESET 

CARD2 

1 2 3 4 5 USB 

6 7 

AUX 

CONSOLE 

1 

2 

10/100/1000 

28 

26 

28 

25 

27 

ZyWALL 

USG 300 

27 

28 


EXTENSION CARD SLOT 

1 2 

USB 

3 4 5 

PWR ACT RESET 

SYS HDD 

10/100/1000 

DMZ 


FTP Server 


3G 

DIAL BACKUP 

CONSOLE 


Main Office 

3G 

HDD SLOT 

SSL VPN 

VPN 

Tunnel 

3G 

DMZ 


FTP Server 

SSL VPN 

Internet 

3G 


USB 

WAN1 WAN2 OPT 


P1 P2 P3 P4 P5 P6 P7 

PWR AUX 


1 2 

ZyWALL USG 100/200 

Remote 

Access VPN 

ZyWALL OTP 

VPN Tunnel unnel 

Internet 


PWR AUX 

SYS CARD1 RESET 

CARD2 

1 2 3 4 5 USB 

6 7 

AUX 

CONSOLE 

1 

2 


Branch Office 

Teleworker 

Remote 

Access VPN 

ZyWALL OTP 


PWR ACT RESET 

SYS HDD 

Teleworker 

Clientless Secure Access 

10/100/1000 


1 2 

USB 

3 4 5 

10/100/1000 

DIAL BACKUP 

CONSOLE 


HDD SLOT 

Branch Office

Security Quick Finder 

Unified 

Security 

Gateway 

(Hybrid VPN & UTM) 

Remote Office 

Small Office 

Security Accessory 

SME 

200 ~ 500 PC Users 

SME 

75 ~ 200 PC Users 

SME 

50 ~ 75 PC Users 

SME 

10 ~ 50 PC Users 

Internet Security Appliance 

Cutting-edge 3G + 

Wi-Fi Router 

ZyWALL OTP 

Vantage Report 

Vantage CNM 

ZyWALL IPSec 

VPN Client 






ZyWALL 2 Plus 

ZyWALL 5 

ZyWALL 2WG 

8 9 

Model 

Name 

ZyWALL 

USG 2000 

ZyWALL 

USG 1000 

ZyWALL 

USG 300 

Customers’ Need Key Features 

Need Gigabit firewall throughput 

Increase network efficiency and 

productivity 

Provide Hybrid VPN (IPSec + SSL) 

capacity 

Maintain continuous business 

operations with around-the-clock 

protection 

Need high-performance, all-in-one 

Firewall 


productivity 


capacity 

Maintain continuous business 

operations with around-the-clock 

protection 

Need high-performance, all-in-one 

Firewall 


productivity 


capacity 

Achieve continuous business operation 

with around-the-clock protection 

ZyWALL 

USG 200 Unified Security Gateway (Stateful 

Packet Inspection (SPI) firewall, antivirus, 

IDP/ADP, IM/P2P and content 

filtering) to protect small business 

networks 


capacity 

Multi-ISP Links 

ZyWALL 3G/Wireless support for mobility 

USG 100 

ZyWALL 

2 Plus 

ZyWALL 5 

ZyWALL 

2WG 

ZyWALL 

OTP 

Vantage 

Report 

Vantage 

CNM 

ZyWALL 

IPSec VPN 

Client 

Need an ICSA-certified and costeffective 

network protection solution for 

telecommuters/home networks 

Increase efficiency, business productivity 

Securely access remote offices 

Need high-performance Firewall 

Increase network efficiency, business 

productivity 

Securely access remote offices 

To provide cost-effective versatile 

access security appliance forSOHO/SB 

networks 

To deliver Wi-Fi access on a LAN 

Provide 3G connections as a WAN 

alternative 

Two-Factor Authentication One Time 

Password Token 

Network Reporting Analyser 

Centralised Network Management 

Remote Security Client 

Unified Security Gateway for enterprises 

ICSA-certified ZyXEL or Kaspersky Labs-powered anti-virus for protection against viruses and 

spyware 

Scalable VPN/UTM performance with the added Security Extension Module 

Application Patrol controls IM and P2P application usage and will even control which 

individual within an organization can use this application 

High Availability features with redundant power modules guaranteeing non-stop operations 

Unified Security Gateway to provide Hybrid VPN (IPSec/SSL VPN) and robust UTM security 

services 

High-performance multi-layer threat protection, powered by the cutting-edge SecuASIC 

hardware accelerator 

Application Patrol to manage the use of IM/P2P applications without hassle 

High Availability features guarantee non-stop operations of mission-critical applications 

Excellent manageability with object and text-based configuration files as well as centralised 

network management 

Unified Security Gateway to provide Hybrid VPN (IPSec/SSL VPN) and robust UTM security 

services 

High-performance multi-layer threat protection powered by cutting-edge SecuASIC hardware 

accelerator 

Application Patrol controls IM and P2P application usage, even who can use which features 

within an application 

User-aware policy engine enables access granularity 

Excellent manageability with object and text-based configuration files as well as centralised 

network management 


accelerator 

Hybrid VPN (IPSec, SSL and L2TP) secures connections to branch offices, partners and 

headquarters 


spyware 



Flexible OPT (option) port that can be used as another WAN, LAN1, LAN2 or DMZ port 


accelerator 

Hybrid VPN (IPSec, SSL and L2TP) secures connections to branch offices, partners and 

headquarters 


spyware 



Extension card slot and USB ports for multiple 3G wireless WAN connections 

ICSA-certified IPSec VPN (5 VPN tunnels) and SPI firewall (24 Mbps) 

Customisable Web Content Filtering 

DoS/DDoS intrusion prevention 

ZyXEL Centralised Network Management (CNM) support 

Increase network efficiency (Bandwidth Management, Load Balancing) 

Increase business productivity (Content Filtering) 

High performance secure connection to remote offices (IPSec VPN) 

Internet access through 3G networks (HSDPA, UMTS, GPRS, EDGE) 

Dual-band, tri-mode access point (802.11a/b/g) 

Advanced ICSA certified ZyNOS SPI Firewall (24 Mbps) and IPSec VPN (5 VPN tunnels) 

protection 

Configurable 4-port LAN/DMZ/WLAN zones 

Web-based Content Filtering services 

Strong Two-Factor Authentication solution 

One Token for many applications 

Intuitive and easy to install, use and manage 

Seamless integration with ZyWALL security products 

Comprehensive set of graphical reports 

Web-based user interface (browser based application) 

Intuitive design and easy to use 

Multi-ZyWALL support 

Automated report scheduling 

Central management 

One-click VPN creation and graphical VPN management 

Mass firewall ACL policy deployment and management 

Bulk firmware upgrade and management 

Intuitive device and account Monitoring 

Windows Vista support 

IPSec VPN Tunneling with DES/3DES/AES encryption 

User authentication with X-Auth, PEM or PKCS#12 Certificates, pre-shared keys 

DPD and redundant gateway 

Competitive 

Products 

Fortinet FG-1000A 

SonicWALL PRO 

NSA 5000 

WatchGuard X5500e 


SonicWALL PRO 

4060 

WatchGuard Firebox 

X550e 


SonicWALL PRO 

3060 


X550e 


SonicWALL PRO 

2040 


X55e 

3Com X506 

Fortinet FG-60B 

SonicWALL PRO 

1260 


x20e 

3Com TP X5 

SonicWALL TZ 150 

WatchGuard SOHO 

6/6tc 

SonicWALL TZ190 

Linksys WRT54G3G

Security Feature Matrix 

Unified Security Gateway 

100 Series 


200 Series 


300 Series 


1000 Series 


2000 Series 

Model Name 

ZyWALL USG 100 ZyWALL USG 200 ZyWALL USG 300 ZyWALL USG 1000 ZyWALL USG 2000 

System 

Firewall Throughput 100 Mbps 150 Mbps 200 Mbps 350 Mbps 2,000 Mbps 

VPN Throughput (AES) 50 Mbps 75 Mbps 100 Mbps 150 Mbps 500 Mbps *1 

UTM Throughput 

(AV+IDP+Firewall) 

24 Mbps 24 Mbps 48 Mbps 100 Mbps 400 Mbps *2 

Unlimited User Licenses ✔ ✔ ✔ ✔ ✔ 

Sessions 20,000 40,000 60,000 512,000 1,000,000 

Max. Concurrent 

IPSec VPN Tunnels 

50 100 200 1,000 2,000 

Max. Concurrent SSL VPN 

Users 

5 10 25 250 750 

Physical Port 

5 x LAN/DMZ, 

2 x WAN (All GbE) 

4 x LAN/DMZ, 2 x WAN, 

1 x OPT (All GbE) 

(7) 10/100/1000 GbE (5) 10/100/1000 GbE 

(6) 10/100/1000 GbE 

(2) DualPersonality GbE 

(SFP/RJ45) 

Customisable Zone 

Networking 

✔ ✔ ✔ ✔ ✔ 

Routing/NAT/SUA Mode ✔ ✔ ✔ ✔ ✔ 

Bridge Mode ✔ ✔ ✔ ✔ ✔ 

Mix Mode (Routing+Bridge) ✔ ✔ ✔ ✔ ✔ 

VLAN Tagging (802.1q) ✔ ✔ ✔ ✔ ✔ 

Wireless Card Support ✔ ✔ - - - 

3G Support (Optional) 

Security 

✔ ✔ ✔ ✔ ✔ 

Firewall ✔ ✔ ✔ ✔ ✔ 

IPSec VPN ✔ ✔ ✔ ✔ ✔ 

SSL VPN ✔ ✔ ✔ ✔ ✔ 

Content Filtering ✔ ✔ ✔ ✔ ✔ 

Anti-SPAM ✔ ✔ ✔ ✔ ✔ 

Anti-Virus ✔ ✔ ✔ ✔ ✔ 

IDP/ADP ✔ ✔ ✔ ✔ ✔ 

IM/P2P Management ✔ ✔ ✔ ✔ ✔ 

Bandwidth Management ✔ ✔ ✔ ✔ ✔ 

User-aware Management 

High Availability 

✔ ✔ ✔ ✔ ✔ 

Device HA A/P A/P A/P A/P A/P 

VPN HA ✔ ✔ ✔ ✔ ✔ 

Multiple WANs for Load 

Balancing 

✔ ✔ ✔ ✔ ✔ 

Auto Failover, Failback ✔ ✔ ✔ ✔ ✔ 

Out-of-band Management ✔ ✔ ✔ ✔ ✔ 

Redundant Power Module - - - - ✔ 

Authentication Method 

Local Database ✔ ✔ ✔ ✔ ✔ 

Radius ✔ ✔ ✔ ✔ ✔ 

LDAP ✔ ✔ ✔ ✔ ✔ 

Microsoft AD ✔ ✔ ✔ ✔ ✔ 

ZyWALL OTP ✔ ✔ ✔ ✔ ✔ 

Management 

WebGUI (HTTP and HTTPS) ✔ ✔ ✔ ✔ ✔ 

Command Line ✔ ✔ ✔ ✔ ✔ 

Vantage CNM ✔ ✔ ✔ ✔ ✔ 

Vantage Report ✔ ✔ ✔ ✔ ✔ 

Note: *1: With SEM-DUAL/SEM-VPN module 

*2: With SEM-DUAL module 

*3 

Model Name 

System 

ZyWALL 2 Plus ZyWALL 2WG ZyWALL 5 

Firewall Throughput 24 Mbps 24 Mbps 50 Mbps 

VPN Throughput (AES) 24 Mbps 24 Mbps 25 Mbps 

Unlimited User Licenses ✔ ✔ ✔ 

Sessions 3,000 3,000 4,000 

Max. Concurrent IPSec VPN Tunnels 5 5 10 

Wireless - ✔ - 

Physical Port 4 x LAN, 1 x WAN 4 x LAN/DMZ, 1 x WAN 4 x LAN/DMZ, 1 x WAN 

10 11 

WAN Type 

Ethernet ✔ ✔ ✔ 

3G Support (Optional) - ✔ - 

Security 

Firewall ✔ ✔ ✔ 

IPSec VPN ✔ ✔ ✔ 

Content Filtering ✔ ✔ ✔ 

Bandwidth Management ✔ ✔ ✔ 

High Availability 

VPN HA ✔ ✔ ✔ 

Multiple WANs for Load Balancing - ✔ (3G) - 

Auto Failover, Failback ✔ ✔ ✔ 

Dial Backup 

Authentication Method 

✔ ✔ ✔ 

Local Database ✔ ✔ ✔ 

Radius ✔ ✔ ✔ 

ZyWALL OTP 

Management 

✔ ✔ ✔ 

WebGUI (HTTP and HTTPS) ✔ ✔ ✔ 

Command Line ✔ ✔ ✔ 

Vantage CNM ✔ ✔ ✔ 

Vantage Report ✔ ✔ ✔ 

AWARD 

Empfehlung 

d. R edaktion 

BEST OF 

2005 

Ausgabe 3/04 

Zywall 2

Experience the True Potential of the Advanced ZyXEL Security Products 

If you want For Please order 

Gateway AntiVirus 

ZyWALL Gateway Anti-Virus service is an easy-tomanage, signaturebased 

security feature which sops virus/spyware from entering your 

network. 

For protection against viruses and spyware, ZyWALL USG 100/200/2000 

could be chose the ICSA-certified ZyXEL Anti-Virus or one powered by 

Kaspersky Labs. 

Gateway IDP 

ZyWALL Gateway Intrusion Detection/Prevention service is an easy-tomanage, 

signature-based security feature which mitigates threats from 

ever-evolving attacks/exploits. 

Gateway Content Filtering 

ZyWALL Gateway Content Filtering is an integrated security option 

to regulate leisure browsing or porn traffic during work hours to 

decrease non-productive bandwidth consumption and prevent viruses 

and spyware from forcing your computer to connect with unwanted 

websites. 

More SSL VPN Tunnels 

Remote access has never been so easy. Utilising only a standard web 

browser, users can easily and secure access e-mail, files, applications, 

web servers and any resources on the corporate network from any 

location. With industry strength security and encryption algorithms, 

the ZyWALL’s SSL VPN feature ensures your privacy of data. 

IPSec VPN Client 

Ideal for remote teleworkers to access company resources in a secure 

manner. Software client from SafeNet to be installed on client PC’s. 

Vantage CNM 

A robust centralised Network Management System. 

Centralised UTM Management for License and Policy 

Enforcements and One-Click VPN configuration 

Group Device Configuration for mass deployments: firmware upgrades, 

Policy installations and backup/restore, Real-time monitoring, alerting 

and comprehensive graphic reporting 

Vantage Report 

A comprehensive Reporting System. 

Quickly and conveniently collect and/or analyse log orientated by 

devices across distributed networks 

Highly accessible and easy-to-use architecture provides IT staff a 

simple method to monitor/analyse network traffic associated with 

ZyWALL devices. 

*Included in all USG range 






iCard Kaspersky Anti-Virus, 1 year iCard Kaspersky Anti-Virus, 2 years 

iCard ZyXEL Anti-Virus, 1 year iCard ZyXEL Anti-Virus, 2 years 









ZyWALL USG 100 iCard IDP, 1 year iCard IDP, 2 years 





ZyWALL 2 Plus iCard Content Filtering Silver, 1 year 

ZyWALL 2 WG iCard Content Filtering 2 WG, 1 year 

ZyWALL 5 iCard Content Filtering Silver, 1 year 

ZyWALL USG 100 iCard Content Filtering, 1 year iCard Content Filtering, 2 years 





ZyWALL SSL10 iCard 10 to 25 SSL Tunnels 

ZyWALL USG 100 iCard 2 to 5 SSL Tunnels 

ZyWALL USG 200 iCard 2 to 10 SSL Tunnels 




Client PC’s 

All ZyWALL models 

All ZyWALL models 

iCard 2 to 10 SSL Tunnels iCard 2 to 25 SSL Tunnels 

iCard 10 to 25 SSL Tunnels 







ZyWALL IPSec VPN client 1 license ZyWALL IPSec VPN client 5 licenses 

ZyWALL IPSec VPN client 10 licenses ZyWALL IPSec VPN client 50 licenses 

CNM, 10 nodes CNM, 25 nodes 



Vantage Report, 1 device* Vantage Report, 5 devices 

Vantage Report, 25 devices Vantage Report, 100 devices 

Security Product Highlight 


Unifi ed Security Gateway 

The ZyWALL USG 2000 is an ultra high performance, 

deep packet inspection security platform for 

enterprises. It incorporates a firewall, IDP, content 

filtering, anti-virus, anti-spam, and VPN in one 

box. This multi-layered security safeguards 

your business’s customer and company records, 

intellectual property, and critical resources from 

external and internal threats. 

Key Benefits 

High performance VPN concentrator - using IPSec VPN to secure 

connections in between headquarters, branch offices, partners. 

Road warriors and telecommuters can use SSL or L2TP VPN to 

securely access the company network without having to install 

VPN software. 

The ICSA-certified, stateful inspection firewall protects the 

network and vital Internet services like e-mail, Web browsing, 

servers, and file transfers. 

For protection against viruses and spyware, choose the ICSAcertified 

ZyXEL Anti-Virus or one powered by Kaspersky Labs. 

Scalable UTM and/or VPN performance by adding SEM (Security 

Extension Module). 

The Application Patrol controls who can use what IM and P2P 

applications like MSN and BitTorrent, and even who can use 

specific features within an application. 

The Intrusion Detection and Prevention (IDP) engine protects your 

network from intrusions such as Trojans and worms. 

The anti-spam feature can tag or discard unsolicited commercial 

or junk e-mail. 

User-aware configuration lets you control access to applications or 

resources and apply security scans by user or user group. 

Bandwidth management lets you prioritise and limit traffic so 

time-sensitive applications like VoIP and video conferencing work 

properly. 

High availability features such as device HA, redundant power 

module, and multiple ISP links in a single WAN trunk - guarantees 

non-stop operation for mission-critical applications. 

12 13

LAN Switches Solution Scenario 

SME Network 

Providing high throughput and full security demanded by SME network administrators, addressing new and growing security risks in 

addition to increasing an institution’s flexibility and capacity to innovate all at the same time is a delicate balancing act. 

Internet 

XGS-4528F 

10G Switch 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 

WLAN 

ETHN 

PWR/SYS 

WLAN AP 

ES-3124PWR 

FE PoE Switch 

Human Resources 

VLAN 10 


Unified Security 

Gateway 

Server 

Farm 

ES-3124 

ES-3124 

ES-3124 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

BPS 

PWR 

SYS 

ALM 

BPS 

PWR 

SYS 

ALM 

BPS 

PWR 

SYS 

ALM 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 6 8 

10 12 14 16 

18 20 22 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

10 100 

LNK/ 

CONSOLE 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 

ACT ACT 

MGMT 

2 4 6 8 

10 12 14 16 

18 20 22 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

10 100 

LNK/ 

CONSOLE 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 

ACT ACT 

MGMT 

2 4 6 8 

10 12 14 16 

18 20 22 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

10 100 

LNK/ 

CONSOLE 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 

ACT ACT 

MGMT 

ACT 

PoE 

LNK/ 

ACT 

PoE 

ACT 

PoE 

LNK/ 

ACT 

PoE 

ACT 

PoE 

LNK/ 

ACT 

PoE 

24 

23 

24 

23 

24 

23 

26 

28 

25 

27 

26 

28 

25 

27 

26 

28 

25 

27 

27 

27 

27 

28 

28 

28 

XGS-4528F 

XGS-4528F 

BPS 

PWR 

SYS 

ALM 

BPS 

PWR 

SYS 

ALM 

10G Connection 

XGS-4528F 

10G Switch 

S1 S2 

S1 S2 

1 2 3 4 5 6 7 8 

1 2 3 4 5 6 7 8 


ES-3124 

FE Switch 

Layer 2 Desktop 

XGS-4528F 

10G Switch 

XGS-4528F 

S1 S2 

BPS 

PWR 

SYS 

ALM 

RESET 

POWER 

CONSOLE 

12VDC 

9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

1 2 3 4 5 6 7 8 

WDS 


ETHN 

PWR/SYS 

9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

Server 

Farm 

ES-3124 

ES-3124 

ES-3124 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

BPS 

PWR 

SYS 

ALM 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

ACT 

BPS 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

ACT 

BPS 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

10G Stacking 

Finance 


2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

FDX 

9 11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

FDX 

9 11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

FDX 

9 11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

ACT 

PoE 

LNK/ 

ACT 

PoE 

26 

28 

25 

27 

26 

28 

25 

27 

26 

28 

25 

27 

GbE Uplink 

Server Aggregation 

27 

27 

27 

28 

28 

28 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 


ES-2024 

FE Switch 

ACT 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

ACT 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

ACT 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

ES-2024 

ES-2024 

ES-2024 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

Core Network 

Sales & Marketing 


2 4 6 8 

10 12 14 16 

18 20 22 24 

100/1000 

100/1000 

CONSOLE 

LNK 

LNK 

1 3 5 7 

9 11 13 15 

17 19 21 23 

ACT 

ACT 

ACT 

ACT 

2 4 6 8 

10 12 14 16 

18 20 22 24 

100/1000 

100/1000 

CONSOLE 

LNK 

LNK 

1 3 5 7 

9 11 13 15 

17 19 21 23 

ACT 

ACT 

ACT 

ACT 

2 4 6 8 

10 12 14 16 

18 20 22 24 

100/1000 

100/1000 

CONSOLE 

LNK 

LNK 

1 3 5 7 

9 11 13 15 

17 19 21 23 

ACT 

ACT 

ACT 

ACT 

25 26 

25 26 

25 26 

Edge Network 

GbE Fiber 

FE 

14 15 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 


Wiring Closet 

Small Building 1 

ES-3124 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

ACT 

BPS 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

2 4 6 8 

10 12 14 16 

18 20 22 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

10 100 

LNK/ 

CONSOLE 

LNK/ 

ACT 

ACT 

1 3 5 7 

9 

FDX 

11 

FDX 

13 15 

17 19 21 

ACT ACT 

MGMT 

1 3 5 7 9 11 13 15 17 19 21 23 

24 

23 

26 

28 

25 

27 

27 

28 

ES-2024PWR 

ES-3124PWR 

FE PoE Switch 

XGS-4528F 

10G Switch 

1 2 3 4 5 6 7 8 

S1 S2 

BPS 

PWR 

SYS 

ALM 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 


Wiring Closet 


XGS-4528F 

XGS-4528F 

S1 S2 

BPS 

PWR 

SYS 

ALM 

1 2 3 4 5 6 7 8 


9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

ACT 

BPS 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

ACT 

BPS 

PoE 

PWR 

LNK/ 

SYS 

ACT 

ALM 

PoE 

ES-3124 

ES-3124 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

GbE Connection 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

FDX 

9 11 

FDX 

13 15 

17 19 21 23 

ACT 

ACT MGMT 

2 4 6 8 

10 12 14 16 

18 20 22 24 

LNK/ 

LNK/ 

ACT 

ACT 

FDX 

FDX 

LNK 

LNK 

CONSOLE 

10 100 

LNK/ 

LNK/ 

ACT 

ACT 

1 3 5 7 

FDX 

9 FDX 

11 13 15 

17 19 21 23 

ACT 

ACT MGMT 

1 3 5 7 9 11 13 15 17 19 21 23 

26 

28 

25 

27 

26 

28 

25 

27 

27 

27 

28 

28 

ES-3124 

ES-3148 

FE Switch 

Core 

Network 

XGS-4528F 

1 2 3 4 5 6 7 8 

S1 S2 

BPS 

PWR 

SYS 

ALM 

XGS-4528F 

S1 S2 

BPS 

PWR 

SYS 

ALM 

1 2 3 4 5 6 7 8 

9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 


Wiring Closet 


MS-7206 

Chassis Switch 


XGS-4528F 

10G Switch 

PWR 

SYS 

ALM 

PWR 

SYS 

ALM 

ES-2024 

ES-2024 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 5 8 10 12 14 16 18 20 22 24 

LNK/ 

1 3 5 7 9 11 13 15 17 19 21 23 

2 4 6 8 

10 12 14 16 

18 20 22 

ACT 

PoE 

LNK/ 

ACT 

PoE 

1 3 5 7 

9 11 13 15 

17 19 21 

2 4 6 8 

10 12 14 16 

18 20 22 

ACT 

PoE 

LNK/ 

ACT 

PoE 

1 3 5 7 

9 11 13 15 

17 19 21 

24 

23 

24 

23 

Server 

Farm 

FE/GbE Edge Switch 

23 

LNK 

LNK 

10 100 

ACT ACT 

MGMT 

CONSOLE 

23 

24 

LNK 

LNK 

10 100 

24 

CONSOLE 

ACT ACT 

MGMT 

GS-2024 

Gigabit Switch 

GbE Server Aggregation 

GbE Fiber Aggregation 

GbE Fiber 

GbE Copper 

FE

LAN Switches Quick Finder 

Core Switch 

—Modular 

Distribution Switch 

—Managed 

Access Switch— 

Managed 


Web Managed 


Unmanaged 

7000 Series Gigabit Ethernet MS-7206 

4500 Series Gigabit Ethernet XGS-4528F 

4000 Series 

3000 Series Fast Ethernet 

Gigabit Ethernet GS-4024 

Fast Ethernet ES-4124 

ES-3124 

ES-3124PWR 

ES-3148 

2200 Series Gigabit Ethernet GS-2228 

2000 Series 

1500 Series 

1000 Series 

Gigabit Ethernet GS-2024 

Fast Ethernet 

Gigabit Ethernet 

ES-2024A 

ES-2024PWR 

ES-2048 

ES-2108 

ES-2108-F 

ES-2108-G 

ES-2108PWR 

GS-1524 

GS-1528PWR 

GS-1548 



Gigabit Ethernet GS-1124B 

Fast Ethernet 

100 Series Fast Ethernet 

ES-1016B 

ES-1024B 

ES-1124 

ES-116P 

ES-124P 

Model Name Ports Key Features Competitive Products 

16 17 

MS-7206 

XGS-4528F 

GS-4024 

ES-4124 

ES-3124 

ES-3124PWR 

ES-3148 

GS-2228 

GS-2024 

ES-2024A 

ES-2024PWR 

ES-2048 

Up to 

192 1000Base-T ports 

192 1000Base-T ports with PoE 

96 1000Base-T SFP 

32 10G XFP 

24 dual personality GbE ports 

2 12G stacking port 

1 optional 2-port 10G module 

20-port 1000Base-T 


24-port 10/100Base-TX 






24-port 10/100Base-TX PoE 
















ES-2108 8-port 10/100Base-TX 

ES-2108-F 

ES-2108-G 

ES-2108PWR 

GS-1524 

GS-1528PWR 

GS-1548 

ES-1528 

ES-1552 


1 SFP open slot (FE) 







24-port 






2 SFP open slot (GbE) 



2 SFP open slot (GbE) 

GS-1124B 24-port 1000Base-T 

ES-1016B 16-port 10/100Base-TX 

ES-1024B 24-port 10/100Base-TX 

ES-1124 



ES-116P 16-port 10/100Base-TX 

ES-124P 24-port 10/100Base-TX 

Unparalleled Performance and Scalability 

High Availability and Resiliency 

Secure Connectivity 

Guaranteed Quality of Service for Different Applications 

Low Total Cost of Ownership 

Built-in 12G stacking ports eliminate hidden cost on network expansion 

True wire-speed L3 switching for high-performance networks 

Two 10 Gigabit uplink ports expand bandwidth 10 times to speed up the traffic transportation 

2K/16K MAC entries, 8K L3 Host and 512/12K L3 Route 

High-Performance wire-speed switching and IP routing 

Advanced QoS for significant services 

High-security for business-critical applications 

L3 IP Routing RIP and OSPF support 

Multicast DVMRP and IGMP support 

High redundancy and resilience architecture with RSTP, VRRP and Port Trunking 

Empowering Converged Network for SME 

Secure Multi-Service Delivery Quality 

Enhanced Multi-layer Security Protection 

Advanced routing protocol (OSPF, RIP, VRRP and DVMRP) 

Easy ETTx deployments 

Robust High-Availability system design 

Secured service-level IP TV and VoIP operations 

Strengthened service management and control 

IEEE 802.1s MSTP and IEEE 802.1w RSTP enable fast recovery networks 

Backup Power System (BPS) extends network up time 

Policy-based QoS empowered by (L2/L3/L4) ACL, 8 priority queues, WRR/SPQ and DSCP 

256 Static VLAN and 4 K PVID benefit VLAN management 

VLAN Stacking (Q-in-Q) support for L2VPN 

Remote management via IEEE 802.3ah (OAM) 

12.8 Gbps non-blocking switching capability 

16K layer 2 MAC addresses table; 448 KB packet buffer 

Overheat detection 

48 Gbps non-blocking switch fabric 

Supports IEEE 802.1p which classes and prioritises network 

Supports specific MAC addresses forwarding per port support IEEE 802.1x port authentication 

8.8 Gbps/13.6 Gbps non-blocking switching fabric 

Port-based and 802.1Q-tagged VLAN (4K PVID) 

MAC filtering, freeze and specific MAC forwarding 

Port security and port isolation 

802.1x Port-based authentication for centralised management 

IEEE 802.1p with eight priority queues 

WFQ, bandwidth guaranteed scheduling algorithm 

MVR and IGMP snooping for IP multicasting optimisation 

iStacking TM Clustering technology allowing one IP to manage 24 devices 

Flexible installation empowered by Power over Ethernet 

Easy Web GUI for intelligent PoE management 

5.6 Gbps non-blocking switching capability 

Fan-less hardware design (ES-2108/ES-2108-G/ES-2108-F) 

Traffic prioritising of Intelligent QoS and bandwidth increment of 64 Kbps optimise service quality of 

application and utilisation of bandwidth 

MVR enables IP multicasting applications across multiple VLANs environments 

Against unauthorised access by protection of 802.1x, VLAN (4K PVID), MAC filtering/forwarding and 

MAC freeze. In addition, Intrusion lock can block the penetration attack 

ES-2108PWR supports full power for 8 port PoE simultaneously (15.4 W x 8) 

ES-2108-F support 100BASE-X trasnsceivers (100FX/LX/BX) ease fiber network deployment 

Robust system design 

Web-managed interface enables simplified configuration 

Revolutionary new smart power 

Auto DoS attack prevention 

Auto VoIP optimisation 

12.8/17.6 Gbps non-blocking switching fabric for ES-1528/52 

48/96 Gbps non-blocking switching fabric for GS-1524/48 

Flexible 4 GbE uplink interfaces 

IEEE 802.3ad Static Port Aggregation streamlined Web-based interface IEEE 802.1Q VLAN 

Port security 

IEEE 802.1p with 4 priority queues WRR and SPQ queuing algorithms 

48 Gbps non-blocking switching fabric; 38.7Mpps forwarding rate 

8K MAC address table 

Non-blocking full wire speed forwarding 

Data flow control for better transmission reliability 

Forwards and filters packets at non-blocking, full wire-speed 

Auto MDI/MDI-X support 

4.8/3.2 Gbps non-blocking switching fabric; 3.2/2.4 Mpps forwarding rate 

1K MAC address table 

Suitable for desktop and rack-mount installation 

Cisco Catalyst 4500 Series 

HP Procurve 5400zl Series 

3Com Switch 5500 Series 

3Com Switch 4500G 

Cisco Catalyst 2960 

HP Procurve 2800/2900 Series 


Cisco Catalyst Express 500 

HP Procurve 2810 Series 




3Com Switch 4500 









3com Baseline 2924 

HP ProCurve 2810 

3Com Switch 29xx Series 

Cisco Catalyst Express 5xx Series 

HP Procurve 2510G Series 







3Com Switch 4400 Series 


Cisco 2940-8TT 

3Com OfficeConnect Managed Switch 9 

Cisco 2940-8TF 

3Com OfficeConnet Managed Swith 9 FX 

3Com OfficeConnet Managed Swith 9 FX 

3Com Baseline Switch 


D-Link DGS 1224T 

HP ProCurve 1800-24G 



Netgear FS-728 

D-Link DES-1228 



Netgear FS-752, D-Link DES-1252 



D-Link DGS 1248T 


HP Procurve Switch 408/2124 

Linksys EF3124 

HP Procurve Switch 408/2124 

Netgear JFS516 

D-Link DSS-16+ 

Netgear JFS524 

D-Link DES-1024D

LAN Switches Feature Matrix 

Model Name 

System 

Capacity 

Performance 

Max Port 

Density 

Resilience and 

Availability 

Traffic Control 

Security 

Management 

Module 

Power 

Switch Fabric Slot: 2 

I/O Module Slot: 4 

Power Supply Unit Slot: 2 

Fan Module Slot: 1 

Switching Fabric: 384 Gbps 

Forwarding Rate: 285 Mbps 

1000BASE-T: 192 

1000BASE-T with PoE: 192 (4 x MI-7248PWR) 

1000 SFP: 96 

10G: 32 (4 x MI-7308 + 8 EM-412/EM-422) 

IEEE 802.1D STP/802.1w RSTP/802.1s MSTP 

Redundant Power supply support 

IEEE 802.3ad LACP(max # trunks/links per trunk): 6/8 

Switch Fabric High Availability 

VRRP 

MRSTP 

Dual Configuration Files 

Swappable Fan module 

256 static VLAN up to 4K dynamic VLAN 

802.1ad VLAN Stacking (QinQ) 

BPDU Transparency 

GVRP 

VLAN Trunking 

802.1x 

Intrusion Lock 

MAC Filtering 

iStacking 

Web Interface 

CLI 

Syslog 

Daylight Saving 

MAC Freeze 

Port Isolation 

Port Security 

Switch 7000 Series 

MS-7206 

RMON (1, 2, 3, 9) 

Port Mirroring 

NTP 

DHCP Relay per VLAN 

RJ-45 Out-of-band Management Port 

SSH v1/v2 

SSL 

Static MAC Forwarding 

ACL (L2/L3/L4) Security Filtering 

MM-7201 Management Switching Fabric Module 

MI-7248 48-port 100/1000BASE-T (RJ-45) I/O Module 

MI-7248TF 48-port (24 RJ-45 and 24 SFP Slot) GbE Ports I/O Module 

MI-7248PWR 48-port 100/1000BASE-T (RJ-45) I/O Module with PoE (Full Power) 

MI-7308 4-port XFP and 2 Expansion Slot (EM-412/EM-422) I/O Modules 

MP-7201 600 W Power Supply Module 

MP-7202 750 W External PoE Power Souring Device 

DHCP Option 82 

DHCP Client (Management) 

RS-232 Out-of-band Console Port 

SNMP v1, v2c 

802.3af PoE Support 

Jumbo Frame Support on Gigabit Ports 

18 19 

Model Name 

Switch 4500 Series Switch 4000 Series Switch 3000 Series 

XGS-4528F GS-4024 ES-4124 ES-3124 ES-3124PWR ES-3148 

Port Density 

10/100Base-TX, 

RJ-45 Ports 

- - 24 24 - 48 

10/100Base-TX PoE - - - - 24 - 

1000Base-T, 

RJ-45 Ports 

- 20 2 2 2 2 

Dual Personality 

GbE Ports 

24 4 2 2 2 2 

10G Extend Slot 1 - - - - - 

12G Stacking Port 2 - - - - - 

Performance 

Switching Capacity 144 Gbps 48 Gbps 12.8 Gbps 12.8 Gbps 12.8 Gbps 17 Gbps 

Switching 

Forwarding Rate 

100 Mpps 35.7 Mpps 9.6 Mpps 9.6 Mpps 9.6 Mpps 13.1 Mpps 

Packet Buffer 768 K 2 MB 32 MB 32 MB 32 MB 32 MB 

MAC Address 8 K 16 K 16 K 16 K 16 K 16 K 

Reliance and Availability 

STP/RSTP/MSTP ✔ ✔ ✔ ✔ ✔ ✔ 

Dual Configuration 

Files 

✔ ✔ ✔ ✔ ✔ ✔ 

IEEE 802.3ad LACP ✔ ✔ ✔ ✔ ✔ ✔ 

Redundant Power 

Supply Support 

✔ ✔ ✔ ✔ ✔ ✔ 

MRSTP ✔ ✔ ✔ ✔ ✔ ✔ 

VPRP - ✔ ✔ - - - 

Loop Guard 


✔ ✔ ✔ ✔ ✔ ✔ 

All Series Support 

Security 


Management 


Environmental Specification 

Dimensions 

(W x D x H mm) 

Power Consumption 

(Watt) 

Static VLAN/ 

Dynamic VLAN 

802.1x 

Port Security 

MAC Filtering 

MAC Freeze 

CLI 

iStacking 

RMON (1, 2, 3, 9) 

SNMP v1, v2c, v3 


NTP 

802.1ad VLAN 

Stacking (QinQ) 

SSHv1v2 

SSL 

Intrusion Lock 


SNMP Trap Group 



Web Interface 

Syslog 

TACACS+ Accounting 

BPDU 

Transparency 

802.1Q Port 

Base VLAN 

IP Subnet 

Based VLAN 

MAC Authentication 


IP Source Guard 


TACACS+ Authentication 

DHCP Relay per VLAN 

RADIUS Accounting 

RS-232 Out-of band Console Port 

802.3ah OAM 


RJ-45 Out-of-band Management Port 


GVRP 

438 x 310 x 44.45 438 x 300 x 44.45 438 x 225 x 44.45 438 x 270 x 44.45 438 x 420 x 44.45 438 x 300 x 44.45 

62.8 53.8 30.3 28.7 437 39.7

Model Name 


GS-2024 ES-2048 ES-2024A ES-2024PWR ES-2108 ES-2108-F ES-2108-G ES-2108PWR 

Port Density 

10/100Base-TX, RJ-45 Ports - 48 24 - 8 8 8 - 

10/100Base-TX PoE - - - 24 - - - 8 

1000Base-T, RJ-45 Ports 22 - - - - - - - 

FE Open SFP Slot - - - - - 1 - - 

Dual Personality GbE Ports 2 2 2 2 - - 1 1 

Performance 

Switching Capacity 48 Gbps 13.6 Gbps 8.8 Gbps 8.8 Gbps 1.6 Gbps 1.8 Gbps 3.6 Gbps 3.6 Gbps 

Switching Forwarding Rate 35.7 Mpps 10.1 Mpps 6.6 Mpps 6.6 Mpps 1.2 Mpps 1.4 Mpps 2.7 Mpps 2.7 Mpps 

Packet Buffer 512 K 32 Mb 256 K 256 K 256 K 256 K 256 K 256 K 

MAC Address 8 K 16 K 8 K 8 K 8 K 8 K 8 K 8 K 


STP/RSTP/MSTP ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

Dual Configuration Files ✔ ✔ - - - - - - 

IEEE 802.3ad LACP ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

Loop Guard 


✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

Static VLAN/ Dynamic VLAN 256/4 K 256/4 K 256/4 K 256/4 K 256/4 K 256/4 K 256/4 K 256/4 K 

8021.Q Port base VLAN ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

VLAN Trunking ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

GVRP 

Security 

✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

MAC Authentication - ✔ - - - - - - 

IP Source Guard - ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

ACL (L2/L3/L4) Security 

Filtering 

- ✔ Static IP/MAC Binding Static IP/MAC Binding Static IP/MAC Binding Static IP/MAC Binding Static IP/MAC Binding Static IP/MAC Binding 

All Series Support 802.1x Port Security MAC Filtering MAC freeze SSHv1v2 Intrusion Lock SSL Static MAC 

Forwarding 

Management 

RJ-45 Out-of-band 

Management Port 

All Series Support CLI 

Web Interface 

RMON (1, 2, 3, 9) 


- ✔ - - - - - - 




SNMP v1, v2c, v3 

NTP 


iStacking 

Syslog 

TACACS+ Accounting 

DHCP Client 

(Management) 

RADIUS Accounting 

TACACS+ 

Authentication 

DHCP Aelay per 

VLAN 

RS-232 Out-of-band 

Console Port 

Dimensions 


438 x 300 x 44.45 438 x 300 x 44.45 438 x 173 x 44.45 438 x 173 x 44.45 250 x 133 x 37 250 x 133 x 37 250 x 133 x 37 250 x 133 x 37 

Power Consumption (Watt) 20.9 40 14.1 171.9 7.8 7.4 7.8 132.1 

20 21 

Model Name 


GS-2228 

Port Density 

1000Base-T, RJ-45 Ports 24 

Dual personality GbE Ports 4 

Performance 

Switching Capacity 56 Gbps 

Packet Buffer 3.5 

MAC Address 16 K 


STP/RSTP/MSTP 

IEEE 802.3ad LACP 


Static VLAN/Dynamic VLAN 256/4 K 

8021.Q Port base VLAN 

✔ 


✔ 

Security 

802.1x 

Port Security 

MAC Filtering 


SSH v1/v2 

SSL 



Management 

iStacking 

Web Interface 

CLI 

DHCP Client 

NTP 


RS-232 Out-of-band Console Port 


RMON (1, 2, 3, 9) 


✔ 

✔

Model Name 


GS-1524 GS-1528PWR GS-1548 ES-1528 ES-1552 

Port Density 

10/100Base-TX - - - 24 48 

1000Base-T 20 - 44 2 2 

1000Base-TX PoE - 24 - - - 

Open SFP Slot (GbE) - - - 2 2 

Dual personality GbE Ports 4 4 4 - - 

Performance 

Switching Capacity 48 Gbps 56 Gbps 96 Gbps 12.8 Gbps 17.6 Gbps 

Switching Forwarding Rate 35.7 Mpps 3.5 Mpps 71.4 Mpps 9.6 Mpps 13.1 Mpps 

Packet Buffer 512 K - 512 K 512 K 512 K 

MAC Address 8 K 16 K 8 K 8 K 8 K 


IEEE 802.3ad LACP 6/8 (Static only) 6/8 (Static only) 6/8 (Static only) 6/8 (Static only) 6/8 (Static only) 


Static VLAN/Dynamic 

VLAN 

Security 

256/4 K 256/4 K 256/4 K 256/4 K 256/4 K 

Static MAC Forwarding ✔ ✔ ✔ ✔ ✔ 

Auto DoS Attack 

Prevention 

Classic of Service (CoS) 

✔ - ✔ ✔ ✔ 

802.1p Class of Service ✔ ✔ ✔ ✔ ✔ 

Device Management 

All Series Support Web Interface, Port Mirroring Reset Button (Hardware) 

Management 

SNMP v1, v2c, v3 ✔ ✔ ✔ v1, v2c v1, v2c 

RMON (1, 2, 3, 9) RMON_Lite RMON_Lite RMON_Lite RMON_Lite RMON_Lite 

syslog ✔ ✔ ✔ ✔ ✔ 

Dynamic ARP 

Misc 

✔ ✔ ✔ ✔ ✔ 

Jumbo Frame Support 

on Gigabit Ports 

✔ - ✔ - - 


Dimensions 


438 x 215 x 44.45 438 x 173 x 44.45 441 x 195 x 44.45 441 x 130 x 44.45 441 x 195 x 44.45 

Power Consumption (Watt) 41.1 395 80.1 12 51 

22 23 

Model Name 


GS-1124B ES-1124 ES-1024B ES-1016B 

Port Density 

10/100Base-TX - 24 24 16 

1000Base-T 24 - - - 

Dual Personality GbE Port - 2 - - 

Performance 

Auto MDI/MDI-X - ✔ ✔ ✔ 

Switching Capacity 48 Gbps 8.8 Gbps 4.8 Gbps 3.2 Gbps 

Switching 


38.7 Mpps 6.6 Mpps 3.6 Mpps 2.4 Mpps 

Packet Buffer - 2.5 Mb 1.25 Mb 1.25 Mb 

MAC Address 8 K 8 K 8 K 8 K 

802.1p CoS ✔ - - - 

Broadcast Storm Control ✔ - ✔ ✔ 

VLAN Packet Pass 

Through 

✔ ✔ ✔ ✔ 


Dimensions 


Model Name 

438 x 130 x 44.45 438 x 161 x 44.45 438 x 130 x 44.45 438 x 130 x 44.45 


ES-116P ES-124P 

Port Density 

10/100Base-TX 16 24 

Performance 

Auto MDI/MDI-X ✔ ✔ 

Switching Capacity 4.8 Gbps 3.2 Gbps 

Switching 


3.2 Mpps 2.4 Mpps 

Packet Buffer 1.25 Mbit 1.25 Mbit 

MAC Address 1 K 1 K 

Broadcast Storm Control ✔ ✔ 

VLAN Packet Pass 

Through 

✔ ✔ 


Dimensions 


Power Consumption 

(Watt) 

215 x 133 x 42 267 x 152.5 x 42 

6.44 7.26

LAN Switches Product Highlight 

MS-7206 

Modular Switch 

Hottest 

Product 

The MS-7206 examines Tolly Group to test through 

the chassis that has public trust most in the 

world, the content of the test report verifies high 

throughput with 192 GbE zero-loss of MS-7206, 

low latencies, and low power consumption. 

Optional Modules 

MM-7201 

Redundant Management Fabric Module 

Load sharing and non-blocking performance 

RS-232 and RJ-45 console port 

MI-7248PWR 

48 1000Base-T PoE Module 

48 1000Base-T PoE RJ-45 ports 

MP-7202 

PoE Power Supply for 

MI-7248PWR Module 

750 watt PoE power supply 

Key Features 

Intelligent L2/L3/L4 local switching 

True non-blocking 384G switching performance 

Dual active-active switching fabrics 

Hot-swappable I/O modules 

Built-in OSPF, VRRP 

Up to 192 full-powered GbE PoE ports 

Passive backplane allows redundant, load-sharing, hot-swappable switch 

modules 

Hot-swappable I/O modules, power supply and fan trays ensure network 

continuity and easy maintenance Isolated power design for PoE and system 

demand 

High-density with up to 192 100/1000BASE-T ports 384 Gbps non-blocking 

switching 

Fabric hardware wire-speed IP routing platform (OSPF, RIP VRRP DVMRP) 

Fault-free, high-availability system empowered by VRRP, MSTP and RSTP for 

enhanced resiliency and stability 

Traffic optimisation for triple-play data, voice and video applications 

MI-7248 

48 100/1000Base-T Module 

48 100/1000Base-T RJ-45 ports 

MI-7308 

4 10-GbE CX4 + 2 Extend Slots for 

Optional 2 10G Moulde 

4 10 Gigabit Fiber XFP slots 

(requires purchase of XFP’s) 

2 slots for EM-412/EM-422 modules 

for additional 10G connection 

MI-7248TF 

24 1000Base-T + 24 GbE SFP Module 

24 1000Base-T RJ-45 ports 

24 GbE SFP open slots 

MP-7201 

Power Supply for MS-7206 Chassis 

600 watt power supply 

Accessories 

10Gb Fiber Module 

EM-412 2-slot CX4 10Gb 

Media Converter 

2-slot XFP 10Gb Fiber module 

Extended 10Gbe module of MI-7308/XGS-4528F (Requires 

purchase of 10Gb XFP transceivers) 

MC1000-SFP-FP 100/1000Base-T RJ-45 to Gigabit Fiber 

Fiber Protection Mechanism 

1 mini-GBIC SFP slot for flexible choice of SFP 

Multimode and singlemode supported 

Up to 80 km reach (depends on mini-GBIC SFP) 

Max. power consumption: 9.6 watt 

Dimensions: 194 (W) x 129 (D) x 25 (H) mm 

MC100FX-SC30-A 10/100Base-TX RJ-45 to 100FX Singlemode 

For use with singlemode Fiber, SC connector 

Up to 30 km reach 



MC100FX-SC2-A 10/100Base-TX RJ-45 to 100FX Multimode 

For use with multimode Fiber, SC connector 

Up to 2 km reach 



24 25 

EM-422 

Extended 10Gbe module of MI-7308/XGS-4528F

PoE Injector 

POE-12 IEEE 802.3af 15.4 watt PoE Injector 

Backup Power System 

Fanless design, noiseless 


BPS-120 Up to 6 switches from the 4000/3000/2700 series can be 

connected to one BPS-120 

SFP Transceiver 

Speed Model Type Distance 

10-Gigabit XFP 

Transceivers 

Gigabit SFP 

Transceivers 

Fast Ethernet SFP 

Transceivers 

FTLX1411D3 (XFP-SR) SC connector Singlemode, up to 300 m reach 

FTLX8511D3 (XFP-LR) SC connector Singlemode, up to 10 km reach 

Provides power to 1 switch without traffic or user interruption 

or switch rebooting in the event of a switch internal power 

supply failure 

Temperature, power and fan speed monitoring 

Max. power consumption: 180 watt/613 BTU/hr 

Dimensions: 440 (W) x 270 (D) x 44.45 (H) mm 

Package includes 1 cable for connecting switch also provide: 

- Extra BPS Cable, 1-pack 

- Extra BPS Cables, 5-pack 

SFP-1000T RJ-45 connector Up to 100 m using standard Ethernet cable 

SFP-SX LC connector Multimode, up to 220 m reach (62.5um)/up to 550 m reach (50 um) 

SFP-LX-10 LC connector Multimode, up to 550 m reach; Singlemode, up to 10 km reach 

SFP-BX-1310-10 LC connector Bidirectional Singlemode, up to 10 km reach 


SFP-LHX1310-40 LC connector Singlemode, up to 40 km reach 

SFP-BX1310-40 LC connector Bidirectional Singlemode, up to 40 km reach 


SFP-BX1310-60 LC connector Bidirectional Singlemode, up to 60 km reach 


SFP-ZX-80 LC connector Singlemode, up to 80 km reach 

SFP-100FX-2 LC connector Multimode, up to 550 m reach 

SFP-100TX RJ-45 connector Up to 100 m reach using standard Ethernet cable 

SFP-100LX-20 LC connector Multimode, up to 550 m reach 

SFP-100BX1310-20 LC connector Bidirectional Singlemode, up to 10 km reach 

SFP-100BX1550-20 LC connector Bidirectional Singlemode, up to 10 km reach 

IMPORTANT: Bi-directional SFP must be used in pairs (Example: 1x SFP-BX1310-10 and 1x SFP-BX1490-10 connected together is a solution) 

Wireless LAN Solution Introduction 

Wireless LAN has become a favorable choice and proofed to be stable solutions when enterprises roll out the deployment of 

mobility coverage. ZyXEL Communications sees the TCO as major value indicators of our offerings and provides enterprises with 

scalable and feature-abundant Wireless LAN solutions. 

Zero Extra Cost to Convert Stand-alone APs into a Centralised WLAN 

ZyXEL is first company to provide Hybrid AP solution that makes the WLAN Access Point act as a stand-alone enterprise class AP and/or 

WLAN controller at the same time. The hybrid AP has full flexibility for companies to deploy secure and reliable WLAN networks. In the 

initial phase of constructing a WLAN, the NWA-3160 can be configured as a fully functional stand-alone AP; when more APs are installed, 

the NWA-3160 can be set to the WLAN controller mode to manage all other access points. Moreover, when a new branch office is set up, 

one of the managed NWA-3160 can become another controller and to manage a separate WLAN network. 

Simplifying the Maintenance Efforts for a Quality WLAN 

ZyXEL Hybrid AP solution can manage up to 24 access points while covering several alternatives of different applications, including 

range extension AP, dual-radio AP and Outdoor coverage AP. This support to a wide range of managed access point enables network 

administrators to choose the best AP for desired applications, while the management interface reminiscing single AP also helps network 

administrators to easily oversee all the WLAN access points, even they are not on the same site. 

Rigid Design for Reliable and Secure Wi-Fi Networks 

ZyXEL WLAN solutions meet the security and high availability demanded by enterprises as all communications between the Hybrid AP 

and managed AP are performed in a secured tunnel. Since no configuration data is stored on the managed AP, sensitive setup information 

will not be exposed even if the AP is stolen. In addition, all the equipments are Wi-Fi certified that secure the data transmission with solid 

encryption. 

Enterprise-class WLAN Functionality 

ZyXEL NWA WLAN Access Points are featured with enterprise class requirement, such as multiple SSIDs, profile-based management, 

leading QoS technology for VoWiFi applications, as well as comprehensive management features for massive deployments. Furthermore, 

NWA APs are designed with a non-invasive concept that prevents radical image change to enterprise surroundings. Its UL2043-certified 

casing has been fire-tested for heat and visible smoke release for discrete products and related accessories installed in air-handling spaces. 

The test evaluates various small, non-metallic products intended for use in air-handling spaces and plenums to prove that they are not 

harmful to the nearby personnel in case of fire. 

Optimised WLAN Throughput 

Throughput optimisation, another major WLAN concern, is also addressed in the ZyXEL Hybrid AP solution. ZyXEL NWA WLAN solutions 

keep optimising the channel designation in order to avoid interferences and to provide better WLAN system throughput. As an excellent 

performer and safe device, ZyXEL WLAN solutions are the best choices for enterprises to unleash themselves from wire bonds and 

expense hassles. 

26 27

Wireless LAN Solution Scenario 

Comprehensive Business WLAN Application Scenario 

ZyXEL Business WLAN product line includes Stand-alone AP, Hybrid AP (Controller and Managed Access Point) and WLAN 

Controller system accommodate small to large scale, single site to multi-site deployments. ZyXEL also provides Hotspot gateway 

to service Gateway generating new revenue by providing and managing visitor/guest Internet Access. 

Remote Management 

Wi-Fi deployment with several 

distributed branch offices is common 

and the management over the 

equipments of these independent 

sites is also essential to the enterprises. 

ZyXEL NWA-1000 and 3000 series are 

featured with various of management 

solutions that can help HQ supervise 

its multiple sites. 

Centralised Management 

ZyXEL NWA-3000 Series AP’s, including 

NWA-3160, NWA-3163, NWA-3500 

and outdoor AP NWA3550, can be 

configured as WLAN controller or 

managed AP. With this comprehensive 

feature, the Wi-Fi overlay networks 

can be monitored and managed in 

real-time. Also, back-up redundancy 

feature is considered for controller 

which can guarantee the users with 

uninterrupted service. 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

Config 

Server 

Redundancy 

Assignment 

SNMP 

Agent 

Headquarters 

RESET 

POWER 

CONSOLE 

12VDC 



Gateway 


WDS 


ETHN 

PWR/SYS 

PWR ACT RESET 

SYS HDD 

RESET 

POWER 

CONSOLE 

12VDC 

RESET 

POWER 

CONSOLE 

12VDC 

NWA-3500 WA-35 3500 

Dual-Radio alal-Radio Performance 

formance 


1 2 

USB 

3 4 5 

10/100/1000 

WDS 


ETHN 

PWR/SYS 

DIAL BACKUP 

CONSOLE 

NWA-3160 

Dual-band 

Support 

WDS 


ETHN 

PWR/SYS 

HDD SLOT 

Branch 1 


RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

PWR ACT RESET 

SYS HDD 


1 2 

USB 

3 4 5 

10/100/1000 

Branch 2 

Firmware/Config 


DIAL BACKUP 

CONSOLE 

HDD SLOT 


Enterprise AP and 

WLAN Controller 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

RESET 

POWER 

CONSOLE 

12VDC 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

WDS 


ETHN 

PWR/SYS 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

Network 

RESET 

POWER 

CONSOLE 

12VDC 

ETHERNET POWER 



RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 


PWR ACT RESET 

SYS HDD 


1 2 

USB 

3 4 5 

10/100/1000 

DIAL BACKUP 

CONSOLE 

NWA-3163 

Extended Range 

WDS 


ETHN 

PWR/SYS 

RESET 

POWER 

CONSOLE 

12VDC 

RESET 

POWER 

CONSOLE 

12VDC 

WLAN2 



PWR 

WDS 


ETHN 

PWR/SYS 

WDS 


ETHN 

PWR/SYS 

NWA-3166 

11n High-bandwidth 


PWR ACT RESET 

SYS HDD 


HDD SLOT 

Branch 3 


1 2 

USB 

3 4 5 

10/100/1000 

DIAL BACKUP 

CONSOLE 

RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

HDD SLOT 

Remote Site 

x 24 

NWA-3160 

Hybrid AP 



Gateway 


RESET 

POWER 

CONSOLE 

12VDC 

WDS 


ETHN 

PWR/SYS 

PWR ACT RESET 

SYS HDD 


1 2 

USB 

3 4 5 

10/100/1000 

DIAL BACKUP 

CONSOLE 

HDD SLOT 

Branch 4 

NWA3550 

Outdoor Coverage 

SME Voice over Wi-Fi 

In an environment with high VoWLAN demand, 

the ZyXEL WLAN controller system provides 

“zero-delay roaming” to guarantee the voice 

quality and user experience, while simple 

deployment and maintenance save effort and 

cost as well. The centralised management 

features provide the extendibility to manage 

other WLAN controller systems on remote sites. 

Warehouses, Hospitals, Retail 

Stores and Manufacturing Floors 

The Wi-Fi connection in warehouses, hospitals, 

retail stores and manufacturing floors are 

different from office environment. In the 

mentioned working areas, there are no handoff 

delay or out of service is tolerable. ZyXEL 

unique WLAN Controller system provides 

“Zero-Delay Roaming” and “Channel Blanket 

Deployment” eliminates hand-offs and 

converging holes is the best solution for such 

specialised facility. 

28 29 

POWER 

CONSOLE 


LINK/ACT 

LINK 

1 3 5 7 

2 4 6 8 






PWR 





PWR 

Wi-Fi Phone 

Easy deployment and 

maintenance 

Best VoWLAN 

experience ever 

STATUS 

NXC-8160 





PWR 

Server & User 

LINK 

CONSOLE 


POWER 

LINK/ACT 

1 3 5 7 

2 4 6 8 


STATUS 

Access Gateway 

Firewall 

Firewall 

NXC-8160 & NWA-8500 

WLAN Controllor & Managed AP 





PWR 





PWR 





PWR 

Wi-Fi Phone 

WLAN in SME 


NWA-8500 


NWA-8500 





PWR 




PWR 




PWR 

NWA-8500 

ZyWALL 70 

PWR ACT RESET 

SYS CARD 


WAN-1 WAN-2 

10/100 10/100 10/100 





PWR 





PWR 

LINK 

CONSOLE 


POWER 

LAN/DMZ 10/100 

1 2 3 4 DIAL BACKUP 

CONSOLE 

LINK/ACT 


1 3 5 7 

2 4 6 8 





PWR 

STATUS 

Internet 

Firewall 

NXC-8160 & NWA-8500 

WLAN Controllor & Managed AP 






PWR 




PWR 





PWR 

Warehouse 

Area 

Office 

Area 

Counter 

Area

Wireless LAN Quick Finder 

Medium 

Business 

Medium Business 

to Enterprise 

Hospitality 

Web Managed 

SNMP 

Management 

CAPWAP 

Supported 

Centralised 

Management 

Critical 

Roaming 

Centralised 

Management 


2.4 GHz Support 

Hot-Spot Service G-4100 v2 

Hotel/Campus VSG-1200 V2 

NWA1100 

NWA1100 

Dual-band Support NWA-3100 

Wide Bandwidth Required NWA-3165 

Hybrid AP: Controller/Managed AP/ 

Stand-alone AP 








Dual Radio Support 



Dual Radio Support 

Outdoor Extension 

NWA-3160 

NWA-3163 

NWA-3166 

NWA-3500 

NWA3550 

WLAN Switch NXC-8160 

Managed AP NWA-8500 

Model Names Description Typical Application WLAN Features Competitive Products 

NWA1100 Web-Managed AP Secure and Reliable WLAN 

Connectivity for Small to 

Medium Businesses 

NWA-3100 Web-Managed AP Dual-band operation with secure 

and reliable WLAN networking 

NWA-3165 Web-Managed AP Dead-Spot Elimination by MIMO 

Technology 

NWA-3160 Hybrid AP World’s No.1 multi-role AP for 

reliable, secure and flexible 

deployment 

NWA-3163 Hybrid AP Optimised design for reaching 

out the Wi-Fi service field 

NWA-3166 Hybrid AP Advanced bandwidth and 

converge with flexible scalability 

NWA-3500 Hybrid AP Concurrent 2.4 & 5 GHz 

Wi-Fi Convergence for Enterprise 

Applications 

NWA3550 Hybrid AP Outdoor AP to Extend the Wi-Fi 

Coverage 

NXC-8160 

(WLAN Switch) & 

NWA-8500 

(Managed AP) 

WLAN Switch Unique Interference-Free 

Architecture for High-Density 

Deployment 

Extended Range (802.11b/g) HP ProCurve Access Point 10AG 

Netgear WG102 

Single Radio (802.11a/b/g) HP ProCurve Access Point 420 

3Com Wireless 7760 

CISCO Aironet 1100 

Single Radio (802.11b/g/n) Linksys WAP4400N 

Aruba AP-125 

Single Radio (802.11a/b/g) HP ProCurve Access Point 420 

Extended Range (802.11b/g) HP ProCurve Access Point 420 


Cisco Aironet 1100 

Single Radio (802.11a/g/n) 3Com AirConnect 9550 

Cisco Aironet 1250 

Dual Radio (802.11a&g) HP ProCurve Access Point 530 WW 


Cisco Aironet 1130AG 

Dual Radio (802.11a&g) 3Com 3CRWEASYA73 

Cisco Aironet 1240AG 

802.11a/b/g (NWA-8500) Aruba MC200/800 

Cisco 2100 Series 

G-4100v2 Service Gateway Wi-Fi enabled HotSpot Gateway 802.11g Nomadix AG3100 

IP3 NA-Xe 

VSG-1200v2 Service Gateway AAA and PMS Integrate-able 

Internet Service Gateway 

N/A Nomadix AG5100 

IP3 NA-Xi 

30 31

Wireless LAN Feature Matrix 

Model 

Name 

Main Design 

Wireless 

Technology 

Wireless LAN 

Access Points 

1000 Series 

Wireless LAN Access Points 3000 Series 

NWA1100 NWA-3165 NWA-3100 NWA-3160 NWA-3163 NWA-3166 NWA-3500 NWA3550 

802.11g 

802.11n 

Draft 2.0 

802.11a/b/g 802.11a/b/g 802.11b/g 

802.11n 

Draft 2.0 

Wireless LAN Controller 

Series & Wireless LAN Access 

Points 8000 Series 

NXC-8160 (WLAN Switch) & 

NWA-8500 (Managed AP) 

802.11a&g 802.11a&g 802.11a/b/g (NWA-8500) 

Radio 1 1 1 1 1 1 2 2 2 

High Power ✔ - - - ✔ - - - - 

Number of 

Antenna 

LAN & WAN 

Number of 

10/100M 

LAN/Switch 

2 3 2 2 2 3 2 

2 N-type 

Connectors 

1 1 1 1 1 1 1 1 8 (Support up to 8 NWA-8500) 

PoE ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

PoE Power 

Draw 

WLAN Features 

Maximum 

Net 

Throughput 

WMM 

(Wi-Fi 

Certified) 

7.2 W 7.6 W 6.3 W 6.5 W 6.9 W 7.8 W 7.3 W 16.2 W 7.5 W 

22 ~ 44 Mbps 

100 ~ 110 

Mbps 

Up to 33 

Mbps 

Up to 33 

Mbps 

Up to 33 

Mbps 

100 ~110 

Mbps 

Up to 33 

Mbps 

Up to 33 

Mbps 

4 

22 ~ 44 Mbps 

✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ Compatible 

WEP ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

WPA 

(Wi-Fi 

Certified) 

WPA2 

(Wi-Fi 

Certified) 

Rogue AP 

Detection 

Draft n 

(Wi-Fi 

Certified) 

WLAN Management 

✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ Compatible 

✔ ✔ ✔ ✔ ✔ ✔ ✔ ✔ Compatible 

- - ✔ ✔ ✔ ✔ ✔ ✔ ✔ 

- ✔ - - - ✔ - - - 

Controller - - - ✔ - ✔ - - ✔ 

Managed AP - ✔ - ✔ ✔ ✔ ✔ ✔ - 

Others 

Plenum 

Rating 

- ✔ - ✔ ✔ ✔ - - - 

32 33 

Model Name 

Main Design 

Wireless Service Gateway Series 

VSG-1200 V2 G-4100 v2 

Wireless Technology - 802.11g 

Number of 10/100M LAN/Switch 1 4 

WAN 1 1 

PoE - ✔ 

PoE Power Draw - 6 W 

WLAN Features (G-4100 v2 only) 

802.11b/g - ✔ 

Number of Antenna - 2 

Maximum Throughput - 22 ~ 24 Mbps 

WEP - ✔ 

WPA (Wi-Fi Certified) - ✔ 

WPA2 (Wi-Fi Certified) - ✔ 

Others Features 

Built-in Authentication ✔ ✔ 

RADIUS Authentication Support ✔ ✔ 

IP Plug-and-play ✔ ✔ 

Layer-2 Isolation ✔ ✔ 

Customization Log-in Page ✔ ✔ 

Max. Concurrent User 250 100 

PMS Integration ✔ - 

Ticket Printer-SP300E - Button x 3 

- Input: 5 V DC, 2.5 A 

- Paper Width: 58 (+0/-1) mm 

- Paper length (max.): 50 meters 

- Support 802.3af Power over Ethernet

Accessories 

Antenna 

Model EXT-108 EXT-109 EXT-114 EXT-118 ANT2206 ANT3108 ANT3218 

Product 

Picture 

Frequency Band 2400 ~ 2500 MHz 2400 ~ 2500 MHz 2400 ~ 2500 MHz 2400 ~ 2500 MHz 2400 ~ 2500 MHz 2400 ~ 2500 MHz 2400 ~ 2500 MHz 

Gain1 8 dBi 9 dBi (peak) 14 dBi 18 dBi 6 dBi 8 dBi 8 dBi 

VSWR 2.0:1 Max 1.5:1 Max 1.5:1 Max 1.5:1 Max 2.0:1 Max 2.0:1 Max 2.0:1 Max 

Polarisation Linear, vertical Linear, vertical Linear, vertical Linear, vertical Linear, vertical Linear, vertical Linear, vertical 

HPBW/ 

Horizontal 

360° 65° 30° 15° 65° 50° 360° 

HPBW/Vertical 15° 60° 30° 5° 75° 50° 20° 

Front to Back 

Ratio 

- 15 dB 15 dB 26 dB 12 dB - 25dB 

Impedance 50 Ω 50 Ω 50 Ω 50 Ω 50 Ω 50 Ω 50 Ω 

Connector N type jack N type jack N type female N type female RP SMA Plug N type female N type Jack 

Survival Wind 

Speed 

216 km/hr 216 km/hr 216 km/hr 180 km/hr - 216 km/hr 216 km/hr 

Temperature -40°C to 80°C -40°C to 80°C -40°C to 80°C -40°C to 80°C -10°C to 55°C -40°C to 80°C -40°C to 80°C 

Humidity 95% at 25°C 95% at 55°C 95% at 55°C 95% at 55°C 95% at 55°C 95% at 55°C 95% at 55°C 

Radome Color Gray-white Gray-white White White White, Black White Gray-white 

Radome 

Material 

Fiber glass ABS ABS, UV resistant ABS, UV resistant ABS, UV resist ABS, UV resist ABS, UV resist 

Weight 337 g 107 g 407 g 1.6 kg 110 g 206 g 640 g 

Dimensions f 19 x 250 mm 114 x 114 x 40 mm 200 x 200 x 50 mm 360 x 360 x 16 mm 76 x 86 x 118 mm f 20 x 260 mm 210 x 210 x 73 mm 

Cable 

Product LMR 200 LMR 400 

Product 

Picture 

Specifications RP-SMA plug to 

N-plug 

Others 

Product 

Product 

Picture 

Ceiling 

Mounting Kit 

Specifications For NWA-3160, 

NWA-3163, 

NWA-3165, NWA- 

3500 

Cable Kit for 

Outdoor AP 

N-plug to N-plug RJ-45 CAT 5e STB 

Cable w/Water- 

Proof cover 15 m 

NWA3550 

Mounting Kit 

PSE Kits 

EXT-300 

Jumper Cable & 

Surge Arrstor 

For NWA3550 - Input: AC 100 V to AC 240 V 

- Output: 

48 Vdc/350 mA (IEEE 802.3af 

compliant) 

48 Vdc/500 mA 

24 Vdc/800 mA 

18 Vdc/1 A 

- Operation Temperature -40°C to 85°C 

- Storage Temperature -10°C to 70°C 

- Operation Humidity 5% to 90% 

Wireless LAN Product Highlight 

NWA-3166 

Wireless N Business WLAN Access Point 

ZyXEL NWA-3166 is “Wi-Fi a/b/g/n certified” and IEEE 

802.11n draft 2.0 compliant. It is an enterprise-level 

wireless LAN Access Point. 

Key Benefits 

Dead-Spot Elimination by MIMO Technology 

Key Features 

Draft IEEE 802.11n (2.0) Support and Wi-Fi a/g/n Certification 

WLAN Controller or Managed AP or Stand Alone AP, 3-in-one 

configurable Hybrid AP 

Centralised configuration manage up to 24 WLAN Access Points 

Wi-Fi WPA2-Certified and Secured tunnel for communication 

between Controller and Managed AP 

Multiple SSID with Predefined VoIP, Guest SSID 

Plenum Rating Enclosure and Flexible Installation 

NWA-3166 MIMO (Multiple In, Multiple Out) utilises a multiple antenna system to take advantage of the multi-path affect in RF technology, 

rather than fight against it as conventional 802.11 Access Points do. The resulting improvement in both range and capacity provides 

substantially more reliable signal quality and greater bandwidth in enterprise environment deployment. 

Zero Extra Cost to Convert Stand-alone APs into a Centralised WLAN 

ZyXEL NWA-3166 Business Wireless Access Point is featured as hybrid AP that can act as a stand-alone enterprise class AP and/or WLAN 

controller at the same time. The hybrid AP has full flexibility to deploy secure and reliable WLAN networks and could support up to 300 

users. In the initial phase of constructing a WLAN, the NWA-3166 can be configured as a fully functional stand-alone AP; when more APs are 

installed, the NWA-3166 can be set to the WLAN controller mode to manage all other access points. Moreover, when a new branch office is 

set up, one of the managed NWA-3166 can become another controller and to manage a separate WLAN network. 

Simplifying the Maintenance Efforts While Keeping Quality of Performance 

The NWA-3166 can centrally manage up to 24 Access Points, including itself, dual-band NWA-3160, dual-band and dual-radio NWA- 

3500, high power NWA-3163 and outdoor dual-radio NWA3550. This support to a wide range of managed access point enables network 

administrators to choose the best AP for desired applications, while the management interface reminiscing single AP also helps network 

administrators to easily oversee all the WLAN access points, even they are not on the same site. 

34 35

Europe 

ZyXEL Belarus 

Tel: +375 17 334 6099 

Fax: +375 17 334 5899 

Email: sales@zyxel.by 

http://www.zyxel.by 

ZyXEL BeNeLux 

Tel: +31 23 5553689 

Fax: +31 23 5578492 

Email: sales@zyxel.nl 

http://www.zyxel.nl 

ZyXEL Czech 

Tel: +420 241 091 350 

Fax: +420 241 091 359 

Email: info@cz.zyxel.com 

http://www.zyxel.cz 

ZyXEL Denmark A/S 

Nordic Headquarters 

Tel: +45 39 55 07 00 

Fax: +45 39 55 07 07 

Email: sales@zyxel.dk 

http://www.zyxel.dk 

ZyXEL Finland Oy 

Tel: +358-9-4780 8400 

Fax: +358-9-4780 8448 

Email: sales@zyxel.fi 

http://www.zyxel.fi 

ZyXEL France SARL 

Tel: +33 (0)4 72 52 97 97 

Fax: +33 (0)4 72 52 19 20 

Email: info@zyxel.fr 

http://www.zyxel.fr 

ZyXEL Germany GmbH 

Tel: +49 (0) 2405-6909 0 

Fax: +49 (0) 2405-6909 99 

Email: sales@zyxel.de 

http://www.zyxel.de 

ZyXEL Hungary 

Tel: +36-1-336-1646 

Fax: +36-1-325-9100 

Email: info@zyxel.hu 

http://www.zyxel.hu 

ZyXEL Norway A/S 

Tel: +47 22 80 61 80 

Fax: +47 22 80 61 81 

Email: sales@zyxel.no 

http://www.zyxel.no 

ZyXEL Poland 

Tel: +48 (22) 333 8250 

Fax: +48 (22) 333 8251 

Email: info@pl.zyxel.com 

http://www.zyxel.pl 

ZyXEL Russia 

Tel: +7 (495) 542-8920 

Fax: +7 (495) 542-8925 

Email: sales@zyxel.ru 

http://www.zyxel.ru 

ZyXEL Slovakia 

Tel: + 421 243 193 989 

Fax: + 421 243 193 990 

Email: info@sk.zyxel.com 

http://www.zyxel.sk 

ZyXEL Spain 

Tel: +34 902 195 420 

Fax: +34 913 005 345 

Email: sales@zyxel.es 

http://www.zyxel.es 

ZyXEL Sweden A/S 

(Göteborg) 

Tel: +46 (0) 31 744 77 00 

Fax: +46 (0) 31 744 77 01 

Email: sales@zyxel.se 

http://www.zyxel.se 

ZyXEL Sweden A/S (Stockholm) 

Tel: +46 8 752 9600 

Fax: +46 8 752 9610 

Email: sales@zyxel.se 

http://www.zyxel.se 

ZyXEL Switzerland 

Tel: +41 44 806 51 00 

Fax: +41 44 806 52 00 

Email: info@zyxel.ch 

http://www.zyxel.ch 

ZyXEL Turkey A.S. 

Tel: +90 212 222 55 22 

Fax: +90 212 220 25 26 

Email: bilgi@zyxel.com.tr 

http://www.zyxel.com.tr 

ZyXEL UK Ltd. 

Tel: +44 (0) 1344 303044 

Fax: +44 (0) 1344 303034 

Email: sales@zyxel.co.uk 

http://www.zyxel.co.uk 

ZyXEL Ukraine 

Tel: +380 44 494 49 31 

Fax: +380 44 494 49 32 

Email: sales@ua.zyxel.com 

http://www.ua.zyxel.com 

Corporate 

Headquarters 

ZyXEL Communications Corp. 

Tel: +886-3-578-3942 

Fax: +886-3-578-2439 

Email: sales@zyxel.com.tw 

http://www.zyxel.com 

Asia 

ZyXEL China (Beijing) 

Tel: +86-010-82800646 

Fax: +86-010-82800587 

Email: sales@zyxel.cn 

http://www.zyxel.cn 

ZyXEL China (Shanghai) 

Tel: +86-021-61199055 

Fax: +86-021-52069033 

Email: sales@zyxel.cn 


ZyXEL China (Wuxi) 

Tel: +86-510-88080888 

Fax: +86-510-85222670 

Email: info@zyxel.cn 


ZyXEL India 

Tel: +91-11-3088-8144 

Fax: +91-11-3088-8149 

Email: support@zyxel.in 

http://www.zyxel.in 

ZyXEL Kazakhstan 

Tel: +7-727-2-590-699 

Fax: +7-727-2-590-689 

Email: info@zyxel.kz 

http://www.zyxel.kz 

ZyXEL Malaysia 

Tel: +603-8076-9933 

Fax: +603-8076-9833 

Email: info@zyxel.com.my 

http://www.zyxel.com.my 

ZyXEL Pakistan 

Tel: +92 21 4310194-5 

Fax: +92 21 4310196 

Email: info@zyxel.com.pk 

http://www.zyxel.com.pk 

For more product information, visit us on the web at www.ZyXEL.com 

Copyright © 2009 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, 

product names, or trademarks mentioned are the property of their respective owners. All specifi cations are subject to change without notice. 

ZyXEL Singapore 

Tel: +65-6899-6678 

Fax: +65-6899-8887 

Email: sales@zyxel.com.sg 

http://www.zyxel.com.sg 

ZyXEL Taiwan (Taipei) 

Tel: +886-2-2739-9889 

Fax: +886-2-2735-3220 

Email: sales_tw@zyxel.com.tw 

http://www.zyxel.com.tw 

ZyXEL Thailand 

Tel: +66-(0)-2831-5315 

Fax: +66-(0)-2831-5395 

Email: info@zyxel.co.th 

http://www.zyxel.co.th 

The Americas 

ZyXEL Costa Rica 

Tel: +506-2017878 

Fax: +506-2015098 

Email: sales@zyxel.co.cr 

http://www.zyxel.co.cr 

ZyXEL USA 

North America Headquarters 

Tel: +1-714-632-0882 

Fax: +1-714-632-0858 

Email: sales@zyxel.com 

http://www.us.zyxel.com 

65-100-000039B 02/09

Wireless LAN Solution Scenario - ZyXEL UK

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?