ZyXEL Communications NWA5160N User manual

Key Benefits
Central configuration
This new secure WLAN solution is based on the ZyXEL NXC5200 central controller and the ZyXEL
NWA5160N managed access points that scales up to 240 access points (APs) and provides
comprehensive wireless coverage.Real-time functions such as roaming, authentication and load
balancing are performed on the NXC5200 while the NWA5160N functions strictly as a signal
converter.The benefits include central configuration independent of the number of available
managed access point as long as there is IP network available.
Zone-defense concept for solid protection
Mobile users pose more critical threats to company networks than wired users.To address this,
the NXC5200 comes with Firewall features featuring stateful packet check to regulate data
incoming from mobile users. In addition, by adopting license-based Intrusion
Detection/Prevention and anti-virus functions, the NXC5200 can act as a gatekeeper on the
network edge to block potential threats.
Full performance without concerns
The prevalence of 11n wireless networks has put the capacity of traditional controllers to the test,
the NXC5200 is designed to relieve the concerns of IT staff. Not only does it have a
high-performance system design, the data that flows through each virtual AP can also be
configured to be bridged locally or enter the WLAN controller,NXC5200, for better management.
With this feature, the NXC5200 and NWA5160N can offload the burden to the network while
allowing users to enjoy the 11n performance.
Within business today companies continually face the challenge of providing wireless
access to guests and mobile employees without compromising security.To address this
situation ZyXEL has developed the Wireless LAN Controller 5000 Series comprising the
NXC5200 WLAN Controller and NWA5160N WLAN AccessPoint.The solution is designed to
deliver high performance 11n wireless to provide seamless mobility in medium to large
campus and secure distributed enterprise environments.
The NXC5200 integrates ZyXEL industry-leading ZyWALL Firewall features,such as stateful
packet inspection, to monitor data incoming from mobile wireless users. In addition, by
adopting optional license-based Intrusion Detection/Prevention and anti-virus functions,
the NXC5200 can also act as a gatekeeper to the wireless edge.
Key Features
Ł
Manage up to 240 APs with
granular access control
Ł
Central WLAN management on
both configurations and data
Ł
Flexibility supporting both
distributed and tunneled data
forwarding
Ł
Strongest standard-based
wireless security – WPA/WPA2
and AES encryption
Ł
Built-in firewall
Ł
Built-in wireless intrusion
detection, prevention and
anti-virus
Ł
Web authentication support for
guest networks (captive portal)
Enterprise
Wireless LAN
Wireless LAN Controller
5000 Series
Enterprise
Wireless LAN
Wireless LAN Controller
5000 Series

Build-in Firewall
Clean Wired
Access Network
Clean Wireless
Access Network
ZyXEL NXC5200
ZyXEL
NWA5160N
ZyXEL
NWA5160N
Switch
Firewall
Block
Block 1
123
2
3
Internet
Build-in Wireless Anti-Virus,
Intrusion Detection and Prevention
Managed up to 240 APs with
granular access control
Key Application
Better wireless experience
Central administration simplifies planning immensely.The managed access points are first installed at the most suitable locations for WLAN reception.
Areas with insufficient coverage or too low data speeds can be made accessible with additional managed access points.The best results can be obtained
however when a site survey is carried out enabling a simplified installation and better wireless experience.
A good example of a real business need for the ZyXEL NXC5200 solution would be to provide guest access in a large hospitality environment.
Collaboration with visitors, other business employees and local staff require different degrees of network access to be offered while they are visiting the
business.To give these guests the access they need, one of the biggest challenges facing IT departments is how to provide Internet connectivity, without
giving guests access to private LAN resources or to have limited access with authentication. A secure guest access solution must ensure that guests are
connected directly to the Internet, but can never access internal network resources. ZyXEL NXC5200 built-in SSID-profile-based configuration to identify,
categorize and contain a guest’s traffic no matter where they roam on the WLAN.
Captive portal
A captive portal intercepts all network traffic regardless of address or port until users authenticate their identity through a designated login Web page.
As an added security measure, the NXC contains captive portal functionality; this means that all Web page requests can be initially redirected to a special
Web page that requires guests to authenticate their sessions.
Once the authentication processes are successful,guests can then connect to the rest of the network or Internet.Contents on the captive portal may be
customised with company logos, backgrounds,policies and other descriptive text. A captive portal provides guests with controlled access to the network
while keeping the network secure.
Enterprise Wireless LAN
Wireless LAN Controller
5000 Series
Enterprise Wireless LAN
Wireless LAN Controller
5000 Series

Specifications
Model NWA5160N NXC5200
Product Picture
Product Feature 802.11a/g/n Wireless Managed AP Wireless LAN Controller
Wireless Technology 802.11a/g/n -
Basic Design Radio 1
-
High Power (option) - -
Number of Antenna Embedded 3x3 -
Number of 10/100M LAN - -
LAN & WAN Number of 10/100/1000M LAN 1 4*
PoE Yes -
PoE Power Draw 8W -
Power Requirement Input Voltage 12 V DC @1.5 Amp Maximum AC 90 - 264 V @47 - 63 Hz
Environmental
Operating Temperature 0°C to 40°C 0°C to 40°C
Specification Storage Temperature -20°C to 60°C -30°C to 60°C
Operating Humidity 20% to 90%, (non-condensing) 10% to 95%, (non-condensing)
Physical Feature Dimensions, (W) x (D) x (H) mm 225 x 178 x 60 431 x 44 x 520
Weight 766 g 10 Kg
WPA2 Yes Yes
WPA Yes Yes
WEP Yes Yes
IEEE 802.1x Yes Yes
Web Authentication - Yes
MAC Filtering - Yes
RADIUS Authentication - Yes
Security Features Microsoft AD Authentication -
Yes
LDAP Athetication -
Yes
Embedded RADIUS Server - Yes
Rogue AP Detection - Yes
Rogue AP Containment - Yes
Intrusion Detection & Prevention - Yes
Anti-virus - Yes
Firewall - Yes
VLANs - Yes
DHCP Client Yes Yes
Network DHCP Relay, Server -
Yes
NAT -
Yes
RIP & Static Routing - Yes
Policy Setting per User - Yes
Access Control Policy Setting per SSID -
Yes
Customizable Web Login Page -
Yes
WMM - Yes
WMM Power Save - Yes
QoS DiffServ Marking -
Yes
AP Load Balancing - Yes
Application Patrol - Yes
CLI with SSH Yes Yes
Web UI with SSL - Yes
Management SNMP -
Yes
Features Multi-level Administration Roles -
Yes
Administrator Authentication
via RADIUS Server - Yes
Plenum Rating Yes -
Kensington Lock Support Yes -
Others Dynamic Channel Selection -
Yes
Device HA - Yes
System Diagnostic Tool - Yes
* Default: 4-port RJ-45 GbE with expansion slot for 4-port RJ-45/SFP GbE

65-100-000081B 08/10
For more product information, visit us on the web at www.ZyXEL.com
Copyright © 2010 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of
ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their
respective owners. All specifications are subject to change without notice.
Ordering Information
Feature Please Order
Managed AP Scalability
The NXC5200 Managed AP License is a service that enables iCard/E-iCard 12 AP NXC5200
the flexibility to increase the number of 5000 Series iCard/E-iCard 48 AP NXC5200
WLAN APs in service.The maximum number of
managed APs supported is 240.
Intrusion Detection and Prevention (IDP)
The NXC5200 Intrusion Detection/Prevention service is iCard/E-iCard 1 YR IDP NXC5200
an easy-to-manage, signature-based feature that mitigates iCard/E-iCard 2 YR IDP NXC5200
threats from the ever-evolving attacks and exploits.
Anti-Virus (AV)
The NXC5200 Anti-Virus service is an easy-to-manage, iCard/E-iCard 1YR ZyXEL AV NXC5200
signature-based feature that stops virus/spyware from iCard/E-iCard 2YR ZyXEL AV NXC5200
entering your network. iCard/E-iCard 1YR Kaspersky AV NXC5200
iCard/E-iCard 2YR Kaspersky AV NXC5200
License
Item WEM104 WEM104F
Photo
Description 4-port RJ-45 GbE LAN Module 4-port SFP GbE LAN Module
Accessory
Enterprise Wireless LAN
Wireless LAN Controller
5000 Series
Enterprise Wireless LAN
Wireless LAN Controller
5000 Series