ZyXEL Communications NWA5160N User manual

■ Higher-bandwidth, higher
density with full range of
802.11n Access Points
(NWA5000-N Series)
■ Comprehensive guest network
management with auto guest
account generator and Web
authentication support
■ Manage up to 240 APs with
granular access control
■ Centralized WLAN
management on both
configurations and data
■ Flexibility supporting both
distributed and tunneled data
forwarding
■ Strongest standard-based
wireless security — WPA/WPA2
and AES encryption
■ Built-in Firewall
■ Built-in wireless intrusion
detection, prevention and
Anti-Virus
Today, businesses are facing continuous challenges providing wireless access to guests and
mobile employees without compromising security. To fulfill this demand, ZyXEL develops an
all-new Wireless LAN Controller Solution comprising of the NXC5200 WLAN Controller and
NWA5000-N Series Managed Access Point (AP) in three models: the dual-band NWA5160N, the
dual-radio NWA5560-N and, the dual-radio outdoor NWA5550-N. The solution is designed to
deliver high-performance 11n Wireless to provide seamless mobility and security in medium-
to large-scale campus and distributed enterprise environments.
The NXC5200 integrates ZyXEL’s industry-leading ZyWALL Firewall features, such as Stateful
Packet Inspection, to monitor data coming from mobile wireless users while the NWA5000-N
Series works in conjunction with NXC5200 to deliver optimized performance and secure
network services to remote branches or offices. The NXC5200 controller and NWA5000-N
Series APs are ideally suited for advanced service delivery on wireless edge.
Benefits
Single-point management for scalable networks
This new, secure WLAN solution is based on the ZyXEL NXC5200 Wireless LAN Controller as well as
the ZyXEL NWA5160N, NWA5560-N, and NWA5550-N Managed APs that scales up to 240 APs to
provide comprehensive wireless coverage. Real-time functions such as data roaming, authentication
and load balancing are performed on the NXC5200 while the NWA5160N, NWA5560-N, and
NWA5550-N function strictly as signal converters.The major benefit is the centralized configuration
independent of the number of available managed access points as long as there is an IP network
available to the administrator.
Secure wireless edge to block threats from mobile users
Mobile users pose more critical threats to company networks than wired users.To address this, the
NXC5200 comes with Firewall features such as stateful packet check to regulate data incoming from
mobile users. In addition, the license-based Intrusion Detection and Prevention as well as Anti-Virus
functions also allow the NXC5200 to act as a gatekeeper on the network edge to block potential
threats.
ZyXEL keeps the best-of-breed technology and provides strong industry-standard WLAN security
with WPA/WPA2-enterprise authentication and a variety of Extensible Authentication Protocol (EAP)
supports.The NWA5000-N Series can relieve businesses from critical WLAN security concerns.
Superior, Secure WLAN Experience for
Distributed Enterprise and Campus
NXC5200/
NWA5000-N
Series
Wireless LAN Controller/
802.11 a/b/g/n
Managed Access Point
NXC5200/
NWA5000-N
Series
Wireless LAN Controller/
802.11 a/b/g/n
Managed Access Point

3
NXC5200/
NWA5000-N Series
Wireless LAN Controller/
802.11 a/b/g/n Managed
Access Point
NXC5200/
NWA5000-N Series
Wireless LAN Controller/
802.11 a/b/g/n Managed
Access Point
Specifications
Model NWA5160N NWA5560-N NWA5550-N NXC5200
802.11 a/b/g/n 802.11 a/b/g/n 802.11 a/b/g/n
Managed Access Point Dual-Radio Managed Dual-Radio Outdoor Wireless LAN Controller
Access Point Managed Access Point
Product Name
Main Design
Radio 1 2 2 -
Number of Antenna Embedded antenna 4 external dipole 4 N-type connectors*1 -
2.4 GHz (11g/n) USA (FCC): 2.412 to 2.462 GHz; Europe (ETSI): 2.412 to 2.472 GHz -
Frequency Band 5 GHz (11a/n) -
Maximum Output Power
11b/g 54 Mbps 17 dBm 17 dBm 17 dBm -
6 Mbps 18 dBm 18 dBm 18 dBm -
11g/n 20 MHz 15 dBm 15 dBm 15 dBm -
40 MHz 15 dBm 15 dBm 15 dBm -
11a 54 Mbps 16 dBm 16 dBm 16 dBm -
6 Mbps 18 dBm 18 dBm 18 dBm -
11a/n 20 MHz 18 dBm 18 dBm 18 dBm -
40 MHz 16 dBm 16 dBm 16 dBm -
Wired Data Rates 10/100/1000 Mbps Auto-sensing (full-duplex switch)
LAN
Number of 10/100/1000M LAN 1 1 1 Default: 4, Expansion: 4*2
PoE Yes Yes Yes -
PoE Power Draw 12 W 14 W 28 W -
WLAN Features
Maximum Throughput Up to 120 Mbps Up to 140 Mbps Up to 140 Mbps -
WMM (Wi-Fi Certified) Yes Yes Yes Yes
WEP Yes Yes Yes Yes
WPA/WPA2-PSK Yes Yes Yes Yes
WPA2 (Wi-Fi Certified) Yes Yes Yes Yes
WPA/WPA2-Enterprise Yes Yes Yes Yes
Security Features
IEEE 802.1x - - - Yes
Web Authentication - - - Yes
MAC Filtering - - - Yes
RADIUS Authentication - - - Yes
Microsoft AD Authentication - - - Yes
LDAP Authentication - - - Yes
Embedded RADIUS Server - - - Yes
Rogue AP detection - - - Yes
Rogue AP containment - - - Yes
Intrusion Detection & Prevention - - - Yes
Anti-Virus - - - Yes
Firewall - - - Yes
USA (FCC): 5.15 to 5.35 GHz; 5.470 to 5.725; 5.725 to 5.850 GHz
ETSI: 5.15 to 5.35 GHz; 5.470 to 5.725 GHz

4
Model NWA5160N NWA5560-N NWA5550-N NXC5200
Network
VLANs Yes Yes Yes Yes
DHCP Client Yes Yes Yes Yes
DHCP Relay, Server - - - Yes
NAT - - - Yes
Static routing - - - Yes
Access Control
Policy setting per user - - - Yes
Policy setting per SSID - - - Yes
Customizable web login page - - - Yes
QoS
WMM Yes Yes Yes Yes
WMM Power Save Yes Yes Yes Yes
DiffServ Marking - - - Yes
AP Load Balancing - - - Yes
Application Patrol - - - Yes
Management Features
CLI with SSH Yes Yes Yes Yes
Web UI with SSL - - - Yes
SNMP - - - Yes
Multi-level administration roles - - - Yes
Administrator authentication - - - Yes
via RADIUS server
Others
Plenum Rating Yes Yes - -
Kensington Lock Support Yes Yes - -
Packet captured on Wired and Wireless - - - Yes
Dynamic Channel Selection - - - Yes
Device HA - - - Yes
System diagnostic Tool - - - Yes
Standard Compliance
Ethernet IEEE 802.3, IEEE 802.3u,IEEE 802.3ab, IEEE 802.3z, IEEE 802.3az
PoE -
Radio Modulation -
Certification
Radio -
EMC FCC Part 15B, EN 301 489-17 V1.2.1: 08-2002 (Class B)
EN 301 489-1 V1.5.1:11-2004 (Class B)
Safety EN 60950-1 (Class B)
EN 60601-1-2:2002 (Medical Electrical Equipment)(Class B)
FCC Part 15C 15.247, FCC Part 15E (Class B)
EN 300 328 V1.7.1,EN 301 893 V1.2.3:08-2003, DGT LP0002 (Class B)
IEEE 802.11a: BPSK, QPSK, 16-QAM, 64-QAM
IEEE 802.11b: DBPSK, DQPSK, CCK
IEEE 802.11g: BPSK, QPSK, 16-QAM, 64-QAM
IEEE 802.11n: BPSK, QPSK, 16-QAM, 64-QAM
IEEE 802.3af, IEEE 802.3at Proprietary

5
Ordering Information
*1: Separated sold
*2: Default: 4-port RJ-45 GbE with expansion slot for 4-port RJ-45/SFP GbE
License
Model NWA5160N NWA5560-N NWA5550-N NXC5200
Power Requirement
Power supply 12 VDC @1.5 Amp 12 VDC @1.5 Amp PoE only 100 - 240 VAC, 50/60 Hz
Maximum Maximum
Physical Specifications
218 x 174 x 54/ 218 x 174 x 54/ 257 x 257 x 51/ 431 x 520 x 44/
8.58 x 6.85 x 2.12 8.58 x 6.85 x 2.12 10.12 x 10.12 x 2.01 16.96 x 20.47 x 1.73
0.766/1.69 0.805/1.77 1.360/3.01 12/26.46
326 x 184 x 91/ 326 x 184 x 91/ 382 x 415 x 154/ 644 x 561 x 183/
12.83 x 7.24 x 3.58 12.83 x 7.24 x 3.58 15.04 x 16.34 x 6.06 25.35 x 22.09 x 7.20
1.56/3.44 1.586/3.50 3.6/7.95 14/30.86
Environmental Specifications
0°C to 40°C/32°F to 104°F -40°C to 60°C/ 0°C to 40°C/
-40°F to 140°F 32°F to 104°F
10% to 90% (Non-condensing) 10% to 90% 10% to 90%
(Non-condensing) (Non-condensing)
-30°C to 70°C/-22°F to 158°F -40°C to 70°C/ -30°C to 70°C/
-40°F to 158°F -22°F to 158°F
10% to 90% (Non-condensing) 10% to 90% 10% to 90%
(Non-condensing) (Non-condensing)
Accessory
Item WEM104 WEM104F
Photo
Description 4-port RJ-45 GbE LAN Module 4-port SFP GbE LAN Module
Operating
Environment
Temperature
Dimensions
(WxDxH)(mm/in.)
Weight (kg/lb.)
Dimensions
(WxDxH)(mm/in.)
Weight (kg/lb.)
Item
Packing
Humidity
Temperature
Humidity
Storage
Environment
Feature Please Order
Managed AP Scalability E-iCard 12 AP NXC5200
The NXC5200 Managed AP License is a service that enables the flexibility to increase the number E-iCard 48 AP NXC5200
of 5000 Series WLAN APs in service.The maximum number of managed APs supported is 240.
Intrusion Detection and Prevention (IDP) E-iCard 1 YR IDP NXC5200
The NXC5200 Intrusion Detection/Prevention service is an easy-to-manage, signature-based E-iCard 2 YR IDP NXC5200
feature that mitigates threats from the ever-evolving attacks and exploits.
Anti-Virus (AV) E-iCard 1YR ZyXEL AV NXC5200
The NXC5200 Anti-Virus service is an easy-to-manage, signature-based feature that stops E-iCard 2YR ZyXEL AV NXC5200
virus/spyware from entering your network. E-iCard 1YR Kaspersky AV NXC5200
E-iCard 2YR Kaspersky AV NXC5200

2
NXC5200/
NWA5000-N Series
Wireless LAN Controller/
802.11 a/b/g/n Managed
Access Point
NXC5200/
NWA5000-N Series
Wireless LAN Controller/
802.11 a/b/g/n Managed
Access Point
Full performance without concerns
The prevalence of 11n wireless networks is putting the capacity of traditional controllers to the test.Fortunately, the NXC5200 is designed to relieve the
concerns for IT staff – the high-performance system pumps data through each virtual AP, and it can be configured to bridge locally or enter the NXC5200
WLAN controller for better management.With this feature, the NXC5200 and the NWA5000-N Series can offload the network burden while allowing users to
enjoy the 11n wireless performance.
Zero-configuration construction for minimized provisioning efforts
Centralized administration simplifies planning significantly. The NXC5200 and the NWA5000-N Series are designed to enable easy deployment and instant
provisioning.After carrying out a site survey, the user can place the NWA5000-N Series managed APs on the most suitable spots; the NWA5000-N Series will
automatically look for the NXC5200 to establish connections, and then the pre-defined configuration will be applied to the NWA5000-N Series to complete
the deployment.The NWA5000-N Series supports the 802.3af or 802.3at Power over Ethernet (PoE) standard to utilize the Ethernet cable for minimized
cabling construction.The ZyXEL NXC5200 and the NWA5000-N Series can provide simplified installation in addition to better Wi-Fi experience.
Easy, comprehensive guest network management
To IT administrators, one of the major concerns is to deploy a WLAN infrastructures with flexible guess access while providing internal users a separated
secure network at the same time.The NXC5200 and NWA5000-N Series feature end-to-end guest network solutions to provide a guest account generator
and Web authentication functions.The guest account generator allows dynamic user accounts to be created as soon as the guests check into the front desk
for minimized IT management efforts.The Web authentication function provides an easy way to identify guest users and it also works with the embedded
firewall policies to segregate guest traffics from the internal users to maintain a clean, safe wireless infrastructure.The ZyXEL NXC5200 and NWA5000-N
Series can eliminate concerns for IT administrators while providing the best Wi-Fi coverage at the same time. It is an ideal and secure choice for business
Wi-Fi deployments.
Key Application
Build-in Firewall
Clean Wired
Access Network
Clean Wireless
Access Network
NXC5200
Wireless LAN
Controller
NWA5560-N
802.11 a/b/g/n
Dual-Radio Managed
Access Point
NWA5160N
802.11 a/b/g/n
Managed
Access Point
Switch
Firewall
Block
Block 1
12 3
2
3
Internet
Build-in Wireless Anti-Virus,
Intrusion Detection and Prevention
Managed up to 240 APs with
granular access control
GHz
5
GHz
5
GHz
5

5-100-00711012 10/11
F o r m o r e p r o d u c t i n f o r m a t i o n , v i s i t u s o n t h e w e b a t w w w. Z y X E L . c o m
Copyright © 2011 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered
trademarks of ZyXEL Communications Corp. All other brands,product names, or trademarks mentioned are the
property of their respective owners. All specifications are subject to change without notice.