NXC Series Wireless LAN Controller Sales Kit

NXC Series Wireless LAN Controller Sales Kit
NSBU ZyXEL Communications Corp.

Outline Trend and Challenge ZyXEL’s Solutions NXC Overview
NXC Features & Benefits Technology Briefing Target Market Key Application Scenario Competitive Analysis Sales Arguments Ordering Guide Appendix

The Rise of Mobility It’s all about BYOD !
Mobile devices now are carrying anytime and anywhere, for casual life as well as for work BYOD increases the demand for everywhere connectivity Streaming larger files such as media, IPTV, social network, VoIP etc. in office application is prevalent Per IDC’s prediction, smart phone and tablet spending will hit $484 billion, generating 40% of all IT growth. Phablet (5.5 – 7in. screen) momentum will accelerate, accounting for 18% of smartphone units sold in up from 11% in 2014 (December 2014 , IDC #252700)

Top Challenges of Wi-Fi
How to manage multiple WLAN APs? Configuration changes and maintenance is not easy Legacy APs are difficult to configure, and require to maintain separately Coverage issues and changing environments Complicated and difficult process for Wi-Fi signal tuning and signal measuring Professional tools & resources require high cost Site-survey tool software is expensive License, maintenance contract required Wi-Fi experienced staff is difficult to recruit Specialized skill set and expensive to hire In the coming era of Gigabit Wi-Fi, how to robustly deploy or migrate to ac technology? Higher RF frequency represents shorter signal coverage Migration from n to ac usually requires to re-conduct costly and time-consuming wireless site survey and re-design the network with more APs

ZyXEL’s Smart WLAN Solutions
Central management Centralized management but flexible deployment options which streamline data communication without creating network bottleneck Easy configurations Zero-touch configuration & instant provisioning while initial deployment Stable and reliable Wi-Fi High stability and reliability for wireless access service via highly durable hardware design plus advanced RF management capability Advanced 11ac AP with new smart antenna technology Migrate to the 11ac and enjoy the Gigabit Wi-Fi with ease Comprehensive AP portfolio Comprehensive AP form-factors with versatile mounting and technology options, suitable for installation everywhere

ZyXEL WLAN Portfolio Lineup
User Application Management WLAN Management WLAN Controller SNMP Management Unified Pro/Unified AP Series Standalone AP Series NWA5123-NI NWA3160-N Features/Scalability WAC6502D-E NXC5500 NWA5301-NJ NWA1123-AC WAC6503D-S WAC6502D-S NWA3560-N NWA1100-NH NWA5121-N NWA1123-NI NXC2500 NWA5123-NI NWA1121-NI NWA3550-N WAC6553D-E Public Sector/Education Focused Vertical Applications Hospitality SMB Run-Rate

WLAN Controller Overview
Model NXC2500 NXC5500 AP Support No. (Default / Max.) 8 / 64 64 / 512 LAN Ports 6 x GbE Max. Concurrent Users 1,024 16,384 NAT Throughput 1 Gbps 6 Gbps Tunnel Throughput 300 Mbps Static Route 256 Policy Route 1,000 VLANs 128 512 SSID Profile 64 Radio Profile 1024 Local User Data base Y (512) Y (4,096) Embedded RADIUS Server 4,096 MAC Authentication Internal and external RADIUS Managed AP Discovery Controller Broadcast/ DHCP Option/ DNS/ Manual AP Data Forwarding Mode Support Centralized Mode (Data Tunnel, L3 Roaming) & Distributed Mode (Local Bridge, High Efficiency) AP Planning and Site-Survey ZWO, Ekahau Site Survey & Realtime Location Tracking Support Packet Capture Wired/ Wireless Wireless Intrusion Detection Rogue AP detection and containment

Benefits of NXC Controller
Centralized management Centralized management and auto provision for APs easily and securely Adaptive and resilient deployments ZyMesh relieves inconvenient cabling Wi-Fi deployments and enables initial provision to reduce complexity Multiple route selection provides an always-on network service WLAN optimization Supports advanced 11ac AP with smart antenna technology to provide Gigabit Wi-Fi service with ease Client Steering enhances effective use of radio spectrum Auto Healing offers stable network with smart network recovery Enhanced redundant mechanism to ensure Wi-Fi continuity Protect Wi-Fi from DoS attacks Comprehensive access management for secured Wi-Fi Seamless integration with external AD, LDAP, RADIUS authentication Best investment protection with built-in RADIUS server Customized captive portal and guest authentication with QR Code

Centralized Mgmt. & Provision
Easy AP & controller deployment Centrally plan the AP profiles and monitoring profiles Centrally assign the profiles to managed APs Automatically retrieve the configurations from controller Reduce repetitive AP configuration and ease AP provision by applying SSID profiles to other APs in the same group Profile A SSID RF Channel/ Power Wireless Security VLAN Data Forwarding QoS Profile B Profile C Monitor IP Network To fully maximise the potential of the NXC controller and ZyXEL access points it is important to introduce the concept of using AP profiles. In the design of the network it is important to understand what each type of user or device needs to get from the WiFi Network. Then the profiles can be defined based upon criteria such as SSID, Security, VLAN and QoS. The Diagram shows how different AP’s can be associated to the different profiles – then linked to users connecting to the AP’s over WiFi. Assign profiles Managed APs Get profiles from NXC controller

Centralized Mgmt. & Provision
CAPWAP Communication between NXC controller and APs are built easily through CAPWAP Secure management communication Easily traverse any NAT router No issues with the remote site gateway Internet NXC Controller Non-CAPWAP: Complicated management: Combination of CLI/SSH, SNMP, and xml configuration Difficult to connect through NAT with 1 public IP address Insecure and lots of configuration setup on the remote gateway USG CAPWAP

Instant & Easy Configuration
New on FW4.20 ZyXEL APFlexTM eliminates the preparation before installation Automatic IP configuration Zero-touch AP mode changing Configure multiple APs by group Users can apply SSID profiles to other APs in the same group easily Easier to configure, provision and adjust Less profiles needed Fits into all scenarios AP Group Profiles Apply to APs SSID RADIO NWA5121-NI NWA5121-N V4.20 Apply SSID to RADIO SSID RADIO NWA5121-NI NWA5121-N Apply to APs Was

Flexible Deployments 2 modes of data forwarding
Local forwarding: distributed forwarding for maximized performance and capacity Data tunnel: centralized forwarding when needed, such as L3 roaming across different VLANs, or when network is not controllable such as carrying VLAN tags All control and management are centrally on controller NXC Controller AP Distributed forwarding L3 Network Switch Centralized forwarding Data tunnel NXC Controller AP L3 Network Switch

Flexible Deployments Multiple SSID & VLAN
In infrastructure management and services, for example QoS or ACL, they are mostly set up on VLAN base Large number of VLAN, DHCP pool, and SSID/Radio profile ensure to meet customer deployment requirement Supports dynamic VLAN assignment via RADIUS NXC2500 NXC5500 Maximum VLAN 256 512 Maximum VLAN with DHCP pool 128 SSID Profile 64 Radio Profile 1024 SSID: Happy Hotel VLAN: 101 VLAN 101 VLAN202 SSID: Happy Staff VLAN: 202 VLAN 202 Corporate Server VLAN 101 not allowed here so it means guest users cannot access the staff server

Resilient Wi-Fi Deployments
Enhance on FW4.20 ZyMesh It’s a licensed service supporting unlimited root APs for wireless mesh deployments Easiest solution of Wi-Fi extension without extra wiring drops Controller manageable for quick initial set-up Multiple route selections for non-stop wireless service depending on the signal strength which senses from neighbor ZyMesh AP Dynamic Channel Selection (DCS) is able to work on Root AP Root AP Repeater AP Ethernet ZyMesh Link PoE Switch NXC Controller SS=-65dB SS=-72dB SS=-75dB SS=-63dB SS=-78dB SS=-64dB SS=-76dB Load-balancing dose NOT support on Mesh APs. SS: signal strength

Authenticator-Assisted
Guest Network Management New on FW4.20 Guest Authentication by QR Code Generate QR code for guests to access wireless service Guests logon the captive portal by scanning QR code Employees scan QR code shown on guest’s mobile device to authorize the wireless service access There’s no need for mobile device to enter complex account and password Self-Serviced Authenticator-Assisted One of the most critical applications for the NXC Controller is for the network to provide authentication at the edge rather than pass a potential risk user to the centre of the network for authentication. The NXC Controller provides a captive portal page for login. Once the user is logged on they can be securely directed across the network to the correct resource. For example Guests login as guest users, are connected to the Guest SSID which maps directly to the internet only.

Guest Network Management
Customized captive portal Web authentication for guest access management by SSID-profile-based configuration HTML Page upload for unlimited flexibility MAC authentication with Embedded RADIUS No additional server required Friendly MAC authentication for mobile devices without entering complex account and password Access request One of the most critical applications for the NXC Controller is for the network to provide authentication at the edge rather than pass a potential risk user to the centre of the network for authentication. The NXC Controller provides a captive portal page for login. Once the user is logged on they can be securely directed across the network to the correct resource. For example Guests login as guest users, are connected to the Guest SSID which maps directly to the internet only. Client: AA:AA:AA:AA:AA:AA NXC Controller L2 Switch AP Permitted MAC address AA:AA:AA:AA:AA:AA BB:BB:BB:BB:BB:BB CC:CC:CC:CC:CC:CC Client: BB:BB:BB:BB:BB:BB NO RADIUS server required Client: DD:DD:DD:DD:DD:DD

Wireless Layer 2 isolation
Guest Network Management Layer-2 Isolation Featured to protect personal information security especially in public Internet service area Peripherals for example printers or fax machines, or Internet can be allowed in the layer-2 isolation list so users can still access them Rest of users within the same subnet will not be able to associate with each others Internet Intra-BSS blocking AP Wireless Layer 2 isolation AP

Industry-Leading Wi-Fi Performance
New on FW4.20 ZyXEL smart antenna technology NXC controllers now support WAC6500 series AP, the perfect choice of ac migration for one-to-one replacement WAC6500 series AP offers up to 1.75Gbps combined data rate WAC6500 series AP with highest RF output power of up to 30 dBm and highest Rx sensitivity as low as -102 dBm in the industry Auditorium 2 Auditorium 1 Test location: ZyXEL HQ, B1 Line of sight for the AP performance comparison among WAC6500 series and competitors P4 31.9 m WAC6503D-S WAC6502D-S P1 P3 Corridor P2 AP Scale 1 : 628 33.3 m

WAC6503D-S 2.4G_TX throughput WAC6503D-S 5G_TX throughput
Industry-Leading Wi-Fi Performance New on FW4.20 WAC6503D-S: 3x3 Smart Antenna, outperforms top tier APs WAC6503D-S outperforms especially at challenging RF environments, and keeps quality connection at the farthest P4 while others are failure connection WAC6503D-S 2.4G_TX throughput Mbps Mbps WAC6503D-S 5G_TX throughput 1.8 times 4.8 times 2.3 times To evaluate or judge if one enterprise access point outperforms others, by the nature of wireless technology, generally the evaluation will look at how good the enterprise AP can perform as far as it can. Users normally do not care about the nearby performance, because the nearby performance typically has no issues and its performance is highest. In real-world application, P1, P2 & P3 location are common cases, which is close to end-user’s use experience in real world, and the test results at P1, P2 and P3 make more sense to end-users. Connection fails 2.1 times Connection fails WAC6503D-S Aruba AP HP Ruckus R Cisco 3602i * Aruba’s better performance at nearby locations requires specific client support to pair with the chipset. However, at farthest P4 location, WAC6503D-S outperforms other APs.

WLAN Optimization Client Steering
Features with band select and client signal threshold Monitor the capabilities of each wireless clients and steer the client to the best radio on the best AP by band select and signal threshold 2.4GHz 5GHz Both 2.4 & 5 GHz connection request Response to strong client connection request Response to 5GHz request 2.4Ghz: 3 non-overlapping 20Mhz channels 5Ghz: 19 non-overlapping 20Mhz channels in EU, 25 non-overlapping channels in US (including the new ch144) Deny connection request from weak client 2.4GHz 2.4GHz 5GHz Client with 2.4GHz radio Client with 2.4/5GHz radio

WLAN Optimization Load Balancing
Resolve poor Wi-Fi connectivity due to AP overloaded Distribute wireless traffic across multiple APs to relieve strain on network Avoid long idle time and weak RSSI of stations dragging the Wi-Fi connectivity Optimize quality of Wi-Fi connectivity Reduce time of convergence to reach load balancing quickly Ensure every station has Wi-Fi connectivity Mode Action By Station Number By Traffic Level By Smart Classroom Application Scenario Office, Hotel Classroom Customer Requirement Balance stations progressively without impacting client connectivity experience Ensure constant and stable wireless access Balance stations between 2 APs rapidly for e-learning applications Ensure wireless access for e-learning if one AP fails New

WLAN Optimization Dynamic Channel Selection (DCS) 4 ways to improve channel selection effectiveness Amend AP RSSI algorithms for searching cleaner channel Scan channels separately to avoid misjudgment Optimize validity by selecting channel with least noise directly Channel selection for APs in both interval and manual (select now button) ways 4.10 4.20 DCS configurations Global settings Per radio settings 11ac support N/A Support 80MHz algorithm DCS NOW Global invoke Per AP, per AP-group. DCS has to be activated 5G manual Support Set last DCS channel Support (If enabled DCS again after disabled DCS when the channel is set the channel will be set to the previous channel by DCS.) DCS assessment at beginning 3 times New

Non-Stop Continuity Auto Healing
Providing a highly stable and reliable coverage Once AP detected it’s neighbor AP is down, or signal strength changed by any reason, it will adjust power to cover the lost AP After deployment, administrator can make the record of the AP status Neighbor APs increase power to cover AP lost signal Neighbor APs decrease power after fail AP recover Fail AP

Assign secondary controller as back-up
Non-Stop Continuity Scheduled firmware update after firmware upload The time of new firmware to take effect can now be configurable to fulfill operation needs and perform service without interruption The upgraded firmware operation time can be setup by requirement Primary/secondary controller back-up Switch to secondary controller when the CAPWAP link is down Turn back to primary controller once detecting the primary is back to live Assign secondary controller as back-up Primary Controller Main Site Internet Secondary Controller CAPWAP tunnel Switch to secondary controller Back to primary controller Remote Site

Spoofed deauthentication and disassociation frames
Secured Wi-Fi Service New on FW4.20 Management Frame Protection A security standard w designed is to avoid DoS attacks in the network environment. For Example, DoS attacker spoofed disconnect ‘De-authentication, Disassociation’ in existing connection Free from Wireless DoS attacks With MFP Attacker Client MFP Without MFP Attacker Client Spoofed deauthentication and disassociation frames

NXC Controller Feature List
Networking DHCP Server/Relay and Client Static Route and Policy route DNS Relay NTP Firewall Management HTTP and HTTPS Telnet and SSH CLI SNMP v1, v2c, v3 USB flash drive support for log myZyXEL.com 2.0 IPv6 Host support IPv6 Address HTTP/HTTPs ICMP Telnet/SSH Managed WLAN AP Unified Pro AP WAC6500 series Unified Pro AP NWA3000-N series Unified AP NWA5120 series, NWA5301-NJ Managed AP NWA5000N series AP Management ZyMesh, Mesh AP function AP Group Configuration LED Suppression Support distributed and Centralized Data Forwarding on 11ac AP (WAC6500 series) RF Management Rogue AP detect and containment Continues Dynamic Channel selection Client Steering (Band Select + RSSI Threshold) WLAN AP planning and coverage detection Auto healing Security and Authentication WPA/WPA2 PSK and Enterprise support MAC Authentication support for local RADIUS and/or External RADIUS RADIUS, LDAP and Microsoft AD support Captive Portal: Configurable portal page, and HTML page upload with Multilingual support Guest account generator Guest Authentication by QR Code 802.11w Management Frame Protection support New New New New New New New

Target Market Ideal for Hospitality, Education, Retails and SMBs
Scalable and resilient Wi-Fi deployments and expansion Optimized Wi-Fi performance Reliable, high availability Wi-Fi service Comprehensive access control for secured Wi-Fi

Easy Wi-Fi Planning Application
IP Camera Internet GS HP 24-port GbE Smart Managed PoE Switch WAC6503D-S a/b/g/n/ac Unified Pro Access Point USG NXC2500 Wireless LAN Controller NWA3160-N Root AP NWA5123-NI Repeater AP GS 24-port GbE Smart Managed Switch NWA5121-N Root AP NWA5123-NI Repeater AP Gigabit Ethernet Gigabit PoE ZyMesh

Redundant Application
Gigabit Ethernet Gigabit PoE ZyMesh HQ Root AP Repeater AP GS HP NWA3560-N XGS NXC5500 Primary/Secondary controller Staff -MAC authentication -802.1x VPN USG WAC6502D-E Guest Dynamic guest account GS HP Internet VPN Branch office NWA5123-NI Root AP Staff USG NWA3550-N WAC6502D-S GS HP Guest

WAC6500 Series Unified Pro AP
AP Compatibility Matrix Series NWA5000 Series Managed AP NWA5120 Series Unified AP NWA3000-N Series Unified Pro AP WAC6500 Series Unified Pro AP Model NWA5160N NWA5560-N NWA5550-N NWA5121-NI NWA5121-N NWA5123-NI NWA5301-NJ NWA3160-N NWA3560-N NWA3550-N WAC6502D-E WAC6502D-S WAC6503D-S WAC6553D-E Functions Auto provisioning over WAN & LAN √ CAPWAP Auto channel selection AP load-balancing Monitoring mode Rogue AP detection Rogue AP containment Future Support Packet capture Data forwarding Local bridge/ Data tunnel Local bridge ZyMesh Future Support* New * ZyMesh on FW 4.20 for WAC6500 Series is Beta function; the official release will be available at next major release.

Detection and containment
Competition Analysis (NXC2500) Brand ZyXEL D-Link NETGEAR HP Ruckus Cisco Model NXC2500 DWC-1000 WC7520 MSM720 ZD1100 2500 Ports 6 x GbE LAN 4 x GbE 2 x GbE optional 4 x GbE 4 x GbE, 2 RJ45 Dual personality / 2xGbE w/PD 2 x GbE 2 x GbE 2 x GbE w/PoE USB 2 port. Storage 1 2/1 No / No No Managed APs (Default/Max.) (8/64) (6/24) (0/16) / (20/50) (10/40) / 10 (6/50) (0/50) Throughput 1Gbps N/A N/A / Control function only <200Mbps <1Gbps Tunnel throughput 300 Mbps CAPWAP Yes Provision Auto Provision IP Scan NAT traversal Primary/Backup controller Yes (Premium Mobility License required) / Yes Auto healing Yes / No Rogue AP detection Detection and containment Detection Detection(Advanced options need Premium mobility license) / Yes MESH AP Yes / No Embedded RADIUS server Yes (256 user) No / Yes Guest account (dynamic) Yes (256) Yes (Static guest account) VLANs Yes (512) Management VLAN only / Yes (64) DHCP server/relay Server/relay Server Server/relay for both Firewall Yes (License) No / No Yes / Yes Policy routing Band select

Competition Landscape (NXC2500)
Cisco 2500 series 2 x GbE and 2 x GbE w/PoE only Rucks ZD1100 2 GbE ports only No firewall No policy routing No band steering NETGEAR WC7520 IP Scan provision Only DHCP server No firewall No policy routing No band select Price HP MSM720 Primary/Backup controller requires license Advanced AP rogue requires license No dynamic guest account D-Link DWC-1000 IP Scan provision DHCP server only No Packet capture ZyXEL NXC2500 6 GbE ports CAPWAP provision NAT traversal MESH AP Dynamic guest account Band select Weakness Strength Features

Detection and containment
Competition Analysis (NXC5500) Brand ZyXEL HP Netgear Ruckus Cisco Model NXC5500 MSM760 WC7600 ZD3000 5500 Ports 6 x GbE LAN 2 x GbE, 2 RJ45 Dual personality 1 x GbE 2 x 1/10Gbps Ports 2 x GbE 8 x GbE USB 2 port. Storage No 1 2 Managed APs (Default/Max.) (64/512) (40/200) (50/150 via Controller Stack-up) (25/500) (12/500) Throughput 6 Gbps <1Gbps N/A 8Gbps Tunnel throughput 1.5 Gbps Not specified CAPWAP Yes No (LWAPP) Provision Auto Provision NAT traversal Primary/Backup controller Yes (Premium Mobility License required) Auto healing Rogue AP detection Detection and containment Detection (Advanced options need Premium mobility license) Detection Mesh AP Yes (License) Embedded RADIUS server Yes (4096 user) Guest account (dynamic) Yes (2048) VLANs Yes (512) DHCP server/relay Server/relay Server Firewall Policy routing Band select

Competition Landscape (NXC5500)
HP MSM760 Primary/Backup controller requires premium license Rogue AP detection requires premium license No dynamic guest account Cisco 5500 series No auto healing No wireless Mesh Ruckus ZD3000 No firewall No policy routing No band steering Price ZyXEL NXC5500 Netgear WC7600 6 GbE ports Managed AP up to 512 CAPWAP provision NAT traversal MESH AP Dynamic guest account Band select No NAT traversal Rogue AP detection Only No firewall No policy routing No band steering Features

Sales Argument Differentiation of controller solutions
Planning, deployment, management and maintenance ….. Simple! Technology from a vendor who knows built on our experience in verticals Flexible deployment options for different application scenarios Advanced wireless client management, such as granular client steering and band usage optimization Easy migration to Gigabit Wi-Fi ac technology Simplifying Wi-Fi planning / site Survey Scalability, technology, location mapping Correct AP count for the number of associations Worry-free WLAN environment Optimized, non-stop, and secured Wi-Fi service Smooth business operations Easier deployment and license management through myZyXEL.com 2.0* * NXC2500 with firmware V4.20 or above supports myZyXEL.com 2.0

Ordering Guide NXC Controllers Managed AP License ZyMesh License Model
Part number Description NXC5500 NXC5500-EU0101F NXC5500,STANDARD AND UK,EU REGION, RoHS NXC5500-US0101F NXC5500,UNITED STATES, US REGION, RoHS NXC2500 NXC2500-EU0101F NXC2500,STANDARD AND UK,EU REGION, RoHS NXC2500-US0101F NXC2500,UNITED STATES, US REGION, RoHS Managed AP License Model Part number Description NXC5500 LIC-AP-ZZ0004F E-iCard AP Upgrade License 8 APs for NXC5500 LIC-AP-ZZ0005F E-iCard AP Upgrade License 64 APs for NXC5500 NXC2500 LIC-AP-ZZ0003F E-iCard AP Upgrade License 8 APs for NXC2500 ZyMesh License Model Part number Description NXC5500 LIC-MESH-ZZ0001F E-iCard ZyMesh Function Service License for NXC controller NXC2500

Make the World Connect

Appendix-1 ZyXEL Wireless Optimizer (ZWO) AP planning
With no additional sensors, exciters or location servers Estimation of the quantity and placement of APs Coverage detection One-click calculation of coverage map with real-time data Wireless health management Practical, essential RF statistics shown on the map, including: Channel in use Stations counts Tx retry rate Rx frame error rate

Appendix-2 LED suppression
New on FW4.20 LED suppression The LED Suppression mode stops AP LED blinking after system initialization is done, which perfectly fits for hospitality market

NXC Series Wireless LAN Controller Sales Kit

Similar presentations

Presentation on theme: "NXC Series Wireless LAN Controller Sales Kit"— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

NXC Series Wireless LAN Controller Sales Kit

Similar presentations

Presentation on theme: "NXC Series Wireless LAN Controller Sales Kit"— Presentation transcript:

Similar presentations

About project

Feedback