The All-in-One, Intelligent WLAN Controller

• Centralized management for up Delivering a good wireless LAN service that stands up to the demands of connecting users to the
to 64* APs rapid evolution application is not easy. The latest BYOD (Bring Your Own Device), mobility and
• ZyMesh mitigates complex, smart handheld technology all present scalability, manageability and functionality challenges
inconvenient cabling WiFi to business WiFi installations. To enable businesses to addressing these challenges ZyXEL has
deployments developed the NXC2500, an all-in-one, intelligent Wireless LAN Controller. The ZyXEL NXC2500

• Comprehensive features for WLAN is designed to provide resellers and businesses with a solution that works as an AP planning,
performance optimization and deployment, monitoring and maintenance solution while offering management, authentication
always-on WiFi connectivity and guest access within an all-in-one device.

• Seamless integration with

external AD, LDAP, RADIUS Benefits
authentication
• User-friendly authentication by Adaptive and resilient WiFi deployments
QR code facilitates keyboard-less Surpassing the mesh networking technology, ZyMesh creates wireless mesh links with easy
mobile devices accessing Internet configuration, better management and enhanced reliability. ZyMesh eases extending WiFi coverage to
• ZyXEL One Network is supported places where cabling is difficult. In addition, each repeater APs can have multiple route selections to
* Management of 64 APs is supported with firmware provide high resilience achieving non-stop WiFi service. In the past, administrators had to assign channel
version V4.10 or above and MAC addresses in each AP while setting up a WDS link to extend WiFi service; now they can make
initial provision and centralized management with ZyMesh and ZyXEL NXC2500 controller to manage
and deploy networks easily.

Also, ZyXEL APFlexTM simplifies installation by resolving the managed/standalone AP mode

configuration, automatically integrating into the network environment with Dynamic Host Configuration
Protocol (DHCP), eliminating the need for pre-installation preparation.

Enhanced RF management and WLAN optimization

All wireless networks face a major challenge: ensuring WiFi clients get service levels they’d need. The
difficulty to resolve is that different kinds of WiFi clients exist on the network, and these users tend to
make their own connectivity and roaming decision.
The ZyXEL NXC2500 features with advanced WLAN optimization technologies that help administrators
monitoring and maintaining health of the wireless network easily. Client steering utilizes functions of
band select and client signal threshold to match every WiFi client to the best radio of the best AP. Band
select sets 5 GHz as the first priority to optimize network connectivity for dual-band clients. Client signal
threshold ensures all clients connect to the APs with stronger signal. Auto healing is another WLAN
optimization function that deployed APs detect status of nearby APs and adjust power automatically
while failure occurred in neighboring AP. Load Balancing feature is able to resolve poor WiFi connectivity
NXC2500 due to AP overloaded. Auto healing provides reliable and always-on wireless coverage. The ZyXEL
Wireless LAN Controller NXC2500 also features dynamic channel selection to optimize WiFi quality and performance while
minimizing administration efforts by auto, instant channel selection.
 NXC2500
Wireless LAN Controller

Authentication with simplified management

The ZyXEL NXC2500 uses comprehensive authentication methods to manage WiFi accessibility for devices with AD, LDAP or RADIUS authentication
servers. The NXC2500 also provides a built-in RADIUS server, a captive portal server and a DHCP server to facilitate small and medium businesses
deploying secured employee and guest access services without any additional server. The user-friendly guest account generator can dynamically create
user accounts for guests to log into a customized capital portal via QR code. The NXC2500 also supports applying external customized portal pages
which largely benefit the access authentication in hospitality venues like hotels. Also, with IETF standard-based CAPWAP, secured communication can
be established between the NXC controller and access points without changing the existing LAN infrastructure. The NXC2500 can offer a secured WiFi
network with easy installation for your business.

ZyXEL One Network experience

Aiming for relieving our customers from repetitive operations of deploying and managing a network, ZyXEL One Network is designed to simplify the
configuration, management, and troubleshooting, allowing our customers to focus on the business priorities. ZyXEL One Network presents an easy-to-use
tool, ZyXEL One Network Utility (ZON Utility), to realize speed network setup. ZyXEL Smart Connect* allows ZyXEL networking equipment to be aware
and recognize each other and further facilitating the network maintenance via one-click remote functions such as factory reset or power cycling. ZyXEL
One Network redefines the network integration across multiple networking products from switch to WiFi AP to WLAN controller and to Gateway.
network with easy installation for your business.
* ZyXEL Smart Connect is supported on selected models. Please refer to specifications for more detail.

Feature Highlights
High Scalability Comprehensive Access Management
The NXC2500 supports the management of the access The NXC2500 offers easy dynamic account creation and
points to provide complete wireless LAN functions for the versatile wireless user authentication methods to provide
business. As standard the NXC2500 supports the initial smooth and secured access. The MAC authentication and
management of 8 APs and provides scalability with a customized captive portal adapted to suit the needs of
maximum supported total up to 64* APs, the “pay-as-you- enterprises and hospitality. With captive portal via QR code
grow” principle provides reassurance and future proofing access support, keyboard-less mobile devices are able to
for SMBs, hotels and educational institutes to implement access Internet service instantly and securely.
secured, centralized wireless LAN networks.
* Management of 64 APs is supported with firmware version V4.10
or above

Auto Healing Client Steering

The NXC2500 has Auto Healing feature that detects status Client Steering sets 5 GHz as priority for dual-band devices
of neighbor APs and adjust AP power automatically to overcome heavy loading on 2.4 GHz, while client signal
to provide enduring network services. If an AP is not threshold transfer devices to APs with stronger signal.
functional, the nearby APs will increase output power With these two functions, the NXC2500 ensures better
to cover the void area. Once the AP outage recovers, the radio resource usage to provide max wireless network
nearby APs decrease output power automatically.
performance for users.

ZyMesh NAT Traversal

The ZyMesh features of NXC2500 help extending WiFi The NXC2500 can facilitate the connections traversing
coverage to places where cable deployment is difficult. In NAT gateways to solve connection issue for AP and WLAN
addition, each repeater APs has multiple route selections controller deployed in different subnets and to ensure the
to provide non-stop WiFi services. ZyMesh enables to highest robustness of WLAN networks.
make auto provision and manage for multiple APs easily
and centrally.

2
 NXC2500
Wireless LAN Controller

Secured Wireless Edge ZyXEL One Network Utility

The NXC2500 features with multiple network security To streamline the management process, the NXC Series
functions to provide the most robust protection for the comes with the ZyXEL One Network (ZON) utility, allowing
wireless network edge. The rogue AP detection ensures administrators to assign IP addresses to multiple WLAN
to block malicious AP, while industry-standard WPA/ controllers through just one platform. Administrators can
WPA2-Enterprise authentication, a variety of Extensible avoid the hassle logging into each WLAN controller to
Authentication Protocol (EAP) frameworks and built-in change the default IP addresses before physical installation.
firewall feature enables secure access against unauthorized
or malicious activities in enterprise network.

ZyXEL Wireless Optimizer

The NXC2500 supports ZyXEL Wireless Optimizer (ZWO)
to simplify planning, deployment and management of
business WiFi without costly on-site survey tools and
additional sensors or location servers.

Application Diagram

IP camera
In Office

WAC6503D-S
802.11ac Dual Radio
Smart Antenna 3x3
Internet Access Point

GS1920-24HP Tablet PC
24-port GbE Smart
Managed PoE Switch
WAC6502D-S
802.11ac Dual Radio
Smart Antenna 2x2
Access Point
Smartphone
Unified Security NXC2500
Gateway Wireless LAN
Controller
WAC6103D-I
Root AP
NWA5121-NI
Repeater AP
GS1920-24
24-port GbE Smart
Managed Switch

NWA5121-N
Root AP

NWA5123-NI Laptop
Repeater AP

ZyXEL Wireless Optimizer

WLAN AP Planning and Wired connection
Coverage Detection ZyMesh

3
 NXC2500
Wireless LAN Controller

Specifications

Model NXC2500
Wireless LAN Controller

Product name

Port Density
10/100/1000 Mbps LAN ports 6
USB port 2
Performance
Throughput (Gbps) 1
Managed AP number (default/max.) 8/64
Fanless Yes
WLAN Features
Wireless security (WPA/WPA2-PSK, Enterprise) Yes
Dynamic channel selection Yes
Wireless multicast setting Yes
AP load balancing Yes
AP planning and site-survey Yes (AP planning and coverage detection)
ZyMesh Licensed service
Band select Yes
Client signal threshold Yes
Auto healing Yes
Fast roaming Pre-authentication, PMK caching and 802.11r/k/v
Security Features
IEEE 802.1X Yes
IEEE 802.11w Yes
Layer-2 isolation Yes
Web authentication Yes
MAC filtering Yes
RADIUS authentication Yes
Microsoft AD authentication Yes
LDAP authentication Yes
Embedded RADIUS server Yes (512 user)
Rogue AP detection Yes
Identity-based user security management Yes
Wireless intrusion detection Rogue AP detection and containment
Control and Provisioning
Managed AP discovery Broadcast/DHCP option/DNS/Manual
CAPWAP Yes
AP data forwarding mode support Distributed (local bridge) and Centralized (data tunnel)
Management interface HTTP/HTTPS/Telnet/SSH/SNMP
Output power control Yes
Wire/wireless packet capture Yes
Network
VLANs Yes
DHCP client Yes
DHCP relay, server Yes
NAT Yes
Static routing 256
Policy routing 256

4
 NXC2500
Wireless LAN Controller

Model NXC2500
Access Control
MAC filter list Yes
MAC authentication Internal and external RADIUS
Guest account generator Yes (512 user)
Customizable web login portal Yes
QoS
WMM/power save Yes
DiffServ marking Yes
AP load balancing Yes
Management Features
CLI with SSH Yes
Web UI with SSL Yes
myZyXEL.com 2.0 Yes
SNMP v1, v2c, v3
Multi-level administration roles Admin, Limited Admin and Guest Manager
ZyXEL One Network
• Discovery of ZyXEL switches, APs, WLAN controllers and gateways
• Centralized and batch configurations
■ IP configuration ■ IP renew ■ Device reboot
ZON Utility ■ Device factory reset ■ Device locating ■ Web GUI access
■ Firmware upgrade ■ Password configuration

■ One-click quick association with ZyXEL AP Configurator (ZAC)

User/Application Management
Authentication RADIUS/Microsoft AD/LDAP/Local
Local user database Yes (512)
User/group policy Yes
Authentication by QR code Yes
Captive portal Yes
External portal page Yes
Page upload Yes
Other
System diagnostic tool Yes
ZyXEL Wireless Optimizer Supported
Certification
• FCC Part 15B
• CE EN55022, EN55024
EMC • ERP Lot 6
• C-tick AS/NZSCISPR22
• BSMI CNS13438
• LVD EN60950-1: A12
Safety
• BSMI CNS14336
Power Requirements
Power supply 12 VDC, 100 - 240 VAC
Max. power consumption (watt) 10.57
Physical Specifications
Dimensions (WxDxH)(mm/in.) 242.0 x 175.39 x 35.5/9.53 x 6.9 x 1.4
Item
Weight (kg/lb.) 1.254/2.76
Dimensions (WxDxH)(mm/in.) 395 x 238 x 101/15.55 x 9.37 x 3.98
Packing
Weight (kg/lb.) 2.49/5.49
• Power adapter
Included accessories
• Rack mounting kit
Environmental Specifications
Temperature 0°C to 40°C/32°F to 104°F
Operating
Humidity 5% to 95% (non-condensing)
Temperature -20°C to 70°C/-4°F to 158°F
Storage
Humidity 5% to 95% (non-condensing)
MTBF (hr) 815,464

5
 NXC2500
Wireless LAN Controller

Access Point Compatibility List

WAC6500 Series WAC6300 Series WAC6100 Series WAC5300 Series NWA5120 Series
Series Unified Pro Access Unified Pro Access Unified Pro Access Unified Access
Unified Access Point
Point Poin Point Point
NWA5123-AC
WAC6503D-S
NWA5123-AC HD
WAC6502D-S
NWA5121-NI
Model WAC6502D-E WAC6303D-S WAC6103D-I WAC5302D-S
NWA5121-N
WAC6553D-E
NWA5123-NI
WAC6552D-S
NWA5301-NJ
Functions
Auto provisioning over WAN
& LAN
Yes Yes Yes Yes Yes
CAPWAP Yes Yes Yes Yes Yes
Auto channel selection Yes Yes Yes Yes Yes
AP load-balancing Yes Yes Yes Yes Yes
Rogue AP detection Yes Yes Yes Yes Yes
Packet capture Yes Future support Yes Future support Yes*
Local bridge/ Local bridge/ Local bridge/
Data forwarding Local bridge Local bridge
Data tunnel Data tunnel Data tunnel
ZyMesh Yes Future support Yes Future support Yes*
*Future support on NWA5123-AC HD

Other Information
Managed AP License
Model Part number Description Note
LIC-AP-ZZ0004F E-iCard AP Upgrade License 8 APs for NXC5500 The maximum
NXC5500 number of APs
LIC-AP-ZZ0005F E-iCard AP Upgrade License 64 APs for NXC5500 supported is 1024
LIC-AP-ZZ0003F E-iCard AP Upgrade License 8 APs for NXC2500 The maximum
NXC2500 number of APs
LIC-AP-ZZ0006F E-iCard AP Upgrade License 32 APs for NXC2500 supported is 64

ZyMesh License
Model Part number Description
NXC5500 LIC-MESH-ZZ0002F This license enables the ZyMesh function on the NXC5500
NXC2500 LIC-MESH-ZZ0001F This license enables the ZyMesh function on the NXC2500

Fo r m o re p ro d u c t i n fo r m at i o n , v i s i t u s o n t h e we b at w w w. Zy X E L . co m
Copyright © 2016 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks 5-100-00718031 09/18
of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of
their respective owners. All specifications are subject to change without notice.