ZTE WantongISG AC Series · Wireless Controllers
AC Controller + Gateway + Flow Control · 5 Models
ZTE Wantong ISG AC · Wireless Controllers
Wireless access controllers that also act as the site's internet gateway — multi-WAN access, DPI flow control with 3200+ application signatures, behaviour management, web authentication, VPN and central management of ZTE Wantong APs, from a 1U unit for 512 APs to a 2U modular unit for 4096 APs. We deliver them configured as part of the network solutions we build.
512–4096 · managed APs per controller300–12,000 · recommended users per unit3.5–30 Gbps · throughput at 1500-byte packets3200+ · applications recognised by DPIMulti-WAN · load balancing, backup and policy routing
CHOOSE YOUR MODEL — FIVE CONTROLLERS FROM 512 TO 4096 APS
Pick by number of APs and users first, then by ports: AC881 and AC882 are 1U units for up to 512 and 1024 APs, AC885 and AC887 are 2U units for up to 2048 APs, and the AC998 is a 2U unit with 8 expansion slots and redundant power for up to 4096 APs. The tables below compare all five models column by column.
Get Best Price on WhatsAppRequest a quote ↓
Lead time · In stock: at your forwarder’s China warehouse 3 days after payment · Not in stock: 7–15 working days · Then air 5–10 days / sea 25–45 days to your port
Terms · Sample orders welcome · Quotation / PI fixes models, prices, Incoterms (EXW or FOB, each quoted separately), lead time and T/T payment · Defective units: free spare units agreed per order (quantity depends on order size) and written into the quotation · Warranty: up to 5 years on Zhongxin Shutong industrial switches, manufacturer warranty on other brands · Full terms, warranty & RMA
Need the PDF datasheet? Get it on WhatsApp →In-stock models: 3 days to your forwarder's warehouse in China after payment · Out-of-stock: 7–15 working days · then air 5–10 days or sea 25–45 days to your port
Sample quantities are welcome — testing one or two units first is the normal way to start.
Corporate orders are registered with the manufacturer under your company name — genuine supply you can verify at the source.
The ZTE Wantong ISG AC series combines a wireless access controller with a full site gateway. Each unit discovers ZTE Wantong APs on the network and manages them centrally — zero-touch AP configuration, seamless roaming, 5 GHz priority, automatic RF optimisation, AP and SSID isolation — while also handling the internet edge: multiple WAN lines with load balancing, line backup and policy routing, DPI flow control that recognises 3200+ applications, behaviour management with URL logs, web portal authentication, DDoS and ARP protection, and PPTP/L2TP/IPSec/OpenVPN. All five models run the same software; they differ in managed APs (512 to 4096), recommended users (300 to 12,000), ports and throughput. Specifications below are taken from the manufacturer's documents; fields that were not published are left out.
Three sizes, one controller software
How the 1U, 2U fixed and 2U modular models split the job.
1U COMPACT · 2 MODELS
2.5GE ports, up to 1024 APsISG AC881: 6×10/100/1000/2500M RJ45, 3500 Mbps, 3 million concurrent connections, 512 APs, 300 recommended users, ≤25 W. ISG AC882: 4×2.5GE RJ45 + 2×10GE SFP+, 7000 Mbps, 6 million connections, 1024 APs, 1200 recommended users, ≤30 W. Both are 44 mm high 19-inch units for hotels, offices, shops and schools.2U FIXED · 2 MODELS
2048 APs, 10GE SFP+ uplinksISG AC885 and ISG AC887 share the same 434×485×91 mm chassis, 6×GE RJ45 + 2×10GE SFP+ ports and a 2048-AP limit. The AC885 is rated 6000 Mbps, 6 million connections and 3000 recommended users (≤50 W); the AC887 doubles throughput to 14 Gbps with 12 million connections and 7500 recommended users (≤65 W). Choose by user count, not AP count.2U MODULAR · 1 MODEL
8 slots, redundant power, 4096 APsISG AC998: 2×GE RJ45 fixed plus 8 expansion slots for GE copper/fibre, 10GE, 40GE QSFP+ or 100GE QSFP28 cards, 30 Gbps, 20 million connections, 4096 APs and 12,000 recommended users. It is the only model with redundant power (AC 100–240 V, 550 W) — for large campuses, malls and stadium-size sites.Is this the right controller series for you?
Plain-language guide — based only on what these controllers actually do.
Hotels, malls and guest WiFiOne box manages every ZTE Wantong AP in the building, gives guests a web login page with your own logo and rolling images, keeps guests and staff on separate SSIDs with isolation, and shares two or more internet lines between them.
Schools and campusesThousands of phones and laptops on one WLAN with seamless roaming between APs; DPI flow control keeps teaching and office applications ahead of video and downloads, and time-based app policies apply to student groups.
Enterprises replacing several boxesGateway, flow control, behaviour management and AC controller in one unit, as the manufacturer describes it — with multi-WAN, NAT, DMZ, IPSec/OpenVPN for branch or remote access, and a bypass mode if a firewall is already at the edge.
Not the right pick if you need…
- A small site with only a handful of APs — the ZTE Wantong RAC wireless gateways and distribution APs cover that at a smaller size
- A dedicated next-generation firewall with IPS and antivirus — the ZTE Wantong ISG F-series NGFW; for behaviour management without WLAN control, the ISG A gateways
- PoE power for the APs — the controller has no PoE; use the ZTE Wantong S5160-HE or S5150 PoE access switches
Worried about the source? Order under your own company name.
For corporate buyers: we support submitting the purchase order to the manufacturer under your company's real name — your company appears on the official order, so the origin of the goods can be verified directly with the factory. Just provide your company name and pay by corporate bank transfer.
1 · Company name2 · Corporate bank payment3 · Order registered in your name
Using your own freight forwarder? No problem.
For small and mid-size orders, we deliver directly to your designated forwarder's warehouse in China — EXW or FOB, your choice, each quoted separately. From hand-over onward, international shipping and destination-side arrangements are handled by your forwarder — the way you already work.
EXW / FOBDelivery to your forwarder's warehouseNo minimum order
Note: manufacturer order registration (left) is available via the corporate purchase channel.
How to get a better price
Volume DiscountBulk quantities of a single model
CONTACT USMix & Match DiscountMix any categories & models storewide in one order — no quantity limit
BETTERVerified Project PriceDistributor, integrator or end user with a real project? Send the BOQ — project pricing plus free network design. Partner projects are protected: we never quote your end customer behind you
BESTAll discounts are quoted personally — message me on WhatsApp ↑
Key Features
The series capability list — from the manufacturer's datasheet.
AC management: auto-discovery of ZTE Wantong APs, zero-touch AP configuration, seamless roaming, 5 GHz priority, automatic RF optimisation
AP operations from the controller: upgrade, reboot, factory reset, scheduled radio off and scheduled reboot, online/offline status, wireless black/white lists, AP and SSID isolation
Multi-WAN: PPPoE, static IP, DHCP; bandwidth aggregation, load balancing by IP, port, connections or traffic; primary/backup lines; policy routing per ISP; multi-dial on one line
One-click smart flow control plus manual policies; DPI recognition of 3200+ application protocols with online database updates
Behaviour management: time- and group-based PC and mobile app policies, domain black/white lists, URL redirect and keyword replacement, URL, IM and terminal logs
Web portal authentication with selectable templates, custom rolling images and logo, and authentication bypass by MAC, IP or domain
Security: connection limits per IP and time, ARP attack defence, DDoS and flood defence, ping/tracert blocking, ACLs by IP, protocol, port, time, direction and interface
VPN and services: PPTP, L2TP, IPSec, OpenVPN; port mapping, DMZ, UPnP, NAT rules; dynamic DNS; SNMP, SSH, HTTPS and console management; gateway or bypass deployment
Who uses it, where it goes and how to size the controller
Written for the ZTE Wantong ISG AC series from its own specifications: 5 controllers with built-in gateway, 512 to 4096 managed APs, 300 to 12,000 recommended users, 3500 Mbps to 30 Gbps throughput, no PoE.
Who it is for
- Hotels, serviced apartments and hospitals — Guest WiFi with a branded web login page, separate SSIDs for guests and staff, AP isolation, and scheduled radio off in areas that close at night.
- Schools, universities and training centres — Hundreds to thousands of users, roaming between classrooms, time- and group-based app policies and URL logs, with flow control so lessons are not slowed by downloads.
- Malls, restaurants and entertainment venues — Wireless marketing through the portal page, many short-stay users, and two or more internet lines balanced by the controller.
- Integrators and ISPs building managed WiFi — One controller per site to deploy and maintain ZTE Wantong APs remotely — upgrade, reboot and check online status — with SNMP, SSH and HTTPS for remote management.
Where and how to install
- Main equipment room, 19-inch rack — All five are 19-inch rack units. AC881 and AC882 are 44 mm high and 250/280 mm deep; AC885/AC887 are 91 mm high and 485 mm deep, and the AC998 is 88 mm high and 560 mm deep, so the larger models need a full-depth rack.
- Between the internet lines and the core switch — In gateway mode, connect the ISP lines to WAN ports and the LAN side to the core or aggregation switch; the APs sit on PoE access switches below. Use the 10GE SFP+ ports (AC882/885/887) for the LAN uplink when traffic exceeds 1–2.5 Gbps.
- Bypass mode beside an existing firewall — If a firewall or router already handles the internet edge, the controller can be deployed in bypass mode and used mainly for AP management and authentication.
- Power and UPS — AC881 to AC887 have a single built-in AC power supply drawing 25–65 W, so a small UPS keeps WiFi and internet up during short outages. The AC998 has redundant supplies (AC 100–240 V, 550 W): feed them from two circuits.
- Temperature — Rated for 0°C to +45°C. Install in a ventilated equipment room, not in a closed ceiling space or an unventilated outdoor cabinet.
ISG AC series planning: which of the 5 controllers
All five run the same gateway, flow-control, authentication and AC software; they differ in managed APs, recommended users, ports, throughput and power. The manufacturer gives one AP figure per model; default and maximum licence counts are not stated. Rack height is our reading of the published heights (44 mm ≈ 1U, 88–91 mm ≈ 2U).
| AC881 | AC882 | AC885 | AC887 | AC998 | |
|---|---|---|---|---|---|
| Max managed APs | 512 | 1024 | 2048 | 2048 | 4096 |
| AP licence (default / max) | — | — | — | — | — |
| Recommended users | 300 | 1200 | 3000 | 7500 | 12,000 |
| Fixed ports | 6×2.5GE RJ45 | 4×2.5GE RJ45 + 2×10GE SFP+ | 6×GE RJ45 + 2×10GE SFP+ | 6×GE RJ45 + 2×10GE SFP+ | 2×GE RJ45 |
| Expansion slots | — | — | — | — | 8 (GE / 10GE / 40GE / 100GE cards) |
| Throughput (1500 bytes) | 3500 Mbps | 7000 Mbps | 6000 Mbps | 14 Gbps | 30 Gbps |
| Max concurrent connections | 3 million | 6 million | 6 million | 12 million | 20 million |
| Power supply / consumption | single AC / ≤25 W | single AC / ≤30 W | single AC / ≤50 W | single AC / ≤65 W | redundant AC / 550 W |
| Rack height (from published height) | 1U | 1U | 2U | 2U | 2U |
| Typical site size | office, shop, small hotel (~300 users) | hotel, school, office building (~1200 users) | large hotel, hospital, campus (~3000 users) | university, dense venue (~7500 users) | large campus, mall, stadium (~12,000 users) |
- Size by the larger of two needs: the number of APs you will install and the number of people online at the same time. A site with 400 APs but 2500 users needs an AC885, not an AC881.
- Add up your internet lines and keep the total below the model's throughput: for example, four 1 Gbps lines (4 Gbps) fit the AC882 (7000 Mbps) but not the AC881 (3500 Mbps).
- Choose the AC998 when you need redundant power, more than 2048 APs, or 40GE/100GE interfaces toward the core.
— = not listed / not applicable. Values are from the manufacturer's specification tables; concurrent connections are published in units of 10,000 (300W = 3 million). Typical site size is our guidance based on the recommended user count, not a manufacturer figure.
Full Specifications — Model by Model
Series specifications with one column per model — technical values in English. The highlighted column follows your model selection above.
Hardware — All 5 Models
| Item | AC881 | AC882 | AC885 | AC887 | AC998 |
|---|---|---|---|---|---|
| Fixed ports | 6×10/100/1000/2500M RJ45 auto-sensing | 4×10/100/1000/2500M RJ45 auto-sensing + 2×10GE SFP+ | 6×10/100/1000M RJ45 auto-sensing + 2×10GE SFP+ | 6×GE RJ45 + 2×10GE SFP+ | 2×10/100/1000M RJ45 auto-sensing |
| Expansion slots | None | None | None | None | 8 |
| Throughput (1500-byte packets) | 3500 Mbps | 7000 Mbps | 6000 Mbps | 14 Gbps | 30 Gbps |
| Max concurrent connections | 3 million | 6 million | 6 million | 12 million | 20 million |
| Max managed APs | 512 | 1024 | 2048 | 2048 | 4096 |
| Recommended users | 300 | 1200 | 3000 | 7500 | 12,000 |
| Dimensions | 440×250×44 mm, 19-inch rack | 440×280×44 mm, 19-inch rack | 434×485×91 mm, 19-inch rack | 434×485×91 mm, 19-inch rack | 440×560×88 mm, 19-inch rack |
| Power supply | Built-in AC 220 V, single PSU | Built-in AC 200 V (as published), single PSU | Built-in AC 220 V, single PSU | Built-in AC 200 V (as published), single PSU | Built-in AC 100–240 V, 50/60 Hz, redundant PSU |
| Power consumption | ≤ 25 W | ≤ 30 W | ≤ 50 W | ≤ 65 W | 550 W |
| Operating temperature | 0°C to +45°C | ||||
| Storage humidity | 5%–95%, non-condensing | ||||
AC998 Optional Interface Cards
| Item | AC998 |
|---|---|
| ACslot-4GT | 4×GE RJ45 card |
| ACslot-4GS | 4×GE SFP card |
| ACslot-8GT | 8×GE RJ45 card |
| ACslot-8GS | 8×GE SFP card |
| ACslot-4GT4GS | 4×GE RJ45 + 4×GE SFP card |
| ACslot-2GX | 2×10GE SFP+ card |
| ACslot-4GX | 4×10GE SFP+ card |
| ACslot-2QSFP+ | 2×40GE QSFP+ card |
| ACslot-2QSFP28 | 2×100GE QSFP28 card (occupies two slots) |
Software Features — All 5 Models
| Item | AC881 | AC882 | AC885 | AC887 | AC998 |
|---|---|---|---|---|---|
| Routing & WAN | IPv4/IPv6 dual stack / PPPoE, static IP, DHCP access / custom LAN/WAN assignment, VLAN / bandwidth aggregation across WAN lines / load balancing by IP, port, connections or traffic / primary-backup line failover / traffic steering by source/destination IP, port, domain, application or user count, separate upstream/downstream steering / ISP policy routing with custom ISPs, static routing / multi-dial on one line, WAN expansion | ||||
| NAT & services | Port mapping / DMZ / UPnP / NAT rules / IGMP proxy | ||||
| VPN | PPTP / L2TP / IPSec VPN / OpenVPN | ||||
| Deployment modes | Gateway mode / bypass mode | ||||
| Flow control | One-click smart flow control by scenario and WAN bandwidth / manual custom policies / DPI recognition of 3200+ application protocols with priority and line assignment, online database updates / time-based control by source IP, port and domain | ||||
| Behaviour management | Time- and group-based PC and mobile app policies / domain black and white lists / URL redirect, URL keyword and parameter replacement / network-sharing control (e.g. secondary routers) / URL logs, IM online/offline records, terminal online/offline records | ||||
| Authentication | Web authentication / multiple portal templates, custom rolling images and logo / authentication exemption by MAC, IP or domain | ||||
| Network security | Global connection limits, per time and per IP / ARP attack defence / DDoS and flood attack defence / block ping on LAN and WAN, block LAN tracert / ACLs by IP, protocol, port, time range, direction and interface | ||||
| AC management | Auto-discovery and unified management of APs / seamless client roaming / AP upgrade, reboot, factory reset / scheduled radio off, scheduled AP reboot / AP online/offline status / 5 GHz priority / wireless black and white lists / AP isolation, SSID isolation / automatic network optimisation | ||||
| Tools | Dynamic DNS (3322, Oray, DNSPod, Aliyun) / port mirroring / Wake-on-LAN / FTP / HTTP static server / UDPXY / line speed test / routing check / health monitoring / subnet calculator / packet capture | ||||
| System management | SNMP, Telnet, SSH, HTTP, HTTPS, console / Ping, Tracert / multi-level admin accounts / scheduled reboot and shutdown / user, function and system logs | ||||
Engineer's note: The controllers have no PoE, so APs are powered from PoE switches between them and the controller. Tell us the number of APs, expected users, internet lines and floor plan, and we will put together the controller sizing, AP model and count, PoE switch list, SFP+ optics and — for the AC998 — the expansion-card choice free of charge.
Wireless Controller FAQ — ZTE Wantong ISG AC Series
How do I choose between AC881, AC882, AC885, AC887 and AC998?
Start from recommended users, then check the AP limit: AC881 is rated for 300 users and 512 APs, AC882 for 1200 users and 1024 APs, AC885 for 3000 users and 2048 APs, AC887 for 7500 users and 2048 APs, and AC998 for 12,000 users and 4096 APs. If you expect growth, leave headroom on both numbers. Throughput (3500 Mbps to 30 Gbps) should also exceed the total of your internet lines.
Which access points can these controllers manage?
The manufacturer documents them for use with ZTE Wantong APs: the controller auto-discovers them, configures them with zero touch and handles upgrades, reboots and roaming. Management of third-party APs is not listed, so plan the WLAN with ZTE Wantong enterprise APs. We can match the AP models to your floor plan.
Is it only a controller, or can it replace my router?
It is also the gateway: every model supports multiple WAN lines (PPPoE, static IP, DHCP), NAT, port mapping, DMZ, load balancing, line backup, policy routing and PPTP/L2TP/IPSec/OpenVPN. If you already have a firewall or router at the edge, the documents also list a bypass deployment mode.
What is different about the AC998?
The AC998 has only 2 fixed GE ports but 8 expansion slots, so you build the interfaces you need from nine card types — 4 or 8 GE copper/fibre, 2 or 4×10GE SFP+, 2×40GE QSFP+ or 2×100GE QSFP28 (the 100G card takes two slots). It is the only model with redundant power (AC 100–240 V) and is rated for 30 Gbps, 20 million connections, 4096 APs and 12,000 users.
AC885 or AC887 — both manage 2048 APs, so what changes?
Same chassis (434×485×91 mm), same 6×GE + 2×10GE SFP+ ports and same 2048-AP limit. The AC887 is rated 14 Gbps instead of 6000 Mbps, 12 million instead of 6 million concurrent connections and 7500 instead of 3000 recommended users, at ≤65 W instead of ≤50 W. Pick the AC887 when many users share the APs, such as lecture halls, dormitories or event venues.
Can I order under my own company name and use my own forwarder?
Yes to both. Corporate buyers can have the purchase order submitted to the manufacturer under their own company name, so your company appears on the official order. For small and mid-size orders we also deliver directly to your designated forwarder's warehouse in China on EXW or FOB terms.
Do the controllers power the APs over PoE?
No. None of the five models lists PoE output, and the AC881 has only 6 ports, so APs are connected through PoE access switches such as the ZTE Wantong S5160-HE or S5150. The controller manages the APs over the network, so they do not need to be on its own ports.
Can I connect two or more internet lines from different ISPs?
Yes. All models support multiple WAN lines with load balancing by IP, port, connections or traffic, bandwidth aggregation for multi-threaded downloads, primary/backup failover, and policy routing by ISP with custom ISP definitions. Traffic can also be steered by source or destination IP, port, domain or application.
What login options are there for guest WiFi?
The specification lists web portal authentication with several templates, custom rolling images and your logo, plus exemption by MAC, IP or domain for devices that should skip the login page. Other methods such as SMS or social login are not itemised, so confirm with us if your project depends on them.
Can staff connect to the office network from home or link branches?
Yes. Every model supports PPTP, L2TP, IPSec VPN and OpenVPN, so remote users can connect in and branch sites can be linked over the internet. Dynamic DNS (3322, Oray, DNSPod, Aliyun) helps when the site has no fixed public IP.
How do I keep video and downloads from slowing everyone down?
Use the one-click smart flow control: choose a scenario and enter your WAN bandwidth, and the controller prioritises key applications in real time. For finer control, DPI recognises more than 3200 application protocols, each of which can get its own priority and line, and policies can follow IP, port, domain and time of day.
Can I order one unit first, and how does it reach my country?
Yes — a single sample can be ordered and sent by air. For larger orders we deliver EXW or FOB to your freight forwarder's warehouse in China, or arrange air or sea freight to your country on request. Every shipment comes with a commercial invoice and packing list for customs; import duties and VAT in your country are not included unless agreed in writing.
How do I pay?
By bank transfer (T/T) in US dollars against our proforma invoice, which lists the model, quantity, unit price, delivery terms and lead time. You can check our company details on the verification page before you pay.
Related Products
ZTE Wantong Enterprise Wi-Fi Access Points
Ten enterprise APs — indoor, high-density and outdoor — that this controller series manages.
ZTE Wantong SMB Wi-Fi 6 APs & RAC Gateways
Distribution APs and RAC wireless gateways — the smaller-site alternative for rooms, apartments and shops.
ZTE Wantong S5160-HE Series
Gigabit PoE+ access switches with 10G uplinks — the layer that powers the APs and connects them to the controller.
Request a quote for this product
An engineer replies within 24 hours on working days with model check, price and lead time. No obligation, no newsletters.
Product: ZTE Wantong ISG AC · Wireless Controllers