broadband vpns - outsourcing isp services to cable tv and xdsl providers bruce perlmutter bay...
TRANSCRIPT
Broadband VPNs - Outsourcing ISP Services to Cable TV and xDSL Providers
Bruce PerlmutterBay NetworksCorporate Systems Engineering
New ISP Markets
Tunneling Overview
IPsec
IP Security, derived from IPv6 Packets can have AH (Authentication Header)
and ESP (Encapsulating Security Payload) AH authenticates each packet - data integrity ESP provides privacy - DES (56-bit) or Triple DES
(112-bit) Tunnel mode provides private addressing and
doesn’t require IPsec between end nodes
PPTP - Indian Outhouse
PPTP
Point-to-Point Tunneling Protocol Developed by Microsoft Uses 40 or 128-bit RC4 encryption Well integrated into Windows 95 and NT Well integrated into NT Domains 3rd party implementations available
User Screen
End User Network Properties
Configuring Tunnels
Tunnel Attributes
Solution Overview
SONET/ATM/QOS/Switching
Ethernet
Cable SystemClient Provisioning
Server
Internet
New Oak
ISPCustomerDeliveryT3/ATM
T1/T3
Ethernet
Head EndInfrastructureManagement
Console
Customer SevicesRadius/LDAP/Billing
Internet
Internet ServicesEmail/Web/News
New Oak
IP Router
ATM/Sonet/T1/T3
New OakIPSECClient
Software
Off the Shelf CableModems/XDSL Plant
Head End IPInfrastructure
XDSL
CATV
House
Condos
City
Suburban Home
Building 1
Building 2
HouseSuburban Home
Internet ServiceProviders or
Enterprise DataNetworks
Data ServiceManagement Center
Data ServiceIngress
Customer SevicesRadius/LDAP/Billing
Internet ServicesEmail/Web/News
ISP A
ISP B
Data ServiceIngress
Win-Win-Win
End Users High Speed Internet Access Service Selection Quality through Competition
ISP New Subscriber base without large Infrastructure
investment or management Works with all xDSL and Cable modem architectures
Network Access provider New Revenue source without understanding ISP business Standards based VPN solution with a future Simple provisioning and management requirements.
Questions or Comments
Contact:
for a copy of these slides or a white paper on this topic