(ds) trusted wireless access gateway solution.pdf

2
NewGrid Trusted Wireless Access Gateway (TWAG) Applicaons Clientless I-WLAN Interworking Data Offload / Local Breakout Feature Highlights Enhanced QoS features 30 Gbps of IPsec throughput per packet blade Able to support large service deployments of tens of thousands of WiFi APs Robust and Resilient Carrier- Grade Soluon using Standard ATCA-based Plaorm delivering five-nines (99.999%) availability LTE Data and Voice With the introducon of Long Term Evoluon (LTE) networks, subscribers are offered greater bandwidth and data speeds. This has encouraged the introducon of even higher-definion video streams and other data intensive services. In addion, opera- tors have begun announcing plans to launch voice over LTE (VoLTE) services. But all of this has only created new challenges for the service providers. Aſter having spent significant amounts of capital to secure and deploy their LTE networks, operators are having to support data intensive services at lile to no revenue. Operators are also finding that their current LTE deployments are unable to provide sufficient coverage to support VoLTE at the level of experience expected by subscribers. This has led operators to consider integrang their WLAN networks to not only offload the non-revenue generang Internet traffic but fill the gaps in coverage. Introducing NewGrid Trusted Wireless Access Gateway The NewGrid Trusted Wireless Access Gateway (TWAG) enables operators to integrate their WiFi access and LTE core networks while allowing the offload of non-revenue gen- erang Internet data. Network Configuraon E-UTRAN WiFi EPC Open IP Network RAN IPsec S6b S5 S2b Gx SWm SGi Internet Offload P-GW eNodeB WiFi AP TWAG PCRF W-AAA AAA S-GW S11 Operator’s Service Network

Upload: smec-co-ltd

Post on 18-Apr-2015

201 views

Category:

Documents


4 download

DESCRIPTION

The NewGrid Trusted Wireless Access Gateway (TWAG) enables operators to integrate WiFi access networks with their LTE mobile core networks, allowing operators to securely open operator services (such as voice and video streaming) to subscribers over their secure and trusted WiFi networks. This is critical because not every mobile device (smartphone or tabletPC) supports IPsec. Using trusted WiFi access points that support IPsec, secure tunnels can be established to the access points, securing traffic over one of the most exposed portion of the network (the backhaul to the mobile core). By shifting subscriber traffic over to the carrier WiFi network, operators can significantly reduce the burden on their mobile access networks as the number of subscribers and the amount of traffic they consume increases.The TWAG also supports mobile data offload or local breakout, allowing operators to re-route non-revenue generating Internet traffic directly to the Internet and away from the mobile core (significantly reducing the burden to their data network and in turn reducing the amount of investment necessary to maintain service quality).The NewGrid TWAG is available on a number of carrier-grade ATCA platforms, offering service providers a scalable and reliable high-performance solution.For more information, please visit us at http://www.ipsecuritygateway.com

TRANSCRIPT

Page 1: (DS) Trusted Wireless Access Gateway Solution.pdf

NewGrid Trusted Wireless Access Gateway (TWAG)

Applications●Clientless I-WLAN Interworking●Data Offload / Local Breakout

Feature Highlights●Enhanced QoS features●30 Gbps of IPsec throughput per packet blade●Able to support large service deployments of tens of thousands of WiFi APs●Robust and Resilient Carrier- Grade Solution using Standard ATCA-based Platform delivering five-nines (99.999%) availability

LTE Data and VoiceWith the introduction of Long Term Evolution (LTE) networks, subscribers are offered greater bandwidth and data speeds. This has encouraged the introduction of even higher-definition video streams and other data intensive services. In addition, opera-tors have begun announcing plans to launch voice over LTE (VoLTE) services.

But all of this has only created new challenges for the service providers. After having spent significant amounts of capital to secure and deploy their LTE networks, operators are having to support data intensive services at little to no revenue. Operators are also finding that their current LTE deployments are unable to provide sufficient coverage to support VoLTE at the level of experience expected by subscribers.

This has led operators to consider integrating their WLAN networks to not only offload the non-revenue generating Internet traffic but fill the gaps in coverage.

Introducing NewGrid Trusted Wireless Access GatewayThe NewGrid Trusted Wireless Access Gateway (TWAG) enables operators to integrate their WiFi access and LTE core networks while allowing the offload of non-revenue gen-erating Internet data.

Network Configuration

E-UTRAN

WiFi

EPC

Open IPNetwork

RANIPsec

S6bS5

S2b

Gx

SWmSGi

InternetOffload

P-GWeNodeB

WiFiAP TWAG

PCRF

W-AAA

AAAS-GW

S11

Operator’sServiceNetwork

Page 2: (DS) Trusted Wireless Access Gateway Solution.pdf

NewGrid Trusted Wireless Access Gateway

Secure Wireless Mobility and OffloadThe NewGrid TWAG utilizes state of the art authentication protocols and encryption algorithms to estab-lish secure IPsec tunnels between the WiFi AP and the operator core. It also supports a variety of mobility and tunneling protocols to support service when subscribers roam between WiFi and LTE coverage.And the TWAG has features that can effectively identify and route certain traffic directly to the Internet, significantly reducing the amount of unnecessary traffic congestion in the core network.

Performance and HardwareA high performance solution, the TWAG is able to establish up to 20,000 IPsec tunnels per packet blade.

Available in a variety of standards-based AdvancedTCA (ATCA) chassis, the TWAG is a highly scalable solu-tion that can seamless range up to 180 Gbps of throughput.

The TWAG is a NEBS3 compliant solution with a fully redundant architecture assuring no single point of failure and enabling five nines (99.999%) high availability. And since every critical component is hot-swappable, operators are guaranteed uninterrupted service.

Benefits and SummaryBy enabling operators to integrate their WiFi access networks and offload traffic, the TWAG can signifi-cantly reduce CAPEX and OPEX by eliminating the need to increase capacity, both in the access network (using widely available WiFi APs) and the core (by offloading non-revenue generating traffic). All the while improving the customer experience by reducing traffic congestion.

The NewGrid Trusted Wireless Access Gateway is the ideal solution for operators seeking to a cost-effec-tive solution to optimize their LTE networks by integrating their WiFi access networks.

www.IPsecuritygateway.com© 2012 SMEC Co., LTD. All rights reserved. The SMEC and NewGrid logo is a registered trademark of SMEC Co., LTD. NewGrid is the Communica-tions Business Division of SMEC Co., LTD. This document and any products or functionality it describes are subject to change without notice. Please contact SMEC for additional information and updates.

Feature Function Description * Optional Feature

Features Internet Key Exchange* IKEv1, IKEv2

Encryption* DES-CBC, 3DES-CBC, AES-CBC, AES-CTR, NULL

IKE Client Authentication* PSK, X.509, EAP-MD5 / AKA / SIM / TTLS

AAA Interworking DIAMETER / RADIUS support

QoS

DSCP based QoS enforcement5 tuple based QoS enforcement3 level hierarchical priority / bandwidth controlIngress bandwidth control per VLAN

RoutingStatic / OSPF / BGPGraceful Restart

Mobility & TunnelingIPinIP / GRE* / IPsec*PMIPv6* / GTP-C & GTP-U*

Management CLI, SNMP(v2/v3), EMS

Performance Throughput (max) 30 Gbps (full duplex) per packet blade

Concurrent tunnels (max) Up to 20,000 per packet blade