creatinganswers

TOGETHER

Frank KiefferProfessional Services

OverviewEquant IP VPN

Agenda

Introduction to IP VPN

Equant IP VPN Service Description

Key customer benefits

Introduction to IP VPNWhat is an IP VPN?

Virtual Private Network (VPN)• A secure, shared infrastructure over a private domain

network managed by a service provider or over the public Internet

IP VPN• A VPN network that uses the standard TCP/IP

protocol suite

MandatoryMandatory

Managed IP CPEManaged IP CPE++

MPLS IP VPNMPLS IP VPNInternetInternet Frame Relay / ATMFrame Relay / ATM

IP Sec boxIP Sec box

Managed “IP” CPEManaged “IP” CPE

IP SecIP SecCPECPE

IP Sec boxIP Sec box

VA servicesVA servicesVA servicesVA services VA servicesVA servicesValue Added

Encryption

CPE

Network

MPLS-basedor Network-based

IP VPNInternet-basedor CPE-based

IP VPN

Frame Relay or ATM-based

IP VPN

OptionalOptional

IP VPN Segmentation3 Ways to Build an IP VPN

MPLS:• A built-in network infrastructure for

enhanced customer IP VPN solutions• A flexible solution to introduce high

security and Value Added services

MPLS-based IP VPN

MPLS-based IP VPN

PublicInternetPublicInternet

ATMATM

FrameRelayFrameRelay

IP VPN Technologies

positioned with their capabilities

Service Overview A Comparison of IP VPN Technologies

PerformanceAvailability

Security

Scalabilitylow high

Flexibility Simplicity Limits

IPSec-based IP VPNR

elia

bilit

ylo

whi

gh

Equant IP VPNService Description Overview

Global market leader in MPLS-based VPN services

Launched in 1999; first MPLS VPN service

Used today by more than 550 companies (Bacardi, BBC Worldwide, Yazaki, BHPBilliton, Danone, British American Tobacco, Maersk Data…) around the world with over 12,000 connections

Integrated with service portfolio, including remote dial access, dedicated Internet access, Voice and Video over IP, and IPSec

Service availability in over 140 countries with over 1000 PoPs

Equant IP Dial

MNC Subsidiaryor Partner SME

MNC Supplier

MNC Headquarters

PBX

Remote User

MNC Subsidiaryor Partner SME

Public Domain

Equant Internet Direct

IP Sec Gateway

Private Domain

Equant IP VPN(MPLS based)

Service OverviewIP Cloud

A single connection for your intranet, extranet and Internet needs

EquantSecure

Gateway

EquantServer

Hosting

Messaging Services

Equant Application Hosting

Key Features

IP VPN Plug: Simplicity and flexibility

Full secured VPN

Variety of access methods

COS management (application-awareness)

Integrated solution for voice, video, private data, Internet

Enhanced Service Level Agreements (SLAs)

Customer service management

Contingency solutions

IP VPN PlugA Complete Package of Managed Services

Simplicity and flexibility

• The requested bandwidth for each site (IP bandwidth)

• Traffic management through Class Of Service

• Any-to-any connectivity within the customer’s VPN

• Associated reporting and SLA

• Integration of voice, video, private data, and Internet

MPLS VPN SecurityFull Secured VPN

Cisco MPLS based VPNs: Equivalent to the Security of Frame Relay and ATM

Miercom, March 30, 2001

http://www.mier.com/reports/cisco/MPLS-VPNs.pdf

Variety of Access Methods

Core Backbone

PublicInternet

VoicePSTN

LL, FR & ATM

ISDNPSTN

ADSL

Voice Gatewaysfor Off-net PSTNservices

Internet accesswith IPSectunneling

Layer 1 & 2 dedicated access

ADSLbroadband access

PSTN & ISDNdial access

NetworkAccessServer

BroadbandAccessServer

InternetGateway

Native IP

EquantIP VPN

IP Bandwidth

• Inferior or equal to the physical leased line access speed

• A flexible parameter for the site sizing

• From 8 kbps up to 50 Mbps

ATM AccessBehavior

FR AccessBehavior

Direct AccessBehavior

CIR = 100%of IP bandwidth

PCR = SCR FR or ATMencapsulation

Flexibleparameterup to the

LL bandwidth

IPIPBandwidthBandwidth

LLLLBandwidthBandwidth

PCR: Peak Cell RateSCR: Sustainable Cell RateCIR: Comitted Information Rate

SILVERNo traffic

prioritization (1 COS)

SILVERNo traffic

prioritization (1 COS)

GOLDData traffic

prioritization (Up to 3 COS)

GOLDData traffic

prioritization (Up to 3 COS)

PLATINUMData + Multimedia prioritization (Up

to 3+2 COS)

PLATINUMData + Multimedia prioritization (Up

to 3+2 COS)

IP Service TypesCustomer’s Sites Segmentation Into 3 Cases

A customer IP VPN Network can be composed of a mix of IP service types

• SILVER – Unique COS – 100% of the IP bandwidth

• GOLD – Data Classes Of ServiceStandard COS profiles

– 60% - D1, 30% - D2, 10% - D3– 66% - D1, 33% - D2– 100% - D2

• PLATINUM – Multimedia– Voice class – Video class– + Gold standard profiles

• Flexible options

IP Service TypesCOS Management

Data classes D1, D2 and D3• CB-WFQ for all classes (relative weight = relative priority in case of

congestion)• No layer 3 shaping: Each data class can use up to the IP bandwidth• No more Frame Relay facilities: Traffic always limited to the IP

bandwidth

Voice class – RT-vo• LLQ – Real-time class (highest priority)• Flexible size up to 75% of the IP bandwidth• Policed• Data classes limited to IP bandwidth – MM traffic in case of congestion

Video class – RT-vi• CB-WFQ (specific weight = highest priority in case of congestion) –

Video specific sizing• Layer 3 shaping: Protect and keep the IP bandwidth for data classes.

Traffic always limited to the configured bandwidth for video traffic

CB-WFQ: Class Based – Weighted Fair QueuingLLQ: Low Latency Queuing

To statistical distribution on the access via Congestion

Management

From uncontrolled usage

Application classification determined by the customer

Application Aware “Tool”COS Management CE - PE

Voice

Video

VoiceVoiceclassclass

IP B

andw

idth

D1 class

D2 class

D3 class

60%

30%

10%

Data Data traffictraffic

SNA

Messaging

Intranet Web

HTTP / FTP

VideoVideoclassclass

Absolute PriorityAbsolute Priority

Very High PriorityVery High Priority

D1: Priority D1: Priority –– weight 6weight 6

D2: Priority D2: Priority –– weight 3weight 3

D3: Priority D3: Priority –– weight 1weight 1

No Priority (in this case, part of the D3 traffic can be dropped)

COS ManagementBehavior in Case of Congestion (Example)

Key Customer BenefitsGlobal reach

• Unmatched, globally consistent network coverage

Simplicity – flexibility• Fully managed IP VPN plug, built-in access to all Equant IP

VPN value added services and the Internet using a single physical connection

Security• Equant IP VPN guards your critical applications from

compromise, slow downs and denial of service attacks. A built-in network security through a unique MPLS architecture

Value and cost effectiveness• Low total cost of ownership for improved bottom line

performance quality • Application-specific performance, backed by SLAs and award-

winning customer service• Bandwidth optimization through CoS Management

Scalability• Equant IP VPN easily adapts as your e-business requirements

grow in complexity, volume and international scope

End-to-end management• Local presence, multi language support, customer services

supplying all products