Broadband VPNs - Outsourcing ISP Services to Cable TV and xDSL Providers Bruce Perlmutter Bay...

Broadband VPNs - Outsourcing ISP Services to Cable TV and xDSL Providers

Bruce PerlmutterBay NetworksCorporate Systems Engineering

New ISP Markets

Tunneling Overview

IPsec

IP Security, derived from IPv6 Packets can have AH (Authentication Header)

and ESP (Encapsulating Security Payload) AH authenticates each packet - data integrity ESP provides privacy - DES (56-bit) or Triple DES

(112-bit) Tunnel mode provides private addressing and

doesn’t require IPsec between end nodes

PPTP - Indian Outhouse

PPTP

Point-to-Point Tunneling Protocol Developed by Microsoft Uses 40 or 128-bit RC4 encryption Well integrated into Windows 95 and NT Well integrated into NT Domains 3rd party implementations available

User Screen

End User Network Properties

Configuring Tunnels

Tunnel Attributes

Solution Overview

SONET/ATM/QOS/Switching

Ethernet

Cable SystemClient Provisioning

Server

Internet

New Oak

ISPCustomerDeliveryT3/ATM

T1/T3

Ethernet

Head EndInfrastructureManagement

Console

Customer SevicesRadius/LDAP/Billing

Internet

Internet ServicesEmail/Web/News

New Oak

IP Router

ATM/Sonet/T1/T3

New OakIPSECClient

Software

Off the Shelf CableModems/XDSL Plant

Head End IPInfrastructure

XDSL

CATV

House

Condos

City

Suburban Home

Building 1

Building 2

HouseSuburban Home

Internet ServiceProviders or

Enterprise DataNetworks

Data ServiceManagement Center

Data ServiceIngress

Customer SevicesRadius/LDAP/Billing

Internet ServicesEmail/Web/News

ISP A

ISP B

Data ServiceIngress

Win-Win-Win

End Users High Speed Internet Access Service Selection Quality through Competition

ISP New Subscriber base without large Infrastructure

investment or management Works with all xDSL and Cable modem architectures

Network Access provider New Revenue source without understanding ISP business Standards based VPN solution with a future Simple provisioning and management requirements.

Questions or Comments

Contact:

Bruce_Perlmutter@BayNetworks.com

for a copy of these slides or a white paper on this topic