All Rights Reserved © Alcatel-Lucent 2006, ##### OmniAccess WAN OA700 Hauke Heinecke

All Rights Reserved © Alcatel-Lucent 2006, #####

OmniAccess WAN

OA700

Hauke Heinecke

All Rights Reserved © Alcatel-Lucent 2006, #####2 | Presentation Title | Month 2006

Was ist falsch?


OmniAccess 700 Unified Services Gateway Value Propositions

Reduces cost and complexity of managing enterprise and branch office networks

Unified services gateway for enterprise and branch offices Simple deployment - both network, voice & security services on one platform Modular addition of new services on an as-needed basis Modular system design for fast recovery

Unparalleled high availability to support mission-critical applications Non-disruptive service upgrades & configuration changes Insulation of system from failure of any one service

Comprehensive management, always accessible platform Easy addition of new services via remote upgrades Easy expansion into new branch sites – ship chassis, remotely configure & provision

services

Highly secure infrastructure with ability to respond rapidly to new security threats Easy addition of new security containment measures & other services via remote

upgrades

Open platform to enable integration of customer and partner applications as needed


OmniAccess 700 Unified Services Gateway Services Gateway Family

Unified services Security services (firewall, IDS/IPS, VPN) Voice services (SIP ALG, QoS) Network services (switching, routing, QoS) Branch office services (DNS, DHCP, etc)

100% remote accessibilityMaximum availability

Purpose-built to simplify enterprise operations

OA780 OA740 OA720


OmniAccess 700 Service Gateway Powerful Software Architecture

Services

Applications

HW IFs

Application Interface

Lif

elin

e™

Man

ag

em

en

t Networking:DNSRADIUSSSL VPN

WAN Opt.:Web CacheCompression

New Apps:3rd PartyCustomOpen Source

T1/E1

Storage

Router Firewall VPN QoS IDS/IPS AV

ModuLive OS

V.35/X.21 ADSL ISDN Gig E


Router Switching

ModuLive™ OS

Firewall IDS / IPSVPN

Router SwitchingFirewall IDS / IPSVPN VoIP

Monolithic Operating System

Modular, always-live operating system

Start / stop individual software modules

Real-time service addition w/o disruption

Insulate system from failure of any service

One failure or upgrade = all services down

Traditional Router

OmniAccess 700

Modularity = major advantage in managing services

Modularity = major advantage in managing services

OmniAccess 700 Unified Services Gateway Purpose-Built Architecture --> ModuLive™ Operating System

IDS / IPS VoIP

Monolithic OS is high risk for multiple services down


DataPlane

1st GenerationEarly 90s

Data plane limits performance & mgmt access

MgmtPlane

ControlPlane

DataPlane

3rd GenerationOmniAccess today

Full separation of data & mgmt traffic,

accessible even if main processing unavailable

2nd GenerationLate 90s

Data performance improved, mgmt still

tied to data paths

ControlPlane

DataPlane

OmniAccess 700 Unified Services Gateway Purpose-Built Architecture --> Lifeline™ Management Framework


High Performance Multi-Service Support with: OnePass™ Packet Processing

Firewall

Security

Routing

1

2

3

Packet Egress4

Packet Ingress

OmniAccess 700 USG

Single

Packet

Inspection

Routing

Firewall

Security

1

2

3

4

Routing

(again)

Packet Ingress

Packet Egress5

Traditional Branch Office Routers

Multiple

Packet

Inspections

By inspecting packets only once, processor efficiency increases and latency remains virtually the same no matter how many services are active


OmniAccess 780 System - Release 2.2 (Hardware)

Features High-speed PCI-Express switching backplane ~900Kpps forwarding engine High-redundancy management plane with Lifeline

remote manageability Built-in 2 GE ports Redundant power option

System Modules SE - Services Engine SF – Switching Fabric

Interface Modules 8 port 10/100/1000 Ethernet switch card 4 port T1/E1 (channelized & unchannelized) 4 ports USP (X.21/V.35)


OA780-CB-A – Chassis Bundle System Overview - Release 2.2 (Hardware)

Fan tray Hot swappable Console port Modem port USB port

OA780-SF (Switch Fabric) Internal interconnect for all

modules

OA700-SE (Services Engine) Main CPU module

OA780 Chassis 3 RU high 10-slots 6-slots for interface modules 2 power supply slots (Rear) Mid-plane architecture 19” rack mountable

OS780-PS400-A 400 watt (90-240v auto detection) BTUs Supports two Hot Swappable

$9,995List


OmniAccess 740 System - Release 2.2 (Hardware)

Features PCI-Express based high-speed switching backplane ~900Kpps forwarding engine Switching fabric integrated into backplane Built-in 2 GE ports

System Modules SE - Services Engine

Interface Modules 8 port 10/100/1000 Ethernet switch card 4 port T1/E1 (channelized & unchannelized) 4 port USP (X.21/V.35)


OA740-CB-A – Chassis Bundle System Overview - Release 2.2 (Hardware)

OA700-SE (Services Engine) Main CPU module

$4,995List

OA740 Chassis 1 RU high 4-sots 2-slots for interface modules Single internal AC power supply 19” rack mountable


OA7-T1E1-4 (4-Port T1/E1) Channelized T1 and E1 Unchannelized T1 and E1 Fractional T1 and E1 RJ-45 connections HDLC, PPP and Frame Relay Encapsulations: MLFR, MLPPP, HDLC

OA7-USP-4 (Universal Serial Port) 4 ports on 2 connectors V.35, X.21 interfaces Protocol selection via interface

cable

OA700-SE (Service Engine) 2 GHz Opteron CPU Memory 512MB expandable to 1GB On board 2 port 10/100/1000 Copper

Ethernet interfaces Local Mgmt CPU controls/monitors Opteron Requires a minimum of one in an OA780 or

OA740 Consumes 2 slots in the chassis

OA7-GE-8 (L2 Ethernet Switch) 8 ports of 10/100/1000 Layer 2 switching RJ-45 connections

Common System and Interface Modules - Release 2.2 (Hardware)


OnePass packet processing – Guaranteed performance

ModuLive - Modular software platform for in-service upgrades

Lifeline management framework – Maximum availability

Network services

Routing: RIP, OSPF, BGP, GRE for IP, VRRP, PIM

LAN switching: 802.1Q VLANs, STP, PVST+, Integrated Routing & Bridging (IRB)

WAN: PPP, MLPPP, Frame Relay, MLFR, HDLC, and Ethernet

System: DHCP Relay/Client, DNS client, TFTP/FTP, Telnet

QOS: Hierarchical Queuing, Rate limiting, Shaping, RED, WRED, DSCP/TOS marking

Security Stateful FW: Stateful packet inspection, Attack detection, NAT, DDOS, ALGs, ACLs,

128K sessions IPSec VPN: Site-to-Site, 3DES, AES, PKI, NAT traversal, 2.5K VPN tunnels IDS/IPS: Detection, Prevention modes, Automatic Signature updates, Group-based

IDS/IPS

VoIP ALGs: SIP, NOEv3 – Dynamic pinhole mgmt

QoS: Strict priority queuing, DSCP (EF) classification & marking

OmniAccess 700 USG: Release 2.2 (Software)

All Rights Reserved © Alcatel-Lucent 2006, #####

Die Gesamtlösung


OmniSwitch6850 / L

OmniAccess 700OmniAcces

sWLAN

7450/7750

OmniStackLS 6200

OmniSwitch7000/9000

LAN

CoreWAN/MANWLAN LAN Aggregation

LAN

Edge

Secure Network TransformationLAN/WAN Networking Solutions

OmniAccess 3500

Laptop Guardian

Brick Firewall

OmniAccess SafeGuard

Durchgängige Netzwerk Services Durchgängige Netzwerk Services

Durchgängiges Netzwerkmanagement – OmniVista / Durchgängiges Netzwerkmanagement – OmniVista / Vital SuiteVital Suite

GenesisGenesis

Omni PCX EnterpriseOmni PCX Enterprise

Omni PCX OfficeOmni PCX Office

EndgeräteWLANLANTDM

EndgeräteWLANLANTDM

OTUCOTUC


Konvergente Wired & Wireless LösungKosteneinsparung

Niedriger CAPEX und OPEX Niedriger CAPEX und OPEX

Geringer Platzverbrauch

Geringer Stromverbauch

Geringe Installationsdauer

Key Points Am besten skalierbare IPT-Lösung am Markt Sehr hohe Portdichte Einzigartiges POE Management

Hohe Skalierbarkeit OmniSwitches verfügen über sehr hohe Portdichten + 10 Gigabit

Ethernet Uplinks. Damit reduzieren sie die Komplexität im Netzwerk OmniPCX Enterprise: 15K Benutzer, 100K Benutzer bei Vernetzung Blade Center Unterstützung für Sprache und alle relevante

Anwendungen

Weniger Stromverbrauch und Klimatisierungsaufwand POE: Automatische Erkennung von IP-Telefonen, WLAN Access Points OmniSwitch 9000 entsprechen US “Green” Standarts durch bis zu

60% weniger Energieverbauch Einfachste Administration


Wired & Wireless Convergence SolutionsAlways On

Erweiterte Sicherheit und VerfügbarkeitErweiterte Sicherheit und Verfügbarkeit

Services “Always On”

100% Sicher

Key Points Bell Labs Expertise in Sicherheitsthemen Sicherste IP Telephony Lösung (Miercom 06) Einziges Softphone mit VLAN partitioning

Verfügbarkeit 5x9 Verfügbarkeit für Realtime Dienste wie IPT, Video Kompromisslose Redundanz LAN/WAN: Ausgefeiltes Backup Konzept: Media Gateway Backup,

PCS, Hotswap, MPLS Protection Selbstheilende Komponenten, z.B. WLAN

Sicherheit 802.1X Authentifzierung: Telefon mit Multi-Session Unterstützung

im OmniSwitch “Dynamic Pinholing” Unterstützung der FW, Voice/data VLAN

Unterstützung, Partition Management, Softphone mit VLAN Support ITU X.805 framework, Common Criteria certification

•MPLS


Wired & Wireless Convergence SolutionsEasy to Manage

Einfachste Verwaltung und geringere TCOEinfachste Verwaltung und geringere TCO

Vereinfachung

Zentralisierung

Key Points Führende IP-Address Management Lösung Multivendor Unterstützung/VitalQIP & VitalSuite Einfache QOS & Security Verwaltung

OmniVista Einfachstes Management, z.B. QoS und Access Listen Zentraler Kommunikationsserver Gemeinsame Verwaltung des Netzwerks für alle Dienste

End-to-End Management Lösung Zentralisierte IP Adress Verwaltung – VitalQIP Zentralisierte Performance Überwachung – VitalSuite Zentralisierte Verwaltung von verteilten VPN und Firewall Lösungen

- Brick


Wired & Wireless Convergence SolutionsConverged Services

Konvergente Mobility LösungKonvergente Mobility Lösung

Komplett Services

Benutzer erkennung

Key Points FMC voll in OmniPCX Enterprise integriert Erste SIP “dual mode” Mobilitätslösung Zentralisierte WLAN Lösung mit Ultra-Thin AP

WLAN Netzwerk mit Unterstützung für Sprache Zentralisierte und skalierbare Voice & Data WLAN Lösung Integrierte Firewall und Authentifizierungsserver (AAA) “Voice aware” WLAN Infrastruktur: Schnelles hand over, 802.11e

QOS, ARP proxy, zentralisiertes CAC, Powersaving Modi

Fixed/Mobile Lösung Kompletter Telefonieservice für jedes Endgerät: WiFi, DECT, GSM “Dual mode” GSM/SIP WiFi, Partnerschaft mit Nokia Benutzer- und Geräte Lokalisierung


Alcatel-Lucent Wired und Wireless konvergente Lösungen alsONE STOP SHOPPING

Kosten Optimierung

Kosten Optimierung

Einfach zu managen

Einfach zu managen

Always OnAlways On

Konvergente Dienste

Konvergente Dienste

Alles aus einer Hand

Höchste Skalierbarkeit

Höchste Verfügbarkeit

Geringer Energieverbrauch

Durchgehende Möbilitätslösung

Sicherste Lösung

End-to-End Management

Internet Standards


www.alcatel-lucent.com

Documents

All Rights Reserved © Alcatel-Lucent 2006, ##### OmniAccess WAN OA700 Hauke Heinecke