HP Dynamic VPN (DVPN) solution

Simplify operations and reduce cost and complexity with HP Dynamic VPN (DVPN) solutionSam RastogiGlobal Product Marketing ManagerMay 2012

© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.2

Key trends

PCI DSS, HIPAA, GLBA, etc.

Regulatory Compliance

Broadband and Wireless Mobility

Low cost, high speed broadband, 3G WAN

GlobalizationIncreasing

remote workforce

Rising cost, complexity, and poor performance


Key requirements

Flexible

Easy to manage

Scalable and High

performance

• Utilizes standards based IPSec VPN encryption

• Supports multiple deployment scenarios

• Reduces manual configuration

• Automated, zero-touch deployment options

• Connects up to 3,000 tunnels per hub

• Virtually infinite horizontal VPN scaling


Dynamic VPN

• Up to 93% configuration reduction

• Highly scalable and resilient

• Carrier agnostic connectivity

• Zero-touch automation with HP IMC

HP DVPN solution overview

Dynamic VPN

IPsec tunnels

Address management

Automatic tunnel setup


HP DVPN solution portfolio

8800 Router Series

6600 Router Series MSR50

MSR20-1X MSR900

MSR30

MSR20

8800 Router Series

6600 Router Series

FlexNetwork Architecture

FlexManagement – HP Intelligent Management Center (IMC) BIMS

FlexFabric FlexCampus FlexBranch

MSR50

MSR20-1X MSR900

MSR30

MSR20

6600 Router Series 6600 Router Series


HP MSR Series router family

• Comprehensive portfolio scales for small office/home office to large size branch and regional offices

• Broad range of integrated services to meet today’s “branch in a box” needs− Modular WAN and LAN options

− Dynamic routing, MPLS, multicast, IPv6, QoS

− Full Ethernet switching

− Robust security features

− Unified wired and wireless LAN

− Integrated voice gateway

• Exceptional performance and availability

• Unified OS and single pane of glass managementRouter Series Configuration Performance (Kpps)

MSR900 Series Fixed Up to 100

MSR20-1X Series

Modular – 1 SIC slot 160

MSR20 Series Modular – 2 or 4 SIC slots 180

MSR30 Series Modular – 2 or 4 SIC and 1, 2, 4, or 6 MIM slots

Up to 360

MSR50 Series Modular – 4 FIC or 6 FIC slots Up to 1280

MSR 900 Series MSR 20-1X Series

MSR 20 Series MSR 30 Series

MSR 50 Series


HP 6600 Router Series

• High performance, multi-core CPU and distributed processing with up to 252M PPS

• Comprehensive routing, switching, and security services

− MPLS, dynamic routing, IPv6, multicast, nested QoS

− Spanning tree, VLAN, bridging, IGMP/MLD

− Stateful firewall, MPLS, Dynamic VPN

• Multiple WAN/LAN options (T3, E3, T1, E1, OC-3, GbE, 10GbE, serial)

• High reliability to fully meet carrier-level reliability requirements

HP6600 Router Series Models: HP6616, HP 6608, HP6604 Router, HP

6602 Router

Operates on the WAN edge and core layers


Gain business agility through single pane-of-glass management

Gain Visibility

Increase efficiency

Integrate security

Reduce OPEX with network transparency

Achieve enhanced performance and superior reliability

Preserve network integrity with full featured network access control

Business-Centric Network Management

HP Intelligent Management Center (IMC)


HP IMC Modules – Branch Intelligent Management System

−Leverages standards based CWMP protocol

−Secure device & configuration management

−“Zero Touch” deployment for branch networks

Automated configuration management across large scale networks

HeadquartersBranch


HP IMC Modules – IPSec/VPN Manager (IVM)

−Pre-defined DVPN security templates

−DVPN auto discovery

−DVPN management and provisioning

Greater visibility and control for DVPN


HP DVPN Solution – Key features and benefitsDynamic routing & QoS

Dynamic IP addressing

Large scale VPN topologies

Zero-touch, automated deployment

DVPN domain management

Control and data pane separation

Predictable performance

Resilient and adaptable

Flexible architecture

Single pane-of-glass management

Visibility and control

Highly scalable and secure


3rd party validation – Network Test report

“…With DVPN enabled on HP Networking routers, IPsec tunnels are automatically established between sites. This eliminates the need for complex configuration of IPsec parameters, especially at branch-office sites that may not have full-time IT staff present. DVPN also can greatly reduce configuration complexity…”

-- David Newman (Network Test)

Fully meshed routers

DVPN savings in configuration complexity

5 75%

10 89%

15 93%


Global financial service provider adopts HP DVPNCase Study

Challenges • Slow and unstable WAN

• Complex secure connectivity

• High TCO

HP solution• Thousands of HP MSR and 6600 routers

• 3G/Internet and MPLS

Business benefits• Reduced complexity: 30 variations of software down to 2

• Simplified network: fully automated, 20% higher encrypted

performance

• Reduced cost: 20-30% lower TCO

Business• Operations in over 30 countries

• 6M+ merchant locations

• $10B+ annual revenue

IT Environment• 10-year relationship with one vendor

• Two distinct networks

• Six data centers


Summary

• Up to 93% configuration reduction• Highly scalable and resilient• Carrier agnostic connectivity• Zero-touch automation with HP IMC

Simplify secure WAN connectivity with HP DVPN solution

© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

Thank you

Technology

HP Dynamic VPN (DVPN) solution