82d653809f3d77cabf08d5c91e861dc9.ppt
- Количество слайдов: 22
Omni. Access WAN OA 700 Hauke Heinecke All Rights Reserved © Alcatel-Lucent 2006, #####
Was ist falsch? 2 All Rights Reserved © Alcatel-Lucent 2006, #####
Omni. Access 700 Unified Services Gateway Value Propositions Reduces cost and complexity of managing enterprise and branch office networks § Unified services gateway for enterprise and branch offices Simple deployment - both network, voice & security services on one platform Modular addition of new services on an as-needed basis Modular system design for fast recovery § Unparalleled high availability to support mission-critical applications Non-disruptive service upgrades & configuration changes Insulation of system from failure of any one service § Comprehensive management, always accessible platform Easy addition of new services via remote upgrades Easy expansion into new branch sites – ship chassis, remotely configure & provision services § Highly secure infrastructure with ability to respond rapidly to new security threats Easy addition of new security containment measures & other services via remote upgrades Open platform to enable integration of customer and partner applications as needed 3 All Rights Reserved © Alcatel-Lucent 2006, #####
Omni. Access 700 Unified Services Gateway Family OA 780 OA 740 Purpose-built to simplify enterprise operations Unified services § Security services (firewall, IDS/IPS, VPN) § Voice services (SIP ALG, Qo. S) § Network services (switching, routing, Qo. S) § Branch office services (DNS, DHCP, etc) 100% remote accessibility Maximum availability 4 All Rights Reserved © Alcatel-Lucent 2006, ##### OA 720
Omni. Access 700 Service Gateway Lifeline™ Management Powerful Software Architecture Networking: DNS RADIUS SSL VPN New Apps: 3 rd Party Custom Open Source Storage Applications Application Interface Router Firewall VPN IDS/IPS Qo. S AV Services Modu. Live OS T 1/E 1 5 WAN Opt. : Web Cache Compression V. 35/X. 21 ADSL ISDN All Rights Reserved © Alcatel-Lucent 2006, ##### Gig E HW IFs
Omni. Access 700 Unified Services Gateway Purpose-Built Architecture --> Modu. Live™ Operating System Traditional Router Firewall VPN IDS / IPS Vo. IP Router Switching Monolithic Operating System n Monolithic OS is high risk for multiple services down n One failure or upgrade = all services down Omni. Access 700 Firewall VPN IDS / IPS Vo. IP Router Switching Modu. Live™ OS 6 Modular, always-live operating system n Start / stop individual software modules n Real-time service addition w/o disruption n Modularity = major advantage in managing services n Insulate system from failure of any service All Rights Reserved © Alcatel-Lucent 2006, #####
Omni. Access 700 Unified Services Gateway Purpose-Built Architecture --> Lifeline™ Management Framework 1 st Generation Early 90 s 2 nd Generation Late 90 s Data Plane 7 Data Plane Control Plane Data plane limits performance & mgmt access 3 rd Generation Omni. Access today Data performance improved, mgmt still tied to data paths All Rights Reserved © Alcatel-Lucent 2006, ##### Mgmt Plane Full separation of data & mgmt traffic, accessible even if main processing unavailable
High Performance Multi-Service Support with: One. Pass™ Packet Processing Packet Ingress 1 Routing 4 Routing (again) 2 3 5 1 Firewall Packet Egress Packet 2 Firewall Security Multiple 3 Packet Single Inspections Inspection Routing 4 Packet Egress Traditional Branch Office Routers Omni. Access 700 USG By inspecting packets only once, processor efficiency increases and latency remains virtually the same no matter how many services are active 8 All Rights Reserved © Alcatel-Lucent 2006, #####
Omni. Access 780 System - Release 2. 2 (Hardware) Features § § § High-speed PCI-Express switching backplane ~900 Kpps forwarding engine High-redundancy management plane with Lifeline remote manageability Built-in 2 GE ports Redundant power option System Modules § § SE - Services Engine SF – Switching Fabric Interface Modules § § § 9 8 port 10/1000 Ethernet switch card 4 port T 1/E 1 (channelized & unchannelized) 4 ports USP (X. 21/V. 35) All Rights Reserved © Alcatel-Lucent 2006, #####
OA 780 -CB-A – Chassis Bundle System Overview - Release 2. 2 (Hardware) $9, 995 List OA 780 Chassis § § § 3 RU high 10 -slots 6 -slots for interface modules 2 power supply slots (Rear) Mid-plane architecture 19” rack mountable Fan tray § § Hot swappable Console port Modem port USB port OS 780 -PS 400 -A OA 780 -SF (Switch Fabric) § § 400 watt (90 -240 v auto detection) BTUs Supports two Hot Swappable § Internal interconnect for all modules OA 700 -SE (Services Engine) § Main CPU module 10 All Rights Reserved © Alcatel-Lucent 2006, #####
Omni. Access 740 System - Release 2. 2 (Hardware) Features § § PCI-Express based high-speed switching backplane ~900 Kpps forwarding engine Switching fabric integrated into backplane Built-in 2 GE ports System Modules § SE - Services Engine Interface Modules § 8 port 10/1000 Ethernet switch card § 4 port T 1/E 1 (channelized & unchannelized) § 4 port USP (X. 21/V. 35) 11 All Rights Reserved © Alcatel-Lucent 2006, #####
OA 740 -CB-A – Chassis Bundle System Overview - Release 2. 2 (Hardware) OA 740 Chassis § § § 1 RU high 4 -sots 2 -slots for interface modules Single internal AC power supply 19” rack mountable OA 700 -SE (Services Engine) § 12 Main CPU module All Rights Reserved © Alcatel-Lucent 2006, ##### $4, 995 List
Common System and Interface Modules - Release 2. 2 (Hardware) OA 7 -T 1 E 1 -4 (4 -Port T 1/E 1) Channelized T 1 and E 1 Unchannelized T 1 and E 1 Fractional T 1 and E 1 RJ-45 connections HDLC, PPP and Frame Relay Encapsulations: MLFR, MLPPP, HDLC § § § OA 7 -GE-8 (L 2 Ethernet Switch) § § § OA 700 -SE (Service Engine) § § § 2 GHz Opteron CPU Memory 512 MB expandable to 1 GB On board 2 port 10/1000 Copper Ethernet interfaces Local Mgmt CPU controls/monitors Opteron Requires a minimum of one in an OA 780 or OA 740 Consumes 2 slots in the chassis 8 ports of 10/1000 Layer 2 switching RJ-45 connections OA 7 -USP-4 (Universal Serial Port) § § § 13 4 ports on 2 connectors V. 35, X. 21 interfaces Protocol selection via interface cable All Rights Reserved © Alcatel-Lucent 2006, #####
Omni. Access 700 USG: Release 2. 2 (Software) One. Pass packet processing – Guaranteed performance Modu. Live - Modular software platform for in-service upgrades Lifeline management framework – Maximum availability Network services § Routing: RIP, OSPF, BGP, GRE for IP, VRRP, PIM § LAN switching: 802. 1 Q VLANs, STP, PVST+, Integrated Routing & Bridging (IRB) § WAN: PPP, MLPPP, Frame Relay, MLFR, HDLC, and Ethernet § System: DHCP Relay/Client, DNS client, TFTP/FTP, Telnet § QOS: Hierarchical Queuing, Rate limiting, Shaping, RED, WRED, DSCP/TOS marking Security § § Stateful FW: Stateful packet inspection, Attack detection, NAT, DDOS, ALGs, ACLs, 128 K sessions IPSec VPN: Site-to-Site, 3 DES, AES, PKI, NAT traversal, 2. 5 K VPN tunnels IDS/IPS: Detection, Prevention modes, Automatic Signature updates, Group-based IDS/IPS § ALGs: SIP, NOEv 3 – Dynamic pinhole mgmt § Qo. S: Strict priority queuing, DSCP (EF) classification & marking § Vo. IP 14 All Rights Reserved © Alcatel-Lucent 2006, #####
Die Gesamtlösung All Rights Reserved © Alcatel-Lucent 2006, #####
Secure Network Transformation LAN/WAN Networking Solutions WLAN Edge LAN Aggregation LAN Core WAN/MAN Brick Firewall Omni. Access 3500 Laptop Guardian 7450/7750 Omni. Access Safe. Guard Omni. Access WLAN Omni. Stack LS 6200 Omni. Switch 6850 / L Omni. Access 700 Omni. Switch 7000/9000 Durchgängige Netzwerk Services Durchgängiges Netzwerkmanagement – Omni. Vista / Vital Suite Endgeräte WLAN TDM Omni PCX Enterprise Genesis Omni PCX Office 16 OTUC All Rights Reserved © Alcatel-Lucent 2006, #####
Konvergente Wired & Wireless Lösung Kosteneinsparung Niedriger CAPEX und OPEX Geringer Platzverbrauch Geringer Stromverbauch Geringe Installationsdauer Hohe Skalierbarkeit Omni. Switches verfügen über sehr hohe Portdichten + 10 Gigabit Ethernet Uplinks. Damit reduzieren sie die Komplexität im Netzwerk Omni. PCX Enterprise: 15 K Benutzer, 100 K Benutzer bei Vernetzung Blade Center Unterstützung für Sprache und alle relevante Anwendungen Weniger Stromverbrauch und Klimatisierungsaufwand POE: Automatische Erkennung von IP-Telefonen, WLAN Access Points Omni. Switch 9000 entsprechen US “Green” Standarts durch bis zu 60% weniger Energieverbauch Einfachste Administration Key Points â Am besten skalierbare IPT-Lösung am Markt â Sehr hohe Portdichte â Einzigartiges POE Management 17 All Rights Reserved © Alcatel-Lucent 2006, #####
Wired & Wireless Convergence Solutions Always On Erweiterte Sicherheit und Verfügbarkeit Services “Always On” 100% Sicher • MPLS Verfügbarkeit 5 x 9 Verfügbarkeit für Realtime Dienste wie IPT, Video Kompromisslose Redundanz LAN/WAN: Ausgefeiltes Backup Konzept: Media Gateway Backup, PCS, Hotswap, MPLS Protection Selbstheilende Komponenten, z. B. WLAN Sicherheit 802. 1 X Authentifzierung: Telefon mit Multi-Session Unterstützung im Omni. Switch “Dynamic Pinholing” Unterstützung der FW, Voice/data VLAN Unterstützung, Partition Management, Softphone mit VLAN Support ITU X. 805 framework, Common Criteria certification Key Points â Bell Labs Expertise in Sicherheitsthemen â Sicherste IP Telephony Lösung (Miercom 06) â Einziges Softphone mit VLAN partitioning 18 All Rights Reserved © Alcatel-Lucent 2006, #####
Wired & Wireless Convergence Solutions Easy to Manage Einfachste Verwaltung und geringere TCO Vereinfachung Omni. Vista Einfachstes Management, z. B. Qo. S und Access Listen Zentraler Kommunikationsserver Gemeinsame Verwaltung des Netzwerks für alle Dienste Zentralisierung End-to-End Management Lösung Zentralisierte IP Adress Verwaltung – Vital. QIP Zentralisierte Performance Überwachung – Vital. Suite Zentralisierte Verwaltung von verteilten VPN und Firewall Lösungen - Brick Key Points â Führende IP-Address Management Lösung â Multivendor Unterstützung/Vital. QIP & Vital. Suite â Einfache QOS & Security Verwaltung 19 All Rights Reserved © Alcatel-Lucent 2006, #####
Wired & Wireless Convergence Solutions Converged Services Konvergente Mobility Lösung Komplett Services Benutzer erkennung WLAN Netzwerk mit Unterstützung für Sprache Zentralisierte und skalierbare Voice & Data WLAN Lösung Integrierte Firewall und Authentifizierungsserver (AAA) “Voice aware” WLAN Infrastruktur: Schnelles hand over, 802. 11 e QOS, ARP proxy, zentralisiertes CAC, Powersaving Modi Fixed/Mobile Lösung Kompletter Telefonieservice für jedes Endgerät: Wi. Fi, DECT, GSM “Dual mode” GSM/SIP Wi. Fi, Partnerschaft mit Nokia Benutzer- und Geräte Lokalisierung Key Points â FMC voll in Omni. PCX Enterprise integriert â Erste SIP “dual mode” Mobilitätslösung â Zentralisierte WLAN Lösung mit Ultra-Thin AP 20 All Rights Reserved © Alcatel-Lucent 2006, #####
Alcatel-Lucent Wired und Wireless konvergente Lösungen als ONE STOP SHOPPING Kosten Optimierung § Alles aus einer Hand § Höchste Skalierbarkeit § Höchste Verfügbarkeit § Geringer Energieverbrauch Einfach zu managen § Durchgehende Möbilitätslösung § Sicherste Lösung Always On § End-to-End Management § Internet Standards 21 Konvergente Dienste All Rights Reserved © Alcatel-Lucent 2006, #####
www. alcatel-lucent. com 22 All Rights Reserved © Alcatel-Lucent 2006, #####


