Verizon Wireless Broadband Network Connectivity and Data Transport Solutions. Verizon Wireless White Paper

Transcription

1 Verizo Wireless Broadbad Network Coectivity ad Data Trasport Solutios Verizo Wireless White Paper

2 Cotets 1. Itroductio Network Architecture Beefits of Implemetig Direct Circuit Coectios Why Use Direct-Coect Circuits? Coectivity Cosideratios Coectivity Optios IP Addressig Coectio ad Provisioig Why Verizo Wireless Terms ad Coditios Customer & Techical Support Glossary of Terms Cotact Iformatio

3 1. Itroductio Wireless coectivity ad data trasport solutios from Verizo Wireless allow compaies to establish a private, direct coectio betwee the eterprise etwork ad the Verizo Wireless broadbad etwork. A direct coectio to the Verizo Wireless broadbad etwork lets compaies commuicate with their mobile workforces with icreased data respose times, while reducig cocers over security ad reliability. This white paper itroduces the Verizo Wireless etwork, depicts typical direct coectio usage scearios, discusses coectivity cosideratios, ad explais all coectivity optios with available IP addressig schemes to help the reader make iformed decisios whe plaig ad purchasig a wireless coectivity solutio. 2. Network Architecture It may be helpful to review basic wireless etwork architecture prior to cosiderig which coectivity solutio optio best fits a busiess s data coectivity eeds. Uderstadig etwork architecture will also clarify the poit of egress from the Verizo Wireless etwork to the corporate etwork, ad show how mobile users are serviced by the wireless etwork. A direct-coect circuit ca be established to the Verizo Wireless broadbad data etwork from ay eterprise etwork through a variety of commo wirelie coectio types. Each wirelie coectio type is labeled i the followig illustratio as a direct circuit that rus betwee the eterprise etwork ad the Verizo Wireless broadbad data etwork. Mobile User Access Network Core Network 1xRTT & Voice Home Locatio Register Base Statio Cotroller Packet Cotrol Fuctio Mobile Switchig Ceter Visitig Locatio Register Public Switched Telephoe Network 1xEV-DO Network Maagemet System Server Radio Network Cotroller Core Network AAA Server Hosted Services Base Trasceiver Statio Access Network AAA Server Packet Data Servig Node Foreig Aget Router Home Aget Text Messagig Media Messagig Navigatio Media ad Cotet Locatio-Based Services Field Force Automatio WAP Choke Router Direct Circuit Figure 1: A simplified CDMA2000 1x data etwork showig 1xRTT ad 1xEV-DO data structures. Iteret Brach Office Firewall Firewall Eterprise Network 3

4 The Verizo Wireless broadbad etwork comprises a access etwork ad a core etwork as idicated i the previous etwork architecture diagram. With Verizo Wireless coectivity ad data trasport solutios, corporate customers ca brig direct circuits ito the core etwork through VPN, frame relay, T1 direct, or Multi-lik Poit-to-Poit Protocol (MLPPP) coectios. We will cover these core etwork access optios i much more detail i a subsequet sectio of this white paper. Mobile users access the Verizo Wireless broadbad etwork via the access etwork, which provides a etryway ito etwork services, icludig Verizo Wireless-hosted services ad eterprise-provided etwork services. The Verizo Wireless broadbad etwork uses CDMA-based 1xRTT ad 1xEV-DO wireless radio broadbad data stadards for mobile user access to the etwork. Verizo Wireless ow has deployed 1xEV-DO Revisio A (1xEV-DO Rev. A) throughout its broadbad etwork. Typical Rev. A dowlik speeds are 600 Kbps to 1.4 Mbps, while typical uplik performace is 500 to 800 Kbps Beefits of Implemetig Direct Circuit Coectios Direct-circuit coectivity ito a trusted provider s etwork core is a effective way for compaies to improve data respose times ad lower latecy to mobile users beig serviced by the wireless etwork. Overall coectio reliability improves with direct-circuit coectios, because compaies have a direct coectio to the Verizo Wireless broadbad etwork ad avoid havig to traverse the Iteret. As a result, security threats are more cotaied. Verizo Wireless offers secure, reliable, ad flexible access to their etworks. Secure Data is oe of busiess s most importat assets ad must be kept secure. Wireless broadbad access provides ehaced privacy ad security because the direct circuits are ot routed over the Iteret. Istead, data is trasmitted through the Verizo Wireless broadbad etwork, which reduces risk of iterceptio or sabotage. Reliable Losig access to critical applicatios because they are dow or uavailable is costly. Verizo Wireless provides busiesses with America s most reliable wireless voice ad broadbad data etworks ad employs robust redudacy ad maiteace measures to esure etwork availability at all times. Verizo Wireless also supports redudat direct circuits for additioal reliability. Flexible The ability to respod quickly to ew or chagig busiess requiremets is essetial for today s fast movig compaies. Verizo Wireless provides a variety of flexible direct-circuit coectivity ad IP addressig optios to meet the uique eeds of ay busiess. Ad settig up a direct circuit with the Verizo Wireless broadbad etwork is easy ad affordable. 1 Whe usig a o-ev-do Rev. A device, the user ca expect dowload speeds of Kbps ad upload speeds of Kbps. 4

5 4. Why Use Direct-Coect Circuits? Direct-coect circuits have multiple uses for busiesses of all sizes. Improved access speeds, low latecy, ad the added security of data ot traversig the Iteret all factor ito a busiess s decisio to use a direct-coect circuit. I coductig its day-to-day operatios, a compay may fid that usig a direct-coect circuit leds itself to a specific situatio, such as credit card processig or temporary ATM machies at a cocert veue, or to a ogoig busiess eed, such as remote offices commuicatig back to corporate headquarters. Specific examples iclude: Corporate headquarters coectig to remote or brach offices that use wireless routers for primary or failover coectios to commuicate compay-specific data ad iformatio. Eterprise to a temporary remote locatio, such as credit card trasactio processig equipmet or ATMs at a evet site. Corporate to remote sites with o wired access, such as kiosks i a mall, a movie theater, or other retail settig. Busiess wireless commuicatios eeds vary based o may factors, but most mobile or fixed-mobile wireless usage scearios, where latecy ad data respose times are importat, ca beefit from direct-coect access to the Verizo Wireless etwork core. 5. Coectivity Cosideratios Direct-lie or leased-lie coectios are typically permaet coectios with fixed aual lease costs ad carry o additioal call charges, so they ca provide faster data trasfers o a fixed budget. Compaies might cosider istallig a direct-coect leased lie if they are facig ay of the followig commo busiess problems: Mobile data badwidth ad performace eeds have outgrow existig broadbad coectios. Multiple mobile users are simultaeously accessig corporate etwork resources such as the Iteret. Icreasig amouts of data or large files are beig moved back ad forth by mobile users. Web ad mail servers are icreasigly accessed by mobile users. Several broadbad coectios eed to be cosolidated for moitorig, firewall, ad maagemet. ISDN coectio costs are much too high Some additioal thigs to cosider durig the leased-lie direct coectivity evaluatio iclude: Proximity to Poit of Presece Certai leased-lie direct coectios eed to be physically istalled betwee the earest Verizo Wireless broadbad etwork poit of presece (POP) ad the eterprise etwork, so istallatio costs 5

6 will deped o locatio. Verizo Wireless ca help busiesses determie the best optio to use whe coectig ito its broadbad etwork. 6. Coectivity Optios Verizo Wireless has a variety of coectivity optios for creatig the coectio betwee the eterprise etwork ad the Verizo Wireless broadbad etwork. Orgaizatios ca attach to the Verizo Wireless broadbad etwork via VPN over Iteret, sigle-frame relay, dual-frame relay, or multiple direct circuits. The best optio depeds largely o the orgaizatio s requiremets for security, cost, ad redudacy. The followig chart illustrates the supported coectivity solutio optios. Coectivity Optios Optios Beefit Cosideratio VPN over Iteret Low cost Secure Low redudacy Sigle-frame relay Secure Full routig cotrol Dual-frame relay (To dual Verizo Wireless locatios) Secure Redudat Full routig cotrol Multiple direct circuits Secure Some redudacy MLPPP (required if static) Cosideratio Not all VPN vedors are supported Requires static or BGP routig Verizo Wireless strogly suggests that customers implemet Access Cotrol Policies to protect their etworks Same as sigleframe relay Same as sigleframe relay Oe-Time Fee Oe-time set-up fee per coectio Oe-time set-up fee per coectio Oe-time set-up fee per coectio Oe-time set-up fee per coectio Sigle direct circuit Secure Full routig cotrol Same as sigleframe relay Oe-time set-up fee per coectio VPN Coectios A VPN is a private etwork that uses a public etwork such as the Iteret to coect users or remote sites together i a secure maer. VPN direct-coect solutios are extremely popular, due to their low cost to deploy. Istead of usig a dedicated coectio, such as leased-lie direct circuits, the VPN optio uses tuels routed over the Iteret from the compay s private etwork to the Verizo Wireless etwork operatios ceter. VPN tuels are termiated by the Verizo Wireless VPN gateway. This approach uses a busiess s existig coectio to the Iteret ad requires IP Security (IPSec)- compliat VPN gateway equipmet at the eterprise locatio. The Verizo Wireless VPN optio secures the commuicatio path betwee the eterprise locatio ad the Verizo Wireless etwork operatios ceter. Ulike a cliet-to-server solutio, it does ot secure the complete path from the mobile device to the eterprise s VPN gateway. A VPN solutio also does ot offer the typical reliability ad cotrolled redudacy of leased-lie direct coectios. 6

7 Mobile Termials Verizo Wireless Network VPN Coectio Via Iteret Eterprise Network VPN BTS BSC/RNC PDSN MSC Verizo Wireless IP Network Verizo Wireless Data Ceter Iteret/ISP Figure 2. A customer VPN coectio diagram. IPSec Protocol The Verizo Wireless VPN solutio uses IPSec, a IETF stadard protocol for TCP/IP traffic security, to create a secure tuel betwee the eterprise ad Verizo Wireless VPN gateways. IPSec protocols autheticate the host computer, maitai data itegrity, ad ecrypt data ad shared keys. I IPSec tuel mode, the etire IP packet is ecrypted. This does ot mea that the coectio betwee the eterprise ad the cliet is ecrypted, but that the coectio betwee the eterprise ad the Verizo Wireless POP is ecrypted. Sigle Frame Relay Frame relay is a data coectio method where the telecommuicatios coectio is established usig a permaet virtual circuit (PVC). This PVC is a commuicatios path that maps the physical circuit at the customer site to the physical circuit at the Verizo Wireless site. Frame relay is a popular optio because it offers guarateed badwidth ad accommodates spikes i traffic whe the demad for badwidth suddely icreases. Frame-relay circuits are available from fractioal T1 data rates startig at 56 Kbps ad ca approach DS-3 rates of 45 Mbps. T1 Direct T1 direct telecommuicatio circuits are also available. There is typically a istallatio fee associated with this type of coectio, based o the distace betwee the eterprise etwork ad the closest Verizo Wireless POP. Fees are also iflueced by local ad log distace carrier rates for this service. This optio is typically used whe frame-relay services are ot available locally or whe log distaces are ot required. DS-3 direct circuits are available to customers o a case-by-case basis i certai areas. Dual Frame Relay To further ehace etwork reliability, cosider creatig redudacy with a dual-frame relay coectio. Dual circuits are typically established betwee two geographically differet locatios ad provide redudat coectios to redudat hardware (routers). Dual-frame relay circuits are popular whe residecy ad durability of the coectio are desired. 7

8 Mobile Termials Verizo Wireless Network Eterprise Network Direct Coectio BTS BSC/RNC PDSN MSC Verizo Wireless Verizo Wireless IP Network Data Ceter Figure 3. A customer direct-coectio diagram (dual or sigle). Direct Coectio Multiple Direct Verizo Wireless also supports Multi-lik Poit-to-Poit Protocol (MLPPP). MLPPP is a method of splittig, recombiig, ad sequecig datagrams/packets across multiple logical data liks. Usig MLPPP allows the bodig together of multiple T1 circuits to act as a sigle logical circuit coected to the Verizo Wireless etwork i order to icrease badwidth. For example, two T1 circuits ca be budled to effectively provide a sigle logical circuit that ca supply over 3 Mbps with full-duplex capability. There is a oe-time fee for each physical circuit coectio. 7. IP Addressig Verizo Wireless offers a variety of IP addressig optios that provide differig levels of accessibility, protectio, ad maageability. It is icreasigly importat to orgaizatios to be able to choose a IP addressig scheme that is appropriate for the architecture of the corporate etwork. The Verizo Wireless IP addressig optios are desiged to provide busiesses with a wide variety of choices. Public IP Addresses Public IP addresses are IP addresses that ca be reached by ayoe o the Iteret. While this address type is required to allow mobile-termiated coectios where the host eeds to access the remote device, security cocers are created by allowig public access to the device. Private IP addresses are used for iteral etworkig purposes ad caot be accessed from the Iteret. For this reaso, they do ot easily allow mobile-termiated coectios. Though the IP address optios available from Verizo Wireless are public, restrictios are applied to Iteret-restricted IP addresses, which has a similar effect as private IP addresses o the reductio of privacy problems. Static or Dyamic Addresses Static IP addresses are maually assiged ad the ever chage. However, there are a fiite umber of available static IP addresses, ad this shortage is causig etwork desigers to issue dyamic IP addresses. Dyamic IP addresses are issued for the duratio of the sessio, the reassiged to ew sessios oce they expire. Static ad dyamic IP addressig schemes are supported by Verizo Wireless as idicated i the followig table. 8

9 IP Addressig Optios Type of Address Pool Name Desigatio Beefits Fee Type Dyamic public IP addresses Urestricted dyamic IP addresses Verizo Wireless default pool Full Iteret access Supports push applicatios Data is ot atted or proxied No fee Geeral dyamic protected IP addresses Verizo Wireless custom pool Note: Certai devices receive this pool by default Full Iteret access Supports Verizo Wirelessbraded push applicatios Provides protectio from usolicited Iteretbased traffic No fee Static public IP addresses Urestricted IP addresses Static IPs available by request oly Full Iteret access Same IP each time there is access to the etwork Admiistratio Easier firewall rules Easier routig Oe-time fee Iteretrestricted IP addresses Static IPs available by request oly Iteret access is restricted Same IP each time there is access to the etwork Admiistratio Easier firewall rules Easier routig Oe-time fee Customer-provided private IP addresses Private IP address pool* Private IPs available by request oly* Exteds the corporate LAN addressig scheme to the wireless workforce Improved protectio via tueled data traffic Easier firewall ad routig admiistratio TBD * Whe available. 8. Coectio ad Provisioig Oce a coectio type ad IP addressig scheme have bee selected, a local or regioal data solutios egieer from Verizo Wireless will coordiate the appropriate solutio for the customer, from the choice of the correct wireless device, to the implemetatio process of the desired type of direct coectivity. There is a oe-time coectio fee depedet o the coectio type. To activate the coectio ad cofigure the IP addressig, cotact a Verizo Wireless service represetative. Whe the coectio(s) are live, coectivity support ca be obtaied by callig ad selectig optio 3 o the meu, but support for the circuit will be the resposibility of the applicable service provider. 9

10 9. Why Verizo Wireless A successful implemetatio of wireless coectivity is easy to achieve. As with wired coectios, IT professioals must cosider etwork architecture, usage scearios, coectio speeds, IP addressig, ad security. Equally importat is the wireless coectivity service provider Verizo Wireless is a world leader i etwork reliability, ivestig a average of $5 billio aually to expad its etwork ad icrease capability. Whe wireless coectivity ad data trasport solutios are provided by Verizo Wireless, busiesses ca have cofidece that they will have access to their etwork applicatios. The affordable coectivity solutios from Verizo Wireless are flexible eough to support virtually ay mobile applicatio while providig the security that busiess customers require. 10. Terms ad Coditios Customers must use Verizo Wireless-provided WAN IP addresses for the poit-to-poit lik ad may ot use their ow IP address that has bee assiged for their use. Additioally, Verizo Wireless does ot provide a maaged coectivity optio i which Verizo Wireless would maage the istallatio ad support of routers ad circuits for a customer. Customers choosig the direct circuit, frame-relay, or VPN coectio method will be charged a oe-time Verizo Wireless port coectio fee. Alterative coectio methods will be available to customers o a case-by-case basis ad oly i certai locatios, at the sole discretio of Verizo Wireless, ad at prices to be agreed upo by the specific customer ad Verizo Wireless. Please ote that these direct or VPN coectios oly provide the Verizo Wireless IP etwork ad the customer IP etwork with the capability of coectig to each other. These coectios do ot eable the customer s fixed ed systems (FES) o their eterprise etwork to access the Iteret through the Iteret coectios from Verizo Wireless, or to coect to aother customer FES. Verizo Wireless will ot act as a service provider to the Iteret from the customer FES coectios, or will it act as a trasit etwork to the Iteret. 11. Customer & Techical Support For customer service or techical support, please cotact a Verizo Wireless represetative by callig ad selectig optio 3 o the meu. 10

11 12. Glossary of Terms 1xRTT (Oe times Radio Trasmissio Techology) The first versio of CDMA2000 techology that has typical dowlik ad uplik speeds of Kbps. 1xEV-DO (Oe times Evolutio Data Optimized) Rev. 0 The first phase of 1xEV techology that icreases typical data dowload speeds to Kbps. 1xEV-DO (Oe times Evolutio Data Optimized) Rev. A The updated phase of 1xEV techology that icreases typical data dowload speeds to 600 Kbps 1.4 Mbps ad typical data upload speeds to Kbps. AAA (autheticatio, authorizatio, ad accoutig) A etwork server used for access cotrol. Autheticatio idetifies the user. Authorizatio implemets policies that determie which resources ad services a valid user may access. Accoutig keeps track of time ad data resources used for billig ad aalysis. AN (access etwork) A etwork that grats ed user access to the etwork core ad etwork services. BGP (border gateway protocol) The routig protocol that carries iformatio across the Iteret. BSC (Base Statio Cotroller) A distributed computig structure of the access etwork that maages multiple Base Statio Trasceiver Subsystems (BTS), radio resources, ad hadoffs betwee BTS uits withi its domai. BSC-to-BSC hadoffs are hadled by the mobile switchig ceter. BTS (Base Statio Trasceiver Subsystem) A structure of the access etwork that cotais ateas, trasmittig ad receivig radio systems, ecodig/decodig systems, ad ecryptio/decryptio equipmet. Multiple BTS uits are cotrolled by a BSC. DS-3 circuit (Digital Sigal 3) Also referred to as a T3 lie, a digital telephoe coectio or circuit that offers data speeds of Mbps. FES (fixed-ed system) Cotais all ifrastructure to maitai mobile commuicatios systems, icludig base statio trasceivers, switchig ceters, ad more. HA (home aget) A core etwork device that stores ad forwards locatio ad IP address iformatio about a mobile statio whe it is away from the mobile statio s home etwork. The home aget is used i cojuctio with oe or more foreig agets to maage mobile statios as they roam. HLR (home locatio register) A database i a cellular system that cotais all the subscribers withi the provider s home service area. IETF (Iteret Egieerig Task Force) A stadards orgaizatio resposible for developig ad promotig Iteret stadards, icludig TCP/IP protocols. 11

12 IP (Iteret Protocol) A etwork layer protocol used for commuicatig data over packet-switched etworks. Typically ecapsulated i a data lik layer such as Etheret, it provides a uique global addressig scheme for computig devices. IPSec (IP Security) A suite of protocols used to secure IP commuicatios through autheticatio ad ecryptio techology. ISDN (Itegrated Services Digital Network) A circuit-switched telephoe etwork that allows the digital trasmissio of voice ad data over regular telephoe wires. MLPPP (Multi-Lik Poit-to-Poit Protocol) A extesio to the poit-to-poit protocol that eables two chaels to be liked together to double the throughput. It is used for ISDN trasmissio ad chael bodig. MSC (mobile switchig ceter) A core etwork switchig structure that bridges the mobile telephoe access etwork with aother telephoe etwork, such as the public switched telephoe etwork (PSTN). NAS (etwork access server) A device that fuctios as a access cotrol poit for users i remote locatios, coectig users to their compay s iteral etwork or to a Iteret service provider. PCF (packet cotrol fuctio) Routes IP packets betwee the mobile statios coected to its associated BTS uits ad PDSNs. POP (poit of presece) A poit of access to the Iteret, usually a collectio of routers ad servers housed i a physical locatio by a ISP. PSTN (public switched telephoe etwork) A etwork composed of all public circuit-switched telephoe etworks, which icludes digital, mobile, ad aalog systems. PVC (permaet virtual circuit) Used most ofte betwee hosts that commuicate cotiuously, this is a circuit that is always available. T1 A digital telephoe coectio or circuit that offers data speeds of Mbps. It is made up of 24 separate chaels, each capable of trasmittig at speeds of 64 Kbps. TCP/IP (Trasmissio Cotrol Protocol/Iteret Protocol) A collectio of commuicatios protocols used to coect hosts to each other o the Iteret. VPN (virtual private etwork) A private commuicatios etwork used by compaies to privately commuicate over a public etwork. 12

13 13. Cotact Iformatio For more iformatio about Verizo Wireless, speak to a Verizo Wireless sales represetative, visit or call VZW.4BIZ. Network details, coverage limitatios, ad maps are available at Verizo Wireless. All Rights Reserved. Verizo Wireless is a registered trademark of Verizo Trademark Services LLC. All other trademarks are the property of their respective owers. 13