Rapid Ramp Roteadores, VPN e WLAN Rafael Rocha Sales Engineer rafael.rocha@westcon.com.br http://br.convergencepoint.westcon.com/
Parte 1: Roteadores e VPN Parte 2: Rede sem Fio
4 The Markets We Serve Ethernet Switching Wireless Networking Unified Branch Access Control Unified Management Enterprise Campus Branch & Remote Data Center Continuing aggressive investment in the Portfolio
5 Consolidating the Branch Delivers the survivable SIP Voice platform for the Branch Consolidates Branch networking functions into fewer, tightly-integrated devices Reduces network complexity & streamlines capital & operational costs Gives workers a high quality of experience Regardless of which applications or services are enabled across the network IP Phones / Analogue Phones / PCs / Wireless APs / Legacy PBX PBX / Call Server High-performance traditional Routing Firewall Secure Router Wide Area Network Data Centre LAN Switch Consolidated functionality VPN
6 Resilient Voice & Data for Remote Sites Converge data, voice and security in a single cost-effective device Integrated IP Routing, PSTN gateway, VPN & Firewall services Deliver resilient & open voice services Nortel Telset Nortel Softphone SIP Telset Application Plug-Ins Branch SR 2330 / 4134 Voice fail-over to Secure Router PSTN gateway when SIP Server connection is lost PSTN Wide Area Network Compatible with Nortel & 3rdparty SIP call servers & Phones Secure Router Ensure quality of service for both voice & data Central Site Advanced QoS, VRRP, dial back-up SIP Call Server
7 Avaya Aura TM Novo Modelo para Filiais System Manager CM CM CM VP MM MX App Aplicação Filial Avaya SR4134 PSTN Avaya AG2330
8 Unified Networking for Branch & Offices Consolidate UC, Voice, Gateway & networking functions In a single, reliable highperformance integrated platform Deliver a complete SMB or Branch communications solution At a competitive price-point Improve Employee collaboration / productivity Support up to 250 Users with full UC services Streamline operational costs 4-5X the reliability of multiple, discrete devices Reduced power & facilities costs Take the award-winning SIP-based Software Communications System and add it to the SR 4134 with the SCS Server Module Delivers on the promise of UC, in a complete, unified Voice & Data solution
9 Branch Appliance for Microsoft OCS Consolidate OCS Mediation Services, Voice Gateway & Routing Single platform solution for Microsoft OCS environments OCS Communicator Nortel Telset Analogue Telset Provide PSTN Gateway for OCS Branch Clients & Devices Branch Mediation Services Module performs SIP-TDM translation SR 4134 Avoids PSTN backhaul to Central Site PSTN Wide Area Network Deliver superior quality of experience OCS Server High-performance ensures reliable application delivery Central Site Collaboration with Microsoft for next phase OCS integration CS 1000
11 Mobilizing the Workforce Enhanced Business Continuity & increased productivity for mobile workers Customized remote access Simplified access to corporate applications with pre-loaded Client Software Increased security with Desktop lockdown & wiping technology no data left behind Secure portable flash memory with no risk for confidential information Simple-to-use two-factor authentication Secure Portable Office Access from any PC & location Transit User Access via SPO Token Leverages existing VPN & NAC infrastructure Simplifies provision of Application access Internet Data Centre Home icafe VPN Enterprise Network Fast, simple, secure, network access Integrates with acceleration technologies Decouples location from productivity Campus
Parte 1: Roteadores e VPN
Roteadores
Unified Branch Portfolio Benefits, features & characteristics, and positioning 1
Secure Router: Designed for Convergence Wire-Speed Performance > SR s wire-speed forwarding architecture delivers line rate throughput regardless of packet size or process or load Wire-Speed Performance Intelligent QoS/Multicast Framework Intelligent QoS Framework > SR s Intelligent QoS Framework allows you to build an unlimited set of QoS classes that can be processed and forwarded at line rate Security Services > SR s security services provide sophisticated perimeter security capabilities that outperform purpose-built security appliances Secure Services
Branch WAN Core 16 Unified Branch SR 8012 SR 8008 SR 8004 SR 8002 SR 4134 High-end Enterprise Core Routers for Core WAN applications in the Data Center & large Branch High-end converged Branch Router Highlights Up to 5X reliability & 2X performance advantage over market leader Tighter integration between all Branch devices 3rd-party compatibility with SIP Call Servers & IP Phones Delivers the survivable SIP Voice platform for the Branch SR 3120 SR 2330 SR 1000 Targeted Branch Offices, Enterprises & Service Providers Mid-tier converged Branch Router Targeted at Branch Offices & SMEs
Price/Performance Secure Router Portfolio Complete Portfolio of Enterprise Routers 18 Converged Branch Platforms SR4134 SR2330 SR3120 Mid Branch to Campus SR1001/S SR1002 SR1004 Small - Mid Branch Access Capacity / Density
Secure Router Portfolio The Right Solution for Different Requirements SR 1001 SR1001S Secure Router SR 4134 SR 2330 SR 3120 SR1004 SR 1002 Chassis and IO 7 Slot chassis DS3/CT3/HSSI, Serial, BRI/PRI, T1/E1, ADSL Up to 76 ports 10/100- POE 58 ports 10/100/1000 2x1000BT, 2xSPF base Hosted server module 3 Slot chassis T1/E1/Sync/PRI/BRI 2x1000BT, 4x100BT, 2xSPF base 2 Interface modules DS3/CT3/Serial/T1/E1 2x100BT base Fixed configuration platforms Licensed T1/E1 interfaces T1/E1/Serial/BRI, 2x100BT base Cost effective SIP-VoIP SIP Gateway Survivable SIP Proxy/user agent, Registrar FXS/DID/FXO/ CAMA/BRI/ PRI interfaces CAS, BRI, PRI QSIG, E1 R2 signaling SIP trunks Data Features IPv4, RIP, OSPF, BGP, GRE, PBR, VLAN, Multicast PPP, MLPPP, FR, MLFR, BCP, HDLC IPv6, MPLS L2 VPN (SR4134, SR2330) 8-queue QoS Filters, ACL, Stateful Firewall NAT Denial of Service IPSec VPN (sitesite, remote access) VRRP SNMP, CLI, PCAP, RMON, RADIUS
Unified Branch Product Roadmap Q1/10 J F M Q2/10 A M J Q3/10 J A S Q4/10 O N D Q1/11 J F M Q2/11 A M J Q3/11 J A S Q4/11 O N D 2012 SR 4134 SR 2330 AG 2330 AGv10.2.2 AG 2330 General Availability Enhanced IPSec VPN Security & Performance AGv11.0 AGv10.3.1 V10.4 Aura System Mgr integration IPFix, WCCP, VRF Next-gen AG platform Integrated PoE/FXS SR 3120 SR 100x v9.4 V9.4.1 Re-branding Maintenance fixes Shipping Plan of Record (POR) Plan of Intent (POI) Avaya Confidential NDA Required 21 21
22 Secure Routers for the Converged Branch SR 2330 Ideal as: Converged Access Router for small/ mid-sized Branches or remote sites Environments needing T1/E1, Serial, ADSL or Ethernet WAN connectivity Cost-effective resilient SIP Voice Gateway for remote sites SR 4134 Ideal as: Converged multi-service Router for larger Branches & remote sites Environments with either higher-speed or multi-link WAN connectivity needs Higher capacity resilient SIP Voice Gateway for larger sites Unified networking solution combining UC, Voice, & Data services in a single device
24 SR 2330 Value Proposition Entry-level, modular converged Router Routing, Voice, Security, WAN and LAN in a single platform Compelling integration lower TCO Extends resilient VoIP to the Branch Office PSTN connectivity SIP voice survivability Flexible deployment options UC integrated Branch Router CPE device for Metro Ethernet/Ethernet WAN Access Router for Branch Office connectivity 3 x Small Module Slots 4 x Fast Ethernet Ports 4 x Gigabit Ethernet Ports Interoperable with both Avaya & 3rd party Voice/Data equipment
26 SR2330 Front and Rear Views Three Small Module Slots (Compatible with SR4134) Two Optional Internal Modules (not hotswappable) VPN HW Acceleration (SCIM) Packetized Voice Module (PVIM) Four Gigabit Ethernet Ports (two Copper and two Fiber) Four Fast Ethernet Ports External CF Slot Console Port 12VDC Input for optional External redundant Power Supply 1RU High LED Indicators All IO Interface Modules are Hot Swappable Removable top for field serviceability 3 x Small Modules Redundant 12VDC Power Input Rear View Front View Power Entry 4 x Fast Ethernet Ports 4 x Gigabit Ethernet Ports (2 1000BaseT and 2 SFP) Console Port Compact FLASH
SR 2330 Product Overview Platform Details WAN 1xT1/E1/PRI 2xT1/E1/PRI ADSL2+ 1xSerial 2xSerial BRI PSTN 2xFXS 4xFXS 2xFXO 4xFXO 1xT1/E1/PRI 2xT1/E1/PRI BRI Software and services IPv4, IPv6 and Multicast routing Frame relay (MLFR), PPP (MLPPP), HDLC MPLS L2-VPN (Ethernet, PPP, HDLC) L2/3 Ethernet Switching Security services (firewall, IPSec VPNs, NAT, hardware encryption) SIP Gateway and Survivability Reliability Port Resiliency (MLPPP, MLFR, 802.1ad) Platform Resiliency (VRRP, BGP multihoming) Platform Redundancy (power, cooling, hot-swap_ MPLS Fast Reroute Survivable SIP Gateway Profitability Cost effective as survivable SIP Gateway on existing data networks Extremely cost effective as converged branch with VoIP, routing, security, QoS and WAN
28 SR2330 / SR 4134 Interface Modules Small Modules 1xT1/E1 2xT1/E1 1xSerial 2xSerial 2xFXO 4xFXO 2xBRI S/T 2xFXS 4xFXS 2xBRI U 1xADSL2+ (Annex A ou Annex B)
29 SR2330 Internal Modules Optional Packetized Internal Voice Module (PVIM) Para habilitar voz, a instalação é necessária!!! Optional Security Co-processor Internal Module for VPN acceleration and IPsec (SCIM) Para habilitar VPN, a instalação é necessária!!! PVIM Habilita VOZ! PVIM SCIM Sobrevivência SIP SSM (SIP survivability module) Media Gateway SIP-PSTN
30 SR 4134 Value Proposition Multi-service, modular Routing platform Integrates Routing, WAN, Voice Gateway, security and LAN Switching/ POE Server module that can host UC or other applications 3 x Medium Module Slots, or 1 x Large Slot (using 2 Medium) 4 x Small Slots Compelling Branch/remote site consolidation - lower TCO Cost savings through reduced operational expense, maintenance and facilities Reduced WAN OPEX through bandwidth efficiency Voice / Data convergence solution Extend resilient SIP voice services to the branch All-in-one site solution for UC deployments Nortel SCS Microsoft OCS Mediation services 4 x Gigabit Ethernet Ports 2 x PSUs
31 SR 4134 Capacidade WAN/LAN 31 x T1/ E1s (physical) 84 x T1 (logical) through CT3 3 x DS3 3 x HSSI 7 x serial (V.35/X.21) 72 = 3 x 24-port 10/100 with PoE 58 GbE ports = 10-port 10/100/1000 non-blocking module + 44-port 10/100/1000 Voice 64 FXO/FXS ports (w/ Voice Carrier module) 128 DSP channels 3 x Medium Modules 1 x Large Module (use 2 Medium Modules) 4 x Giga Ethernet 4 x Small Modules
SR 4134 Product Overview Platform Details 8xT1/E1 1xDS3 1xCh DS3 1xT1/E1/PRI 2xT1/E1/PRI WAN 1xSerial 2xSerial LAN 44x10/100/1000 10x10/100/1000 24x10/100 PSTN 2xFXS 4xFXS 2xFXO 4xFXO 1xT1/E1/PRI 2xT1/E1/PRI Software and services IPv4, IPv6 and Multicast routing Frame relay (MLFR), PPP (MLPPP), HDLC MPLS L2-VPN (Ethernet, PPP, HDLC) L2/3 Ethernet Switching (incl. POE) Security services (firewall, IPSec VPNs, NAT, hardware encryption) SIP Gateway and Survivability Reliability Port Resiliency (MLPPP, MLFR, 802.1ad) Platform Resiliency (VRRP, BGP multihoming) Platform Redundancy (power, cooling, hot-swap_ MPLS Fast Reroute Survivable SIP Gateway Application hosting SCS for up to 250 users ADSL2+ BRI 24x10/100 POE BRI SCS server module
SR2330 / SR 4134 Interface Modules Small Modules 33
34 SR2330 / SR 4134 Interface Modules Small Modules 1xT1/E1 2xT1/E1 1xSerial 2xSerial 2xFXO 4xFXO 2xBRI S/T 2xFXS 4xFXS 2xBRI U 1xADSL2+ (Annex A ou Annex B)
SR 4134 Slot 2 - Atenção Small Modules 35
SR4134 Interface Modules Medium Modules
SR4134 Interface Modules Medium Modules Mediation Services Module SCS Module Zero ou 50 User license Mesmo custo usuário 8xT1/E1 10x10/100/Gig 2 portas SFP shared 1xDS3 1xCT3 Carrier Voice Module 24x10/100 24x10/100 POE Para expansão de portas analógicas FXS, FXO
SR4134 Voice Modules Large Modules EOS: 31/março/2011
SR4134 Interface Modules Large Modules 44 x10/100/gig 2 portas SFP shared EOS: 31/março/2011
SR4134 Módulos Internos PVM e VPN Ipsec Module Módulo PVM Habilita Voz Sobrevivência SIP SSM (SIP survivability module) Media Gateway SIP-PSTN Módulo interno de VPN necessário Capacidade de 1000 túneis Suporte ao VPN Client (Contivity) Versão 10.2
SR4134 Power Supply Power supplies are available in the following wattage: 250 W AC 660 W AC (410 W available for PoE) 250 W DC Alternativas: one or two standard AC input modules one or two Power over Ethernet (PoE) AC input modules one standard AC and one PoE AC input module one or two DC modules one AC (standard or PoE) and one DC module
SR4134 PVM SR2330 PVIM SR 4134 PVM SR 2330 PVIM Adiciona funcionalidades: sobrevivência SIP e media gateway Adiciona funcionalidades: sobrevivência SIP e media gateway Default Instala 8 licenças DSP (channellicense) Instala 25 licenças SSM (sobrevivência SIP) Default Instala 8 licenças DSP (channellicense) Instala 25 licenças SSM (sobrevivência SIP)
SR4134 PVM SR2330 PVIM SR 4134 PVM Sobrevivência SIP - SSM SR 2330 PVIM Sobrevivência SIP SSM Default Instala 25 licenças SSM Default Instala 25 licenças SSM Capacidade Máxima 300 licenças SSM Capacidade Máxima 100 licenças SSM Alternativas SSM: 0, 25, 300 Não existe soma de licenças Capacidade total é da última licença Alternativas SSM: 0, 25, 100 Não existe soma de licenças Capacidade total é da última licença
SR4134 PVM SR2330 PVIM SR 4134 PVM Media Gateway SR 2330 PVIM Media Gateway Default Instala 8 licenças DSP Default Instala 8 licenças DSP Capacidade Máxima 128 licenças DSP Capacidade Máxima 64 licenças DSP Alternativas DSP: 8, 16, 32, 64, 128 Não existe soma de licenças Capacidade total é da última licença Alternativas DSP: 8, 16, 32, 64 Não existe soma de licenças Capacidade total é da última licença
SR4134 PVM SR2330 PVIM
47 SR 4134 with integrated SCS Challenge: Multiple discrete devices required to deploy a complete communications solution UC + Data + Voice + Security solution in a single cost effective platform Solution: All-in-one UC, Voice & Data for SMB or Enterprise Branches in a single device Business Value: Complete SMB or Enterprise Branch solution for up to 250 users Reduced operational expenses Fewer devices, less configuration, less maintenance, increased reliability Reduced facilities costs, reduced power & cooling requirements
48 What is Software Communication System? A Full Featured SIP Soft PBX + UC System.. Mobility / FMC VoIP, Video, Conf, Web & email Call Center SCS Conference Server Collaboration, VoIP, Presence, etc. Fully Featured IP sets Fixed Mobile Convergence email SIP Unified Communications Directory Core SCS Server SIP Unified Communications Core Server Media Server (Voicemail, IVR) Corporate app w/ VoIP & presence Web page w/ VoIP & presence IM / Chat Speech Recognition Multimedia Desktop Applications Calendar Runs on off-the-shelf computing platforms
51 Resilient Integrated Voice Gateway Integrated PSTN Gateway with Routing, WAN & Security services PSTN connectivity T1/E1 PRI, BRI, FXS & FXO Up to 64 DSP channels for SR 2330 & up to 128 DSP channels for SR 4134 Data Center PSTN Mobile Avaya Communications Server 1000 or 3rd party SIP call servers Optional Office Communications Server 2007 SIP Survivability Phone & call routing services maintained when SIP Call Server connectivity is lost Inbound & outbound calls through PSTN Intra-site calls with local services (e.g. conferencing, transfer) Supports Nortel & 3rd-party SIP Phones Avaya/Nortel 1120E/1140E, LG Nortel 6800/8800, Polycom 320 IP Branch WAN Secure Router 2330 / 4134 PSTN
52 SIP Survivability Normal Mode WAN UP Call Server Head Office WAN Link Remote Branch Office SSM SIP-PSTN Gateway SR4134/SR2330 10.2.0 PSTN Trunks PSTN SIP Phone A SIP Phone B Analog Phone C
53 SIP Survivability Survivable/Backup Mode WAN DOWN Call Server Head Office WAN Link Remote Branch Office SSM SIP-PSTN Gateway SR4134/SR2330 10.2.0 PSTN Trunks PSTN SIP Phone A SIP Phone B Analog Phone C
Advanced Gateway 2330 Key Features and Positioning Cost-effective resilient voice for branch sites Provides local PSTN/voice services if connectivity lost to the central SIP server Price competitive to Cisco voice router upgrade Key Features Voice media gateway with FXO, PRI and FXS interface options SIP Survivable voice for up to 100 users Certified with Avaya Aura, CS1K and other SIP servers Compatible with Avaya 9600 IP Deskphones and other Avaya and 3 rd -party SIP devices Software upgrade option to full-function WAN router Positioning Cost-effective basic survivable gateway solution for small to mid-size branches Best for enterprises who may want to later upgrade to a full-featured WAN router Cost-effective branch gateway for centralized Avaya Aura deployments
Advanced Gateway 2330 for Aura and other Call Servers Highlights Aura, CS1K, CS2K/A2E, CS2100, SCS, OCS R2, 3 rd party > Survivable SIP with modular PSTN interfaces > Certified with Avaya Aura & 9600 phones Certified with Aura CM/SM 5.2.1 SIP-based UC/VoIP server Data Center > SIP thin client branch option for central Aura deployments WAN PSTN > Also certified with CS 1000 R6.0, CS 2100, SCS, Microsoft OCS R2 and others AG 2330 AG 2330 > Single vendor central UC and branch solution > Can also address branch router need 55
Survivable SIP Gateway Solution Overview With Avaya Aura Communication Manager / Session Manager HQ CM SM UC Apps MPLS WAN 100 s of branches PSTN Advanced Gateway 2330 Mobility Messaging Application Conferencing In normal conditions phones get all features from the HQ Branch SIP gateway provides PSTN (analog trunk) connectivity and intra-branch calling during WAN outages SIP gateway functions as a proxy/registrar during WAN outages, enabling the phones to register to them Low cost solution enabling branches to stay connected Normal Signaling path WAN outage path
Advanced Gateway 2330 Multiple packages Bundled options based on the Avaya Secure Router 2330 hardware Bundle includes chassis, voice gateway hardware and associated software licenses Separate bundles for FXO and PRI options AG2330-2FXO AG2330-4FXO Voice components include: Integrated packet voice module DSP module (factory-installed) 25-user SIP user survivability license (upgradeable to 100) PSTN interface modules AG2330-2FXO: 2xFXO and 2xFXS AG2330-4FXO: 4xFXO and 4xFXS AG2330-PRI: 1xPRI and 4xFXS 32 channel DSP license (for AG2330-PRI) 2x FXS 4xFXS AG2330-PRI 2xFXO 4xFXO Um slot livre para expansão 4xFXS 1xT1/E1 PRI Software upgrade converts the Advanced Gateway into Avaya s Secure Router 2330
67 Secure Routers for WAN Access SR 1000 Series (SR 1001/S, 1002, 1004) Ideal as: General WAN access router for enterprise branches and remote sites Environments with up to 4xT1 / E1 or Serial WAN links Where cost with wire-speed performance is important SR 3120 Ideal as: Mid-range WAN access router for enterprise branch and regional sites Environments with up to 16 x T1 / E1, 8 x Serial or 2 x DS3 WAN links Economical WAN aggregation over channelized DS3 Where higher-performance with multiple WAN links are needed
68 Secure Router 1000 Series & 3120 SR 3120 Mid to High-End Smallest, fastest Router with Channelized T3 Up to 56 T1s with CT3 & 16 xt1/e1, Serial SR 1004 Mid-Range Highly scalable mid-range edge router Ideal for corporate CPE Supports as many as 200 users SR 1002 SR 1001/1001S Entry-Level Value-priced entry-level Edge Router Cheapest, fastest, feature-rich T1 Router Ideal for Branch Offices / remote locations
69 SR 1000 Series Overview SR 1004 SR 1002 1,2 and 4-port T1/E1 models 1001 is T1/E1 software selectable with ISDN BRI option 1001S with Serial interface V.35/X.21 DCE/DTE 1002 & 1004 are fixed configuration T1 ou E1 2 Fast Ethernet ports AC or DC (US & Canada only) power supplies Hardware encryption acceleration (1002/1004) SR 1001/1001S IP Router WAN Features Firewall & QoS IPsec Branch Convergenceready Security VPN
SR 1000 Series Overview Única Power Supply Externa SR 1001/1001S SR 1002 SR 1004
SR 1001 1 x T1/E1 models 1001 is T1/E1 software selectable ISDN BRI option SR 1001/1001S 1001S with Serial interface V.35/X.21 DCE/DTE 2 Fast Ethernet ports AC or DC (US & Canada only) power supplies ISDN NO Hardware encryption acceleration Opção para backup / contingência Disponível nas versões de interface BRI S/T e BRI U Disponível para os modelos 1001 e 1001S (quatro modelos) Disponível sem o cabo de força associado solicitar em separado VPN Software, sem aceleração em HW Necessário bundle com VPN license VPN license pode ser adiciona a uma configuração básica Cabos e Alimentação Elétrica Solicitar em separado cabo WAN Sempre acompanha fonte AC 71
SR 1002 2 x T1 ou E1 models Selecionar HW com E1 Opção com 1 x E1 ou 2 x E1 SR 1002 Licença upgrade de 1 x E1 para 2 x E1 2 Fast Ethernet ports AC or DC (US & Canada only) power supplies Hardware encryption acceleration E1 Bundle <E> com cabo de força North America (2P + 1) possui T1 Opção 1: solicitar bundle E1 com outro cabo de força Opção 2: solicitar bundle E1 sem cabo de força e o solicitar em separado (preferencial) VPN Aceleração em HW Necessário bundle com VPN license VPN license pode ser adicionada a uma configuração básica Cabos e Alimentação Elétrica Solicitar em separado cabo WAN Sempre acompanha fonte AC 72
SR 1004 4 x T1 ou E1 models Selecionar HW com E1 SR 1004 Opção com 1 x E1, 2 x E1, 3 x E1, 4 x E1 Licença upgrade de E1 adicionais 2 Fast Ethernet ports AC or DC (US & Canada only) power supplies Hardware encryption acceleration E1 Bundle <E> com cabo de força North America (2P + 1) possui T1 Opção 1: solicitar bundle E1 com outro cabo de força Opção 2: solicitar bundle E1 sem cabo de força e o solicitar em separado VPN Aceleração em HW Necessário bundle com VPN license VPN license pode ser adicionada a uma configuração básica Cabos e Alimentação Elétrica Solicitar em separado cabo WAN Sempre acompanha fonte AC 73
74 SR 3120 Series Overview SR 3120 Interface Modules 2 slot 1 RU rack-mountable Chassis 2 Fast Ethernet ports 2 RJ-45 ports (Console/AUX) AC or DC Power Supplies Compact Flash & USB Memory Interfaces Modules: 8-port and 4-port E1/T1 4-port and 2-port serial 1 port DS3c/ DS3 IP Router WAN Features Firewall & QoS IPsec Branch Convergenceready Security VPN
SR 3120 Power Supply E1 SR 3120 T1 / E1 é o mesmo HW E1 selecionada via software VPN Aceleração em HW Necessário bundle com VPN license VPN license pode ser adicionada a uma configuração básica Cabos e Alimentação Elétrica Solicitar em separado cabo WAN Secure Router 3120 chassis with: one AC power supply dual AC power supplies one DC power supply one AC and one DC power dual DC power supplies Purchase orders must reflect the correct chassis version. Secure Router 320 power supplies are not separately orderable. Fontes não são posteriormente adicionadas, devem ser adicionadas na aquisição inicial
SR 3120 Product Overview Platform Details WAN 4xT1/E1 8xT1/E1 1xDS3 1xCh DS3 Software and services IPv4 and Multicast routing BGP, OSPF, RIP Frame relay (MLFR), PPP (MLPPP), HDLC Security services (firewall, IPSec VPNs, NAT, hardware encryption) QoS HW encryption accelerator included Reliability Port Resiliency (MLPPP, MLFR) Platform Resiliency (VRRP, BGP multi-homing) Profitability Cost effective for nxt1/e1 and DS3/chDS3 branch deployments needing traditional routing 2xSync/Serial 4xSync/Serial3
80 SR - Resumo 1001 1001S 1002 1004 2330 3120 4134 Interface Slots 0 0 0 0 3 2 7 Interface Serial Max T1/E1 Ports 0 1 0 0 6 8 7 1 0 2 4 6 16 31 FE Ports 2 2 2 2 4 2 72 GbE Ports 0 0 0 0 4 0 58 Sobrevivência SIP Gateway SIP- PSTN Fonte Redundante Não Não Não Não Sim Não Sim Não Não Não Não Sim Não Sim Não Não Não Não Externa Interna Interna
VPN
VPN Gateway Portfolio Benefits, features & characteristics, and positioning
84 VPN Gateway Benefits Extends secure remote access to both employee and non-employees Delivers application services to home based and mobile users Ensures always on business continuity in case of natural or man-made disasters Multiple User Communities Mobile Users Teleworkers Partners Contractors Mergers Mix of End User and Security Requirements Information Security Mandates Multiple Device Types Finance Sales HR CRM Sharepoint Thin Client Unified Comm Application Complexity Avaya Solution Client based and Clientless access Role based information isolation Malware protection Information loss prevention Strong 2-factor authentication Corporate, regulatory compliance Multiple device support PC, Mac, Mobile, Linux Secure Portable Office USB flash Extended, secure Unified Communications Avaya VPN Gateway
85 VPN Portfolio VMware Optimized Virtual Appliance formfactor 10-500 concurrent IPsec/SSL Sessions 10-250 concurrent IPsec/SSL Sessions Virtual Appliance 3070 Virtual Appliance 3050 VPN Gateways Loadable to any VMware ESX or ESXi compliant hardware No charge for Virtual Appliance simply download the virtual appliance software Note: by default the Virtual Appliance contains no licensing so product must be licensed to enable functionality. Simply purchase the desired licenses (SSL & Ipsec, SPO, etc) & enable the functionality/capacity just like the hardware variants Customer can deploy as many Virtual Appliances as needed & use Clustering to obtain desired capacity
92 Secure Portable Office Uses USB Drive for portable Client environment to efficiently deliver personalized suite of corporate applications on any PC Corporate Applications Voice, Collaboration, Multimedia Protects temporary work environment Leaves no trace or presence Intranet Web-mail SPO is built around new functions of the VPN Gateway Remote PC USB Secure access, Session Control VPN Gateway
93 VPN-on-a-Stick SPO Session SPO Session USB Flash Memory Client VPN Gateway (HA Cluster) SMO Session cycle SPO Session PKI Local Apps & Storage Application & File Servers Radius Server Active Directory / LDAP SPO Client offers User Experience Plug the SPO USB Drive into any PC with Internet connectivity Authenticates User and secures the PC User accesses applications from a menu Pulling the SPO USB Drives exits sessions, & wipes web cache and encrypted file system Simple, Secure, Portable Proven Back-Office Integration
94 Licenciamento Licenças de acesso são compartilhadas entre um cluster redundante Licenças são contabilizadas por acessos simultâneos SSL / IPSEC Emergency Remote Access (ERA) Licenças de funcionalidade necessitam ser instaladas em cada equipamentos Secure Portable Office Necessário licença para habilitar a função Consome 1 licença SSL (IPSEC apenas não serve) Licenças por seat, não por acesso simultâneo Uma licença por pen-drive Licença de Application Virtualization (Ceedo).
New with Rel. 8.0 Starter Kits The new virtual appliance model enables the creation of very cost effective Starter Kits to allow customers to efficiently and cost effectively enable advanced VPN services. Includes everything you need to enable remote access with support for SSL, SSLVPN, IPSec and Secure Portable Office. Starter kits are discountable using WPP and VID just like other parts. First appearing on the December 2009 price book but orderable now are two new Starter Kits. EB0016025 EB0016026 Description 10 User Starter Kit 50 User Starter Kit MSRP USD $4,995 $8,995 Appliance Virtual Appliance (NVG-3050-VM or NVG-3070-VM) Virtual Appliance (NVG-3050-VM or NVG-3070-VM) SSL Users 10 50 IPSec Users 10 50 Secure Portable Office Users 10 50
Emergency Remote Access Solução de baixo custo para capacidade adicional de licenças de acesso VPN para casos de emergência / calamidade Uma vez instalada, está pronta para uso, sem intervenção manual Quando a capacidade licenciada for excedida, as licenças ERA são acionadas Uma vez ativadas, permanecem válidas por 60 dias Necessário contato com Avaya para poder reinstalar as licenças para a proxima emergência Note 1: Must include a maintenance agreement in order to use the return authorization process for the ERA license.
VPN Gateway Summary Deployment Feature/Capabilities VPN 3050 Virtual Appliance VPN 3070 Virtual Appliance Entry-level Virtual Appliance for VM Systems Expanded Virtual Appliance for VM Systems Copper Interfaces Supports 1-4 interfaces Supports 1-4 interfaces Fiber Interfaces Maximum concurrent VPN Tunnels 250 500 SSL VPN Users 10-250 10-500 IPsec VPN Tunnels 10-250 10-500 SSL acceleration (tps) Depends on Server Depends on Server 98
VPN Routers 99 VPN Portfolio - EoS VPN Router 2700/2750 VPN Router 1700 5-2,000 IPsec Tunnels 5-500 IPsec Tunnels 50-50,000 concurrent IPsec/SSL Sessions 50-2,000 concurrent IPsec/SSL Sessions VPN Gateway 3070 VPN Gateway 3050 VPN Gateways VPN Router = Contivity VPN Router entra em EoS em 1/abril/2011 Único modelo na lista é VPN Router 2750 com 2000 túneis VPN Gateway HW EoS em 1/dezembro/2010
100 VPN Router MD - EOS Migration Strategy and Discontinued Order Codes Migration Strategy Avaya offers the following alternative solution(s). The VPN Router supports two principal VPN applications: 1) secure branch-to-branch (branch office tunneling) and 2) VPN remote access (or secure access) for VPN clients. Avaya recommends that VPN Router customers consider the Avaya Secure Router for future secure branch-tobranch deployments and the Avaya VPN Gateway for future VPN remote access requirements. For secure branch-to-branch deployments, the Secure Router 2330 and 4134 are the recommended replacement options. The Secure Router 2330/4134 v10.2 feature set includes interoperability with the VPN Router over routed branch-to-branch VPN connections, which can simplify migration from an existing VPN Router deployment. The Secure Router 2330 and 4134 also can terminate the Avaya (previously Contivity/Nortel) VPN Client even though neither of these platforms is recommended for large scale remote access applications. The Secure Router 2330 supports up to 100 IPSec VPN tunnels and the Secure Router 4134 supports up to 1000 IPSec VPN tunnels. The Secure Router 2330 and 4134 VPN option ships with VPN Client v8.01 (XP) and v10.01 (Vista). VPN Client v10.04 (XP, Vista, Windows 7) can be downloaded from the support portal. The Avaya VPN Gateway 3000 Series is the recommended replacement option for VPN Router secure access deployments. The VPN Gateway portfolio can act as a secure remote access concentrator for IPSec VPN clients using the Avaya VPN Client software, as well as provide support for browser-based SSL connections. The VPN Gateway also supports Avaya Health Agent (or Tunnel Guard).
VPN Summary Feature/Cap abilities Maximum concurrent VPN Tunnels SSL VPN Users IPsec VPN Tunnels Site-Site VPN VPN 3050 Virtual Appliance VPN 3070 Virtual Appliance SR 1K SR 2K SR 3K SR 4K 250 500 100 100 1.000 1.000 10-250 10-500 0 0 0 0 10-250 10-500 100 100 1.000 1.000 Sim Sim Sim Sim Sim Sim RAS VPN Sim Sim Básico Básico Básico Básico Suporte a VPN Client (ex- Contivity) Sim Sim Não Sim Não Sim Modo Gratuito (*) Gratuito (*) Licença Módulo Licença Módulo * Licenças de acesso IPSec/SSL são pagas. Virtual Appliance não possui nenhuma. 101
103 Introducing VPN Client 10.04 Version 10.04 is the industry s first unified VPN Client that supports both IPSec and SSL, has the ability to connect to many termination devices and provides support for 32 and 64 bit Windows operating systems (XP, Vista, Seven). General Availability Feb-8 th, 2010 Atenção: SR 1k e 3k não suportam VPN Client VPN Gateway IPSec/SSL IPSec IPSec IPSec IPSec VPN Router SR 4134 SR 2330 BCM
VPN Client 10.04 Features Windows XP through Windows 7 support 32-bit and 64-bit platform support Single Installer Automatic Proxy Detection Windows XP Tunnel and Authentication Seperation Wireless Mobile Broadband Adapter support 32bit 64bit 32bit 64bit 32bit 64bit NVC 7.x/8.x Yes No No No No No NVC 10.01 No No Yes Yes Limited Limited NVC 10.04 1
106 Combined IPSec and SSL Create connection profiles for both IPSec and SSL VPN services. Failover tunnel within protocol or across protocol (ex IPSec to SSL). Client binaries include necessary drivers to support IPSec and SSL.
109 VPN Client Pricing The VPN Client is not a chargeable item. An unlimited license to use on Windows clients is provided with all VPN Routers, VPN enabled Secure Routers and VPN Gateways. Access is limited by the number of concurrent seats licensed on the VPN Router/Gateway but the VPN client can be installed to any number of endpoints. A valid maintenance agreement for VPN Gateway, Secure Router (VPN enabled) or VPN Router must be in place (on each device terminating a 10.04 VPN client connection) to obtain this client software upgrade.
Parte 2: Rede Wireless
Delivering Valuable Differentiation Progressive evolution of our Wireless Networking technology 1
Value/Market Wireless LAN in Transition Toward all wireless access in the enterprise Unified 2010+ Overlay All Wireless Access Standalone 2000+ Wireless Hot Spot Occasional use Standalone AP s 2005+ On-site Mobility Increased adoption Full Wi-Fi footprint Primarily data True 802.11n bandwidth and performance Support for all applications Unified infrastructure including management. Universal mobility Unwired deployments Convenience Productivity TCO/Transformation I II III 115 11 5
116 Today s WLAN Architecture Disparate Networks Phone PDA Laptop Phone Wired & Wireless Centralized Architecture Thin Access Points Centralized Dual Function Wireless Controller Control Point (control traffic) Switching Point (data traffic) Wireless Controller Challenges Inefficiencies Hardware non-optimized Limitations in scalability
117 Unleashing the potential of Wireless Performance optimization Traffic no longer needs to terminate on Wireless Controllers Improved resiliency Wireless Controllers virtualized & availability is protected Seamlessly scalability Control & Data Planes scale independently & at different rates Reduces costs Wireless Controllers become virtual applications & not linked to hardware Next Generation Architecture Split-Plane Data plane leverages high-performance & highavailability Data & Control planes scale independently Application Hosts & V-Servers Control plane leverages high-availability Access Switch Wireless scalability becomes virtualized Distributed Wireless Switching software Wireless Controller is virtualized & protected Virtualized Wireless Controller
Wireless Networking Portfolio Benefits, features & characteristics, and positioning 1
Investment Strategy for Wireless Networking BEYOND TODAY 802.11n adoption commences Simple overlay system TOMORROW 802.11n deployments ramp Introduce WLAN 8100 Wireless optimized switching Integrated Wireless products Unwired Enterprise deployments ramp 119 119
Campus Branch 122 Wireless Networking 8100 Series Discrete Wireless Appliances Integrated Wireless Solutions Highlights Next Gen Architecture True wired/wireless integration Innovative split plane design Separate resources to control, data and management traffic Optimized wireless switching Improved resiliency Improved scalability Greater efficiencies Lower TCO Partnerships with market leading vendors
Wireless Networking Product Roadmap Q2/10 A M J Q3/10 J A S Q4/10 O N D Q1/11 J F M Q2/11 A M J Q3/11 J A S Q4/11 O N D 2012 WLAN 8100 WC 8180 AP 8120 WMS v1.0 v1.1 v2.0 Plenum-rated AP External antenna for AP Outdoor AP Split-plane on 8800/8600 Low end AP Virtual WC Shipping Plan of Record (POR) Plan of Intent (POI) Avaya Confidential NDA Required 125 125
129 Avaya WLAN Strategy and Evolution Avaya WLAN 2300 Series Overlay WLAN offering Access Points Avaya WLAN 8100 Series Next generation architecture True unification with virtualized controllers, wireless enabled switches, unified mgmt Always available, efficient & scalable Access Points Seamless migration Wireless enabled switches Servers Wireless Controllers Servers Virtualized Wireless Controller
Introdução ao WLAN 8100 Always On, Efficient, Scalable 1
131 Introduzindo WLAN 8100 Series A next generation wireless LAN solution that combines the latest 802.11n wireless standard with a new unified wired/wireless architecture Meets the needs of the emerging Unwired Enterprise era, by delivering unparalleled resiliency, efficiency and scalability Built by Avaya in house leveraging our rich heritage in voice and wireless Going-forward solution for businesses seeking a WLAN solution optimized for data and real time traffic such as voice, UC and video