Lucent Technologies Alcatel-Lucent VPN 1200 - Manual (Page 2)

2 Alcatel-Lucent VPN Firewall Brick 1200 Security Appliance
• Central staging and secure
remote management — Provides
integrated control over thousands of
VPN Firewall Brick appliances and IPSec
client users (including the Alcatel-
Lucent IPSec Client, from one console,
using the Alcatel-Lucent Security
Management Server (SMS) software
• High-availability architecture —
Eliminates any single point of failure
• Proven Secure — Virtually impene-
trable hardened security operating
system coupled with secure
management infrastructure.
• Economical growth path — Seamless migration to advanced, VoIP, QoS
and VPN security services with no added infrastructure investments
• Plug-and-play interoperability — There’s no need for costly network recon-
figurations or on-site support
• Cost-effective business continuity — Take advantage of low priced encryption
performance and maintain carrier-class reliability for today’s data-heavy
business applications
• Assured business continuity — native high availability with carrier-class reliability
• Centralized, scalable, carrier-class management — Centrally manage up
to 20,000 VPN Firewall Brick security appliances and 500,000 Alcatel-Lucent
IPSec Client (or third party IPSec client) users with Alcatel-Lucent Security
Management Server v9.0 or later.
T E C H N I C A L S P E C I F I C A T I O N S
Processor/Memory
• 3.6 GHz Processor with 2GB of RAM for Brick
1200 HS AC and DC models
• 3.2 GHz Processor with 1GB of RAM for Brick
1200 AC Model
LAN/VPN Interfaces
B R I C K 1 2 0 0 H S A C A N D D C M O D E L S
• (14) 10/100/1000 copper ports
• (6) GigE mini-GBIC SFP ports
• (1) VPN Encryption Accelerator
B R I C K 1 2 0 0 A C M O D E L
• (8) 10/100/1000 copper ports
• (2) GigE mini-GBIC SFP ports
• (1) VPN Encryption Accelerator
Other Ports
• SVGA video, DB9 serial, PS/2 keyboard, 4xUSB
Performance
B R I C K 1 2 0 0 H S A C O R H S D C
• Concurrent sessions – 3,000,000
• New sessions/second – 45,000
• Rules – 30,000 (shared among all virtual firewalls)
• Maximum cleartext throughput – 4.75Gbps (1460
byte UDP Packets)
• Maximum cleartext PPS throughput – 2,200,000
pps (78 byte UDP Packets)
• Maximum 3DES and AES 256 throughput with
hardware encryption acceleration
¬ 1.7 Gbps (1460 byte UDP Packets)
• Maximum 3DES and AES 256 PPS throughput with
hardware encryption acceleration
¬ 480,000 pps (78 byte UDP Packets
B R I C K 1 2 0 0 A C
• Concurrent sessions – 2,000,000
• New sessions/second – 30,000
• Rules – 30,000 (shared among all virtual
firewalls)
• Maximum cleartext throughput – 4.1 Gbps (1460
byte UDP Packets)
• Maximum cleartext PPS throughput – 2,016,000
pps (78 byte UDP Packets)
• Maximum 3DES and AES 256 throughput with
hardware encryption – 1.1 Gbps (1460 byte UDP
Packets)
• Maximum 3DES and AES 256 PPS throughput with
hardware encryption – 332,000 pps (78 byte UDP
Packets)
Virtualization
• Maximum number of virtual firewalls – 1100
(Brick 1200 HS AC or DC)
• Maximum number of virtual firewalls – 500 (Brick
1200 AC)
• Number of VLANs supported – 4,094
• VLAN domains – up to 16 per VLAN trunk
• VPN Firewall Brick partitions – allows for
virtualization of customer IP address range,
including support for overlapping IP addresses
Modes of Operation
• Bridging and/or routing on all interfaces
• All features supported with bridging
• IP routing with static routes
• 802.1Q VLAN tagging supported inbound and
outbound on any combination of ports
• Layer-2 VLAN bridging
• Network Address Translation (NAT)
• Port Address Translation (PAT)
• Policy-based NAT and PAT (per rule)
• Supports virtual IP addresses for both address
translation and VPN tunnel endpoints
• PPPoE and DHCP-assignable interface/VLAN
addresses
• Redundant DHCP Relay capabilities
• Dynamic registration of mobile VPN Firewall Brick
security appliance address for centralized remote
management
• Nested zone rule sets for common firewall
policies for all Bricks in the zone
• Link Aggregation
• Mobile Brick using integrated DHCP Client.
F E A T U R E S B E N E F I T S