Lucent Technologies 1200 Network Card User Manual


 
2 Alcatel-LucentVPN FirewallBrick 1200SecurityAppliance
Central staging and secure
remote management Provides
integrated control over thousands of
VPN Firewall Brick appliances and IPSec
client users (including the Alcatel-
Lucent IPSec Client, from one console,
using the Alcatel-Lucent Security
Management Server (SMS) software
High-availability architecture
Eliminates any single point of failure
Proven Secure — Virtually impene-
trable hardened security operating
system coupled with secure
management infrastructure.
Economical growth path Seamless migration to advanced, VoIP, QoS
and VPN security services with no added infrastructure investments
Plug-and-play interoperability There’s no need for costly network recon-
figurations or on-site support
Cost-effective business continuity Take advantage of low priced encryption
performance and maintain carrier-class reliability for today’s data-heavy
business applications
Assured business continuity — native high availability with carrier-class reliability
Centralized, scalable, carrier-class management Centrally manage up
to 20,000 VPN Firewall Brick security appliances and 500,000 Alcatel-Lucent
IPSec Client (or third party IPSec client) users with Alcatel-Lucent Security
Management Server v9.0 or later.
T E C H N I C A L S P E C I F I C A T I O N S
Processor/Memory
3.6 GHz Processor with 2GB of RAM for Brick
1200 HS AC and DC models
3.2 GHz Processor with 1GB of RAM for Brick
1200 AC Model
LAN/VPN Interfaces
BRICK 1200 HS AC AND DC MODELS
(14) 10/100/1000 copper ports
(6) GigE mini-GBIC SFP ports
(1) VPN Encryption Accelerator
BRICK 1200 AC MODEL
(8) 10/100/1000 copper ports
(2) GigE mini-GBIC SFP ports
(1) VPN Encryption Accelerator
Other Ports
SVGA video, DB9 serial, PS/2 keyboard, 4xUSB
Performance
BRICK 1200 HS AC OR HS DC
Concurrent sessions – 3,000,000
New sessions/second – 45,000
Rules – 30,000 (shared among all virtual firewalls)
Maximum cleartext throughput – 4.75Gbps (1460
byte UDP Packets)
Maximum cleartext PPS throughput – 2,200,000
pps (78 byte UDP Packets)
Maximum 3DES and AES 256 throughput with
hardware encryption acceleration
¬ 1.7 Gbps (1460 byte UDP Packets)
Maximum 3DES and AES 256 PPS throughput with
hardware encryption acceleration
¬ 480,000 pps (78 byte UDP Packets
BRICK 1200 AC
Concurrent sessions – 2,000,000
New sessions/second – 30,000
Rules – 30,000 (shared among all virtual
firewalls)
Maximum cleartext throughput – 4.1 Gbps (1460
byte UDP Packets)
Maximum cleartext PPS throughput – 2,016,000
pps (78 byte UDP Packets)
Maximum 3DES and AES 256 throughput with
hardware encryption – 1.1 Gbps (1460 byte UDP
Packets)
Maximum 3DES and AES 256 PPS throughput with
hardware encryption – 332,000 pps (78 byte UDP
Packets)
Virtualization
Maximum number of virtual firewalls – 1100
(Brick 1200 HS AC or DC)
Maximum number of virtual firewalls – 500 (Brick
1200 AC)
Number of VLANs supported – 4,094
VLAN domains – up to 16 per VLAN trunk
VPN Firewall Brick partitions – allows for
virtualization of customer IP address range,
including support for overlapping IP addresses
Modes of Operation
Bridging and/or routing on all interfaces
All features supported with bridging
IP routing with static routes
802.1Q VLAN tagging supported inbound and
outbound on any combination of ports
Layer-2 VLAN bridging
Network Address Translation (NAT)
Port Address Translation (PAT)
Policy-based NAT and PAT (per rule)
Supports virtual IP addresses for both address
translation and VPN tunnel endpoints
PPPoE and DHCP-assignable interface/VLAN
addresses
Redundant DHCP Relay capabilities
Dynamic registration of mobile VPN Firewall Brick
security appliance address for centralized remote
management
Nested zone rule sets for common firewall
policies for all Bricks in the zone
Link Aggregation
Mobile Brick using integrated DHCP Client.
F E A T U R E S B E N E F I T S