2
Alcatel-Lucent VPN Firewall Brick 1200 Security Appliance
•
Central staging and secure
remote managemen
t — Provides
integrated control over thousands of
VPN Firewall Brick appliances and IPSec
client users (including the Alcatel-
Lucent IPSec Client, from one console,
using the Alcatel-Lucent Security
Management Server (SMS) software
•
High-availability architectur
e —
Eliminates any single point of failure
•
Proven Secure
— Virtually impene-
trable hardened security operating
system coupled with secure
management infrastructure.
•
Economical growth path
— Seamless migration to advanced, VoIP, QoS
and VPN security services with no added infrastructure investments
•
Plug-and-play interoperability
— There’s no need for costly network recon-
figurations or on-site support
•
Cost-effective business continuity
— Take advantage of low priced encryption
performance and maintain carrier-class reliability for today’s data-heavy
business applications
•
Assured business continuity
— native high availability with carrier-class reliability
•
Centralized, scalable, carrier-class management
— Centrally manage up
to 20,000 VPN Firewall Brick security appliances and 500,000 Alcatel-Lucent
IPSec Client (or third party IPSec client) users with Alcatel-Lucent Security
Management Server v9.0 or later.
T E C H N I C A L
S P E C I F I C A T I O N S
Processor/Memory
•
3.6 GHz Processor with 2GB of RAM for Brick
1200 HS AC and DC models
•
3.2 GHz Processor with 1GB of RAM for Brick
1200 AC Model
LAN/VPN Interfaces
B R I C K 1 2 0 0 H S A C A N D D C M O D E L S
•
(14) 10/100/1000 copper ports
•
(6) GigE mini-GBIC SFP ports
•
(1) VPN Encryption Accelerator
B R I C K 1 2 0 0 A C M O D E L
•
(8) 10/100/1000 copper ports
•
(2) GigE mini-GBIC SFP ports
•
(1) VPN Encryption Accelerator
Other Ports
•
SVGA video, DB9 serial, PS/2 keyboard, 4xUSB
Performance
B R I C K 1 2 0 0 H S A C O R H S D C
•
Concurrent sessions – 3,000,000
•
New sessions/second – 45,000
•
Rules – 30,000 (shared among all virtual firewalls)
•
Maximum cleartext throughput – 4.75Gbps (1460
byte UDP Packets)
•
Maximum cleartext PPS throughput – 2,200,000
pps (78 byte UDP Packets)
•
Maximum 3DES and AES 256 throughput with
hardware encryption acceleration
¬
1.7 Gbps (1460 byte UDP Packets)
•
Maximum 3DES and AES 256 PPS throughput with
hardware encryption acceleration
¬
480,000 pps (78 byte UDP Packets
B R I C K 1 2 0 0 A C
•
Concurrent sessions – 2,000,000
•
New sessions/second – 30,000
•
Rules – 30,000 (shared among all virtual
firewalls)
•
Maximum cleartext throughput – 4.1 Gbps (1460
byte UDP Packets)
•
Maximum cleartext PPS throughput – 2,016,000
pps (78 byte UDP Packets)
•
Maximum 3DES and AES 256 throughput with
hardware encryption – 1.1 Gbps (1460 byte UDP
Packets)
•
Maximum 3DES and AES 256 PPS throughput with
hardware encryption – 332,000 pps (78 byte UDP
Packets)
Virtualization
•
Maximum number of virtual firewalls – 1100
(Brick 1200 HS AC or DC)
•
Maximum number of virtual firewalls – 500 (Brick
1200 AC)
•
Number of VLANs supported – 4,094
•
VLAN domains – up to 16 per VLAN trunk
•
VPN Firewall Brick partitions – allows for
virtualization of customer IP address range,
including support for overlapping IP addresses
Modes of Operation
•
Bridging and/or routing on all interfaces
•
All features supported with bridging
•
IP routing with static routes
•
802.1Q VLAN tagging supported inbound and
outbound on any combination of ports
•
Layer-2 VLAN bridging
•
Network Address Translation (NAT)
•
Port Address Translation (PAT)
•
Policy-based NAT and PAT (per rule)
•
Supports virtual IP addresses for both address
translation and VPN tunnel endpoints
•
PPPoE and DHCP-assignable interface/VLAN
addresses
•
Redundant DHCP Relay capabilities
•
Dynamic registration of mobile VPN Firewall Brick
security appliance address for centralized remote
management
•
Nested zone rule sets for common firewall
policies for all Bricks in the zone
•
Link Aggregation
•
Mobile Brick using integrated DHCP Client.
F E A T U R E S
B E N E F I T S
