Introduction

Introduction	Internet-based WAN Backup Solutions using NetVanta

WAN communication links are traditionally the weakest component in computer networking. Unlike LAN components, which are typically in the owner's direct physical and administrative control, the facilities that make up the WAN link belong to and are controlled by a third party. These facilities also cover wide geographic areas, making them more susceptible to physical harm. Such characteristics make WAN links the single largest contributor to network downtime.

When the WAN link is critical to a network's operation, it is wise to design towards WAN resiliency. In some cases, the volume and criticality of the WAN might dictate the need to completely duplicate the WAN with redundant and independent facilities. The cost of this solution can be quite high, so the benefit must be carefully weighed.

Another common solution, especially in large hub and spoke networks, is to use dial backup around the WAN provider. In this solution, should a spoke lose its WAN connectivity to the hub, it will place a call to a dial-up server located at the hub, completely bypassing the WAN. While this is a well known solution that has been used for many years, the cost of dial-up server ownership, maintenance, and long distance toll charges can be quite high.

The Internet as an Alternative

Using the stateful inspection firewall and powerful IPSec VPN capabilities provided in the NetVanta router product line, the Internet can be a useful and low cost alternative for WAN connectivity -- as a backup or even as a primary connection. Internet use eliminates the dial-up server and its ownership and maintenance expenses, in effect outsourcing management of the modem bank to local ISPs at each location. It also eliminates toll charges since each location can connect via a local ISP. A site can remain connected indefinitely for a flat fee in many areas, incurring no toll charges.

Following are descriptions and detailed examples of several Internet-based backup solutions. These solutions have been tested with AOS Version 8.0.22E.

Note that detailed firewall design and VPN design are dependent on each network's unique requirements. The examples shown here are simpified to focus on the mechanics of using a primary and backup connection.

Also note that in these examples, the NetVanta is the remote site router. A NetVanta or a third party device can be used as the central router and the central FW/VPN gateway.

61200890L1-29.4A