Lucent Technologies 1200 manual Fe Atu R Es, Ben E Fits, Te Chn I Cal, Specificat, Ions

FE ATU R ES

•Central staging and secure remote management — Provides integrated control over thousands of VPN Firewall Brick appliances and IPSec client users (incl uding the Alcatel- Lucent IPSec Client, from one console, usin g the Alcatel-Lucen t Security Management Server (SMS) software

•High-av ailability architecture — Eliminates any single point of failure

•Proven Secure — Virtually impene- trable hardene d security operating system coupl ed with secure management infrastructure.

BEN E FITS

•Economi cal growth path — Seamless migratio n to advanced, VoIP, QoS and VPN security services with no added infrastructure investments

•Plug-and-play interoperability — There’s no need for costly network recon- figurations or on-site support

•Cost-e ffective business continuity — Takeadvantageof low priced encryption performance and maintain carrier- class relia bility for today’s data- heavy business applications

•Assured business continuity— native high availability with carrier-class reliability

•Centralized, scalable, carrier-class management — Centrally manage up to 20,000 VPN Firewall Brick security appliances and 500,000 Alcatel-Lucent IPSe c Client (or third party IPSec client) users with Alcate l-Lucent Security Management Server v9.0 or later.

TE CHN I CAL SPECIFICAT IONS

Processor/Me mory

•3.6 GHz Processor with 2GB of RAM for Brick

1200 HS AC and DC models

•3.2 GHz Processor with 1GB of RAM for Brick

1200 AC Model

LAN/VPN Interfaces

BRI C K 12 00 H S AC AND DC MODELS

•(14) 10/100/10 00 copper ports

•(6) GigE mini-GBIC SFP ports

•(1) VPN Encryption Accelerator

BRI C K 12 00 A C MODEL

•(8) 10/100/100 0 copper ports

•(2) GigE mini-GBIC SFP ports

•(1) VPN Encryption Accelerator

Other Ports

•SVGA video, DB9 serial, PS/2 keyboard, 4xUSB

Performance

BRI C K 12 00 H S AC OR HS DC

•Concurrent sessions – 3,000,000

•New sessions/second – 45,000

•Rules – 30,000 (shared among all virtual firewalls)

•Maximum cleartext throughput – 4.75Gbps (1460 byte UDP Packets)

•Maximum cleartext PPS throughput – 2,200,000 pps (78 byte UDP Packets)

•Maximum 3DES and AES 256 throughput with hardware encryption acceleration

¬ 1.7 Gbps (1460 byte UDP Packets)

•Maximum 3DES and AES 256 PPS throughput with hardware encryption acceleration

¬ 480,000 pps (78 byte UDP Packets

BR IC K 1 20 0 A C

•Concurrent sessions – 2,000,000

•New sessions/second – 30,000

•Rules – 30,000 (shared among all virtual firewalls)

•Maximum cleartext throughput – 4.1 Gbps (1460 byte UDP Packets)

•Maximum cleartext PPS throughput – 2,016,000 pps (78 byte UDP Packets)

•Maximum 3DES and AES 256 throughput with hardware encryption – 1.1 Gbps (1460 byte UDP Packets)

•Maximum 3DES and AES 256 PPS throughput with hardware encryption – 332,000 pps (78 byte UDP Packets)

Virtualization

•Maximum number of virtual firewalls – 1100 (Brick 1200 HS AC or DC)

•Maximum number of virtual firewalls – 500 (Brick 1200 AC)

•Number of VLANs supported – 4,094

•VLAN domains – up to 16 per VLAN trunk

•VPN Firewall Brick partitions – allows for virtualization of customer IP address range, including support for overlapping IP addresses

Modes of Operation

•Bridging and/or routing on all interfaces

•All features supported with bridging

•IP routing with static routes

•802.1Q VLAN tagging supported inbound and outbound on any combination of ports

•Layer-2 VLAN bridging

•Network Address Translation (NAT)

•Port Address Translation (PAT)

•Policy-based NAT and PAT (per rule)

•Supports virtual IP addresses for both address translation and VPN tunnel endpoints

•PPPoE and DHCP-assignable interface/VLAN addresses

•Redundant DHCP Relay capabilities

•Dynamic registration of mobile VPN Firewall Brick security appliance address for centralized remote management

•Nested zone rule sets for common firewall policies for all Bricks in the zone

•Link Aggregation

•Mobile Brick using integrated DHCP Client.

2 Alcatel-Lucent VPN Firewall Brick 1200 Security Appliance