Broadband VPNs - Outsourcing ISP Services to Cable TV and xDSL Providers

1
Broadband VPNs - Outsourcing ISP Services to
Cable TV and xDSL Providers

• Bruce Perlmutter
• Bay Networks
• Corporate Systems Engineering

2
New ISP Markets
3
Tunneling Overview
4
IPsec

• IP Security, derived from IPv6
• Packets can have AH (Authentication Header) and
  ESP (Encapsulating Security Payload)
• AH authenticates each packet - data integrity
• ESP provides privacy - DES (56-bit) or Triple DES
  (112-bit)
• Tunnel mode provides private addressing and
  doesnt require IPsec between end nodes

5
PPTP - Indian Outhouse
6
PPTP

• Point-to-Point Tunneling Protocol
• Developed by Microsoft
• Uses 40 or 128-bit RC4 encryption
• Well integrated into Windows 95 and NT
• Well integrated into NT Domains
• 3rd party implementations available

7
User Screen
8
End User Network Properties
9
Configuring Tunnels
10
Tunnel Attributes
11
Solution Overview
12
Win-Win-Win

• End Users
• High Speed Internet Access
• Service Selection
• Quality through Competition
• ISP
• New Subscriber base without large Infrastructure
  investment or management
• Works with all xDSL and Cable modem architectures
• Network Access provider
• New Revenue source without understanding ISP
  business
• Standards based VPN solution with a future
• Simple provisioning and management requirements.

13
Questions or Comments
Contact Bruce_Perlmutter_at_BayNetworks.com for
a copy of these slides or a white paper on this
topic