MPLS VPN - Product Presentation

8/16/2019 MPLS VPN - Product Presentation

1/59

MPLS VPN


2/59

Data

Center

Internet

Data Network - ‘Do it all by yourself’

Leased LinesVSAT

Internet

IP-VPN

Call Center


3/59

A Network you can plug into - tobring your biz entities on-line withyour IT apps

Wired

Wireless

Call Center

Own/

3rd Party

Data Center

ERP

CRM

E-mail

Supply Chain Mgt

Intranet Portal

Terabit MPLS

Network with All

India Reach


4/59

A Virtual Private Network constructed over shared

infrastructure Virtual – Not a separate physical network, ut

appears to e one

Private ! "eparate addressin# and routin#

Network

A partitioned private network over co$$on shared %P ackoneusin# technolo#ies to ensure privacy of data either self!provided orprovided y "ervice Provider

Corporate

&'

(oile )ser

*ranch

+actory"upplier

"hared

%nfrastructure

VPN


5/59

VPN e!uire"ents

-tend Corporate Network

.educe &ardware costs y decreasin# ter$ination ports Prioritiation of applications like voice/video

%nte#rate "uppliers and Custo$ers to Corporate Network

.e$ote Access fro$ anywhere, anyti$e

"calale and +le-ile

Predictale perfor$ance and pro!active $ana#e$ent

&i#hly secure in confor$ation to world standards

Aility to support Private Addressin#

Aility to support Conver#ence

Business

Technical

Corporate

&'

(oile )ser

*ranch

+actory"upplier

"hared

%nfrastructure


6/59

CE

PE P

LSP

• CE – Customer Edge router

–Metro Ethernet, Leased

Line

• PE – Provider Edge router

– ssigns La!els

– ssociates CE "ith

customers VPN

• P – Provider router

–#or"ard $ac%et !ased onla!el

–S"a$s la!el

&la!el'in, la!el'out(

• La!el s"itched $ath &LSP(

–L)P*+SVP

–Path !et"een ingress andegress PE

#P$% &uil'ing &locks


7/59

192.168.1.0

192.168.2.0 192.168.1.0

192.168.2.0

192.168.1.1

Forward based on

destination IP

#P$% Packet (orwar'ing

IP Packet

192.168.1.1

Forward based on

Label

192.168.1.1

Forward based on

Label

192.168.1.1

Forward based on

Label

191.168.1.1

Forward based on

Label

192.168.1.1

Add Label and

forward based on

Label

PE2PE1

2.0

VPN VPN

+e$eat

-.

Reote Labels learnt

thro!"h Ro!te learnin"#

$lack Label for

%&'#%()#%#* is stored at

P+%

Reote Labels learnt

thro!"h Ro!te learnin"#

$l!e Label for

%&'#%()#'#* is stored at

P+'


8/59

192.168.1.0

192.168.2.0 192.168.1.0

192.168.2.0

192.168.1.1

Forward based on

destination IP

#P$% Packet (orwar'ing)epeat*

IP Packet

192.168.1.1

Forward based on

Label

192.168.1.1

Forward based on

Label

192.168.1.1

Forward based on

Label

191.168.1.1

Forward based on

Label

192.168.1.1

Add Label and

forward based on

Label

PE2PE1

VPN VPN


9/59

192.168.1.0

192.168.2.0 192.168.1.0

192.168.2.0

192.168.1.1

Packet (orwar'ing in#P$%

IP Packet

192.168.1.1

192.168.1.1

192.168.1.1

191.168.1.1

192.168.1.1

PE2PE1

IPVPNLSP

/denti0ies VPN and customer destination address

1sed to se$arate customer VPN

dded "hen $ac%ets enter and removed "hen $ac%ets leave

VPN

LSP

S"a$$ed a0ter ever2 ho$

1sed 0or 0or"arding in MPLS core

/denti0ies the La!el S"itched Path


10/59

192.168.1.0

192.168.2.0 192.168.1.0

192.168.2.0

IP Packet

Forward based on

destination IP

IP Packet

Forward based on

destination IP

IP Packet

Forward based on

destination IPIP Packet

Forward based on

Destination IP

Packet (orwar'ing in IPNetwork

IP Packet

IP Packet

Forward based on

destination IP


11/59

#P$% Deli+ers

s a technolog2 s /P VPN Network ased VPN

Cs need to e-chan#e 0ayer3 infor$ationonly with connected Ps1 No need toe-hana#e routin# infor$atioin with other

Cs Overco$es overlappin# private %P

Address issues

.outin# Protocols estalish reachaility

.outin# at d#e and "wicthin# at Core

Delivers Co"/'o"

Platfor$ to address conver#ence

2ithout %P"ec, "ecurity is as #ood as+./A(

Packet switched technolo#y

"upports 0ayer4 and 0ayer3VPNs

"upports raffic n#ineerin#


12/59

/nternet

+elianceWirelessNet"or%

BN

M +ing

B+ing

BN+egional300ice

BNM +ing

B

+ing

BN4ead

300ice

,.Franchisee

LM)S

4u!

BNM +ing

B+ing

BN

E5tranet&)ealers * Su$$liers(

M +ing

B+ing BN

BN

PSTN

Net"or%

+eliance Core

Net"or%Mobile

/orker

Reote 0sers

/ireless0sers

eliance #P$% VPN %olution

+S

/ S ) N

P S T N


13/59

Access Technology #atri,

Port $andwidth Interface AccessTechnolo"12

CP+ Pro3ided

67 8!$s to 9: 8!$s Ethernet )SL )SL Modem

)LC ;-:M!$s to .. M!$s Ethernet Metro Ethernet None=: M!$s &E=( *

7: M!$s &)S=(;-


14/59

%$A Para"eters

SLA Paraeter Standard Prei! C!stoi4ed

SL Measurement $eriod nnuall2 nnuall2

Port 1$time ssurance

Percentage 1$ to A-9 1$ to AA-9

MTT+ @ 1$ to . hours 1$ to 6 hours

Net"or% Latenc2 &PE to PE(D F . msec F . msec

Pac%et Loss &PE to PE( F F

1sage Credit against SL

de0ault.. =..

To !e $ro$osed

onl2 a0ter )8C

a$$rovals 0or values

to !e committed


15/59

Disasters ha3e no 5references


16/59

eliance ID’s . Integral part ofthe #P$% Network

6 Le3el-7 certified IDCs

' in M!bai8

' in $an"alore

read2'to'move'in )+ * Primar2 site


17/59

PrimaryDatacenter

D-site rea'y #P$% Network

RelianceIDC asDR site

Terabit MPLS

Network


18/59

Reliance Network Overview


19/59

9 Priar1 Locations:ea3il1 Ph1sicall1 Meshed

STM %( &67( connecti3it1 between 5riar1core locations

%6 Secondar1 Locations

F!ll1 Lo"icall1 Meshed

STM 6 connecti3it1 totwo or ore 5riar1 locations

%9' Collector Locations

Connected to a core location

STM % ; n 2 +% to core locations

eliance Data Network )DN*

Largest MPLS ena!led Core )ata Net"or% alread2


20/59

MCN8

DA


21/59

Access #etho'ology. /ireline (TT&

End-to-end optical fber based

sel healing topolog

Connects $a5or nodes within acity 6(etro7 – act as a##re#ationpoints for custo$er traffic withincity

%nterconnects to all teleco$service providers

nd!to!end 6custo$er pre$iseto core7 self healin# rin#topolo#y

Optical +ier ased network tosupport hi#h andwidths

Cale ased on %) 89:;4standard

MCN- Media Convergence NodeMAN- Media Access NodeBAN- Building Access NodeBA- Building Access Ring BOI- Building Of Interest BN- Building Node

$A Rin"

Core $ackbone

Main Access Rin"

MCN

MNBN

MCNMCN

:'0i!er direct

!uilding ca!le

MCN

BN

B3/ &BN location(


22/59

Re!ote "ccess MPLS

VPN


23/59

A #P$% VPN

Provides a secure, hi#h availaility, dial!up solution that connects e$ployees,custo$ers, and usiness partners to corporate intranets, e-tranets, and the

%nternet9

"calale to support or#aniations of all sies, .A (P0" VPN offers P"N / %"DN

access fro$ 44 locations in %ndia

he service offers corporate custo$ers the facility to allow their e$ployees and

staff to access their %ntranet and central resources securely9

Other co$panies such as partners, supplies, $a5or custo$ers or consultants

6-tranet7 also can have li$ited access to this or#aniation


24/59

#o'e of Access

PSTN Dial-up

ISDN Dial-up

he custo$er can #et a dial up access to his %P VPN throu#h any P"N / %"DN

line fro$ any *"O9

hou#h the custo$er can dial into the VPN fro$ any P"N / %"DN line, the data

access rate to the VPN will depend on the custo$erCo$panyNa$e9co$7 that will identify the particular user9 he ?)ser Na$e< will e syste$ auto!#enerated and alias can e created y the

custo$er at the CN( portal

%n case of P"N dial!up, $ultiple users of the sa$e or#aniation can also e

allowed to use the sa$e lo#in id

A #P$% VPN


25/59

A #P$% VPN

A+ailability

he service is availale at 44 identified potential locations in %ndia where local

dialin# would e possile

(u$ai, Pune, Pan5i$, Delhi, Chandi#arh, @aipur, Chennai, *an#alore, (ysore,

&yderaad, rnakula$, Via#, Coi$atore, olkata, *huhaneshwar,

Ah$edaad, Vadodara, *hopal, %ndore, .aipur, 0ucknow, .achi

All the locations other than these 44 locations would e dialin# a "D call to any

of these 44 locations close to the location todayBB

Additional locations would e added where local dialin# would e possile as when re=uired dependin# upon the usiness potential at those locations


26/59

Type of e"oteAccess

P 0 $aptop base' re"ote access %ndividual 0o#in %D for "in#le )ser 0o#in

)ni=ue 0o#in %D for each individual user9 his 0o#in %Ds will allow only one

user to 0o#in9

he custo$er can specify a "tatic %P to e provided for a particular user fro$

the defined 2AN %P Pool9 %f not specified, the %P will e dyna$ically allocated

fro$ the 2AN %P Pool

Co$$on 0o#in %D with (ultiple 0o#in )sers(Applicable for PSTN remote access only

(ultiple )sers can use sa$e 0o#in %D for .e$ote Access9 he nu$er of

si$ultaneous users usin# the sa$e 0o#in %D has to e specified y the

custo$er as No9 of 0o#in )sers


27/59

$AN base' re"ote access

)ni=ue 0o#in %D for each 0AN ased access9

he custo$er $ay specify a "tatic %P to e provided for a particular user

fro$ the defined 2AN %P Pool9 %f not specified, the %P will e dyna$ically

allocated fro$ the 2AN %P Address Pool

he custo$er $ust specify the 0AN %P Address to enale the PCs on the0AN to access the VPN9 he custo$er $ay specify $ore than one 0AN %P

Address9

he .outer used y the custo$er $ust e capale for dial!up access and

should allow confi#urin# the 0o#in %D on the router9

Type of e"oteAccess


28/59

he custo$er will e char#ed a +0A +" per annu$ for each lo#in user for

re$ote access to (P0" VPN9

he +0A +" would vary with the type of access technolo#y

he char#es re$ain the sa$e irrespective of whether the custo$er chooses a sin#lelo#in id or $ultiple lo#in %D


29/59

+eliance PSTNNet"or%

A A ABN

M +ing

B+ing

BN+egional300ice

BNM +ing

B+ing

BN4ead

300ice

E5tranet

&)ealers * Su$$liers(

M +ing

B+ing BN

BN

/ S ) N

+eliance CoreNet"or%

Reote 0sers

eliance A #P$% VPN%olution

3ther BS3s PSTN Net"or%

R

A

S

P S T N

h ' l i l


30/59

Access #etho'ology. /ireless D#A

P)SN

Reliance MPLS Network

P+

P+

P+

Switch

%*;%**

Secure L:TP Tunnel

Per PC

LNS

Firewall

LNS

Firewall

LNS

Firewall

LNS

P+

P+

P+

P

P

P

P+

P

P

P+

+thernet

P+

Reliance=s IDC8DA


31/59

New #eat$res

# lti t


32/59

)nicast is one to one delivery of infor$ation, which re=uires $ore then one ti$etrans$ission of si$ilar data fro$ the source device, if receivers are $ore then one9

*roadcast is trans$ission of infor$ation to all sites of VPN irrespective of theirneed9

(ulticast allows the efficient distriution of infor$ation within one VPN, fro$ one

site 6as a "ource7 to other sites 6$ultiple receivers79 +or this it allows one ti$etransfor$ation of infor$ation fro$ the source device re#ardless of the nu$er ofreceivers9

(ulticastin# reduces the floodin# and #ives the infor$ation to specific sites onlyand thus overco$es the disadvanta#e of *roadcast9

#ulticast

# lti t


33/59

(ulticastin# is the useful feature for the custo$er who trans$its data/audio/video

infor$ation


34/59

&usiness ules

his feature will e offered as a product feature to the custo$er

Any e-istin# / new VPN custo$er can opt for this service

-istin# VPN Custo$er can opt for (ulticast feature throu#h a (ACD

New Custo$er has to select (ulticast feature in (P0" VPN CA+

#ulticast

# lti t


35/59

$i"itations

Nu$er of .DN Ps involved in the custo$er VPN should e E or F 3;9

CaseGH %f custo$er has :I sites in his VPN, GI at each of the location (u$ai, Delhi, Chennai, *an#alore, Pune and

Calcutta and wants the $ulticastin# service then custo$er is eli#ile for the service as in .eliance network each of

the aove location constitute a sin#le P which $eans custo$er is askin# for the service etween : P which is

allowed9

Case 4 H %f custo$er has :I sites in his VPN, each involvin# a different P, we will not e ale to offer this feature9

(ulticast strea$ sie support per custo$er is up to 256 Kbps9

Custo$er can


36/59

e!uire"ent

Custo$er re=uires hi#her andwidth at a particular site and durin# particular ti$e of

the day, everyday

+or that particular ti$e andwidth should e up#raded auto$atically9

After the particular ti$e, the andwidth availale should e sa$e as that of

contracted one9

C/+

Time

Ti"e of the Day ban'wi'th )ToD*

Ti f th D b ' i'th )T D*


37/59

i$e of Day 6oD7 is a feature where in custo$er can choose to allocate a hi#her

andwidth at a particular i$e of Day on a periodic asis

Custo$er can up#rade the andwidth in the off!peak hours of .eliance 644HII hrs9

to IJHII hrs97

Custo$ers who have peak usa#e durin# the .eliance off!peak hours can drive

down their internetworkin# costs

he andwidth offered at the off!peak hours would e doule the andwidth

suscried for

Any new / e-istin# custo$er can suscrie to oD +eature9


Ti"e of the Da ban' i'th )ToD*


38/59

&usiness ules

i$e of Day 6oD7 feature will e offered only to the sites with (etro thernet

as the last $ile

oD feature will e offered to custo$ers suscriin# for at least G (ps

andwidth

Custo$er can up#rade only to twice the suscried C%. andwidth for the off!peak ti$e

+lat Annual Char#es will e char#ed for oD +eature ased on the suscried

C%.




39/59

Value Proposition

Custo$ers havin# $a-i$u$ andwidth utiliation at ni#ht ti$e can reduce the

andwidth costs si#nificantly

%n asence of oD feature custo$er would have suscried for a hi#her C%.

andwidth which would e hardly utilied in the day ti$e

%t


40/59

1ey Di2erentiators 3 4uickecap

thernet apart fro$ 0eased 0ine and 0(D" .in# architecture in Access and Core to deliver hi#h upti$es

National NOC to $onitor and $ana#e network on 4KLM asis

Online Perfor$ance .eports

nd to nd $ana#ed network acked up "0A

All flavours of .e$ote Access %nte#ration

%nternational VPN

%nternet 2orld class %DC

%nte#rated approach for co$plete ran#e of nterprise networkin# needs


41/59

VPN usto"ers - A Partial $ist

N# Portal


42/59

N# Portal

usto"er Network #anage"ent 5N#6 Portal &i#h!level capacity plannin# and advanced trend analysis have never een easier,

with we!ased online CN( Portal providin# detailed infor$ation on the andwidth

you are usin#9

At the CN( Portal custo$er can also $onitor all the "0A para$eters! "ervice Availaility, Network 0atency and Network Packet 0oss9

%n the event of any prole$ with the network, custo$er can raise a troule ticket

67 online

he $onthly "0A .eports would also e availale at the portal

http://www2.coca-cola.com/index.htmlhttp://www2.coca-cola.com/index.htmlhttp://www.marutiudyog.com/index.asphttp://www2.coca-cola.com/index.html


43/59


44/59


45/59


46/59

N# Portal


47/59

N# Portal

%u""ary eport

N# Portal


48/59

N# Portal

%u""ary eport

N# Portal


49/59

N# Portal

&an'wi'th 7tilization )IN*

N# Portal


50/59

N# Portal

&an'wi'th 7tilization )87T*

N# Portal


51/59

N# Portal

$atency

N# Portal


52/59

N# Portal

Packet $oss

N# Portal


53/59

N# Portal

VPN9Ntwrk-%r+cs9onnecti+ity

Packet $oss

Trouble Ticket #o'ule


54/59

%NM Portal & R" MPLS VPN

N# Portal


55/59

G9 he syste$ will #enerate uni=ue )serna$es a default Password per user na$e and

provide it to the custo$er

49 he custo$er will have a CAN, which would e used to access CN( portal9

39 %n case of .A(P0" VPN CA+ entered in the syste$, the CN( portal of that custo$er

would have a link at the portal to #et into .A(P0" VPN "ervice pa#e9

K9 At the .A(P0" VPN "ervice pa#e the ad$inistrator of the custo$er would have the 0ist of

confi#ured )ni=ue )serna$es default Passwords with correspondin# attriutes vi9 No9of )sers, Access echnolo#y, 0AN %P address 6if applicale7, "tatic 2AN %P address 6if

applicale7

;9 he ad$inistrator should e ale to create aliases of each )ser Na$e which he could enter

a#ainst each )ser Na$e and also to chan#e the respective default password

:9 he aliases passwords will e updated at the CN( portal and the custo$er will e ale to

lo#in with the aliases

M9 he ad$inistrator at any ti$e can chan#e either the aliases or passwords or oth, at the

CN( portal9

N# Portal

N# Portal


56/59

N# Portal

N# Portal


57/59

N# Portal

N# Portal


58/59

N# Portal


59/59

Documents

MPLS VPN - Product Presentation