Simplify operations and reduce cost and complexity with HP Dynamic VPN (DVPN) solutionSam RastogiGlobal Product Marketing ManagerMay 2012
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.2
Key trends
PCI DSS, HIPAA, GLBA, etc.
Regulatory Compliance
Broadband and Wireless Mobility
Low cost, high speed broadband, 3G WAN
GlobalizationIncreasing
remote workforce
Rising cost, complexity, and poor performance
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.3
Key requirements
Flexible
Easy to manage
Scalable and High
performance
• Utilizes standards based IPSec VPN encryption
• Supports multiple deployment scenarios
• Reduces manual configuration
• Automated, zero-touch deployment options
• Connects up to 3,000 tunnels per hub
• Virtually infinite horizontal VPN scaling
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.4
Dynamic VPN
• Up to 93% configuration reduction
• Highly scalable and resilient
• Carrier agnostic connectivity
• Zero-touch automation with HP IMC
HP DVPN solution overview
Dynamic VPN
IPsec tunnels
Address management
Automatic tunnel setup
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.5
HP DVPN solution portfolio
8800 Router Series
6600 Router Series MSR50
MSR20-1X MSR900
MSR30
MSR20
8800 Router Series
6600 Router Series
FlexNetwork Architecture
FlexManagement – HP Intelligent Management Center (IMC) BIMS
FlexFabric FlexCampus FlexBranch
MSR50
MSR20-1X MSR900
MSR30
MSR20
6600 Router Series 6600 Router Series
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.6
HP MSR Series router family
• Comprehensive portfolio scales for small office/home office to large size branch and regional offices
• Broad range of integrated services to meet today’s “branch in a box” needs− Modular WAN and LAN options
− Dynamic routing, MPLS, multicast, IPv6, QoS
− Full Ethernet switching
− Robust security features
− Unified wired and wireless LAN
− Integrated voice gateway
• Exceptional performance and availability
• Unified OS and single pane of glass managementRouter Series Configuration Performance (Kpps)
MSR900 Series Fixed Up to 100
MSR20-1X Series
Modular – 1 SIC slot 160
MSR20 Series Modular – 2 or 4 SIC slots 180
MSR30 Series Modular – 2 or 4 SIC and 1, 2, 4, or 6 MIM slots
Up to 360
MSR50 Series Modular – 4 FIC or 6 FIC slots Up to 1280
MSR 900 Series MSR 20-1X Series
MSR 20 Series MSR 30 Series
MSR 50 Series
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.7
HP 6600 Router Series
• High performance, multi-core CPU and distributed processing with up to 252M PPS
• Comprehensive routing, switching, and security services
− MPLS, dynamic routing, IPv6, multicast, nested QoS
− Spanning tree, VLAN, bridging, IGMP/MLD
− Stateful firewall, MPLS, Dynamic VPN
• Multiple WAN/LAN options (T3, E3, T1, E1, OC-3, GbE, 10GbE, serial)
• High reliability to fully meet carrier-level reliability requirements
HP6600 Router Series Models: HP6616, HP 6608, HP6604 Router, HP
6602 Router
Operates on the WAN edge and core layers
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.8
Gain business agility through single pane-of-glass management
Gain Visibility
Increase efficiency
Integrate security
Reduce OPEX with network transparency
Achieve enhanced performance and superior reliability
Preserve network integrity with full featured network access control
Business-Centric Network Management
HP Intelligent Management Center (IMC)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.9
HP IMC Modules – Branch Intelligent Management System
−Leverages standards based CWMP protocol
−Secure device & configuration management
−“Zero Touch” deployment for branch networks
Automated configuration management across large scale networks
HeadquartersBranch
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.10
HP IMC Modules – IPSec/VPN Manager (IVM)
−Pre-defined DVPN security templates
−DVPN auto discovery
−DVPN management and provisioning
Greater visibility and control for DVPN
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.11
HP DVPN Solution – Key features and benefitsDynamic routing & QoS
Dynamic IP addressing
Large scale VPN topologies
Zero-touch, automated deployment
DVPN domain management
Control and data pane separation
Predictable performance
Resilient and adaptable
Flexible architecture
Single pane-of-glass management
Visibility and control
Highly scalable and secure
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.12
3rd party validation – Network Test report
“…With DVPN enabled on HP Networking routers, IPsec tunnels are automatically established between sites. This eliminates the need for complex configuration of IPsec parameters, especially at branch-office sites that may not have full-time IT staff present. DVPN also can greatly reduce configuration complexity…”
-- David Newman (Network Test)
Fully meshed routers
DVPN savings in configuration complexity
5 75%
10 89%
15 93%
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.13
Global financial service provider adopts HP DVPNCase Study
Challenges • Slow and unstable WAN
• Complex secure connectivity
• High TCO
HP solution• Thousands of HP MSR and 6600 routers
• 3G/Internet and MPLS
Business benefits• Reduced complexity: 30 variations of software down to 2
• Simplified network: fully automated, 20% higher encrypted
performance
• Reduced cost: 20-30% lower TCO
Business• Operations in over 30 countries
• 6M+ merchant locations
• $10B+ annual revenue
IT Environment• 10-year relationship with one vendor
• Two distinct networks
• Six data centers
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.14
Summary
• Up to 93% configuration reduction• Highly scalable and resilient• Carrier agnostic connectivity• Zero-touch automation with HP IMC
Simplify secure WAN connectivity with HP DVPN solution
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Thank you