OmniAccess 780 Unified Services Gateway
The Alcatel-Lucent OmniAccess 780 Unified Services Gateway (USG) is an integrated networking device specifically designed for the regional or branch office with a streamli ned form factor and support for a comprehensi ve set of interfaces. The OmniAccess 780 USG has six interface slots and supports a mix and match of interface types (see below).
The OmniAccess 780 USG is targeted to enterprise branch offices and campus gateways for applications and services that require the built-in resiliency and redundancy that the OmniAccess 780 offers. The OmniAccess 780 USG provides multiple services on one platform (Ethernet switching, IP routing, VoIP,video) to reduce the cost and complexity of the WAN access network infrastructure and allows new services to be implemented quickly and easily.
FEA TU RE S |
|
B ENE FIT S |
•Integrates multiple services onto one platform
•Embedded encryption acceler ator and an integr at ed dig it al signa l processor for voice call processing
•Choice of optional interfaces
•Remote management
•Modular software design - ModuLive
•OnePass packet processing
•LifeLIne management framework
•Eliminat es mult iple devic es and provides the same services on one unified, resilient, lowcost, small footprint platform
•Serves all IP communications needs of sma ll enter prise branch off ices and the service provide customer edge
•Supports a wide range of connectivity requirements
•Eliminat es the need for onsit e intervention
•Seamless addition of modules with no impact on other services in operation
•Provides true service unification and saves CPU resources while minimizing latency through the system
•Ensures management traffic reaches the system 100% of the time
The Omni Access 780 USG offe rs superior high availabil ity for a region al or branch site, along with comprehensive remote management by leveraging a highly modular system design and innovative management architect ure. The OmniAcc ess 780 USG also integrates critical security featu res such as firewall, denial of service (DoS) protection, application level gateways, intrusion detecti on and preven tion, and IPSec virtual priva te networ k (VPN), onto one unified platform .
With a separate management plane, dedicated management processors, and multiple access mechanisms to reac h the syste m, Alcatel -Lucent's Lifeline man agem ent fra mew ork allows highly resilient remote system administration, independent of the st ate of the syst em . Al l ser vi ces provided by the OmniAccess 780 can be managed remotely,thereby eliminating the need for on-site intervention.
The Alcatel-Lucent ModuLive software platform pr ov ide s a ful ly mod ul ar, alwa ys liv e sof twa re ba se tha t
maximiz es system availa bility by enablin g in -service upgrades and configuration changes, and by ensuring that a fault in one service modul e has minimal or no impact on other serv ices . It also allows for online insertion and removal of line cards, obviat ing th e need fo r ne tw ork outages during hardware upgrades. As multiple services are added, scalability and per fo rm an ce ar e ma in ta in ed th ro ugh Alc atel -Lu ce nt's un iqu e OnePass approach, which performs common packet classification across multiple services.
TE CHN I CAL |
SPECIFICAT |
IONS |
Hardware
•Module slots: 6 interface slots
•Interface cards
¬8-port 10/100/1000 Mbps Ethernet
¬4-port T1/E1
¬4-port serial (V.35/X.21)
•Services engine (SE): 2-port 10/100/1000 Mbps Ethernet (built-in)
•Hot swappable line cards
•RAM (default/max) : 512 MB/1 GB
•FLASH memory: 512 MB
Routing
•Static routes
•RIP v1/v2 dynamic routing
•OSPF/BGP dynamic routing
•Multicast routing – PIM
•IGMP (v1, v2)
•GRE tunnels
•VRRP
•Policy-based routing
•Packet forward rate (64 byte pkts): 930 kpps *
•Forwarding performance: 2Gbps *
•Max. number of BGP peers: 200 **
•Max. number of VLANs: 4096 **
Firewall
•Stateful packet inspection and filtering (ACL)
•NAT (Source and Destination NAT)
•DoS and DDoS protection
•Protocol anomaly: IP,TCP, UDP
•ALGs: TFTP, FTP, NFS, DNS, RTSP, SIP, DHCP, UA/NOE
•Common classification for all services
•Firewall performance: 2 Gbps *
•Concurrent sessions: 128,000 *
Quality of service
•L3/4 traffic policy definition
•Interface egress queues: 16 queues per interface
•Priority scheduling
•Weighted fair queuing
•Class-based queuing
•Hierarchical queuing: Up to 4 levels
•Ingress policing
•Egress shaping
•DSCP/TOS marking
•WRED
•DiffServ: RFC 3246, 2597, 2445
VPN (IPSec)
•Site-to-site VPN tunnels: Up to 1500 **
•Tunnel interfaces
•DES (56 bit), 3DES (168 bit), and AES (128, 192, 256 bit) encryptions
•MD-5 and SHA-1 authentication
•IKE with pre-shared key or PKI
•Perfect forward secrecy (DH groups): 1, 2, 5
•IPSec NAT traversal
•AES performance: 180 Mbps *
•Max. concurrent VPN tunnels: 1500 **
Intrusion detection/intrusion prevention
•Detection mode
•Prevention mode
•Automatic signature updates
•Group-based IDS/IPS: Priority/protocol/ intrusion type
WAN protocols
•PPP
•MLPPP
•Frame relay
•MLFR
•HDLC
•PAP/CHAP Authentication
LAN protocols
•STP
•Bridging
•IEEE 802.1Q VLANs
•Per-VLAN STP (PVST+)
•IRB (Integrated Routing and Bridging)
Network services
•DHCP relay/server
•DNS client
•TFTP server/client
•FTP client
•ssh server/client
•HTTP server
•Transparent Firewall
VoIP Support
•SIP / NOE ALGs
•Priority scheduling
•Dynamic Pinholing in Firewall
•DSCP classification and marking
•TFTP Server for booting IP phones
•DHCP options for phones provisioning
* Performance numbers based on 2 GHz reference engine, capacity limits based on 512 MB RAM
** No preset limit in software. Numbers listed are verified. They could scale higher depending on services enabled.
2Alcatel-Lucent OmniAccess 780 Unified Services Gateway