Nokia VPN Solutions

The Nokia VPN Gateway represents an entirely new class of VPN products. Enabled by patented IP Clustering technology, these proven, standards-based VPN gateways effectively eliminate any single point of failure and allow the Enterprise to confidently and cost effectively leverage the Internet when connecting corporate and remote resources.


The product line is targeted at Global 2000
environments. In particular the Nokia CC500 VPN Gateway is typically deployed at smaller locations on the perimeter of a Global 2000 network. By comparison, the Nokia CC5200 VPN Gateway typically operates in the enterprise data center and the Nokia CC2500 VPN Gateway is typically deployed in regional offices or the facilities of an e-commerce business partner.

IP Clustering
A cluster of individual Nokia VPN Gateway devices acts as a single network device by sharing a common IP address and by sharing state between themselves. This enables the transparent distribution of IP packet flows between individual members of the cluster, allowing the cluster as a whole to continue performing even if one or more individual members become unavailable.

Active Session Failover for IP Services (routing, IPSec, IKE, TCP, PPTP and L2TP)
Nokia’s patented Active Session Failover™ technology retains all existing sessions in the event that any gateway in a cluster becomes unavailable due to upgrade, maintenance, or even disaster. The cluster will automatically reassign the active sessions among the remaining nodes with no disruption in service. For example, IPSec Security Associations (SA) are securely shared across the cluster, avoiding costly re-keying and or reauthentication. This allows enterprise mission-critical communications (required by Global 2000 enterprises) to occur on a 24 x 7 basis.

Dynamic Load Balancing
In order to grow the capacity of a particular cluster, the user simply stacks another gateway onto the original cluster and powers it up. The cluster will recognize the presence of the new member and assign it a proportionate amount of work. Thus multiple CC500s provide excellent scalability.

Zero Downtime Maintenance
Individual VPN gateways can be removed from the cluster for gateway and kernel upgrades without affecting the availability of the cluster, again maintaining 24 x 7 operations

Source : www.mypc.at

Download Manual Book