Guardian PRODUCT BRIEF. Introduction. ... a suite of OAM&P NetApps

Transcription

1 PRODUCT BRIEF Guardian... a suite of OAM&P NetApps NetKit Solutions NetApps, include a range of OAM&P application solutions to enhance the effectiveness of the SmartNet ACP platforms in Operational Support Systems and Point-of-Service transactions environments. The following Application Servers are packaged under the product name GUARDIAN; Logon Server an Authentication and Authorization System Mnemonic Server an X.28 Commands and X.121 Address Resolution System CLID Server Call Interdiction Server for screening incoming ISDN calls using the Caller ID number CDR Server a Call Detail Records Collection System Route Server WAN & LAN routes selection, CUG validation, Call Redirection and X.121 to IP Address resolution (XOT). Transaction Monitor Provides Graphical views of node activity Introduction GUARDIAN is implemented as a Windows 2000/XP Server applications underpinned by a Web interface for universal access and ease of use. GUARDIAN leverages the Erlang/ OTP middleware enabling the system administrator to deploy mirrored systems to provide 24x7 services for mission critical networks. GUARDIAN uses the RADIUS Access-request Attributes mechanism and Vendor Specific Attributes to communicate with the ACP and Nevada communication platforms. Inherent to the software environment of both platforms is a RAD (RADIUS) component that allows the other platform s software components to exploit the GUARDIAN server to perform services such as: o Authenticating Asynchronous, Telnet, SSH & PPP connections o Retrieving user network access attributes o Authorizing access to the platforms administrative components. o Authorizing access to the network and or services provided by the platform o Granting different levels of access privileges when accessing the administrative components. o Authenticating Caller ID o Performing Mnemonics Resolution o Performing IP Address lookup for routing X.25 calls over an IP network. o Performing Closed User Group Validation 1 of 5

2 LOGON SERVER The LOGON SERVER application allows network administrator to centralize the authentication, validation and authorization for users to: access the network via the ACP and Nevada nodes., and to to access ACP and Nevada system resources. The Server allows the requesting node to: o Authenticating Asynchronous, Telnet, SSH & PPP connections by verifying that the user ID & password provided are valid o Validate that the user is allowed to access the network through that node o Authorize access to the nodes administrative components. o Grant users different levels of access privileges when accessing the administrative components. o Authorize access to the network and or services provided by the platform o Retrieve predefined user s network access attributes MNEMONIC SERVER This Application may be used by the ACP to parse mnemonics entered by a user connected to its ITI or a Telnet client services. A mnemonic is a character string used in lieu of a standard X.28 command string. Instead of typing the long form or the cryptic standard X.28 command, the user types a mnemonic which can be resolved by the MNEMONIC SERVER. This Application allows network administrators to centralize the authentication and decoding of Mnemonics by defining the value of the allowed Mnemonics and on which node they might be used. CLID SERVER This Application allows network administrators to centralize Caller ID screening for ISDN calls into a Nevada platform, by defining which Nevada can accept which Caller ID. The Server allows the requesting Nevada node to screen incoming ISDN calls for approved E.164 Calling Number. If the E.164 number provided by the ISDN network is not allowed to be used on the requesting Nevada, Nevada is instructed to reject the call from the network CDR SERVER This application collects and stores audit trail information and network transaction related information as Call Detail Records. When enabled, the ACP and Nevada Protocol components generate statistical and accounting type data about network sessions capturing such information as duration, destination address and volume of data transacted over the network. In addition and when enabled, the ACP and Nevada administrative components also generate statistical data providing the administrator with valuable information about who accessed which management service and when. Call Details Records are automatically transmitted by the ACP and the Nevada components when enabled. The Server collects the CDRs only from the authorized nodes. To optimize storage, the CDR server web interface allows the administrator to specify which CDR fields must be retained. 2 of 5

3 The CDR Server provides two methods for storing the collected CDRs. The standard method is to store them as CSV records for post processing by the user. As an option, the server may store the CDR records in an SQL table. ROUTE SERVER The X.25 Route Server may be used in network topologies where ACP nodes are deployed as an access and aggregation layer around two fully functional networks; a legacy X.25 network and an IP network. The Server assumes that every ACP connected to either or both networks can reach every other ACP node connected to the same network. In such topology the Route Server serves many roles: Provides a centralized NETMAP & NETROUTE service to centralize the configuration of the ACP NETMAP & NETROUTE files Provides Closed User Group (CUG) validation and remapping network wide. Provides X.121 to IP address resolution to support routing X.25 traffic over IP networks using XOT protocol Network Migration Migrating X.25 traffic over an IP network is typically carried out in a phase-in and not in a flash-cut scenario. To effect such orderly migration, the Server allows devices and users attached to the ACP to access their destinations, throughout the migration process, via both the IP and the X.25 backbone, without interruption and without explicit knowledge of the transport medium. Thus an ACP is expected to continue to use the existing X25 network when it can not establish a path via the IP network. Acknowledging such a requirement, the ROUTE SERVER plays a pivotal role in enabling the ACP router to use either of the two networks to complete the X.25 session transparently to the end user and irrespective of the degree of build up and readiness of the IP network. Leveraging the ACP alternate routing algorithms, the ROUTE SERVER provides the necessary information to allow the ACP to determine how best to reach its destination. Provisioning The XOT server supports extensive address masks allowing the administrator to quickly define the X.121 to IP address mapping without the need to define possibly thousands of X.121 addresses that may be supported by the legacy X.25 network. Redundancy By deploying the XOT SERVER in conjunction with ACP access routers, the network administrator is able to provision the desired level of network and equipment redundancy. At the Server level, the ACP router may be configured to use one multiple ROUTE SERVERs ensuring at all times the availability of the address resolution service. At the network level, the ROUTE SERVER address resolution algorithm supports the definition of X121-to-multiple- IP address mapping. By extending the address query protocol and enhancing the XOT implementation in the ACP router to support alternate TCP/IP sessions, the ACP automatically uses one or more alternate IP address (es) in the event that it can not complete the TCP/IP session to the primary XOT destination. 3 of 5

4 Security Network security is enforced by restricting the address resolution service to pre-identified ACP routers. Address query and response messages are authenticated to ensure that the Server provides information only to authorized ACP routers and in turn to allow the ACP to ascertain that the information is provided by the authorized Server. Traffic Shaping The XOT SERVER may also be provisioned to provide IP address mapping based on the originating ACP identity allowing the network administrator a greater degree of control over traffic distribution TRANSACTION MONITOR Transaction Monitor The Transaction Monitor collects and depicts via a graphical interface all the transactions handled by the nodes. Hourly/Daily/Weekly/Monthly graphs may be displayed providing a real time view of both accepted and rejected transactions handled by the each node. All Logon Server requests, Mnemonic resolution requests and XOT address resolution requests are grouped together when rendering the graphs. 4 of 5

5 NetKit Solutions is a provider of network products for applications spanning the Transaction and Operational Support Systems markets. Over 75,000 ACP nodes have been deployed worldwide by telecommunication service providers and enterprises to interconnect remote locations and Central Offices to improve resiliency and to resolve challenging protocol mediation problems. NetKit Solutions, LLC 847 Rancho Conejo Blvd Thousand Oaks, CA U.S.A. Tel: Fax: NetKit Solutions UK Ltd 9B Basepoint Enterprise Centre Stroudley Road, Basingstoke HANTS, RG24 8UP, UK Tel: +44 (0) Fax: +44 (0) Form Number PBGUARDIAN-01C 5 of 5