Huawei esight IPSec VPN Promotional Theme Slides. Version: V1.0 ( )

Transcription

1 Huawei esight Promotional Theme Slides Version: V1.0 ( )

2 Agenda 1 Network Management Click to add Challenges Title 2 Huawei esight IPSec Click VPN Management to add Title Solution 3 Competition Analysis 4 Success Stories Click to add Title Click to add Title HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 2

3 Management Challenges There are too many configuration parameters and commands, making troubleshooting difficult. How can I simplify routine maintenance? Do VPN tunnels work properly? How can I rapidly detect network service interruption? How can I monitor IPSec network operation? How can I rapidly locate VPN device faults? How to implement visualized management for complicated VPNs to improve O&M efficiency? HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 3

4 Huawei esight Management Features 1 2 Intelligent automatic discovery to avoid complicated networking Automatically discovers IPSec services and identifies networking. Rapidly classifies networks. Monitoring helping O&M One-click locating faults Visualized service monitoring 1 2 Provides a graphical interface to monitor service traffic. Provides brief information to directly display service operation conditions on the entire network. Uses lists to monitor VPN tunnel operating status and key information, such as alarms, in multiple dimensions. 3 Provides various topology operations, association between topologies and alarms, and association between alarms and service lists to directly display service faults. 1 2 One-click rapid fault locating Locates network faults through one click. Provides accurate service fault causes. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 4

5 Agenda 1 Network Management Click to add Challenges Title 2 Huawei esight IPSec Click VPN Management to add Title Solution 3 Competition Analysis 4 Success Stories Click to add Title Click to add Title HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 5

6 Huawei esight Management Solution Use commands or an intelligent configuration tool to deploy services on the network. Deploy Provide one-click fault diagnosis to help rapidly locate service faults. Diagnose Discover Discover deployed services to the esight for monitoring. Use the brief information pages to help users understand O&M conditions. Query Monitor Use service lists and topologies to monitor VPN performance, service alarms, and link quality in a centralized manner. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 6

7 Intelligent Configuration Tool Deploying Services in Batches 1 Use a template to configure IPSec service parameters to reduce repeated operations. 2 Deploy services in batches to accelerate service deployment. 3 View historical operation records and results. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 7

8 Intelligent Automatic Discovery Enabling Visualized Service Monitoring 1 Manage services through simple operations. Headquarters esight IPSec VPN management Internet Level-1 branches External branches 2 View service topologies and networking. Level-2 branches A fault occurs. 3 After automatic discovery is complete, the service list shows discovered VPN services. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 8

9 Service Performance Monitoring Improving O&M Efficiency Key indicators monitored by IPSec O&M Monitoring Indicator Sending and receiving byte and packet rates of all IPSec tunnels Purpose Capacity expansion prewarning Performance task establishment: establish performance collection tasks and set thresholds for key indicators. Sending and receiving byte and packet rates of a single IPSec tunnel Packet loss ratios in the sending and receiving directions of all IPSec tunnels Packet loss ratios in the sending and receiving directions of a single IPSec tunnel Incoming and outgoing traffic rates on an interface User behavior analysis IPSec service operation quality analysis on the device IPSec service operation quality analysis on the tunnel Capacity expansion prewarning Alarm monitoring: monitor thresholdexceeding alarms and device alarms. Real-time performance query: view details on the real-time performance query page. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 9

10 Network-wide Service Information Overview Helping Rapidly Understand Network Operation Conditions VPN management statistics: visually display network status in terms of physical device type, alarm, service status. Visual display: histograms and pie charts show network operation quality, helping rapidly identify potential network problems. Support Tooltip to prompt detailed information. Support the customization of DashBoard display content. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 10

11 One-click Fault Diagnosis Helping Rapidly Locate Service Faults External branches 1 View service interruption causes on the alarm page. Headquarters esight management Internet Level-1 branches 2 Fault diagnosis helps rapidly analyze service negotiation failure causes. Level-2 branches A fault occurs. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 11

12 Agenda 1 Network Management Click to add Challenges Title 2 Huawei esight IPSec Click VPN Management to add Title Solution 3 Competition Analysis 4 Success Stories Click to add Title Click to add Title HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 12

13 Competition Analysis: Huawei vs. Cisco Function Huawei Cisco Beating Policies Avoiding Points Dominant Bidding Items Service deployment Service discovery Service monitoring Supports end-to-end deployment using an intelligent configuration tool. Identifies service networking types and supports IPSec service discovery in diversified networking. Supports third-party interconnection service discovery and the management of Huawei device-side services. Supports tunnel information query, the query of currently matched protection rules, and tunnel up and down records. Supports the query of outgoing encrypted service traffic and the packet loss ratio. Provides predeployment/deployment capabilities. Supports service planning and deployment on the GUI. Supports service planning using topologies. Requires networking type selection before service discovery. Supports service discovery by importing a configuration file. Services to be discovered do not need to be added to the CSM in advance. Supports the query of outgoing encrypted service traffic and the packet loss ratio. Emphasize flexible configuration and support for VPN deployment on diversified networking. Huawei esight supports network-wide service discovery without networking type selection. Huawei uses a unified platform to display service status and faults. CSM uses the additional integration tool, Event Viewer. Cisco provides pre-deployment/deployment capabilities. Huawei does not provide service deployment on a GUI. Configuration procedure on Cisco CSM is complicated. In addition, using a GUI for batch service deployment is inconvenient. For personnel familiar with services, intelligent configuration is flexible for batch service deployment. Huawei esight supports third-party interconnection service discovery and the management of Huawei device-side services, but does not support service restoration by importing a configuration file. Automatic discovery of networkwide services, including thirdparty interconnection services Integration of VPN management and basic network management Alarm and performance query on VPN topologies Service diagnosis Supports the check of configuration integrity, interface operating status, service binding status, encrypted data matching, route reachability, and service negotiation. Does not support service diagnosis. Cisco does not support IPSec service diagnostic tools. The service fault diagnosis function helps locate network faults and allows you to query negotiation failure causes. Service topology Displays service topology networking and supports service status query, service alarm monitoring, and service performance display on the topology. Supports service topology planning. Does not support service status display on the topology. Emphasize service status displayed on the service topology and association among performance, alarms, and service status. Huawei esight does not support service topology planning, but service status can be monitored based on the service topology. Alarm and performance query on VPN topologies HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 13

14 Competition Analysis: Huawei vs. H3C Function Huawei H3C Beating Policies Avoiding Points Dominant Bidding Items Service deployment Supports end-to-end deployment using an intelligent configuration tool. Supports service deployment on a GUI. Supports only the Hub-Spoke networking (policy template). Emphasize that the intelligent configuration tool is more flexible for batch service deployment and applies to more scenarios. Huawei does not provide a GUI to deploy services. Using a GUI for batch service deployment is inconvenient due to complicated operations. For personnel familiar with services, intelligent configuration is flexible for batch service deployment. Automatic discovery Identifies service networking types and supports IPSec service discovery in diversified networking. Supports third-party interconnection service discovery and the management of Huawei deviceside services. Does not support service restoration. The NMS is seldom used for service deployment on VPNs with dial-up branches. Instead, a USB storage device is used or the configuration file is copied for service deployment. H3C imc cannot discover existing NEs for monitoring. If tunnels have been configuration on NEs before the imc is deployed, these tunnels cannot be managed as current tunnels or historical tunnels or displayed in the topology for monitoring. service restoration Service monitoring Supports tunnel information query, the query of currently matched protection rules, and tunnel up and down records. Supports the query of outgoing encrypted service traffic and the packet loss ratio. Supports VPN tunnel traffic monitoring and top N monitoring reports. Huawei esight provides accurate alarms for negotiation failures. Service diagnosis Supports the check of configuration integrity, interface operating status, service binding status, encrypted data matching, route reachability, and service negotiation. Not supported H3C does not support IPSec service diagnostic tools. Negotiation failure cause query Service topology Displays service topology networking and supports service status query, service alarm monitoring, and service performance display on the topology. Provides similar functions as Huawei. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 14

15 Agenda 1 Network Management Click to add Challenges Title 2 Huawei esight IPSec Click VPN Management to add Title Solution 3 Competition Analysis Click to add Title 4 Success Stories Click to add Title HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 15

16 Assisting PetroChina Jiangsu Efficiently Managing Petrol Stations Headquarters H3C F1000E Current Situations: There are many scattered petrol stations, making management difficult. VPN operating status cannot be monitored. Internal network of the provincial company USG5000 Core switch of the provincial company Internet VPN management component [Unified Management] Automatically discover USGs in cities to the VPN management component. Divide the entire network into subnets, so that each city administrator understands the operating status of devices in the city. Assign city-based permissions to city administrators to ensure that a city administrator can manage only the devices in the city, improving information security. Carrier egress City Petrol station network USG2000 ADSL modem A total of 500 petrol stations [Centralized Monitoring] The health status of 500 VPN tunnels is monitored in real time. Statistics about top N devices based on offline alarms and offline durations are provided. HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 16

17 Ensuring Timely Business Data Transmission for KFC Malaysia Background: In 2010, the global restaurant chain giant KFC established a network in Malaysia to transmit business data. KFC employs advanced management, emphasizes efficiency, has high requirements for the degree of information, and requires a high level of confidentiality of commercial data. O&M Values: In numerous KFC stores nationwide, devices are configured and VPNs are managed in a centralized manner, improving management efficiency. O&M personnel understand network conditions in real time and analyze network operating pressures based on multiple types of data. Added Commercial Values: Commercial information data is seamlessly integrated to reduce management costs (equal to increasing profits). Complete VPN management secures trade secrets and increases competitiveness in the industry. 4,000 3,000 2,000 1, % 1.20% The esight can efficiently resolve 81% of network management problems. 1.24% 1.27% 1.30% 2008 年 2009 年 2010 年 2011 年 2012 年 2013 年 % HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 17

18 KFC Project Networking 3G backup network VPN management component FTP server Mail server Properly running VPN [Secure and Reliable Monitoring] Encrypted data transmission on the 3G network guarantees data reliability. The VPN management component connects to each KFC store through a VPN tunnel to manage and monitor encrypted data transmission. The entire network is visualized and reliable. If a fault occurs, the esight sends an or a short message to rapidly notify the administrator. The automated management reduces costs and improves O&M efficiency. USG5000 Internet IPSec VPN Services are switched to the 3G network if the VPN fails. 3G The fault is rectified. A switchover occurs due to a fault. USG kbit/s 1 Mbit/s CIMB Bank TELEKOM IP VPN KFC stores are interconnected with the bank over a Telekom VPN. [Centralized VPN Management] The USGs in more than 300 KFC stores are discovered to the esight for unified management. The centralized configuration function helps deliver configuration to all devices at a time. The VPN management component at the headquarters monitors the running of all VPNs nationwide. Malaysia has 300 to 400 KFC stores. PC POS machine Credit Card Terminal HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 18

19 Providing a Security Network Solution for Polish Ministry of the Interior Background: GDC1 GDC2 Ministry of the Interior needs redundant and secure tunnels for communication. More than 500 branches need to connect to the headquarters. Solution: Deploy two Eudemong1000Es at the headquarters as the IPSec center. Deploy a Eudemon200E-X1 in each branch to communicate with the headquarters through a site-to-site. Use PKI for authentication. Install the VPN management component for VPN management. DC VPN gateway aggregation Internet VPN gateway aggregation VPN management component VPN tunnel IPSec encryption O&M Values: Centralized VPN management for massive branches improves management efficiency. O&M personnel understand network conditions in real time and analyze network operating pressures based on multiple types of data. E200E-X E200E-X E200E-X Branch1 Branch2 Branch3 HUAWEI TECHNOLOGIES CO., LTD. Huawei Confidential Page 19

20 HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY