An ADTRAN White Paper SMB Best Practices Guide to Making a Network Connection
Making Sense of the Options for Secure, Scalable Networks for Small and Medium Businesses Building a scalable and efficient network infrastructure is more than just the equipment installed; it s equally about the type of network, size of the pipe, and Internet connection the business needs. If you re a SMB (businesses with 100 to 999 users) and either don t have a network or lack an effective and efficient network, you re not alone. According to a recent AMI Partners report, slightly less than half of all SMBs in the United States have Local Area Networks (LANs), meaning tens of thousands of businesses have yet to implement even basic local networking. AMI reports that half of small businesses (0-99 employees) and 85 percent of midsized businesses (100-999 employees) have mobile workers who need to connect to their corporate networks. If you are researching technology solutions that will meet your network needs today and in the future, you need performance at a price you can afford. If your business isn t confined to a single site, you should seriously consider the added benefits of Internet-based telephony or Voice over IP to support a connected mobile workforce. If your business has distributed sites or branch offices, building a secure network infrastructure capable of supporting multiple sites and expanding as new ones come online is essential. Knowing the different types of network protocols and infrastructures, as well as the architectures is essential for building secure, efficient and scalable networks. This white paper will discuss the types of network topologies and equipment that can support network connectivity for your business. In addition, we ll explain the common terms and available technologies to help you make the most informed choice for your network. WANs and LANs Two common terms associated with network connections are Wide Area Networks (WANs) and LANs. WANs are networks that connect organizations across large geographies country or even citywide. WANs use public networks communications typically the Internet. They are separated from the public traffic either through leased lines or private IP address ranges. In contrast, LANs are the local networks that connect your PC to your network printer or file server, and are connected to the WAN by a border or gateway router or cable/dsl modem. Each of these network connections will use different standards or protocols for transmitting data. Deployment Planning and Implementation As a SMB, you are among the fastest growing businesses, requiring dynamic and expandable infrastructures. Building a network infrastructure should take current and future needs into consideration, including the following: n Network Capacity: How many users do you currently need to support? How many users will you need to support over the next 24 months? How much excess, unused capacity do you want to build into the network? n Branch/Remote Locations: Do you have branch offices and/or remote users? How do you plan to support them LAN to LAN or WAN? How many branch locations do you plan to add over the next 24 months? n Converged Networking: Are you current using network connections for both data and voice? Will you adopt IP-based telephony over the next 24 months? Will you adopt unified communications over the next 24 months? SMB Best Practices Guide to Making a Network Connection
n Wireless: Do your clients (PCs and notebooks) support wireless connections? Do you want wireless connectivity in your network? Will your users need mobility in your offices over the next 24 months? n Application Capacity: Does your business use Web- and server-based applications? Do you use Web-based applications such as Salesforce.com or Yahoo Mail or Google Calendar? Do you plan to adopt more bandwidth-intensive applications? n Budget/Support Costs: How much can your business afford to expend on networking equipment? Will you support your network with in-house staff or outsource to a local service provider or value added reseller? The answers to these questions will help you determine the level of investment in network infrastructure. While some SMBs may be deterred by the up front costs of network equipment, it s better to buy higher-performance and functionality in anticipation of scalability and capacity for the future, but this does not have to come with a high price tag. This makes selecting the right connectivity standard your first critical decision. Different Flavors of Network Infrastructures The list below will familiarize you with the types of WAN network connections available for your business. The most common connections are Frame Relay, ATM (asynchronous transfer mode) and MPLS (multi-protocol label switching). n Frame Relay encapsulates traffic voice and data for transmission in frames between LANs and WANs, and specifically over networks such as the Internet that have frequently changing paths. Frame Relay is an inexpensive, efficient networking technique and does not require a persistent point-to-point connection as an ATM network does. n ATM networks are cell relay, packet switching network and differ from conventional packetswitched networks such as the Internet. It s a connection-oriented technology in which logical, if not physical, connections are established between two endpoints. ATM networks have been very successful in WAN implementations, particularly in the telecommunications industry. However it has failed as a LAN technology mainly because of its complexity. n MPLS is also a packet-switching network that is gradually displacing Frame Relay because of its ability to handle multiple protocols for transmitting data over multiple network types. It was designed to unify packet-switching and circuitswitching networks, a critical development given the convergence of voice, data and video data over the same wires. MPLS adoption is being driven by the availability of high-bandwidth public networks that can support TCP/IP routing and virtual private networks (VPN) for secure communications. Also, it eliminates the need for ATM, since the availability of high-bandwidth connections eliminates the need for circuit switching. These networking types shouldn t be confused with networking capacity or speeds, such as Digital Subscribe Lines (DSL), also known as ADSL (Asynchronous DSL), cable (coaxial), T1, T3 and OC-X lines. DSL and cable are often used in home and small office implementations, and carry capacities of 3 to 5 megabytes per minute. T1 and OC-X lines SMB Best Practices Guide to Making a Network Connection
are multichannel connections that enable more traffic to flow through the connection at higher speeds. T1 or fractional T1, connections are often enough bandwidth for average SMB organizations. Cable and DSL/are among the most common forms of home Internet connections and are commonly referred to as broadband access. Cable broadband service leverages the coaxial network used to deliver cable television to residential homes and businesses. DSL technology leverages the copper-wire telephony network for Internet connectivity. DSL and cable have higher download speeds, since residential users are often more concerned with how fast they can download material from the web, like bandwidth-intensive video streams and music files; upload speeds are typically reduced, which makes the services less attractive to businesses. These services have fix channel capacity, which means speeds will vary especially during peak usage hours depending on the number of users attached to the same segment of cable. The services are typically packaged in such a way with television and telephony, that when unbundled there can be significant costs. Virtual Private Networking (VPN) is important to be able to support remote users. A VPN is not a networking protocol, but rather the encryption of packets transmitted over public or private networks. The two most common VPNs are Internet Protocol Security (IPSec) and Secure Sockets Protocol (SSL). This encryption process enables users to transmit sensitive data over public networks without the chance of snooping or better known as sniffing, or the capture/redirect of packets by unauthorized parties. IPSec is typically for persistent connections, such as network to network or client to network. This is perfect for your remote or mobile workers to connect back to your corporate network, via a standard Internet connection, while maintaining privacy and data security. Regardless of the networking type you choose, select equipment that can support both VPN forms. Once the network connectivity type is determined, you can focus on selecting the right networking products to build an efficient and scalable infrastructure to meet current and future capacity needs. Network Connectivity and Infrastructure There are several networking components needed to deploy a robust, scalable network. Each component serves a specific function to move data efficiently through the network. We won t cover all the technical details on how each component works, but you ll need an understanding why these components are in place. CSU/DSU: A Channel Service Unit/Data Service Unit (CSU/DSU) is typically a device that is supplied by your provider and is your gateway to your WAN or Internet connection. This device allows your ISP to manage your connection and is usually referred to as the demarcation point. SMB Best Practices Guide to Making a Network Connection
This is where their network stops (WAN) and yours begins (LAN). Router: An access router does as its name implies, by routing or forwarding data to the proper location. They typically connect multiple networks together, like your LAN and your WAN, and make decisions on which is the best path your data should take to get to its destination. Switch: This is a device that distributes you LAN connection to multiple devices. The size of a switch is determined by the number of devices that need network access and is typically referred to by the number of ports available (i.e.: 4-port, 8-port, 24- port, etc). If you have four computers and two network printers, then an eight-port switch is appropriate, but keep in mind that you only have two open ports available for expansion or growth. a device dedicated to the encryption process signification improves this process. Wireless Access Point (WAP): Wireless LANs (WLAN) are becoming very popular and allow mobility within the workplace. There are lots of things to consider when considering a WLAN; access speeds, wireless coverage zones, security, and authorization. Even though you might not need each and every device listed, knowing their basic functions is most important. A trend in the industry is to package these known functions together into devices, therefore cutting equipment cost, allowing your network to be managed more easily, and to help troubleshoot any possible issues. Firewall: Your WAN connection is an always on connection, therefore you must protect your network from intruders. Like your home, you will lock your front door so no intruders will enter. The same goes for your network. A Firewall is an intelligent device that acts as a security guard, monitoring traffic patterns and granting only approved traffic in or out. VPN Appliance: As described earlier, VPNs are a method to encrypt the data as its being transported across the public network. Based on the different encryption algorithms available, this process could significantly slow your network performance, hence SMB Best Practices Guide to Making a Network Connection
Implementation and Management You have several options for implementing networking equipment. While many routers and networking devices have wizards that can guide users through the installation process, installation is often more complex given the unique requirements of each business. Additionally, migrating from a legacy platform isn t trivial. Implementation should only be done by certified networking professionals. Local resources Certified value-added resellers (VARs), integrators and solution providers are often the best source for purchasing, deploying and maintaining networking equipment. VARs have the training, resources and expedited vendor support to install equipment, but to also customize and configure networking equipment to a business unique operating needs. SMBs with intensive network- and Web-based applications will want optimized networks for optimal application performance something that s often only achievable by an authorized VAR. VARs, which tend to be located in your local area, are often a source of ongoing maintenance and support for SMB networks, providing faster expert service than even the manufacturer. Additionally, many VARs and Internet Service Providers (ISPs) are offering managed services that remotely monitor and administer network devices. Most network devices all-in-one devices, routers, switches, firewalls are capable of remote managed services. Managed services give SMBs a predictable cost alternative to in-house IT staff and are particularly attractive to organizations that have limited IT resources. ADTRAN Solutions for Networking Many vendors offer networking equipment, but only ADTRAN provides the best mix of functionality, performance and cost-effectiveness to meet the needs of small- to midsized businesses. With ADTRAN s award-winning and innovative NetVanta switches, routers, switch-routers, VPN solutions, wireless access points and IP-telephony products, it s easy to find a quality solution that s perfect for your specific network needs. SMB Best Practices Guide to Making a Network Connection
Simple, Reliable and Affordable ADTRAN provides all-in-one solutions that deliver the most for your network investment. This product portfolio offers a breadth of solutions tailored to the specific needs of small and medium-sized businesses. These products are backed by an industry-leading five year warranty, and best-in-class telephone technical support from a team of degreed engineers. These innovative products are recognized within the industry as being easy to install, use and maintain and can greatly reduce the total cost of ownership of your installation. For more information on the NetVanta series and other ADTRAN products for growing networks, go to www.adtran.com/ecatalog. ADTRAN products are available through a nationwide network of authorized value-added resellers. To find a reseller near you, go to: www.adtran.com/wheretobuy or e-mail channel.sales@adtran.com This portfolio of internetworking solutions include high-performance IP routers; fast Ethernet, Gigabit and PoE switches; firewalls; VPNs appliances, wireless access points; and a unique industry concept that integrates these multiple networking functions into a compact, all-in-one platform for your business. SMB Best Practices Guide to Making a Network Connection
ADTRAN, Inc. Attn: Enterprise Networks 901 Explorer Boulevard Huntsville, AL 35806 P.O. Box 140000 Huntsville, AL 35814-4000 256 963-8000 voice 256 963-8699 fax General Information 800 9ADTRAN info@adtran.com www.adtran.com Pre-Sales Technical Support 800 615-1176 toll-free application.engineer@adtran.com www.adtran.com/support About ADTRAN ADTRAN, Inc. is a leading global provider of networking and communications equipment, with a portfolio of more than 1,600 solutions for use in the last mile of today s telecommunications networks. Widely deployed by carriers and enterprises alike, ADTRAN solutions enable voice, data, video, and Internet communications across copper, fiber, and wireless network infrastructures. ADTRAN solutions are currently in use by every major U.S. service provider and many global ones, as well as by thousands of public, private and governmental organizations worldwide. Where to Buy 877 280-8416 toll-free channel.sales@adtran.com www.adtran.com/where2buy Post-Sales Technical Support 888 423-8726 support@adtran.com www.adtran.com/support ACES Installation & Maintenance Service 888 874-ACES aces@adtran.com www.adtran.com/support International Inquiries 256 963 8000 voice 256 963-6300 fax international@adtran.com www.adtran.com/international For the regional office nearest you, visit: www.adtran.com/regional 800 9ADTRAN ADTRAN, Inc. 901 Explorer Boulevard Huntsville, Alabama 35806 P.O. Box 140000 Huntsville, Alabama 35814-4000 256 963-8000 256 963-8004 fax info@adtran.com e-mail www.adtran.com Web site ADTRAN believes the information in this publication to be accurate as of publication date, and is not responsible for error. Specifications subject to change without notice. ADTRAN and NetVanta are registered trademarks of ADTRAN, Inc. and its affiliates in the U.S. and certain other countries. All other trademarks mentioned in this document are the property of their respective owners. Five-year warranty applies only to products sold in North America. ADTRAN products may be subject to U.S. export controls and other trade restrictions. Any export, re-export, or transfer of the products contrary to law is prohibited. For more information regarding ADTRAN s export license, please visit www.adtran.com/exportlicense ADTRAN is an ISO 9001, ISO 14001, and a TL 9000 certified supplier. Copyright 2007 ADTRAN, Inc. All rights reserved. EN1063A