An ADTRAN White Paper

VPN–Extending ADTRAN’s
Traditional WAN Solutions

Michael Lamy
Chief System Architect
ADTRAN Enterprise Networks Division
VPN–Extending ADTRAN’s
Traditional WAN Solutions
Michael Lamy
Chief System Architect
ADTRAN Enterprise Networks Division
Introduction
Virtual Private Network technology is gaining in popularity as
more and more companies begin to realize the benefits VPNs
offer. VPNs represent the next step in enterprise network technol-
ogy. Just as frame relay is a more cost-effective alternative to
private lines for many users, VPNs once again reduce costs for
wide-area networking.
VPNs allow enterprises to carve secure IP-based tunnels through
the public Internet and use them to transport traffic safely and
securely among sites, whether branch offices or customer and
supplier locations. Enterprises can thus expand communication
capabilities while keeping costs under control using low-cost
Internet connections to connect remote sites.
According to IDC, the market for IP VPN equipment is projected
to reach $7.5 billion in 2005, up from $2.3 billion in 2000. These
numbers indicate market maturity and show that VPNs are a
proven technology, as opposed to one that merely shows promise.
VPNs are at that stage in the technology life cycle where it is most
favorable for enterprises and vendors alike to begin taking advan-
tage. Early in the cycle, production costs are high due to difficulties
in the manufacturing process and the wait for demand to develop.
As markets mature and demand rises, manufacturers produce in
larger quantities, thus lowering costs
2 • Introducing the ADTRAN NetVanta VPN Family
An Enterprise Lineup
ADTRAN has a history of entering new markets when conditions
are favorable. True to its history, ADTRAN entered the VPN
market at a time when it can produce low-cost, reliable equipment
in large quantities. Since 1986, ADTRAN has been supplying
carriers and enterprises with local loop access and deployment
products that terminate all major network technologies including
fiber, DS3, T1/E1, digital subscriber line, frame relay, and many
others. ADTRAN is known for supplying quality products that are
both reliable and responsibly priced. This reputation has been
further strengthened by ADTRAN’s industry-leading five-year
warranty on all its enterprise products.
ADTRAN is delivering a full line of VPN/Security products intend-
ed to meet a range of enterprise and small business requirements.
Members of the NetVanta 2000 Series of VPN/Security gateways
address requirements for large corporate host locations, mid-size
branch offices, and small office/home office applications. The Series
is complemented by the NetVanta VPN Client, a software-based
VPN with a personal firewall for laptops and personal computers,
allowing for secure remote access to the corporate network.
All the products support VPN tunneling based on the IPSec
standard, which promotes interoperability with other vendors’
VPN products. The NetVanta 2000 Series has been certified by
the VPN Consortium, a leading industry authority on VPNs. This
certification testifies to NetVanta’s interoperability with other
leading VPN products (see www.vpnc.org).
To address the range of enterprise requirements, ADTRAN is
delivering four models of the NetVanta VPN/Security appliance
along with client software:
■ NetVanta 2050 is a home office appliance that supports 10
users and up to five VPN tunnels through the Internet to
remote locations. It is intended for deployment in environ-
ments where telecommuters need only to initiate connections
to the enterprise VPN.
 ■ NetVanta 2100 is a small office VPN/Security gateway A History of Value
supporting unlimited users and up to 10 VPN tunnels. Like all ADTRAN products, members of the NetVanta 2000 Series
It is a standalone device that off-loads the CPU-intensive of VPN/Security gateways come with an industry-leading five-
encryption process from local computers. year warranty and best-in-class service and support. ADTRAN
provides a base level of support to all customers, free of charge,
■ NetVanta 2300 is a branch-office or mid-size host model that
including unlimited toll-free telephone support. Under the
supports up to 100 VPN tunnels. It likewise offloads encryp-
ADTRAN Custom Extended Services (ACES) program, customers
tion processing and includes an encryption accelerator to
can also choose from more advanced installation and maintenance
further speed processing. A DMZ port enables users to attach
options, ranging from next business day to four-hour response.
public servers, such as Web servers, that require different
firewall policies from internal corporate servers. As ADTRAN moves into the VPN arena, it brings to the table
the same qualities that have made it a market leader in the
■ NetVanta 2400 is the high-end model intended as a large
telecommunications equipment market. ADTRAN puts a
corporate host gateway. It supports 1,000 VPN tunnels
premium on reliability and value, and has a 16-year-track record
along with all the same functionality as the NetVanta 2300,
to back it up. With its established and loyal distribution channels
including the encryption accelerator and DMZ port.
and finely tuned service and support organization, you can be sure
■ NetVanta VPN Client is a software solution for the mobile ADTRAN will stand behind its VPN products over the long haul.
user that runs on PCs and laptops, enabling them to establish
VPN tunnels with any NetVanta VPN gateway. It includes a
personal firewall that protects the user’s machine whenever it
is connected to the Internet, even if it is not connected to the
corporate VPN.
Besides the VPN functionality, the NetVanta VPN/Security
appliances also support a built-in stateful inspection firewall, IP
router and Network Address Translation (NAT). Stateful inspec-
tion firewalls identify packet sequences that are out of the norm
and block those packets from reaching the corporate network,
without bogging down performance by examining each packet in
the stream. The IP router supports Routing Information Protocol
(RIP) versions 1 and 2, providing a built-in routing option that
can benefit many small enterprises and home offices. Support for
NAT enables users to present a single IP address to the public
Internet while masking its private IP addresses.
Having all these features tightly integrated in a single appliance
makes it easy for enterprises to securely extend their networks
over low-cost public IP networks. Additionally, the devices can
be configured remotely from a central location using a standard
Web browser.

An ADTRAN White Paper • 3

 About ADTRAN
ADTRAN, Inc. is an established supplier of advanced
transmission products for today’s expansive telecommu-
nications networks. Widely deployed in carrier, CLEC,
enterprise, and global networks worldwide, ADTRAN
products support all major digital technologies including
fiber, T3, T1, E1, wireless T1/E1, ATM, Frame Relay,
VPN, SHDSL, SDSL, HDSL, HDSL2, ISDN, and DDS.
According to Gartner/Dataquest and IDC, ADTRAN
has gained the leading market position in enterprise
integrated access devices and HDSL, while maintaining
its leadership position for the fourth year in a row in T1
and subrate DSU/CSUs, Frame Relay/DDS extension,
and ISDN extension. ADTRAN equipment serves the
major Incumbent Local Exchange Carriers, interexchange
carriers, ISPs, Competitive Local Exchange Carriers,
international service providers, public and private
enterprises, and original equipment manufacturers.

ADTRAN, Inc.
901 Explorer Boulevard
Huntsville, Alabama 35806
P.O. Box 140000
Huntsville, Alabama 35814-4000

800 9ADTRAN 256 963-8000 voice

256 963-8004 fax
256 963-8200 fax back
info@adtran.com e-mail
www.adtran.com web site

ADTRAN is an ISO 9001 registered company. Copyright © 2003 ADTRAN, Inc. All rights reserved. ADTRAN is a registered trademark
of ADTRAN, Inc. All other trademarks and registered trademarks are the property of
their respective owners.
EN415A

ADTRAN is a TL 9000 registered company.