SpeedTouch & Alcatel OmniPCXSpeedTouch & Alcatel OmniPCX

The ideal companion for The ideal companion for

Alcatel OmniPCX Alcatel OmniPCX Office Office

VPN for small remote offices & teleworkersVPN for small remote offices & teleworkers

@Home@Office

OmniPCX add-onsOmniPCX add-ons

Solution for small remote offices or teleworkers

Customers needsCustomers needs

• Customers needs– Many companies have small home/remote offices

and want to provide remote workers with a cost effective but powerful communication solution towards main office

– They have both voice & data needs in these small remote/home office

SpeedTouch answersSpeedTouch answers

• You can combine Alcatel OmniPCX Office or Alcatel OmniPCX Enterprise communication servers to have a competitive, reliable and secured solution for these small remote offices– By deploying our Business DSL routers with built-in VPN

capabilities

Solution benefitsSolution benefits

• VAR– Competitive advantage

• Integration of the small remote office in the global company communications

• Nice solution to sell to the customer• Value proposition both for voice & data through the VPN

• End-User– PBX features transparency over DSL

• The remote users have the same features than the main office users

• Secured solution with VPN and embedded firewall

– Data capabilities on top• Access to email, internet, intranet• Unified messaging

How does it fit ? How does it fit ?

Main office

PSTN

OmniPCX Office

Internet

Small remote officeteleworkers

ST600

VPNVPN

ST610 with VPN featureST610 with VPN featureor ST608or ST608

OmniPCX Office OmniPCX Office eBusiness with VPNeBusiness with VPN

IP Phone

FullFull PBX features PBX features(ex: call forwarding,(ex: call forwarding,call monitoring …)call monitoring …)

IP softphone

OmniPCX Office eBusinessOmniPCX Office eBusiness

How does it fit ? How does it fit ?

• Quality of service

– The SpeedTouch supports OmniPCX compatible advanced QoS features that enable voice packets to have high priority

• VLAN 802.1p User Priority Mapping• IP, TCP, UDP, ICMP header based packet classification, prioritization and

forwarding• IP header TOS byte / DSCP field marking• IP QoS queues instantiated per upstream interface (ATM VP/VC)• IP QoS Scheduling : Queuing between 6 classes:

Real-time queue with strict priority over all other queues 4 WFQ queues with strict priority over the best effort queue Best Effort queue. This class will use any bandwidth that is not used by the

other classes, but does not have any bandwidth guarantees.

• Bandwidth

– Required bandwidth according to OmniPCX configurations (G711, G723, or G729)

Quality of Service & Bandwidth Quality of Service & Bandwidth

What do you need ?What do you need ?

• Main Office

– Mandatory• Alcatel OmniPCX Office Business

• Alcatel OmniPCX Office eBusiness (with VPN software license)

• Internet connection

– Optional• DSL router SpeedTouch 610 (or ST608) if the previous Internet

connection is not present

• Small Remote Office/Teleworkers

– Mandatory• DSL router SpeedTouch 610 with the VPN software key (or

ST608)

• DSL connection with any ISP

• Alcatel IP phones or Alcatel IP Softphones

Differences between ST608 & ST610Differences between ST608 & ST610

• The 610 is useful if you want to do The 610 is useful if you want to do remote managementremote management of the branch-office, of the branch-office, and/or if you would like to rollout later on SIP phones with and/or if you would like to rollout later on SIP phones with local calls local calls capabilitiescapabilities

• SpeedTouch 610 vs 608 : Main differences– Remote management with SNMP MIBs– Up to 16 VPN tunnels instead of 2– Local SIP communications in the remote office (built-in SIP proxy & registrar,

call logs, call blocking)– SNTP, RIP1 & RIP2 …

Quick products Quick products overviewoverview

ST 608ST 610

SpSpeedTouch eedTouch 608(i)608(i)

• High End Business Router• Business Internet Access• LAN to LAN Interconnection• Secure Home and Teleworking

• High End Business Router• Business Internet Access• LAN to LAN Interconnection• Secure Home and Teleworking

PositioningPositioning

• Easy Installation :Set Up Wizard• Security

• Easy Installation :Set Up Wizard• Security

Key BenefitsKey Benefits

• Fastest Routing (15K Packets/Sec)• Unique support AES Encryption

and Public Key Infrastructure

• Fastest Routing (15K Packets/Sec)• Unique support AES Encryption

and Public Key Infrastructure

Optional InformationOptional Information

Key FeaturesKey Features • Enhanced Security Features• Reliability• Advanced Quality of Service

• Enhanced Security Features• Reliability• Advanced Quality of Service

Key DifferentiatorsKey Differentiators

• Embedded IP Sec (ICSA certified)• Embedded Firewall• WAN Interfaces :

o ADSL (POTS and ISDN)• 4 Port Ethernet Switch and Ethernet

• Embedded IP Sec (ICSA certified)• Embedded Firewall• WAN Interfaces :

o ADSL (POTS and ISDN)• 4 Port Ethernet Switch and Ethernet 608 (i)

SpSpeedTouch 610eedTouch 610 (i,s) (i,s)

• High End Business Router• Business Internet Access• LAN to LAN Interconnection• Secure Home and Teleworking

• High End Business Router• Business Internet Access• LAN to LAN Interconnection• Secure Home and Teleworking

PositioningPositioning

• Easy Installation :Set Up Wizard• Upselling of IP Sec/SIP via Software

Activation• Remote Management• Security

• Easy Installation :Set Up Wizard• Upselling of IP Sec/SIP via Software

Activation• Remote Management• Security

Key BenefitsKey Benefits

• Fastest Routing (15K Packets/Sec)• Unique support AES Encryption

and Public Key Infrastructure• 2 and 4 wire SHDSL

• Fastest Routing (15K Packets/Sec)• Unique support AES Encryption

and Public Key Infrastructure• 2 and 4 wire SHDSL

Optional InformationOptional Information

Key FeaturesKey Features

• Enhanced Security Features• Reliability• Remotely Manageable: Full SLA• SIP PBX (Sip Server & Registrar)• Advanced Quality of Service

• Enhanced Security Features• Reliability• Remotely Manageable: Full SLA• SIP PBX (Sip Server & Registrar)• Advanced Quality of Service

Key DifferentiatorsKey Differentiators• Embedded IP Sec (ICSA certified)• Embedded Firewall• SIP Multimedia PBX• WAN Interfaces :

o ADSL (POTS and ISDN)o SHDSL

• Syslog, SNMP, SNTP, RIPv1, RIPv2• 4 Port Ethernet Switch and Ethernet

+ ATMF Variants

• Embedded IP Sec (ICSA certified)• Embedded Firewall• SIP Multimedia PBX• WAN Interfaces :

o ADSL (POTS and ISDN)o SHDSL

• Syslog, SNMP, SNTP, RIPv1, RIPv2• 4 Port Ethernet Switch and Ethernet

+ ATMF Variants610 (i,s)

ST608/610: VPN featuresST608/610: VPN features

• VPN– Built-in VPN IPSEC– ICSA certification– Advanced features

• Key distribution– Public key infrastructure (RFC 2459, ITU-T Q.817) with X.509 digital certificates;

support for cross-certification and chain of trust– On-line PKI enrollment: CEP (certificate enrollment protocol) interoperable with

Entrust, VeriSign, Netscape and Baltimore CAs– Off-line PKI enrollment: PKCS#10 "Certification Request Syntax Standard" (RFC

2314 / 2986) and PKCS#7 "Cryptographic Message Syntax Standard", compatible with Entrust, VeriSign, Netscape, RSA Security (RSAS) and Xcert

– Shared secrets

• Tunnel set-up– ISAKMP, IKE / Oakley (RFC 2408 / 2409 / 2412), Main Mode and Aggressive Mode– Diffie-Hellman group number 1, 2 and 5– Certificate Revocation List (CRL) – ITU-T X.509v2; offline import; online import via

LDAP (RFC 1777) and HTTP interface– Xauth authentication: PAP and CHAP

ST608/610: VPN featuresST608/610: VPN features

• VPN – Advanced features

• Tunnel mode– IPsec authentication header (AH - RFC 2402) and encapsulating security

payload header (ESP - RFC 2406)– Support for NAT-T IPSec ESP on top of UDP– IPsec IP payload compression (IPCOMP - RFC2393 / 3173): LZS (RFC

2395, ANSI X3.241-1994), deflate / zlib (RFC 2394)– Bridge Emulation Mode (BEM) using proxy ARP– Automatic and manual policy rules

• Encryption– AES Rijndael, DES (RFC 2405, FIPS-46-2, FIPS-74, FIPS-81), 3DES, RC5

(RFC 2040), null encryption (RFC 2410), perfect forward secrecy (PFS), ESP CBC-mode cipher algorithms (RFC 2451)

• Hashing– HMAC, MD5 (RFC 2403), SHA1 (FIPS-180-1, RFC 2404 / 3174)

Built for excellenceBuilt for excellence