Designing Enterprise Edge Connectivity © 2004 Cisco Systems, Inc. All rights reserved. Designing the Remote Access Module ARCH v1.23-1

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Enterprise Needs for Remote Access I want easy access to the network. I need access to databases and scheduling. I need to connect to the Internet and the office. I only have one phone line. Can we videoconference? Wed like to reduce office space and save on real estate costs. We want to offer employees more flexibility. User Needs Reliable authentication is a must! We need to bill back to departments. We have both fixed and mobile users. Some users need full-time connections and others do not. We need to authorize which users have access to which departments. IT Concerns

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote-Access Connectivity Remote-access types –Site-to-site remote access –Individual user remote access Remote-access connectivity options –Dial-up –Broadband –VPN over public or shared network Remote-access termination points –Central site –Remote sites –Service provider Remote-access providers –Managed by an enterprise through a service provider

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote Access and VPN Module

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote-Access Types

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote-Access Physical Termination Based on number of users, where is the best place to terminate remote- access physical connectivity? Corporate site Remote site Service provider

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote PSTN Access Technology Characteristics Bandwidth Range Link Quality On Demand/ Always On Cost Modem Dial- Up Low On Demand Low to Moderate ISDN Moderate Control: Always On Link: On Demand Moderate Cell Phone Low On DemandHigh

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote Broadband Access Technology Characteristics Bandwidth Range Link Quality On Demand/ Always On Cost DSL Moderate Always OnModerate Cable Moderate Always OnModerate Satellite Moderate to High Moderate Always On/ On Demand Expensive

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Remote Access Data Link Layer Technology Characteristics Bandwidth Typical Physical Link Quality Reliability PPP ModeratePSTN Low PPP over Ethernet ModerateCableModerate PPP over ATM ModerateDSLModerate

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Selecting Cisco Access Routing Solutions: Remote Site

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Selecting Cisco Access Routing Solutions: Aggregation Point

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Sizing the Central Site Remote-Access Connection Determine the following: Total number of remote users Percentage of remote users logged in at once Bandwidth required per user # of Users * % Logged In * kbps Bandwidth/User = Total Bandwidth Required Total simultaneous users = Number of Circuits Required

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Example: Remote-Access Network

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Example: Remote-Access Network

© 2004 Cisco Systems, Inc. All rights reserved. ARCH v Summary Telecommuters, remote users, and branch offices all require remote access to a central site. The two primary types of remote access are site-to-site and user-to-site. The physical connectivity technologies include remote dial-up access and broadband technologies. The most common method used to transport packets from user equipment to the termination point is a form of PPP. For an enterprise that is providing their own remote-access termination, access routing solutions are required at both the remote location and at a central site. A remote-access network design includes data-link and physical network technologies, access routing at both the remote site and the central site, and security services.