Furukawa Electric Has Started the Sales of the IPsec Line Concentrate Router, the FITELnet® F200 Plus, Which can Accommodate up to 1000 Bases
~The high cost performance product for a medium-sized center base and the operation costs after its introduction are also significantly reduced~

November 29, 2013

Furukawa Electric added the model “FITELnet® F200 Plus”, expanding a function for the medium-sized center base of “FITELnet® F200” which is proven as a device for base/medium-sized center, to its line-up and the company will launch the model at the end of January 2014.

The product has an excellent cost performance, achieving the low cost while allowing the IPsec1 capability of up to 1000 bases. Furthermore the product allows L2 tunnel connection up to 500 bases and supports QoS function in L2 relaying etc. thus reinforcing its L2 tunnel function.

Background/Summary

Because of the increase in cloud service usage and the spread of communication tools such as TV conference, telephone conference etc. corporate communication traffic is shifting from the traditional center based overconcentration type to the distributed base type. Therefore, performances and scales requested to the center base are changing. “FITELnet® F200 Plus” provides the best solution to build a secure network as a product for medium-sized center capable of several hundred bases.

In addition, by using this device as the center device for MPSA (Multi-point security Association) function which is proposed to IETF, the inter-base full-mesh IPsec configuration can be easily built. In MPSA, the inter-base communication is directly performed and the traffic flowing into the center base is suppressed, then the line cost can be reduced. The configuration change to the existing base side is not required at all either in adding and in deleting bases, and automatically the encrypted communication passes between the bases are established, then the operating cost is significantly reduced after the introduction as well.

The company continuously supports the future corporate network with an attentive support system by leveraging the strength of a domestic manufacturer which consistently performs the in-house designing, development, manufacturing and maintenance.

Figure 1 External appearance of FITELnet® F200 Plus

Standard price and sales target

Standard price (without tax): 248,000 yen
Sales target: 30 thousand units/year
(note)The whole FITELnet® -F series

Features of FITELnet® F200 Plus

  1. IPsec(note 1) basic capability is near the higher class device.
    The low price is achieved while allowing the IPsec capability up to 1000 bases.
    The most suitable medium-sized center device to accommodate several hundred bases.
  2. L2 tunneling function is reinforced.
    EtherIP function and L2TPv3(note 2) function are supported and L2 tunnel connection with up to 500 bases is available. In addition, QoS(note 3) function equivalent to L3 is supported in L2 relaying.
  3. All ports are equipped with a Gigabit Ethernet interface.
    All Ethernet ports of WAN side 2 ports/LAN side 8 ports are equipped with Gigabit Ethernet interfaces.
  4. MPSA (Multi-point Security Association) function is equipped.
    MPSA function proposed to the standard-setting organization IETF (Internet Engineering Task Force) is supported. MPSA, adopting a SDN (Software Defined Networking) concept, solves the problems in a large scale IPsec network, such as complexity of configuration, scalability and delay, as MPSA controller manages all the relevant information required to inter-base communication.
    And MPSA is an entirely new IPsec expansion method to achieve the optimization of the networking devices by C/D separation and centralized management.
    As standard technologies such as IKEv2 and BGP are adopted in a control-plane (C-Plane), so a data-plane (D-Plane) can perform a full-mesh IPsec communication using the single MPSA. The configuration change of the existing base side is not required at all either in adding and in deleting CPE, and automatically encrypted inter-base communication path can be established.

Figure 2 Company VPN in the future using the MPSA

Glossary

(Note 1)IPsec:
The method to achieve the VPN. The security ensured Virtual Private Network (VPN) can be built as a data tampering and eavesdropping in the data transfer route which can be prevented by encryption, tunneling and decoding the transfer data (packet).

(Note 2)L2TPv3:
Layer2 Tunneling Protocol is one of the tunneling technologies to achieve the VPN. The Version 3 (L2TPv3) is defined by RFC3931.

(Note 3)QoS(Quality of Service):
QoS (Quality of Service) means a quality of transmission service such as a used band, priority of the data transmission and transmission delay etc. On the network, this is also used as a method to reserve a band for a specific communication to ensure a constant transmission speed.