Jump to content, skipping navigation

Avalanche_IP_SEC_Testing_Datasheet SPIRENT AVALANCHE IPSEC TESTING LAYER 4-7 TESTING ON SPIRENT TESTCENTER™ Road warriors, telecommuters and business partners all rely on the secure communications capabilities offered by IPSec. Spirent Avalanche™ enables Network Equipment Manufacturers, Service Providers and Enterprise customers to realistically test their IPSec VPN gateways and cloud based IPSec deployments. APPLICATIONS • Compare application performance with and without IPSec • Test user data, voice, and video over IPSec tunnels • Determine maximum tunnel capacity of IPSec gateways • Measure tunnel set-up and tear-down rates • Test IPsec tunnel set-up, tear-down and encryption inside the cloud with Avalanche Virtual • Find maximum tunnel throughput • Test IPSec services over cloud and virtualized environments and devices • Analyze the affects of aggressive tunnel re-keying • Measure the user experience through encrypted tunnels • Support for IKEv1 and IKEv2 for demanding IPSec applications • Emulate IPSec deployment scenarios for IPv4 and IPv6 networks, including: • IPv4 over IPv4 • IPv4 over IPv6 • IPv6 over IPv6 • Test site-to-site and remote access tunnels • Test attack traffic and vulnerabililties over IPSec BENEFITS Spirent Avalanche’s IPSec feature provides complete performance assessment of IPSec gateways to quickly understand and correct deficiencies before deployment. The use of real application protocols over encrypted tunnels is the best way to truly understand the gateway’s effect on user experience. • Quicker Time to Test: Integrated IPSec allows full performance characterization of gateways, leading to faster production roll-outs • Avoiding Downtime: High-performance testing with real traffic identifies proper sizing for your environment while providing comprehensive statistics to locate problem areas • Investment Protection: Support for both IPv4 and IPv6 ensures testing needs can be supported now and for future generation testing • Minimizing Cost: IPSec is a fully integrated Avalanche application that supports many use cases, minimizing the number of test applications to learn • Comprehensive statistics quickly identify problem areas • Tunnel Control • Persistent and non-persistent tunnels • IKE Message Retry timers • Max Retry • Expire timers • Commit Bit support • Re-Keying • Phase 1 Reconnect • Phase 2 Re-Key with old key timer • SA lifetimes Avalanche Avalanche IPSec Gateway IPSec Application Traffic Application Traffic IPv6/IPv4 Encrypted Traffic © 2012 Spirent Communications, Inc. All of the company names and/or brand names and/or product names referred to in this document, in particular the name “Spirent” and its logo device, are either registered trademarks or trademarks pending registration in accordance with relevant national laws. All rights reserved. Specifications subject to change without notice. Rev. F 03/12 AMERICAS 1-800-SPIRENT • +1-818-676-2683 • sales@spirent.com EUROPE AND THE MIDDLE EAST +44 (0) 1293 767979 • emeainfo@spirent.com ASIA AND THE PACIFIC +86-10-8518-2539 • salesasia@spirent.com IPSec TESTING SPIRENT AVALANCHE/LAYER 4-7 ON SPIRENT TESTCENTER ORDERING INFORMATION Description Part Number Avalanche Extreme Software Bundle CEE-SWB-033 Avalanche Security SW Bundle CEE-SWB-005 Avalanche IPSec CEE-SW-IPSEC Note: Other ordering options are available. TECHNICAL SPECIFICATIONS • IPSec Security Protocols • AH+ESP • Tunnel Mode • IPSec Parameters • Main Mode and Aggressive Mode • Authentication • Pre-Shared Keys • X.509 Certificates • RSA Digital Signatures/Certificates • Initial Contact Support • Configurable Vendor ID • Extended Authentication (XAuth) • ModeConfig address assignment • Generic (username and password) • RemoteVPN • Nortel Contivity • Checkpoint Hybrid • IKE Phase 2 • Quick Mode • Perfect Forward Secrecy (PFS) • Dead Peer Dectection • Tunneling and Encryption over IPv4and IPv6 • Support for IKEV1 and V2 • IkeV1 Encryption Support • DES, 3DES, ESPNULL, AES-128, AES-192, AES-256 HASH: HMAC- MD5 and HMAC SHA -1 Diffe-Hellman Groups: 1, 2, 5 • IkeV2 Encryption Support • DES, 3DES, ESPNULL, AES-128, AES-192, AES-256 HASH: HMAC- MD5, HMAC SHA -1, AES-XBCB-MAC, SHA-256, SHA-384, SHA- 512 Diffe-Hellman Groups: 1,2,5,14,15, and 16 • Suports thousands of site to site tunnels per test • Persistent and non-persistent tunnels • IKE Message Retry timers • Max Retry • Expire timers • Commit Bit Support • Re-Keying • Phase 1 Reconnect • Phase 2 Re-Key with old key timer • SA Lifetimes • Avalanche 3100B Appliance Performance (remote access) • Number of Concurrent Tunnels: >225,000 • Tunnel Setup Rate: >8,000/sec • Encrypted Bandwidth: >8 Gbps SUPPORTED MODULES/PLATFORMS • Spirent Avalanche 3100 • Spirent Avalanche 290 • Spirent TestCenter C1 Appliance • Spirent TestCenter HyperMetrics mX and mXP modules • Spirent TestCenter HyperMetrics AP, 8-port 1GbE and 2-port 10GbE • Spirent TestCenter HyperMetrics CM, 4- and 12-port 1GbE • Spirent TestCenter HyperMetrics mX 2-, 4- and 8-port modules • Software • Avalanche Commander version 4.00 or higher with Avalanche IPSec option REQUIREMENTS • An IBM ® compatible PC must meet the following minimum requirements to run Spirent Avalanche • One 10/100/1000Base-T unshielded twisted pair (UTP) cable • One 10 Mbps or 10/100/1000 Mbps Ethernet NIC • Intel ® E6300 Core 2 Duo 4 (or equivalent) • Minimum of 4 GB of RAM • Minimum of 50 GB free space on the hard drive • Windows ® XP Operating Systems, Service Pack 2 (SP2) • Windows 7 32- or 64-bit Operating Systems • SVGA color monitor (or equivalent) and a mouse • DVD-ROM drive SPIRENT SERVICES Spirent Global Services provides a variety of professional services, support services and education services—all focused on helping customers meet their complex testing and service assurance requirements. For more information, visit the Global Services website at www.spirent.com or contact your Spirent sales representative.