 |
NET-NET FAMILY
PRODUCTS
PLATFORMS
Net-Net SIP Multimedia-xpress
Net-Net EMS
NET-NET ROUTE MANAGER CENTRAL
Net-SAFE
WHITE PAPERS
INTELLECTUAL PROPERTY NOTICES
|
|
Acme Packet Net-Net 3800
Acme Packet Net-Net 3800
|
In enterprise and contact centers the Net-Net 3800 secures the high quality delivery of a broad range of interactive communications services and applications ranging from basic VoIP to Service Oriented Architecture (SOA)-enabled unified communications. It secures the SIP/H.323 trunking border to service provider IP networks and the Internet border to remote offices, teleworkers and mobile employees. In extremely security-conscious organizations, the Net-Net 3800 even secures the border to the private VPN connecting other sites. The SIP and H.323 interworking capabilities of the Net-Net 3800 ensures interoperability with and between legacy IP PBX equipment and next-generation unified communications platforms. It controls session admission, IP PBX or UC server loads and overloads, IP network transport and SIP/H.323 session routing to assure SLAs and minimize costs. Regulatory compliance requirements are also satisfied with encryption ensuring session privacy and call/session replication for recording.
For government defense and security–focused agencies, the Net-Net 3800 meets the stringent requirements needed to comply with standards such as the U.S. Federal Information Processing Standard (FIPS). Acme Packet’s implementations of SIP-TLS, IPsec, SSH and SFTP all comply with FIPS 140-2 without requiring special hardware. It also features configuration options to mitigate security vulnerabilities as required for products approved by the U.S. Defense Information Services Agency (DISA) to connect to Department of Defense Networks.
For fixed line and cable service providers, the Net-Net 3800 meets all session border control requirements for residential and business VoIP, SIP trunking and hosted PBX, unified communications (UC) or audio/video conferencing services. For mobile and fixed mobile convergence (FMC) service providers, the Net-Net 3800 controls femtocell, dual mode handset and smartphone access to IP interactive communications services and applications over next generation 3G, LTE and WiMAX networks. Service providers may also utilize the Net-Net 3800 for core SIP session routing or to control interconnect borders for peering services applications.
The Net-Net 3800 secures subscriber access and interconnect/peering borders and enables interoperability of heterogeneous endpoints, service infrastructure elements and networks to maximize service reach. It controls admission, overload, IP network transport and session routing to assure SLAs, maximize revenues and minimize costs. It efficiently routes SIP-based interactive communication sessions—voice, video, instant messaging and multimedia—within and between networks. Lastly, it enables regulatory compliance with emergency service (E911), national government priority service (GETS) and lawful intercept (CALEA) requirements.
For small to medium-sized service providers as well as enterprises requiring a highly available NEBS-compliant solution, the Net-Net 3820 offers a choice of single or dual AC or DC field-replaceable power supplies, as well as field replaceable fan packs. For services and applications requiring support for up to 8000 sessions, the Net-Net 3820 delivers the same hardware features and purpose-built architecture as high-end systems.
SBC configurations
The fixed configuration Net-Net 3810 operates as an integrated SBC, delivering tightly coordinated signaling and media control on a single system, while the Net-Net 3820 supports two Acme Packet SBC configurations, the integrated Net-Net Session Director (SD) and decomposed Net-Net Signaling Firewall (SF), which delivers SIP signaling security and other control functions.
Both Net-Net 3800 platforms provide comprehensive support for SIP, H.323, SIP-H.323 interworking, MGCP/NCS and H.248 signaling and media sessions. Net-Net OS for the Net-Net 3800 offers proven signaling interoperability with all major softswitches, IMS CSCF elements, SIP servers, H.323 gatekeepers, call agents, application servers, media servers, media gateways, IP PBXs, UC servers and numerous IP-based voice and video endpoints.
Net-Net 3800 SBCs can also be configured to operate as members of a Net-Net SBC cluster when used in conjunction with Acme Packet’s Net-Net 4500 Session-aware Load Balancer (SLB). Acme Packet Net-Net SBC clusters support up to 2 million subscribers without requiring architectural forklifts or network disruptions. Net-Net SBC clusters support all Net-Net SBC configurations.
SRP configuration
The Net-Net 3820 supports Acme Packet’s session routing proxy, the Net-Net Session Router (SR). As a SRP, the Net-Net 3820 consolidates and simplifies the routing of SIP-based voice, video, instant messaging and multimedia sessions within and between mobile, fixed-line and transit networks to help service providers reduce capital and operating expenditures while optimizing service revenue.
In Acme Packet’s Open Session Routing Architecture (OSR), the Net-Net 3820 SRP works in conjunction with best-of breed routing database products and services from Acme Packet partners. These complementary product vendors and service providers offer centralized routing databases and database provisioning tools for dynamic route selection. The Net-Net 3800 SRP queries these databases using industry-standard ENUM, SIP and DNS protocols. The Net-Net 3800 SRP’s local route tables may also be provisioned by Acme Packet’s Net-Net Route Manager Central (RMC).
The Net-Net 3820 SRP dynamically routes sessions between all types of borders, including access and interconnects, IP and TDM. More specifically, it routes sessions between stateful service control elements such as Acme Packet SBCs, wireless Mobile Switching Centers (MSC), IMS subscriber call control elements, CLASS 5 softswitches, Cable Modem Termination Systems (CMTS) and softswitches controlling media gateways. Since the source and destination SIP signaling elements are session-stateful, the Net-Net SR can operate in a stateless or transaction-stateful mode to maximize its performance.
Common SBC & SRP functions
Net-SAFE™, Acme Packet’s security framework, is supported via the tight integration of the Net-Net 3800 hardware and Net-Net OS software. Net-SAFE features powerful denial-of-service/distributed denial-of service protection at the layer 3, layer 4, IPsec and SIP signaling level, and intrusion detection/prevention capabilities. Other security features support dynamic access control, topology hiding, privacy and confidentiality, service infrastructure DoS/DDoS protection, virus and SPIT protection, and fraud prevention.
Net-Net EMS, a GUI/browser-based client/server application supporting configuration, fault, performance and security management for multiple border elements in multiple networks, is one of many management tools available. Net-Net EMS can efficiently integrate into existing and next-generation enterprise management or service provider operational support systems through industry-standard SOAP/XML, SNMP v2c and syslog interfaces. Other management tools include command line interface (CLI), telnet, file transfer protocol (FTP) and RADIUS.
Net-Net Route Manager Central (RMC) consolidates and automates route management and distribution for Acme Packet session border controllers or session routing proxies through an intuitive, easy-to-use, browser-based graphical user interface. An integral component of Acme Packet’s OSR architecture, Net-Net RMC automatically distributes routing information to all or specific subsets of SBCs and SRPs in the network. Net-Net RMC complements Acme Packet’s Net-Net EMS to reduce the overall costs associated with the management of large SIP session routing infrastructures.
Net-Net 3800 capacity, performance and availability
The Net-Net 3800 platform supports up to 8000 sessions, offers high availability operation for non-stop service and includes hardware acceleration options for encryption and QoS measurements. The Net-Net 3800 complements Acme Packet’s Net-Net 2600, 4250, 4500 and 9200 platforms and delivers the following platform capabilities:
- Session capacity* – up to 8000 simultaneous signaled sessions
- High-availability (HA) configuration – active/standby systems (1:1 redundancy) with check-pointing of signaling, media and configuration state for no loss of service
- In-line, wire-speed QoS measurement processor option
- Two-level encryption acceleration hardware options
- Session set-up – IPsec tunnels and TLS sessions
- Traffic encryption/decryption – IPsec and SRTP
- IPsec tunnel capacity
- Up to 1000 tunnels with manual keys
- Up to 120,000 tunnels with IMS-AKA
- Local route table entries – up to 1,000,000 routes
- Network interfaces – four active 10/100/1000 Mbps Ethernet interfaces (fiber or copper)
- System throughput – 5 Gbps
- Power supplies
- Net-Net 3810 – single fixed AC power supply
- Net-Net 3820 – single or dual field-replaceable AC or DC power supplies
* Performance and capacity vary by signaling protocol, call flow, codec, configuration and feature usage.
Net-Net 3800 specifications
| Chassis |
1U, rack-mount
Front – power and HA status LEDs, physical system reset pinhole, console
Rear – one network interface unit slot (signaling, media and management interfaces)
Power supplies
- Net-Net 3810: single AC, fixed
- Net-Net 3820: single or dual AC or DC, field replaceable
Optional mounting brackets for front/rear or center-mount in 19” or 23” rack
|
| Memory |
2 GB for active configuration and logs
256 MB internal flash memory for runtime image and backup configurations
Optional storage expansion module for local CDR backup |
| Content addressable memory (CAM) |
128K entries for static & dynamic ACLs, media control rules and ARP entries |
| Encryption options |
TLS
- Software-based encryption for low capacity TLS sessions
- Secure Services Module (SSM) hardware accelerator option for high capacity TLS sessions
SRTP
- Network Interface Unit (NIU)-based encryption processors
IPsec
- Tunnel set-up – software-based for use of manual keys; Secure Services Module (SSM) hardware accelerator option for use of dynamic keys
- Traffic encryption – NIU-based encryption processors
|
Network interfaces unit (NIU) |
Service network interface options for signaling, media and data
- Four 10/100/1000 Mbps Ethernet copper ports (RJ-45 connector)
- Four 1000 Mbps Ethernet fiber or four 10/100/1000 Mbps copper ports (requires SFP transceivers)
- Four 1000 Mbps Ethernet fiber or four 10/100/1000 Mbps copper ports with inline IPsec/SRTP encryption processors (requires SFP transceivers)
- Four 1000 Mbps Ethernet fiber or four 10/100/1000 Mbps copper ports with inline QoS measurement processors (requires SFP transceivers)
- Four 1000 Mbps Ethernet fiber or four 10/100/1000 Mbps copper ports with inline IPsec/SRTP encryption and QoS measurement processors (requires SFP transceivers)
NIU management interfaces – included on all NIU options
- Two 10/100/1000 Mbps interfaces with RJ-45 for HA node configurations
- One 10/100/1000 Mbps interface with IPsec encryption processor and RJ-45 for management networks
(Optional IPsec encryption of management interface via encryption capable NIU)
- One RS-232 serial console interface with RJ-45 connector (only rear or front interface may be used at any time)
- One alarm interface with RJ-45 connector
|
| Front panel management interfaces |
One RS-232 serial console interface with RJ-45 connector (only rear or front interface may be used at any time)
One USB 2.0 interface
LEDs for displaying power and HA status
Physical system reset pinhole
|
| Power |
|
| Net-Net 3810 AC power option only |
Single fixed AC power supply, 230 VA max
Voltage: Autoranging 100-240 VAC wide input with power factor correction
Frequency: 50/60 Hz
Current: 1.5A at 115 VAC and .75A maximum at 230 VAC
Cable: 2.0 meter 18 AWG 3-wire cable, with 3-lead IEC-320 receptacle on the power supply end, and country-dependent plug on the power source end |
| Net-Net 3820 AC power option |
Single or dual field-replaceable power supplies
Dual power supplies are redundant and load sharing, 300 VA max
Voltage: Autoranging 100-240 VAC wide input with power factor correction
Frequency: 50/60 Hz
Current: 5A rating, not to exceed 3.5A max. at 100 VAC and 1.5A max. at 240 VAC
Cable: 2.0 meter 18 AWG 3-wire cable, with 3-lead IEC-320 receptacle on the power supply end, and a country-dependent plug on the power source end |
| Net-Net 3820 -48 VDC power option |
Single or dual field-replaceable power supplies
Dual power supplies are redundant and load sharing, 300 VA max
Voltage: -48 VDC (+- 10%) nominal in North America. Maximum range is -40VDC to -60 VDC
Current: 10A rating, not to exceed 7.4A max. at -48 VDC and 5.9A max. at -60 VDC
Cable: 18 AWG recommended minimum, with at least 3 conductors rated for at least 140° F (60° C)
|
| Net-Net 3820 -72 VDC power option |
Voltage: -72 VDC nominal in Russia
Cable: 18 AWG recommended minimum, with at least 3 conductors rated for at least 140° F (60° C) |
| Physical |
|
| Dimensions |
1.72 in H x 17.10 in W x 19.00 in D (not including mounting hardware)
4.37 cm H x 43.43 cm W x 48.26 cm D (not including mounting hardware) |
| Weight |
Net-Net 3810 - 18 lbs (8.16 kg) fully configured
Net-Net 3820 - 19 lbs (8.62 kg) fully configured |
| Colors |
Front panel - Midnight black with Glacier blue trim
|
| Temperature |
Operating: 32ºF to 104ºF, 0ºC to +40 ºC
Storage: -4ºF to 149ºF, -20ºC to +65 ºC |
| Relative humidity |
10 to 85%, non-condensing |
| Air flow |
Net-Net 3810 - 30 cfm front to back
Net-Net 3820 - 50 cfm front to back
|
| Heat dissipation |
Net-Net 3810 - 100W (341 BTU/hour) typical, 160W (546 BTU/hour) maximum
Net-Net 3820 - 100W (341 BTU/hour) typical, 200W (682 BTU/hour) maximum |
| Power dissipation |
Net-Net 3810 - 100W typical, 180W maximum
Net-Net 3820 - 100W typical, 200W maximum
|
| Regulatory |
Product bears CE1 marking indicating compliance with the 99/5/EC directive, which includes EN and IEC standards for safety and EMI
|
| Safety |
US: USA/CSA UL2 60950-1, 1st Ed.
Canada: CAN/CSA3-C22.2 No. 60950-1-03, 1st Ed.
EU: EN4 60950-1:2001
|
| EMI |
US: FCC5 Part 15 (CFR 47) Class A limits
Canada: ICES6-003 Issue 4, Class A limits
EU: EN55 22:2006 +A1:2007 Class A limits
Australia: CISPR 22 and C-Tick
Japan: VCCI7 Class A
|
| Immunity |
EU: EN 300 386 v1.3.3
|
| NEBS |
Net-Net 3820 is NEBS compliant:
GR-63
GR-1089
SR-3580 – Level 3
|
| |
1CE = European Compliance
2UL = Underwriters Laboratory
3CSA = Canadian Standards Association
4EN = European Norm
5FCC = Federal Communications Commission
6ICES = Interference-Causing Equipment Standard
7VCCI = Voluntary Control Council for Information Technology Equipment (Japan) |
|
|