1. Broadband VPNs - Outsourcing ISP Services to Cable TV and xDSL Providers Bruce Perlmutter Bay Networks Corporate Systems Engineering

2. New ISP Markets

3. Tunneling Overview

4. IPsec zIP Security, derived from IPv6 zPackets can have AH (Authentication Header) and ESP (Encapsulating Security Payload) zAH authenticates each packet - data integrity zESP provides privacy - DES (56-bit) or Triple DES (112- bit) zTunnel mode provides private addressing and doesnt require IPsec between end nodes

5. PPTP - Indian Outhouse

6. PPTP zPoint-to-Point Tunneling Protocol zDeveloped by Microsoft zUses 40 or 128-bit RC4 encryption zWell integrated into Windows 95 and NT zWell integrated into NT Domains z3rd party implementations available

7. User Screen

8. End User Network Properties

9. Configuring Tunnels

10. Tunnel Attributes

11. Solution Overview

12. Win-Win-Win zEnd Users yHigh Speed Internet Access yService Selection yQuality through Competition zISP yNew Subscriber base without large Infrastructure investment or management yWorks with all xDSL and Cable modem architectures zNetwork Access provider yNew Revenue source without understanding ISP business yStandards based VPN solution with a future ySimple provisioning and management requirements.

13. Questions or Comments Contact: Bruce_Perlmutter@BayNetworks.com for a copy of these slides or a white paper on this topic