topic Re: WAN Encryption in Switches, Hubs, and Modems

WAN Encryption

Grant Carmichael — Mon, 16 Jun 2008 18:01:14 GMT

We have 5 campuses connected with 10Mb Metro E. We're going to drop a router at each location and turn on OSPF between the routers.

I'd like to encrypt traffic between the routers, so that sensitive data is protected.

How do I go about encrypting communication between all 5 routers? Can someone point me in the right direction/product?

Re: WAN Encryption

Matt Hobbs — Tue, 17 Jun 2008 01:53:36 GMT

GRE tunnels with IPSec encryption is what I would do. You can do this with the ProCurve 7000dl routers (You'd also need to order the optional IPSec module, J8471A). I would avoid using the other IPSec module (J9026A) as this one encrypts in software, not hardware.

Re: WAN Encryption

Mohieddin Kharnoub — Tue, 17 Jun 2008 18:03:33 GMT

Re: WAN Encryption

Mohieddin Kharnoub — Tue, 17 Jun 2008 18:05:03 GMT

Hi

With IPSec as Matt's pointed you can do the encryption,

But there is a big question here since you have Metro-Ethernet 10M

What kind of Data you expect to be transfered ?

I wouldn't suggest to use a ROUTER for encrypting my Backup to the data center.

You have to consider the Encryption-Decryption causes delay and TOO MUCH processing, so it really depends on the data running on that cloud.

I would really suggest to use a WAN/Data acceleration device at each end that is capable of doing such job in an efficient way and remember its all related with the data running on this cloud.

Good Luck !!!

Re: WAN Encryption

Grant Carmichael — Tue, 17 Jun 2008 20:09:02 GMT

Its anything from ERP/CRM data to Internet traffic....

Re: WAN Encryption

Matt Hobbs — Wed, 18 Jun 2008 02:59:23 GMT

Since the J8471A encrypts in hardware, I'd say performance would not be an issue:

http://www.hp.com/rnd/pdfs/7000dl_series_rev_guide.pdf

Performance metrics include 528 Mbps (DES),
176 Mbps (3DES), and 422 Mbps (AES).