WAN Encryption

[Grant Carmichael]

We have 5 campuses connected with 10Mb Metro E. We're going to drop a router at each location and turn on OSPF between the routers.

I'd like to encrypt traffic between the routers, so that sensitive data is protected.

How do I go about encrypting communication between all 5 routers? Can someone point me in the right direction/product?

[Matt Hobbs]

GRE tunnels with IPSec encryption is what I would do. You can do this with the ProCurve 7000dl routers (You'd also need to order the optional IPSec module, J8471A). I would avoid using the other IPSec module (J9026A) as this one encrypts in software, not hardware.

[Mohieddin Kharnoub]

Hi

With IPSec as Matt's pointed you can do the encryption,

But there is a big question here since you have Metro-Ethernet 10M

What kind of Data you expect to be transfered ?

I wouldn't suggest to use a ROUTER for encrypting my Backup to the data center.

You have to consider the Encryption-Decryption causes delay and TOO MUCH processing, so it really depends on the data running on that cloud.

Good Luck !!!

[Mohieddin Kharnoub]

Hi

With IPSec as Matt's pointed you can do the encryption,

But there is a big question here since you have Metro-Ethernet 10M

What kind of Data you expect to be transfered ?

I wouldn't suggest to use a ROUTER for encrypting my Backup to the data center.

You have to consider the Encryption-Decryption causes delay and TOO MUCH processing, so it really depends on the data running on that cloud.

I would really suggest to use a WAN/Data acceleration device at each end that is capable of doing such job in an efficient way and remember its all related with the data running on this cloud.

Good Luck !!!

[Grant Carmichael]

Its anything from ERP/CRM data to Internet traffic....

[Matt Hobbs]

Since the J8471A encrypts in hardware, I'd say performance would not be an issue:

http://www.hp.com/rnd/pdfs/7000dl_series_rev_guide.pdf

Performance metrics include 528 Mbps (DES),
176 Mbps (3DES), and 422 Mbps (AES).