Nokia 50i

Nokia 50i is designed to meet the needs of medium-size businesses and enterprise branch offices requiring up to 500 tunnels, 156 Mbps AES-256 throughput and a gateway with no moving parts. The unique design of the gateway enables two Nokia 50i gateways to be rack mounted side-by-side for easy clustering.

Nokia 50i utilizes patent-pending Meta-Hop™ technology to ensure network connectivity between sites, within sites and from clients to sites. To ensure "always-on" network uptime, Meta-Hop includes adaptive networking technology between sites so administrators can grow and modify their network without having to re-visit the VPN configuration. Meta-Hop ensures companies can truly be mobile by extending the secure network to mobile devices and laptops.

Within sites, Nokia 50i is equipped with Nokia patented IP Clustering to ensure high availability for VPN, firewall, routing and DHCP servers. As a result, traffic on the gateway is automatically optimized with Dynamic Load Balancing, Automatic Session Failover and Zero-Downtime Upgrades for maximum uptime.

Using Nokia VPN Manager, IT administrators can centrally deploy, deliver and update VPN policies and configurations for gateways and clients, with over-the-air provisioning.

Features

• 500 tunnels
• 156 Mpbs AES-256 throughput
• Easy clustering
• Meta-Hop™ technology
• IP clustering
• Dynamic load balancing
• Automatic session failover
• Zero-downtime upgrades
• Full command-line interface
• SNMPv3 monitoring and remote logging

Nokia 50i

Performance and capacity

• AES-256 SHA-1 (1 node) = 120 Mbps
• AES-256 SHA-1 (2 node) = 190 Mbps
• Stateful Firewall (1 node) = 300 Mbps
• IKE Main Mode Tunnels = 500
• 4 integrated 10/100BaseT interfaces

VPN

• IPSEC (RFC2401 – 12)
• Encapsulation Protocols
  - ESP Tunnel and Transport Mode (RFC2406)
  - AH Tunnel and Transport Mode (RFC2402)
• Data Encryption
  - AES 128, 192, and 256-bit (RFC3602)
  - DES 56-bit and 3DES 168-bit (RFC2405)
• Message Authentication
  - HMAC-SHA-1 (RFC2404)
  - HMAC-MD5 (RFC2403)
• Key Management (RFC2409)
  - IKE Main Mode
  - IKE Quick Mode
  - Perfect Forward Secrecy (RFC2409, RFC2412)
  - Diffie-Hellman Groups 1, 2, 5 (RFC2412, DIFF76)
  - Backup IKE Peer
  - Dead peer detection (RFC 3706)
• Remote Access
  - IPSEC (RFC3457)
  - L2TP (RFC2888, 2661)
  - PPTP (RFC2637)
  - L2TP within IPSEC (RFC3193)
• NAT Traversal (RFCs 3947 & 3948)
• Split Tunneling
• Network Topologies
  - Hub & Spoke
  - Full Mesh
  - Custom

Routing

• BGPv4 (RFC1711) - BGPv4 with MD5 (RFC2385)
• OSPFv2 (RFC2328, STD0054)
• RIPv1/v2 (RFC2453, STD0056) - RIPv2 with MD5
• Static Routes
• Routing over IPSEC

Addressing

• Network and Port Address Translation (RFC3022, RFC1918)
• DHCP (RFC2131 – 2, RFC3396, RFC3442)
  - Client
  - Server
  - Relay with BOOTP forwarding
• Point-to-Point Protocol (RFC1661 – 2, STD0051)
  - PPP over Ethernet (RFC2561)
  - Static Address

Clients

• Nokia Mobile VPN Client 3.0
• Native Microsoft Windows L2TP/IPSEC client support (for Windows 2000, Windows XP and Windows Mobile 2003 Second Edition)

Firewall

• Stateful Inspection
• Demilitarized Zone (DMZ)
• Protocol Support (partial list)
  - HTTP, HTTPS
  - SMTP, IMAP, POP3
  - Telnet, SSH
  - NetBIOS over TCP
  - ICMP, SNMP, DNS, NTP
  Application Gateways
  - FTP
  - TFTP
  - RTP (RealAudio/ RealVideo)
  - IRC Chat
  - Stateful TCP, UDP and ICMP Flows

Policy-based type of service

• Differentiated Services (DiffServ)
  - DiffServ with IPSEC

Meta-Hop and high availability

• Intelligent VPN
  - Self-Learning
  - Self-Healing
• VRRP
• IP Clustering
  - Dynamic Load Balancing
  - Active Session Failover
  - Zero Downtime Upgrades
  - Linear Scalability
• Prioritized External Interface Backup
  - Ethernet (including DSL/Cable)
  - Dial (including V.92/ISDN)
• Backup Hub
• High Reliability Hardware Design
  - Flash-based System

PKI and authentication services

• Nokia AOS Certificate Authority
  - X.509v3 digital certificates
  - CRLv2 certificate revocation
  - LDAPv3 certificate storage
  - PKCS#7, PKCS#10 certificate enrollment
  - SCEP client
• Nokia Security Service Manager Enrollment Gateway
• Password Authentication with CRACK
• 3rd Party Authentication Services
  - RADIUS
  - SecurID
  - LDAPv3
  - Microsoft Active Dir
  - Entrust Authority
  - Verisign PKI
  - Baltimore UniCERT
  - RSA Keon
  - Microsoft CA
  - Sun ONE Certificate Server

Management

• Nokia VPN Manager
  Key features
  - SSLv3-secured Java GUI
  - Staging and Over-the-Air Provisioning
  - Rapid Deployment with Templates
  - Topology Mgmt with Partitions
  - Group Mgmt with Realms
  - Upgrades and Backup with Scheduled Operations
  - Generate Nokia Mobile VPN Policy Files
  - Performance Monitor
  - Platform Req'ts: Microsoft Windows 2000, XP, 2003 Server or Red Hat Enterprise Linux 3.0
• SSHv2-secured AOS CLI
• SNMPv1/v2/v3 (USM) (RFC3411 – 15, STD0062)
  - MIB-II (RFC1213)
  - IP MIB (RFC2011)
  - TCP MIB (RFC2012)
  - UDP MIB (RFC2013)
  - Interfaces Group MIB (RFC2863)
  - IP Forwarding Table MIB (RFC2096)
  - Host Resources MIB (RFC2667)
  - Nokia VPN IPSEC MIB
  - Nokia VPN L2TP/PPTP MIB
  - Nokia VPN Configuration MIB
• Syslog Logging
• NTPv3 Client
• Out-of-Band Mgmt via Modem

Dimensions and power

• Dimensions W 8.15" x H 1.6" x D 15.95" (20.7 cm x 4.06 cm x 40.51 cm)
• Weight 9.1 lbs. (4.1 kg)
• Power input 100V, 120V, 230V

Environment / certification

• Temperature 5ºC to -40ºC
• Humidity: 10% to -90% (non-condensing)
• Storage temperature: -20ºC to 60ºC

Nokia 50i

Nokia 50i can be easily managed using Nokia VPN Manager. With the graphical interface, IT managers can manage gateway policies and configurations using an easy-to-use, centralized management solution to deploy, deliver, and update VPN policies and configurations. Nokia 50i also features a full command-line interface, SNMPv3 monitoring and remote logging services.

• Deploy, deliver and update VPN policies and configurations for gateways and Nokia Mobile VPN clients on the enterprise network
• Schedule upgrades with limited manual intervention, without bringing the gateway down
• Applies user security policies and complex IPSec policies and network topologies across network gateways and/or mobile terminals
• Supports multiple common authentication methods, including RADIUS, LDAP, Microsoft Active Directory and PKI with X.509v3 from internal or external certificate authority

Nokia 50i

IPSec client for business optimized mobile phones

Nokia Mobile VPN Client is designed for mobile phones running the Symbian operating system and is almost transparent to the user. Once the application is launched, a connection is established and the mobile user is prompted for proof of identity using a token such as a SecurID password or a digital certificate. Once authentication to the corporate VPN occurs successfully, a VPN tunnel is established between the mobile phone and the corporate network and all data traveling to and from the device is encrypted, no matter what the mobile application. Because of the stringent security inherent in IPSec, the data is protected from being captured and retransmitted later and is received exactly how it was sent. Check the list of supported phone models from the Nokia Mobile VPN page.

Support

Nokia IP VPN reliability, performance and security are backed by Nokia's world-class First Call-Final Resolution global support and service. Nokia is dedicated to excellence with Technical Assistance Centers around the world, and on-site service capabilities in 1,000+ metropolitan areas covering more than 150 countries.

• Global network of 7x24x365 Technical Assistance Centers
• Nokia First Call - Final Resolution support
• Worldwide product part spares and on-site services
• Software Subscription service delivers updates, minor feature releases and device compatibility

Visit business support and service for more information.