VPN: Virtually pointless nomenclature

Virtual private networks are not strangers to the carrier scene. They got their start on the public switched network and found a home in frame relay networks. Confusion about VPNs appeared when Internet protocol was thrown into the mix.

Because there are so many ways to use IP and provide IP service, several companies have invented their own VPN solutions, which has created mass confusion because each is implemented differently. To clear up that chaos and classify VPN styles, Ascend Communications, Lucent Technologies, Shasta Networks and Telia Finland have created a VPN framework, which is now before the Internet Engineering Task Force as an Internet-Draft (www.ietf.org).

"Our aim is to create a framework that will reduce the confusion in the market and provide a common set of terms and definitions to help people understand what they are talking about concerning the various VPNs in the market," said Andrew Malis, senior consulting engineer at Ascend.

Within the draft, VPNs are defined as the emulation of a private WAN facility using IP facilities. This loose definition reflects what a nebulous phrase VPN has become. The draft, attempting to clarify terms, discusses customers' expectations of VPNs, distinctions between customer premises equipment-based solutions and network-based solutions, and the types of VPNs and their requirements.

"Service providers understand VPNs, but it's valuable to have a framework so that when they discuss VPNs among themselves or with customers, the meaning is clear," said Joe Skorupa, switching and routing director at RHK.

Start-up Shasta's interest in a VPN framework is vested in its newly released Subscriber Service System, designed to let Internet service providers and telcos offer services such as VPNs, digital subscriber line, traffic engineering, firewalls and encryption. The SSS includes an IP services operating system, subscriber policy manager and a subscriber service gateway.

The gateway, which contains subscriber identification and individual policies, sits at the network edge (see figure). "It gives carriers a platform to increase revenues by creating new services," said Anthony Alles, founder and president of Shasta. In Alles' vision of the economic future, carriers will not be able to achieve a profit by only offering dial-up, DSL, T-1 (1.54 Mb/s) or other leased line access.

Shasta's subscriber-edge platform allows service providers to charge customers for the different services to which they subscribe. "Small and medium-sized businesses would like to have encryption, firewalls and VPNs, but they don't have the staff to roll it," said Skorupa. "This solution gives service providers a way to sell these different services to their customers in a cost-effective, stable manner."

Another service that carriers could offer using SSS is a captive Web portal. When customers access the Shasta gateway, they could be automatically routed to a designated portal. In addition tothe eyeballs the carrier sends the portal, it also could provide customer data that could be used later for targeted marketing efforts.

Other players in this subscriber management market include Redback, Cisco Systems and Assured Access, which was recently bought by Alcatel.

"Two things differentiate Shasta from the others: scalability and the ability to store a lot of subscriber information," said John Freeman, principal analyst for carrier and enterprise infrastructure at Current Analysis. "Anybody could store data in a backend database, but Shasta is different because the data is held in memory and can be accessed quickly. Decisions about the subscriber are done in real time, which can't be easily replicated by someone else."

IN CINCINNATI Cincinnati Bell will install intelligent network hardware and software from Lucent Technologies that will enable it to offer customers services such as custom announcements, call screening services, voice dialing and call waiting.

SUMMIT PREMONITIONS The New World Service Provider Summit proved itself a useful forum for more market predictions. Here's some from Nick Lippis, president of Strategic Networks: Circuit switch demand falls like a rock this autumn; at least five massive Fortune 100 installations of LAN and WAN-based voice-over-IP systems will occur; broadband unsettles portal market; and there will be two fewer RBOCs.