Allied Telesis AT-8550/SP Series User manual

Case Study | Gendarmerie Nationale
Gendarmerie Nationale, the French national police force with military
statute, select an Allied Telesis range of approved equipment for their
networking solution, equipping more than 4,000 sites.

Customer Profile
The Gendarmerie Nationale is the French national police force
with a military statute.The Gendarmerie Nationale has many
functions, including local policing and criminal investigations, and
military responsibilities such as maritime safety and airport
security.They also participate in important ceremonies, such as
those involving heads of state or government.
In today's complex environment, a defence organization like the
Gendarmerie requires a comprehensive network solution that
replicates best practices, and adapts quickly and easily for
emerging threats. With a range of locations for headquarters and
branch or divisional offices, their network had to provide a secure
infrastructure. It also had to be capable of rapidly disseminating
multiple information types - including voice, video and data -
providing real-time connectivity for maximum mission
effectiveness.
The range and scope of the Gendarmerie operations are ever
increasing, and they can expect to be involved in multiple
simultaneous operations.This requires adaptable and agile forces,
able to deploy rapidly to take on a range of operational tasks.
Customer Requirements
At present, 4300 sites are already equipped with networks,
providing access to the national intranet for 104,000
members of the Gendarmerie.
Resilience is an absolute necessity for the Gendarmerie.
Real time, reliable situational awareness facilitates planning,
and ensures the successful execution of operations.
A considered approach to network security was required in
order to achieve the optimum balance between protection
of information, and the availability of that information.
The Gendarmerie required a flexible and integrated
network solution, allowing their systems to work seamlessly
- without any negative impact on their missions.Their
network had to be scalable in terms of both size and
geographical reach, in order to meet the dynamic needs of
the Gendarmerie.
Page 2 |Allied Telesis Case Study: Gendarmerie Nationale www.alliedtelesis.com
Case Study | Gendarmerie Nationale

A Typical Solution
Equipment used in the solution above
• Core Switch - SwitchBlade®4008
• Edge Switches - AT-8000S, AT-8500
• Routers - AR750S, AR440S
• Media Converters - MC600
In each principle site, an Allied Telesis SwitchBlade®4008
switch has been installed at the network core.The
SwitchBlade provides feature rich, resilient switching
technology capable of dealing with multi-casting for
streaming video, and network control and security. The
ability to prioritize network traffic and control bandwidth
supports converged applications that include both video and
data.
A number of Allied Telesis 8000S series layer 2 Fast Ethernet
switches are implemented at the edge, ensuring high
reliability and enabling simplified management for higher port
density applications. Also implemented are a number of
Allied Telesis AT-8500 series layer 2 managed switches, which
provide features such as advanced attack detection and
suppression capabilities for increased security.
The AT-AR750S routers at the edge provide extensive
IPSec-based VPN capability, which allows offices and remote
tele-workers who require secure access to the network to
be interconnected.The AT-AR750S offers significant advances
in processing performance, Quality of Service (QoS), routing,
remote connectivity, and security. Also implemented are a
number of AR440S routers, providing secure Asymmetric
Digital Subscriber Line (ADSL) leased line routing. Using the
AR440S' ADSL technology as the primary WAN interface,
with its extensive security capabilities, enables secure data
transfer.
www.alliedtelesis.com Allied Telesis Case Study: Gendarmerie Nationale|Page 3
SAPHIR 3G
Branch Offices Branch Offices
Router
Servers
Router
Router
Firewall Firewall
Firewall
AR750S RAS
AR440S
AT-8500
IPSec
IPSec
150 x
100 x AT-8000S
AT-SB4008

Page 4 |Allied Telesis Case Study: Gendarmerie Nationale www.alliedtelesis.com
MC600 Series Media Converters allow Ethernet or Fast
Ethernet to be transported simultaneously with voice over
the existing telephone cables.
Benefits of the new network solution
Resilience
The SwitchBlade 4008 switches provide feature rich, resilient
switching technology capable of dealing with multi-casting
(for streaming video), network control, and security.
High Availability
High availability in the core of the network is also provided
by the SwitchBlade switches, which feature built in
redundancy in switching capacity, control and power supply,
and guarantee maximum uptime and throughput of network
traffic for access to critical applications and online tools.
Scalability
A wide choice of line cards is available for a 4 or 8 slot
SwitchBlade chassis, providing options for connecting to a
range of network equipment, as well as a high capacity for
future expansion.The availability of a 10GbE line card means
future high bandwidth applications can be readily adopted.
Enhanced Functionality
The new network allows users the convergence of voice,
video, and data.The Gendarmerie can now utilize the
network for information sharing efficiently and effectively,
whether they are locally connected or connected to the
national intranet from a remote location.
The use of Layer 3 switches in the network core has
allowed the network to be segmented using Virtual LANs
(VLANs). Some of the advantages of using VLANs are that
users can be grouped together according to their
networking needs - regardless of their actual physical
locations - and that users have the appropriate access to
resources.
Improved Efficiency
Real time, reliable situational awareness facilitates planning
and successful execution of operations. With such a wide
Case Study | Gendarmerie Nationale
ranging scope of operations across France, the
Gendarmerie's new network solution means considerable
improvements in efficiency, with resultant cost benefits.
Security
At the network edge, the Allied Telesis AT-8500 Series
managed switches provide a strong focus on security
features, and are able to detect a number of different Denial
of Service (DoS) attacks. Automated user login provides
controlled access to the network using 802.1x port
authentication
Secure remote connection to central resources is facilitated
by the Allied Telesis AR750S and AR440S routers VPN
(Virtual Private Networking) capabilities. The VPN
connections encrypt all data between the central and
remote sites.
Key decision factors
Allied Telesis' long standing relationship with the
Gendarmerie Nationale has provided a solid understanding
of the Gendarmerie's networking requirements, and enabled
Allied Telesis to successfully secure a number of contracts
over the years. Product training, hands-on support and
outstanding service have all been instrumental in the success
of the relationship. The most recent contracts were secured
in conjunction with APM France and Siemens. Siemens are
well known in the networking industry and highly regarded
for their level of skill and experience.
Another key decision factor was Allied Telesis wide portfolio
of products. The available range meant the Gendarmerie
were able to be confident of meeting a complex set of
requirements from one vendor.
"The network solution perfectly met the Gendarmerie's
requirements for functionality, performance, quality, and reliability;
and the optimum market positioning satisfied the budget
requirements. Thanks to the reliability, support, warranty and
services provided by Allied Telesis, the annual OPEX for
maintenance has decreased for the Gendarmerie since this
solution was implemented"

Future plans
As part of the ongoing infrastructure update, there are plans
to add additional capabilities in the future, such as Power
over Ethernet (PoE) and IPv6, to keep the Gendarmerie's
network at the leading edge.
Incorporating Power over Ethernet
Included in the Allied Telesis product range are devices that
support the IEEE 802.3af protocol PoE. PoE is ideal for
powering a vast array of computing devices over existing
LAN cables, without the need for separate power
connections. PoE provides benefits such as cost-saving,
simplicity of installation and high availability. Common uses
are for wireless access points and VoIP phones.
Evolving from an IPv4 to IPv6 network
Allied Telesis have taken a proactive approach to supporting
the IPv6 evolution, enabling future-conscious customers like
the Gendarmerie Nationale to purchase equipment that will
evolve with them as they move towards IPv6. Today, Allied
Telesis' routers and Layer 3 switches provide comprehensive
software support for IPv6. They support the full
implementation of IPv6 networking and facilitate the
transition from IPv4 to IPv6.
IPv6 will ensure that the Defence Information Environment
can meet the requirements of its users both now and in the
future. IPv6 has features and functions that can allow users
of the Defence Information Environment to manage
information in ways that are not possible using IPv4.
The large address space, inbuilt security and mobility
functions offered with IPv6 will be important enablers for
information sharing amongst future defence forces. Seamless
information exchange is a vital capability in today's
environment, and any breakdown of the information
exchange mechanism between the defence forces has the
potential for catastrophic consequences. With
communication becoming increasingly IP-based, transitioning
to IPv6 will ensure both improved functionality and ongoing
reliability.
Featured Products
SwitchBlade®
AT-SB4008
Layer 3 modular switch
8 line card capacity
Up to 192 Gb ports
AT-8000S/24
24 port Stackable 10/100TX L2 switch with 2 active SFP
bays (unpopulated) and 2 standby 10/100/1000T ports
(RJ45)
AT-8524M-xx
24-port 10/100TX L2+ Switch with
2 expansion bays
AT-8550/GB
48-port 10/100TX L2+ Switch with 2 active
GBIC bays (unpopulated) and 2 standby
10/100/1000T ports (RJ-45)
AT-AR750S
Modular VPN Router 2x WAN 10/100BASE-T ports, 2x PIC
slots, 5 x LAN 10/100BASE-T ports, 1x Asynchronous
console / modem port
AT-AR440S
1 x ADSL port, 5 x 10/100BASE-T ports, 1x PIC slot,
1x Asyn
AT-MC601/2
Extended Ethernet™ over VDSL

USA Headquarters |19800 North Creek Parkway |Suite 200 |Bothell |WA 98011 |USA |T: [phone] |F: [phone]
European Headquarters |Via Motta 24 |6830 Chiasso |Switzerland |T: +41 91 69769.00 |F: +41 91 69769.11
Asia-Pacific Headquarters |11 Tai Seng Link |Singapore |534182 |T: [phone] |F: [phone]
www.alliedtelesis.com
© 2007 Allied Telesis Inc. All rights reserved. Information in this document is subject to change without notice. All company names, logos, and product designs that are trademarks or registered trademarks are the property of their respective owners.
C618-18007-00 Rev. B
About Allied Telesis Inc.
Allied Telesis is part of the Allied Telesis Group. Founded in
1987, the company is a global provider of secure Ethernet/IP
access solutions and an industry leader in the deployment of
IP Triple Play networks over copper and fiber access
infrastructure. Our POTS-to-10G iMAP integrated
Multiservice Access Platform and iMG intelligent Multiservice
Gateways, in conjunction with advanced switching, routing
and WDM-based transport solutions, enable public and
private network operators and service providers of all sizes
to deploy scalable, carrier-grade networks for the cost-
effective delivery of packet-based voice, video and data
services.Visit us online at www.alliedtelesis.com.