Lumen® SD‑WAN with Cisco Viptela®

Secure virtualization for large‑scale networks.

Lumen® SD‑WAN with Cisco Viptela®

Secure virtualization for large‑scale networks.

Overview

Lumen® SD‑WAN with Cisco Viptela® provides advanced routing, segmentation and security capabilities for interconnecting complex enterprise networks with centralized policy and orchestration.

Network service insertion ‑ consolidate network services at centralized locations and route traffic with simple policy changes.
End‑to‑end network segmentation ‑ secure sensitive traffic among different lines of business with end‑to‑end segmentation. Rapidly onboard partners over any transport in enterprises with a dynamic partner ecosystem.
Encryption at scale ‑ provide powerful encryption capabilities using automated key management and device authentication to secure nearly any infrastructure. Transport‑agnostic VPNs provide a secure IP fabric over any underlying transport.

Overview

Lumen® SD‑WAN with Cisco Viptela® provides advanced routing, segmentation and security capabilities for interconnecting complex enterprise networks with centralized policy and orchestration.

Network service insertion ‑ consolidate network services at centralized locations and route traffic with simple policy changes.
End‑to‑end network segmentation ‑ secure sensitive traffic among different lines of business with end‑to‑end segmentation. Rapidly onboard partners over any transport in enterprises with a dynamic partner ecosystem.
Encryption at scale ‑ provide powerful encryption capabilities using automated key management and device authentication to secure nearly any infrastructure. Transport‑agnostic VPNs provide a secure IP fabric over any underlying transport.

Business woman standing above a factory floor in a warehouse while working on a tablet

Common deployment options

Broadband + LTE, which is ideal for low‑priority branches or remote locations
Dual broadband, which is ideal for networks without MPLS, at branch locations or data centers
MPLS + dedicated internet, which is ideal for sites with mission‑critical applications, typically data centers and/or headquarters

Common deployment options

Broadband + LTE, which is ideal for low‑priority branches or remote locations
Dual broadband, which is ideal for networks without MPLS, at branch locations or data centers
MPLS + dedicated internet, which is ideal for sites with mission‑critical applications, typically data centers and/or headquarters

Components

vSmart Controller

Virtual appliance
Runs on VMware vSphere ESXi Hypervisor
Establishes secure Datagram Transport Layer Security (DTLS) connections to each vEdge router in the network
Overlay Management Protocol (OMP) to share routes, security and policy info

vEdge Routers

Uses preinstalled security credentials to automatically authenticate each new vEdge device before it joins the network
Centralized policy engine in the vSmart controller provides rich inbound and outbound policy constructs to manipulate routing information, access control, segmentation, extranets and service chaining
Full‑featured IP routers perform standard functions such as OSPF, BGP, QoS, ACLs, and routing policies
Integrated enterprise firewall functionality
Automatically establishes secure DTLS sessions with the vSmart controller and standard IPsec sessions with other vEdge routers
vEdge 100 router includes tabletop and 1RU sizes and 100 Mbps encryption capacity
vEdge 1000 router includes half‑width and 1RU sizes and 1 Gbps encryption capacity
vEdge 2000 router includes full‑widths and 1RU and 10 Gbps encryption capacity

vBond Orchestrator

Virtual appliance enabling configuration management and monitoring of the solution
Runs on VMware vSphere ESXi Hypervisor with a minimum of two vCPUs and 4GB of memory
Minimum of two vCPUs and 8GB of memory

vManage Network Configuration and Monitoring System

Virtual appliance enabling configuration management and monitoring of the solution
Runs on VMware vSphere ESXi Hypervisor with a minimum of two vCPUs and 8GB of memory
Centralized policy and distributed enforcement including Overlay Management Protocol to eliminate bottlenecks and enable quick turnaround in network changes
Automated secure bringup including Trusted Platform Module (TPM) chip with signed certificate to help ensure automated authentication of vEdge routers joining the network
Integrated enterprise firewall including user‑based security policies and segmentation, IPsec, VPN, NAT and ACLs standard to enhance security and simplify infrastructure management
Encrypted control and data traffic that can scale to multiple tens of thousands of network endpoints and 100K+ routes while still providing multipoint security
Scale‑out architecture with redundancy that can withstand multiple failures in the overlay network for both the control and data plane
End‑to‑end network segmentation that can be rapidly enabled without additional control plane protocols to protect the network from internal and external threats

Components

vSmart Controller

Virtual appliance
Runs on VMware vSphere ESXi Hypervisor
Establishes secure Datagram Transport Layer Security (DTLS) connections to each vEdge router in the network
Overlay Management Protocol (OMP) to share routes, security and policy info

vEdge Routers

Uses preinstalled security credentials to automatically authenticate each new vEdge device before it joins the network
Centralized policy engine in the vSmart controller provides rich inbound and outbound policy constructs to manipulate routing information, access control, segmentation, extranets and service chaining
Full‑featured IP routers perform standard functions such as OSPF, BGP, QoS, ACLs, and routing policies
Integrated enterprise firewall functionality
Automatically establishes secure DTLS sessions with the vSmart controller and standard IPsec sessions with other vEdge routers
vEdge 100 router includes tabletop and 1RU sizes and 100 Mbps encryption capacity
vEdge 1000 router includes half‑width and 1RU sizes and 1 Gbps encryption capacity
vEdge 2000 router includes full‑widths and 1RU and 10 Gbps encryption capacity

vBond Orchestrator

Virtual appliance enabling configuration management and monitoring of the solution
Runs on VMware vSphere ESXi Hypervisor with a minimum of two vCPUs and 4GB of memory
Minimum of two vCPUs and 8GB of memory

vManage Network Configuration and Monitoring System

Virtual appliance enabling configuration management and monitoring of the solution
Runs on VMware vSphere ESXi Hypervisor with a minimum of two vCPUs and 8GB of memory
Centralized policy and distributed enforcement including Overlay Management Protocol to eliminate bottlenecks and enable quick turnaround in network changes
Automated secure bringup including Trusted Platform Module (TPM) chip with signed certificate to help ensure automated authentication of vEdge routers joining the network
Integrated enterprise firewall including user‑based security policies and segmentation, IPsec, VPN, NAT and ACLs standard to enhance security and simplify infrastructure management
Encrypted control and data traffic that can scale to multiple tens of thousands of network endpoints and 100K+ routes while still providing multipoint security
Scale‑out architecture with redundancy that can withstand multiple failures in the overlay network for both the control and data plane
End‑to‑end network segmentation that can be rapidly enabled without additional control plane protocols to protect the network from internal and external threats

Pricing and Features

SD-WAN solutions are customized for your business needs and pricing varies. Please contact us to receive an accurate pricing quote.

Pricing and Features

SD-WAN solutions are customized for your business needs and pricing varies. Please contact us to receive an accurate pricing quote.

Lumen® SD‑WAN with Cisco Viptela®

Custom pricing

GET QUOTE

Lumen® SD‑WAN with Cisco Viptela®

Custom pricing

Intelligent routing and control

Forwarding paths

2 or more

SD‑WAN cloud instance support

SD‑WAN throughput

Up to 10 Gbps

Wi‑Fi

Limited availability

Enterprise firewall

Data analytics

Customer self‑service

Global availability

Locations supported

No minimum

Deployment

Info Hover (Optional)

On‑premises
Cloud or data center

Threat management

Support and Service Options

Lumen offers multiple ways for you to get support for SD-WAN. Our Customer Care team is ready to assist 24/7.

Support and Service Options

Lumen offers multiple ways for you to get support for SD-WAN. Our Customer Care team is ready to assist 24/7.

By partnering with Lumen for your SD‑WAN solution, you get all its benefits without the overhead of managing, configuring and provisioning on a manual basis. You get the control without the hassles.

Help portal for Lumen SD‑WAN