Nortel Networks has created a “VPN-ablement framework” that the company says will help service providers reap profits from new data services.

Based on familiar Nortel devices, including the Alteon SSL VPN platform, the Shasta 5000 Broadband Service Node (BSN), the Contivity IP Services Gateway, as well as the OPTera Ethernet and Passport Multiservice WAN switches, this framework is designed to help carriers win enterprise clients with hosted IP services, said Ed Daugavietis, the firm’s senior manager, virtual private network (VPN) product marketing in Brampton, Ont.

“Today we find most enterprises are building their own VPNs. It’s the do-it-yourself model – get some IPSec boxes and configure them to talk to each other over IPSec tunnels.”

Nortel is out to change the status quo, however. “There are some real attractions to going with a managed service model,” Daugavietis said, pointing out that hosted and managed services allow enterprises to focus on their core business functions, rather than network connectivity. “We think the providers have a huge opportunity.”

To help carriers seize the day, Nortel has connected some of its products together to create four new services. The first offering combines the Alteon SSL VPN platform and the Shasta 5000 BSN to comprise a hosted SSL VPN solution, designed to make remote access easier for the enterprise to manage.

This service brings together Shasta’s IP services and Alteon’s clientless remote access capabilities, such that end users need only a Web browser to access corporate applications while out of the office. According to Nortel, the offering, which would be hosted by a service provider, frees the enterprise from infrastructure management and spells a new revenue stream for the carrier.

The second product connects Nortel’s Optical Ethernet switches with its Passport switches, such that carriers can offer an Ethernet “on-ramp” to Passport IP VPNs, and provides site-to-site Ethernet VPN connectivity across a Passport WAN.

Daugavietis said this speaks to the service provider’s drive for revenue, while minding its fear of expenditures. “If you want to do coast-to-coast Ethernet, the cost of fibre rings across the country and lighting fibre can be fairly daunting. We’re saying…’Build your Ethernet VPNs at the edge of the network and hook them into your existing WAN network, and use the ATM WAN as your core network.”

Third, Nortel combined Contivity’s IPSec and Passport’s IP services, such that businesses can rest assured their data is encrypted as it traverses the WAN.

Lastly, the company has amended its Passport switches, adding features like non-stop OSPF to improve control plane switchovers, and “round trip delay measurements” to help carriers design realistic service level agreements (SLAs).

Daugavietis said the prices of products in the VPN-ablement framework wouldn’t change as a result of this announcement. For more information, visit Nortel online at