The Cisco Wireless Security Gateway (WSG) was designed to address the huge scale requirements of modern mobile deployments. Deployed on a Cisco Service and Application Module for IP (SAMI) blade on a Cisco 7600 Series Router, each WSG service module supports 100,000 IPSec tunnels with a tunnel establishment rate of over 270 tunnels per second and full-duplex throughput of over 2Gbps
Important Features
The Cisco WSG provides secure tunneling for:
- Femtocell deployments
- Picocell deployments
- Unlicensed Mobile Access (UMA)/Generic Access Network (GAN) traffic
- 3G and 4G traffic
Key Innovations
The Cisco WSG:
- Supports Internet Key Exchange 2 (IKE 2) which is required by 3GPP (3rd Generation Partnership Project) for Femtocell and UMA/GAN applications
- Supports up to 8 SAMI blades for a maximum capacity of 800,000 IPsec tunnels, with a tunnel establishment rate of 2,160 tunnels/sec and full-duplex throughput of over 16Gbps
Key Services
- Processes IKEv2 initialization requests from endpoints
- Creates IPSec tunnels
- Exchanges information with endpoints
- Authenticates endpoints
- Assigns IP addresses to endpoints
- Does cryptographic algorithm negotiation
- Rekeys security associations (SAs)
- Does traffic selector negotiation
- Supports network address translation (NAT) traversal
- Encrypts, decrypts, authenticates, encapsulates, and decapsulates packets
Additional Resources