Fast access

Because remote access is a mature technology, remote access server vendors today have to go the extra mile to distance themselves from the competition. Since we last looked at remote access servers, vendors have improved performance, refined management interfaces and added features (NW, March 23, 1998, page 41). The best of the current crop is Ascend's Max 6000; its exceptional throughput and rich feature set earn our Blue Ribbon Award.

However, the Max 6000 isn't perfect; it still needs work in the area of scalability. It tops out at 96 analog calls and has only a single power supply.

By contrast, 3Com's Total Control Multiservice Access Platform with HiPer Access System has a rated capacity of 360 simultaneous analog calls and two hot-swappable power supplies. The Total Control system also has superior management features, including its optional EdgeServer Pro Module, which comes preconfigured as a fully functional Windows NT 4.0 Server complete with Microsoft's Remote Access Server (RAS) software.

Nortel, Cisco demur We invited two industry-leading remote access server vendors that declined to submit products for testing. Cisco declined because we opted to use a one client-one modem test bed rather than Midnight Networks' Avalanche/RA remote access performance tester. Nortel Networks initially accepted our invitation and planned to send its 5399 Remote Access Concentrator, which won our comparative review last year. However, Nortel had to back out at the last minute because of scheduling conflicts.

Scalability is also a strength of Lucent's PortMaster 4, which purportedly can support an impressive 864 simultaneous analog calls. (While Lucent plans to acquire Ascend, the vendors do not expect to merge product lines for some time.)

The PortMaster and the other four products we tested - Intel's LanRover Access Switch DPS, Ericsson Datacom Access' Tigris 3-Slot, Cabletron's CyberSwitch CSX7010 and NBase-Xyplex's EdgeBlaster - fell behind the two frontrunners in our ScoreCard.

What made it particularly tough for the other vendors to catch up to Ascend in our ratings was the Max 6000's high throughput.

In the critical download speed tests, the Max 6000 and Cabletron's CyberSwitch were more than 30% faster than the rest of the pack. In a near dead heat for third place were the boxes from Lucent, Intel, Ericsson and 3Com, all of which were within 3K bit/sec of one another in download and upload speeds. NBase-Xyplex's EdgeBlaster was slowest in download and upload performance. (See average download and upload figures, below.)

Some of the units had trouble maintaining download speed as we added clients. (See cumulative throughput graphic, page 46). As in last year's test, Ascend's Max 6000 started out strong, but download throughput dipped 26% as we increased the number of clients from 10 to 60 in increments of 10. NBase-Xyplex's EdgeBlaster and Cabletron's CyberSwitch also lost momentum as we added clients; download performances fell 39% and 22%, respectively. We suspect that one reason for such performance degradation is the increased processing load placed on each server as it compresses outgoing data.

Lucent's PortMaster, Ericsson's Tigris 3-Slot and 3Com's Total Control system turned in the most consistent performances, losing less than 1% of their download speeds up to the 60-client level. Intel's LanRover was close behind with a 9% deviation.

However, fast, steady performance doesn't mean much if a server doesn't have a competitive feature set. Some features are givens. For example, all the remote access servers we tested offer V.90 compression, automatic IP address (pool) assignment for dial-in clients and independently operated password authentication and encryption.

More advanced features begin to differentiate the entries, which vary quite a bit in integration of newer technologies, such as virtual private network (VPN) management and voice over IP, for example.

Ascend's Max 6000 offers a state-of-the-art options package with voice-over-IP technology, dynamic and static firewall features, and support for VPN standard protocols, including Layer 2 Tunneling Protocol, Ascend Tunnel Management Protocol and Point-to-Point Tunneling Protocol. On the downside, the Max 6000 has only four LEDs on the chassis front, giving you scant status information. Ascend also lacks modular flexibility because it has only one power supply.

3Com's Total Control system provides the highest level of versatility with its built-in Windows NT Server 4.0 and a variety of available modem and network cards. Each additional modem and network device card is installed and mapped into the NT server via the chassis backplane in a manner similar to installing a PC peripheral. Using the NT server, any of a number of off-the-shelf firewall, proxy server, fax server and thin-client applications are available.

Lucent's PortMaster 4 has a highly modular design and supports IPX, AppleTalk, SNMP, PPP scripting, IP filtering and multilink connection management using Multilink Point-to-Point Protocol.

Average throughput   Down- load speed in K bit/sec Up- load speed in K bit/sec Max 6000 69.92 107.53 Cyber- Switch 65.96 94.66 Port- Master 4 50.26 63.17 Lan- Rover 48.54 64.78 Ti- gris 3-Slot 48.54 61.87 Total Con- trol 48.49 62.53 Edge- Blaster 31.01 48.59

The LanRover switch from Intel (which acquired Shiva late last month) doesn't offer much in the way of special features when you stack it up against the units from 3Com, Lucent and Ascend. You even need separate boards for 33.6K and 56K bit/sec modems. None of the cards are hot-swappable. Shiva does, however, include a PowerBurst remote client accelerator that provides for speedier dial-up performance.

Ericsson's Tigris also doesn't deliver more than the standard set of features; it, too, requires additional modem cards.

Cabletron's CyberSwitch CSX7010 was the most lacking in advanced features, though the switch does provide for basic authentication, authorization and accounting functions. Additionally, Cabletron was unable to provide unlimited user connections for a single user ID; Cabletron can provide up to 32 user connections per single user ID.

We found NBase-Xyplex's EdgeBlaster to be lacking in flexibility, as well. IPX and AppleTalk support was not available, and the unit was equipped with only a single power supply. An optional VPN management card was unavailable for this review.

Monitoring and managing

Enhanced management interfaces make it easier for administrators to take advantage of these units' advanced features and administer them remotely.

Overall, the menu-driven software of Ascend's Max 6000 is an effective change from the traditional command-line approach. However, many of the commands are buried several layers deep in a tree-like structure. If you can recall five-digit menu codes, you can type them in to directly access sub-menu items, but otherwise you have to go digging. The system includes a new Windows interface on CD-ROM, which you can install on a PC for remote administration. However, we found that the menu-driven text interface included more features and was easier to use.

3Com's Total Control topped our field in the manageability department. Using Microsoft's RAS services on NT Server gives a familiar feel to the Total Control system plus EdgeServer Pro Module. For more sophisticated users, 3Com's Total Control Manager allows for expert fine-tuning of advanced telephony features and enables real-time monitoring of each modem. You can also manage the unit via a command-line configuration program through a PC emulating a TTY terminal.

Lucent's PortMaster 4 relies primarily on a command-line interface but also includes a Windows-based interface called PMVision Version 1.3. A complement to the line interface, PMVision was well-organized and full-featured.

Intel's LanRover unit has a straightforward Windows-based configuration tool called Shiva Net Manager. The configuration software lets you manually enter information or use an assistant that leads you through the process.

Ericsson's Tigris 3-Slot relies entirely on its command-line interface at this point. Although the wordy syntax results in more typing, Ericsson includes a decent set of modern management features. The company's upcoming Web-based management tool was unavailable when we tested the Tigris 3-Slot.

Cabletron's CyberSwitch relies on a command-line interface in conjunction with a simple menu-driven configuration program. We found the basic interface to be poorly organized and difficult to use.

NBase-Xyplex's EdgeBlaster relies almost entirely on its locally loaded, full-featured browser configuration tool; there is no command-line interface. The browser interface resembles a pull-down menu format, which makes management fairly comfortable. However, some functions - such as the add user command - are buried several layers deep, making administrative tasks more difficult. The front panel LCD lets you manually enter an IP address for the unit.After that, you can use Internet Explorer 4.0 or Netscape Navigator to manage the unit remotely. There is no local console port so administrator security is an additional concern.

Scalability

For companies looking to increase their remote user populations, scalability counts. However, just as important as the maximum number of simultaneous users is redundancy, including hot-swappable components and multiple power supplies.

As mentioned, scalability is not a strong point of Ascend's Max 6000, which supports 96 analog calls from its four chassis-mounted T-1 ports. Six slots are available for modem cards supporting the four T-1 ports. A chassis-mounted serial port, 10/100M bit/sec Ethernet port and PC Card slot are also available.

3Com's 17-slot chassis deploys its hot-swappable cards in pairs, with one sliding into the front of a slot and its companion sliding into the rear. For each slot, 3Com offers a full line of modem cards including HiPer DSP (dual/single) PRI/T-1/E-1, channelized 24-port analog modems, 56K bit/sec Quad modems and HiPer Arc Routers.

Geared more toward the service provider market than corporate users, Lucent's PortMaster 4 leads the review pack for sheer size. Lucent's 10-slot chassis can support a single T-3 card (equivalent to 28 T-1 lines). The remaining seven slots can support the T-3 connection via the backplane, each having a Quad T-1 card (four T-1 lines each). For each slot, Lucent offers a full line of modem cards including frame relay, PPP over T-1, channelized T-1, and PRI.

Intel's LanRover accepts its cards vertically instead of horizontally, which could make maintenance more difficult in a rack-mounted unit. The LanRover unit supports 96 connections via two dual T-1 cards. The supporting modems occupy the remaining six slots. The unit has two nonswappable power supplies.

Ericsson's Tigris 3-Slot also supports 96 analog connections using its modular concentrator device, which uses four T-1 ports. In terms of modularity, only three slots are available. Of the three, one slot is occupied by the controller card/PRI/T-1 interface which controls the four T-1 ports. The two remaining slots are available for 48-port modems required for full T-1 support.

Cabletron's CyberSwitch chassis provides 16-slots. A 24-port modem card must accompany each PRI/T-1/E-1 port (thus, one additional port requires two slots); and one PC controller card is required for every four PRI port/modem card pairs. Like Intel's LanRover, the CyberSwitch CSX7010 also accepts its cards vertically instead of horizontally. The industrial-strength chassis, which looks like a PC, comes with two hot-swappable power supplies. However, Cabletron's modem cards are not hot-swappable.

NBase-Xyplex's EdgeBlaster was the least modular of the products we reviewed. The four T-1 ports are on a single card and are not clearly labeled. In addition, the unit houses its cards vertically.

Installation and documentation

We invited each vendor to have a technician on hand during testing to answer our questions and help troubleshoot any problems we encountered. Only Intel and NBase-Xyplex did not send a technician. In both cases, however, we had no trouble getting the units up and running without onsite support.

In fact, NBase-Xyplex's EdgeBlaster was the easiest and quickest unit to install of those we tested. The documentation was excellent and readily available on the unit's built-in hard disk drive, thanks to a Web-style search engine.

Ascend provided the most complete and easy-to-use documentation package with the Max 6000. Used in conjunction with the menu interface, the reference guide is an invaluable troubleshooting resource.

Mapping additional modem cards to 3Com's NT RAS Service via the backplane can be a bit difficult, but the Total Control system's documentation is full of good illustrations and 3Com's support was helpful.

We installed and configured Lucent's PortMaster 4 easily with a well-organized graphical user interface tool. Helpful installation manuals and comprehensive CD-ROM documentation were available when we needed them.

With Intel's LanRover unit, we required customer support to resolve some minor interface problems; however, overall we were pleased with the wizard-based configuration guides and additional CD-ROM documentation.

Despite the lack of a graphical interface, we had no trouble getting through the command-line interface of Ericsson's Tigris 3-Slot. The company provided voluminous printed documentation and online help. Conversely, a poorly organized user interface made installing Cabletron's CyberSwitch CSX7010 tricky, and the minimal documentation provided didn't help matters.

Wrap-up

There are many factors to consider before settling on a remote access server. If throughput is your main priority, Ascend's Max 6000 is a solid choice reinforced by the unit's range of features and compact design. But a lack of scalability clouds the Max 6000's Blue Ribbon Award win.

While not as fast as the Max 6000, the Total Control system from 3Com excels at manageability and scalability, earning it a very close second in our tests. Our one complaint is that there is no way to properly shut down the integral Windows NT Server before powering down the chassis.

Lucent, too, offers greater scalability in its PortMaster 4. Its 864-call capacity is greater than what most mid-size to large enterprises require, but it's backed by a redundant power supply and hot-swappable cards. However, you'll sacrifice throughput for scale with the PortMaster.

Easy configuration is common to Intel's LanRover and Ericsson's Tigris 3-Slot, though both are held back by limited modularity. Impressive throughput isn't enough for us to recommend Cabletron's CyberSwitch CSX7010; its feature set is sparse, and its cards are not hot-swappable. Easy installation and a compact design are also not enough to move NBase-Xyplex's EdgeBlaster to the front of the line.

RELATED LINKS Scorecard and NetResults
How we ranked the servers in various areas, vendor contact info and pricing.

How we did it
A look at our test methodology. Network World, 3/29/99.

Interactive buyer's guide
Find the server that best matches your criteria, or compare two or more in several categories. Network World Fusion, 3/29/99.

Remote access: Have it your way
A look at remote-access trends. Network World, 3/29/99.

RFP Central: Remote access
With the help of the Tolly Group, we solicited vendors for detailed remote-access proposals for a large enterprise. See the RFP and the responses we got. Network World Fusion, 3/29/99.

Van Cleve is network project manager and Chu is a network test engineer at NTS/XXCAL Testing Laboratories in Los Angeles, a worldwide independent test lab specializing in software and hardware compatibility, functionality and performance testing. You can contact them at vancleve@ ntsxxcal.com or visit the NTS/XXCAL Web site.