PEXIM Solutions

Pexim Solutions teamed up to create a sustainable E-Bank network architecture. As a Cisco Partner Certified, the network was developed using the Cisco framework recommendations, experience and equipment.

The network is consisted of the following building blocks:

Egde Routers
Access Server
Multilayer Switch
PIX Firewalls
Servers
VPN

Edge Routers are located at the perimeter of an E-Bank network and provide
several functions. The Cisco 3620 server is the right choice for Internet router that connects the iBank Service Center to Internet. The Cisco 3620 has two network module slots. Dial connectivity is supported with network modules offering different services. On the side of the bank, the choice is on Cisco 1720 Router with more modest characteristics.

The Access Server is located at the edge of the network and provides Dial-In and Dial-Out access to the iBank network. The engineers decided to use Cisco 3640 server, router from the 3600 series which has, on the contrary of 3620, four network modules. It is equipped with additional modems pool. The Cisco 3600 supports the most complete set of access protocols including Point-to-Point Protocol (PPP), integrated analog and digital modems, dial-out and fax-out. It makes this server suitable for Fax, WAP and Call Center services.

The security concern is provided with the use of extended access lists (ACL-s) and IOS Firewall Features. The Cisco 3600 routers are fully scalable. The Cisco implementation of the Multichassis Multilink Point-to-Point Protocol (MMP) allows starting small and scale additional access servers as required.

The Multilayer Switch interconnects the servers with high speed. Suitable solution is Cisco Catalyst 2950. The Catalyst switches offer a high degree of intelligent network services, such as security, high availability, and scalability.

PIX Firewalls are used to secure connections from front-end to back-end servers. The high performance Cisco PIX 515 firewall is implemented. With accommodation of extensive load and fast performance, the Cisco PIX 515 is the best fit for the given iBank environment.

The Servers have different configuration, depending mainly on their function. The WEB server are Intel Board Servers with dual Intel Pentium IV 1 GHz processors, 2 GB RAM, 2-100 NIC-s, one connected to the front-end network and second trough the firewall to the back-end network. The dispatcher servers are with the same configuration, placed behind the firewall. The Data Server is extended with RAID Disk Array and extra memory for additional availability and data security. The servers are designed to sustain scale-in and scale-out expansion.

VPN is an autonomous network deployed as an alternative to the wide-area network (WAN) infrastructure to replace or increase existing private networks, employing the same security and management. MPLS-based VPNs use the peer model and Layer 3 connectionless architecture to take advantage of a highly scalable VPN solution. This solution is affordable and cost effective for establishing reliable and secure connection between the iBank Service Center and Banks.

Picture shows the whole network architecture of the iBank Service Center. The design fulfills the requirements for security scalability and high availability.

The back-end network, behind the Firewall are the Data Server and the Dispatcher Servers. In the front-end is the Web server that is connected to Internet and trough the Firewall to the back-end network. The Dispatcher Servers work as service providers for the various channels of communication offered to the banks customers. The WEB server sustains a large part of Centers traffic load and is designed to be scalable, secure and highly available.

Trough the Internet, the Center communicates with the SMS Server of Mobimak. MPLS VPN network is formed to establish reliable private and secure link to the banks. The Center is also connected to various public service companies. The Access Server functions as a modem pool for the fax channel, an access server for the WAP service, and also as a Dial-In for the Interactive Voice Response (IVR) Call Center service.