Punjab National Bank : WAN IT infrastructure with IPsec

PNB has 4680 branches on the point-to-point network with around 3700 branches
connected through CBS. As per RBI guidelines, financial data exchange between
branches and the data center has to be encrypted. So, PNB decided to deploy
IPsec encryption to secure all its data transfer over the WAN. IPSec encryption
is being used as DPD (Dead Peer Detection), RRI (Reverse Route Injection) and
HSRP (Hot Standby Routing Protocol). In this method, the IP Sec tunnel is formed
in between the peer routers (branch/NC/ZNC router to VPN Concentrator). The DPD
is used to check whether the end router is alive or not. In the RRI process,
routes are injected into routing protocol to distribute surrounding devices.
This directs traffics to appropriate head-end (VPNC) through correct SAs
(Security Associations) and avoids policy mismatch & packet loss. The project
was implemented in three phases without any downtime taken for applications. The
project has given more confidence to our existing customers and enabled the Bank
to bring in more clients and business.