Multi-Access Gateway

Scale, secure and empower your broadband edge for the AI era

The broadband edge, the critical network demarcation point that manages subscriber access to digital content and applications on the Internet and in cloud data centers, is undergoing profound changes driven by the exponential traffic growth, escalating DDoS security threats, shifting user demands and emerging real-time application paradigms of the AI era.

Nokia Multi-Access Gateway: A future-ready broadband edge

The AI era presents new growth opportunities for broadband service providers but also introduces challenges to sustain profitability and maintain brand equity, customer loyalty and your competitive edge in a rapidly changing market.

The Nokia Multi-Access Gateway (MAG) offers a scalable, secure and future-ready subscriber management solution that can help transform your broadband edge from being merely a network gatekeeper to a powerful tool for market expansion, service innovation and operational simplification.

Discover next how the Nokia MAG can help you stay ahead of the curve and thrive in the AI era.

Broadband edge evolution for the AI era with Nokia

Overview

Scale your edge on a Multi-Access Gateway

Delivering fast, affordable and seamless broadband everywhere requires a combination of access technologies. The Nokia MAG is a comprehensive solution designed to converge both wireline and fixed-wireless access (FWA) - onto a single, unified broadband edge for optimal cost and deployment synergies.

Converge wireline and fixed-wireless access

The MAG supports two critical network roles:

Broadband Network Gateway (BNG) to help you fully capitalize on investments in multi-Gigabit PON fiber access as you replace legacy copper and coaxial access loops.
Fixed-Wireless Access Gateway (FWAG) to rapidly deliver fiber-grade broadband services over 5G/LTE fixed–wireless access.

The MAG’s unique ability to converge wireline and FWA traffic on a unified broadband edge lets you:

Reduce network complexity and optimize economies of scale
Leverage the most efficient access technology for any location
Deliver seamless and affordable broadband services everywhere

Its flexible deployment options, as integrated, virtualized or disaggregated broadband edge gateway with control and user plane separation provide a scalable foundation for sustainable growth.

Download the Broadband Network Gateway brochure

Download the Fixed-Wireless Access Gateway brochure

Secure your edge against DDoS attacks

In today's threat landscape, network security is not an afterthought but a critical requirement. The broadband edge, as the aggregation point for thousands or millions of subscriber devices, is a prime target for Distributed Denial-of-Service (DDoS) attacks that can congest your network, cripple services and deny access to legitimate users.

Turn DDoS threats into revenue opportunities

As you connect more users at faster speeds, the risk of successful DDoS attacks causing service outages, damage brand reputation, and potential revenue loss increases exponentially.

The Nokia Multi-Access Gateway lets you convert rising DDoS security threats into new revenue growth opportunities. It leverages the AI/ML-powered DDoS analytics of Nokia Deepfield Defender to transform the broadband edge from a vulnerable target into a powerful and proactive shield:

Accurately detect and automatically block DDoS attacks in seconds
Filter DDoS traffic without impacting service performance or affecting legitimate traffic
Mitigate inbound attacks from botnets and outbound attacks from compromised subscribers

Mitigating DDoS attacks on-net and in-line at the broadband edge is also faster and more cost-effective than diverting affected user traffic to off-net scrubbing services and better addresses data sovereignty concerns and regulatory constraints of the AI era.

Download the Nokia Deepfield Defender solution sheet

Empower your edge for the AI era

The infusion of AI into a vast array of user devices and applications ushers in a new era of digital services and innovative user experiences. Emerging AI applications - from interactive AI assistants to immersive XR experiences and autonomous agents – are creating new opportunities to add user value, drive revenue growth and streamline operations.

Build a path to a profitable broadband future

The next wave of intelligent digital services and innovative user experiences will transform the way we work, learn, play and connect. Legacy BNG and broadband edge solutions optimized for best-effort Internet access and video streaming lack the capacity and capabilities to meet the demands of the AI era.

The Nokia Multi-Access Gateway - with its high-performance, low-latency data path and scalable architecture - provides the essential foundation to support responsive, resilient and reliable access for real-time AI workloads. With the MAG you can:

Create innovative services that drive new revenue growth
Enhance the user experience and inspire customer loyalty
Stay ahead of the competition and thrive in the AI era

By investing in a future-ready broadband edge today, you can capitalize on the opportunities of tomorrow.

Read the e-Book: Broadband evolution for the AI era

Build a foundation for sustainable growth

Operational efficiency and flexibility are essential for sustainable growth under changing conditions. The Nokia 7750 Service Router (SR) family provide a high-performance, carrier-grade foundation for deploying the Nokia Multi-Access Gateway functionalities

Unmatched scale and performance of FP5 silicon

Nokia Service Routers are powered by custom-designed FP network processors, including our latest-generation FP5 packet processor. FP5 offers:

Programable NPU with 6 Tb/s forwarding capacity with line-rate buffering to scale service capacity and capabilities well into the future
Granular per-subscriber and per-service QoS policy and deterministic performance at scale for all service combinations and usage conditions
Line-rate DDoS filtering and data encryption to protect broadband subscribers and services against security threats.

Proven reliability and rich features of SR OS

The entire solution is powered by the Nokia Service Router Operating System (SR OS), a scalable 64-bit OS with a comprehensive suite of IP routing applications. SR OS has proven its reliability and performance with world-wide deployment in over 1500 service provider networks, including 300 broadband edge deployments.

Applications and features Related resources

Applications and features

Broadband Network Gateway (BNG/LAC)

Deliver wireline broadband services using multi-rate PON fiber access, xDSL over twisted copper pairs or hybrid fiber-coaxial access (HFC).

BNG/LAC encompasses the core subscriber management functions for multiservice Ethernet-based broadband access aggregation of IPoE and PPPoE subscriber sessions with IPv4 and/or IPv6 address assignment, as defined in Broadband Forum specifications TR-101 and TR-178. Home gateways can be in bridged or routed mode and both static and dynamic host configuration are supported. Authentication, authorization, and accounting of subscriber sessions can be performed via RADIUS, DHCP, DIAMETER, or a local database.

Read the Broadband Network Gateway datasheet

Fixed-Wireless Access Gateway (FWAG)

Deliver cost-efficient, fiber-grade broadband services to residential and business users over fixed-wireless access by leveraging the superior scalability and performance of Nokia 7750 SR routing platforms.

Supports Serving and PDN Gateway functions (SPGW) for 4G/LTE FWA together with wireline BNG deployments on Nokia service routers as integrated solution. For disaggregated 4G/LTE SPGW control plane operation and 5G Session Management Functions (SMF), you can deploy the Nokia MAG controller (MAG-c) while User Plane Functions (UPF) can independently scale on Nokia service routers. The MAG-c supports 3GPP Service-Based Architectures (SBA) in 5G Non-Standalone (NSA) or Standalone (SA) mode using standard interfaces (S11/N11, N7, N10).

Read the Multi-Access Gateway controller datasheet

Read the Fixed-Wireless Access Gateway brochure

Additional Multi-Access Gateway applications

Leverage Extended Service Appliances (ESA) to enhance SR routers with advanced packet processing functions for L2 tunnel encapsulation/de-encapsulation, application assurance, video quality monitoring, Network Address Translation and more.

Read the Extended Service Adapter data sheet

Layer 2 Tunneling Protocol Network Server (LNS)

Deliver broadband access wholesale to Internet Service Providers (ISP)

Deploying Extended Service Appliances (ESA) in conjunction with 7750 SR routers allows you to offer the same industry-leading subscriber management services to broadband users terminated on L2TP sessions as those available on the 7750 SR for IPoE and PPPoE subscriber management. Supported tunneling protocols include PPPoL2TP and Multi-Link PPPoL2TP. The BNG of the access wholesaler acting as a Layer 2 Access Concentrator (LAC) will aggregate and hand off subscriber traffic in Layer 2 tunnels to the LNS operated by the ISP.

Trusted Wireless Access Gateway (TWAG)

Broadband access wholesale or retail using unlicensed carrier Wi-Fi® hot spots using open or closed single sign-on.

The Trusted Wireless Access Gateway (TWAG) functionality enables the 7750 SR to aggregate tunneled traffic and/or L2 switched traffic from the WLAN Access Points (APs) and/or WLAN Access Controllers (ACs). The solution supports both Open SSID with authentication through a captive portal, and Closed SSID through EAP-PEAP and EAP-SIM, with seamless inter-AP mobility across SSIDs through DHCP or SLAAC control triggers. Multiple access and tunneling options are supported including L2oGRE, L2TPv3, MPLS pseudowires and L2GREoIPSec.

Network Address Translation (NAT)

Conserve IPv4 addresses and maintain IPv4 internet access while migrating to IPv6.

Carrier-grade Network Address Translation allows conservation of IPv4 addresses and maintenance of IPv4 internet access while migrating to IPv6. Operators can apply L2-aware NAT as a fully integrated subscriber management option, and later move to Large Scale NAT, Dual-Stack Lite and NAT64. Deterministic NATP and various NAT logging options are available based on RADIUS, syslog and cflowd.

Video Quality Monitoring (VQM)

Deliver a superior Quality of Experience for premium OTT and IPTV broadcast content with fast channel change, RTP retransmission and IP multicast resiliency.

Enables efficient, low latency and live video streaming solution for both IPTV and OTT subscribers, without requiring multicast or IGMP support, including IETF/DVB standardized RTP packet retransmission of linear broadcast TV, sub-second channel changes, and protection of live broadcast TV multicast streams against network failures. For more information refer to Nokia IP video broadcast optimization.

Application Assurance (AA)

Assure the quality of experience for internet video, audio, voice, gaming and other premium content.

AA leverages the Extended Service Appliances (ESA) to extend the service depth and application capabilities of the Nokia 7750 SR by enabling Layer 3 to Layer 7 (L3–L7) visibility and intelligent control of IP applications, with extensive per-application, per-subscriber or per-VPN service policies. In addition, AA provides application reporting and offering enhanced and personalized services with per-application charging capabilities.

Why deploy the Nokia Multi-Access Gateway

Expand the capacity and reach of your broadband services

Implement a multi-access strategy to deliver affordable and reliable broadband anywhere.
Manage subscribers on a unified broadband edge to optimize costs.
Choose from a range of platform options to optimize performance.

Simplify your operations and streamline service delivery

Enable seamless single-sign-on user access with a broad range of authentication methods.
Automate services with Python scripting and model-driven APIs.
Integrate or disaggregate user and control plane functions to optimize deployment needs.

Ensure a superior broadband user experience anywhere

Rely on our industry-leading FP routing silicon for blazing speed and deterministic service performance
Apply granular policy control per subscriber, device, and application.
Automatically detect and mitigate congestion on shared access media and protect users against DDoS attacks.

Evolve your broadband edge for emerging AI applications

Assure deterministic QoS for high-bandwidth, low-latency data traffic
Secure connectivity with quantum-safe data encryption
Seize new market opportunities for hosting AI edge compute

Overview Related resources

Related resources

Application notes

Broadband Network Gateway evolution with control and user plane separation

Brochures

Customer success

Datasheets