Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Add an L3VPN Service Instance

A Super User or Network Admin can use Paragon Automation to provision an L3VPN service in their network.

When you create and save an L3VPN service instance, Paragon Automation generates a create service order. After you publish the service instance, Paragon Automation activates the automated workflow for fulfilling the service order and provisions the service in the network.

You can create an L3VPN service instance by uploading a preconfigured JSON file or by entering the details in the UI fields on the Add L3 VPN Service page.

To create an L3VPN service instance:

  1. Click Orchestration > Instances.

    The Service Instances page appears.

  2. Click Add > L3 VPN.

    The Add L3 VPN Service page appears.

  3. In the General section, enter the values by referring to Table 1.
  4. Click Next to proceed to the Site Settings section.
  5. Enter site-specific details in the Site Settings section. See Add L3VPN Service Site Details.

    If you upload a preconfigured file, the values specified in the file are automatically populated in the corresponding UI fields.

  6. Click Next to proceed to the Summary section.

    You see a graphical map of your service topology and a summary of the instance details in the Summary section.

  7. (Optional) Click Export to export and save the service details in JSON format on your local system.
  8. Click Save.

    The new service instance you created is displayed on the Service Instances page.

  9. Select the service instance on the Service Instances page and click Publish to activate the automated workflow for provisioning the service.
Table 1: Fields in the Add L3VPN Service Page General Section



Upload JSON File

Click Browse to upload a preconfigured JSON file.

You see a message that the file is successfully imported. The values specified in the file are automatically populated in the corresponding UI fields.


Enter the name of the customer for whom you are provisioning the service. The name must be unique within an organization.

Alternatively, click the Add Customer link to create a new customer. See Add a Customer.

Instance name

Enter a name for the service instance. For example, l3vpn.

The instance name can be a set of alphanumeric characters and the special character hyphen (-). The maximum number of characters allowed is 64.


Enter the ID you want to assign to the VPN.

The VPN ID must not exceed 64 characters.

VPN Service Topology

Select a topology for the VPN service:

  • Any-to-any topology—In this service topology, all VPN sites can exchange network traffic with each other without any restrictions.

  • Hub-spoke topology—In this service topology, spoke sites can exchange network traffic with hub sites, but not with other spoke sites. The hub sites can exchange network traffic with other hub sites.


    The hub-and-spoke VPN topology is a beta feature in this release.