Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Add L3VPN Site and Site Network Access Details

An L3VPN service is provisioned on a collection of sites to exchange network traffic over a shared IP infrastructure. Use the Customer Site Settings page of the Add L3VPN wizard to enter details of sites that you want to connect to the VPN.

Before adding the L3VPN site and site network access details, you must create an L3VPN service instance and enter general details about the service. Follow steps 1 to 4 of the Add an L3VPN Service Instance to create a new instance and add L3VPN service general details.

You configure the following on the Customer Site Settings page:

Add L3VPN Site

An L3VPN site refers to the geographical area where the VPN service spans. To add an L3VPN service site on the Customer Site Settings page:

  1. Click the add (+) icon on the top-right corner of the Customer Sites section.

    The Add Site page appears.

  2. Enter site ID, location, and device values by referring to the following table:
    Note:

    Fields marked with an asterisk (*) are mandatory.
    Table 1: Fields on the Add Site Page (L3VPN)

    Field

    Description

    Site ID*

    Enter a unique site ID to identify the customer site in the network. For example, site1.

    The site ID can contain alphanumeric characters and special characters hyphens (-) and underscores (_). The maximum number of characters allowed is 64.

    Locations

    Location ID*

    Enter a unique ID for a location in the site. For example, MAN for Manhattan and BRO for Brooklyn in the New York site.

    Address

    Enter the address (number and street) of the location in a site. For example, 123, Avenue Street.

    City

    Enter the city where the site is located. For example, MAN for Manhattan.

    Country Code

    Enter the ISO alpha-2 code of the country where the site is located. For example, US for United States of America and CH for Switzerland.

    Postal Code

    Enter the postal code of the location in the site. For example, 10001 for Manhattan.

    State

    Enter the state in which the site is located. If the country doesn't have states, enter the region in which the site is located. For example, NYC for New York City.

    Access Interface (or CE reference)

    Devices

    Enter or select the CE devices to be used for the L3VPN service at the site. For example, ACX-CE-1.

    This parameter allows the customer to request for devices from the service provider to be installed at the site.

  3. Enter maximum routes value:
    1. Expand Maximum Routes and click the add (+) icon on the top-right corner of the Address Family section.
      The Address Family page appears.
    2. Click the Af drop-down to select either IPv4 or IPv6 address family to configure routing for the virtual routing and forwarding (VRF) table.
    3. Enter the maximum routes value.

      Enter a value in the range 0 through 4,294,967,295.

      This value indicates the number of routes that the VRF table can accept for the IPv4 and IPv6 address families.

    4. Click OK.
      The details you entered are listed in the Address Family table.
    5. (Optional) To edit or delete an entry, use the edit or delete options present above the Address Family table.
  4. Do any of the following:

    • Click Cancel to exit the Add Site page without saving the changes you made.

    • Click OK to save the site details you added. The site you added is listed in the Customer Sites table.

    You can view the configured properties and the number of maximum routes by expanding Properties.
  5. Expand the following sections on the Add Connection page and configure the remaining site network access parameters.

Add L3VPN Site Network Access Parameters

After you add a site for the L3VPN service, you must configure the parameters for the network access (connection) between the site and the service provider network. A site network access defines how a site is connected to the service provider network.

To add site network access parameters:

  1. Select and expand the site-ID in the Customer Sites table.

  2. Click the add (+) icon above the Site Network Access table.

    The Add Connection page appears.

  3. Enter the site network access ID, device reference values, and connection type by referring to the following table:

    Table 2: Fields on the Add Connection Page (L3VPN)

    Field

    Description

    Site Network Access ID*

    Enter a unique ID for the connection between the site and the service provider network. For example, MAN-access-1.

    Access Interface (or CE reference)

    Click the drop-down list to select a CE device for the connection.

    The drop-down list displays the devices that you specified on the Add Sites page.

    Access Type*

    Click the drop-down list to select a connection type between the site and service provider network from the following options:

    • irb—Select irb to enable both Layer 2 bridging and Layer 3 routing on the same interface.

      Note:

      • When you select irb as the connection type, the Device Reference, Access Diversity, Bearer, and Connection, and Stitching parameters are hidden.

      • Configuring IRB interfaces for an L3VPN service is qualified only for the following scenarios:

        • L3VPN with EVPN having regular untagged interfaces with OSPF as PE-CE protocol and insights.

        • L3VPN with EVPN having regular untagged interfaces with BGP as PE-CE protocol and insights.

        • L3VPN with EVPN having interfaces in VLAN mode with OSPF as PE-CE protocol and insights.

        • L3VPN with EVPN having interfaces in VLAN mode with BGP as PE-CE protocol and insights.

    • regular—Select regular for standard Layer 3 VPN connection type between the site and service provider network.

      By default, the regular connection type is selected.

    • stitching-endpoint—Represents the initiating side of a service stitch (the creator side or the left-side of the stitch).

      If you select this access type, a Stitching section is included in the Configure Network Access page. Enter value for the Reference Access Type under Stitching. See Add Stitching Parameters for L3VPN Site Network Access.

    • service—Represents the terminating side of a service stitch (the connector or the right-side of the stitch).

    Add Access Diversity Parameters for L3VPN Site Network Access

    Expand Access Diversity and add the access diversity parameters.

    A Network Admin can group the connections from a site to the service provider network, assign group ID to each connection group, and apply certain constraints to all the connections included in a group. You can assign one or more group IDs for a connection, specify constraint types, and select the target group ID that the constraint must be applied to, in the Access Diversity section.

    To assign group IDs to a connection and apply constraints to target group IDs:

    1. Expand Access Diversity on the Add Connection page.

    2. Add IDs of groups that the connection is to be a part of:

      1. Expand Groups and click the add (+) icon.

        The Group page appears.

      2. Enter one or more IDs of the groups to which the connection must be assigned and click OK.

        The group ID entries are listed in the Group Id table.

      3. (Optional) Use the edit or delete options above the Group table to edit or delete the entries.

    3. Expand Constraints and click the add (+) icon above the Constraint table.

      The Constraint page appears.

    4. Add the following parameters on the Constraints page:

      1. Click the Constraint Type drop-down and select the constraint type from the following supported options:

        • pe-diverse—The site network access must not be connected to the same PE router as the target connections from the site.

        • same-pe—The site network access must be connected to the same PE router as the target connections from the site.

        • pop-diverse—The site network access must not use the same point-of-presence (POP) as the target connections from the site.

      2. Expand Target and click the add (+) icon above the Group Id table.

        The Group page appears.

      3. Click the Group ID drop-down list to select the group to which you want to apply the constraint and click OK.

        The ID you select is displayed in the Group ID table.

        You can select multiple group IDs as target groups to apply the access constraint.

      4. (Optional) Use the edit or delete options above the Constraints table to edit or delete the entries.

      5. Click OK on the Constraint page.

        The constraint types and target group IDs are listed in the Constraint table.

    Add Bearer Parameters for L3VPN Site Network Access

    Expand Bearer and add the bearer parameters by referring to the following table:

    Table 3: Bearer Parameters (L3VPN)

    Field

    Description

    Bearer Reference

    Enter the ID of an existing connection or bearer (access media and other L2 properties) between a service provider and customer, which the customer wants to reuse for the L3VPN service.

    Requested Type

    Select the access media type that the customer prefers to use.

    Ethernet is the only supported media type in this release.

    Strict

    Set to True if the requested access type is a strict requirement.

    If the requested access type is a strict requirement, the service provider cannot connect the site using any other media. The default setting is False.

    Add Connection Parameters for L3VPN Site Network Access

    Expand Connection and configure the Ethernet interface parameters.

    Click the Ethernet Interface Type drop-down and select the interface type from the following options:

    1. Untagged—An untagged interface receives and sends Ethernet frames without VLAN tags. When selected, only unused devices and interfaces with no VLANs are assigned as placement options.

    2. Tagged—A tagged interface receives and sends Ethernet frames with VLAN tags. When selected, unused devices and interfaces with the VLAN ID equal to the C-VLAN ID configured here, are assigned as placement options.

      Click the Type drop-down and select dot1q or qinq to define the type of tagged interface.

      • dot1q—A Dot1q tagged interface transmits and receives Ethernet frames with VLAN tags. VLAN tags are added to the frames based on guidelines defined by the IEEE 802.1Q standard. In the Dot1q method, the service provider tags packets between CE and PE devices with one or more customer VLAN (C-VLAN) IDs.

        Select dot1q from the Type drop-down and configure the values by referring to the following table:

        Table 4: Dot1q VLAN Tagged Parameters on the Edit Connection Page (L3VPN)

        Field

        Description

        C-VLAN IDs*

        Enter a unique identifier for the C-VLAN. Type a C-VLAN ID, and press Enter to add the ID. Repeat to add multiple IDs.

        Enter a value in the range 1 through 4094.

        Note: You must ensure that the VLAN IDs you configure are within the range supported by the defined access interface units.

        Tag type

        Specify the type of VLAN tag.

        Click the Tag type drop-down and select c-vlan. Only the c-vlan tag type is supported this release.

      • qinq—A Q-in-Q interface transmits and receives frames with double VLAN tags that is an inner C-VLAN and an outer service VLAN (S-VLAN). In the Q-in-Q method, the service provider adds an additional S-VLAN tag outside the C-VLAN tag, creating a double-tagged frame between the CE and PE device.

        Select Qinq from the Type drop-down list and configure the values by referring to the following table:

        Table 5: Q-in-Q VLAN Tagged Parameters on the Edit Connection Page (L3VPN)

        Field

        Description

        C-VLAN ID*

        Enter a unique identifier for the inner VLAN.

        Enter a value in the range 1 through 4094.

        S-VLAN ID*

        Enter a unique identifier for the outer VLAN.

        Enter a value in the range 1 through 4094.

        Use S-VLAN ID as Interface Unit

        Toggle to True to set the S-VLAN ID as the interface unit value. For example, if the S-VLAN ID is 100, the interface unit value is also set to 100.
        Note: You must ensure that the VLAN IDs and sizes you configure are within the range supported by the defined access interface units.
        Note: For migrating the Q-in-Q interface configuration in a brownfield service to Routing Director, you must configure a range of Ethernet interface units that would be associated with the service. For information, see Units.

    3. Expand Physical Port and enter the speed (in Mbps) of the untagged interface.

    Add IP Connection Parameters for L3VPN Site Network Access

    Expand IP Connection and add the connection parameters.

    1. Expand Ipv4 and add the connection parameters by referring to the following table:

      Table 6: IPv4 Connection Parameters (L3VPN)

      Field

      Description

      Address Allocation Type

      Define how to allocate IP addresses when you configure IPv4 subnet. The only supported type is static address, where IP addresses are assigned manually.

      Note:

      Ensure that the provider and customer addresses are in the same subnet. Also, if you select the static address allocation type, you must enter the provider and customer addresses with the prefix length.

      Provider Address*

      Enter the IPv4 address of the service provider for the customer network to connect, in the dotted decimal notation. For example, 10.10.3.4.

      Customer Addresses*

      Enter the IPv4 addresses of the customer network to connect with the service provider network, in the dotted decimal notation. Type an IPv4 address, and press Enter to add the address. Repeat to add multiple addresses. For example, 192.168.1.2. 192.168.10.20.

      Note: Both provider and customer IP addresses must be in the same subnet.

      Prefix Length*

      Enter the subnet prefix length expressed in number of bits. The same prefix length is applied to both customer and provider IPv4 addresses. For example, 24.

    2. Expand IP Connection > Ipv6 and add the connection parameters by referring to the following table:

      Table 7: IPv6 Connection Parameters (L3VPN)

      Field

      Description

      Address Allocation Type

      Define how to allocate IP addresses when you configure IPv6 subnet. The only supported type is static address, where IP addresses are assigned manually.

      Note:

      Ensure that the provider and customer addresses are in the same subnet. Also, if you select the static address allocation type, you must enter the provider and customer addresses with the prefix length.

      Provider Address*

      Enter the IPv6 address of the service provider for the customer network to connect, in the hexadecimal format. For example, 2001:db8::1.

      Customer Addresses*

      Enter the IPv6 addresses of the customer network to connect with the service provider network, in the hexadecimal format. Type an IPv6 address, and press Enter to add the address. Repeat to add multiple addresses. For example, 2001:db8::1:2 2001:db8::34:56.

      Note: Both provider and customer IP addresses must be in the same subnet.

      Prefix Length*

      Enter the subnet prefix length expressed in number of bits. The same prefix length is applied to both customer and provider IPv6 addresses. For example, 127.

      You can configure only IPv4 or only IPv6 connection parameters or both.

    3. Expand IP Connection > OAM > BFD and add the connection parameters by referring to the following table:

      Table 8: OAM Connection Parameters (L3VPN)

      Field

      Description

      Enabled

      Toggle Enabled to True to enable Bidirectional Forwarding Detection (BFD) to detect link failures.

      Fixed Value

      Enter the expected BFD hold-time in milliseconds.

      This field is selectively configurable by the service provider.

    4. Expand IP Connection > Provider Router Id and add the connection parameters by referring to the following table:

      Table 9: Provider Router Id Connection Parameters (L3VPN)

      Field

      Description

      Address

      Enter the IP address of the service provider router. This field is configurable only when service routing protocols are set to IPv6.

    Add IRB Parameters for L3VPN Site Network Access

    Expand IRB and add the virtual gateway details by referring to the following table:

    Table 10: Virtual Gateway Parameters (L3VPN)

    Field

    Description

    IP address

    Enter the virtual gateway IP address assigned to the IRB interface. For example, 10.10.10.1.

    This IP address serves as the shared default gateway across PE devices and enables Layer 3 routing.

    MAC address

    Enter the virtual gateway MAC address assigned to the IRB interface. For example, 00:1a:2b:3c:4d:5e.

    This MAC address serves as the Layer 2 identifier for the virtual gateway and enables forwarding across PE devices.
    Note:

    • This section is available only when you select IRB as the connection type on the Add Connection page

    • Configuring IRB interfaces for an L3VPN service is qualified only for specific scenarios.

    Add Routing Protocols Parameters for L3VPN Site Network Access

    The Routing Protocols section defines the routing protocol to be used between the PE and CE routers.

    In a customer-managed site, the routing protocol that you define here is used between the PE router and CE router that the customer manages. In a service provider-managed site, the routing protocol that you define here is used between the provider-managed CE router and the customer-managed LAN or router. Routing Director supports the static route, direct, OSPF, and BGP protocols for L3VPN service provisioning.

    To set routing protocols:

    1. Expand Routing Protocols on the Add Connection page.

    2. Click the Add button above the Routing Protocols table and set the routing protocol from the supported options:

      Note:

      The hub-and-spoke topology supports only the static route protocol.

    3. Static route—To set the static route protocol:

      1. Expand Routing Protocols and click Add > Static Route on the Add Connection page.

        The Add Static Route page appears.

      2. Expand Cascaded LAN Prefixes and click the add (+) icon next to Ipv4 LAN Prefixes.

        The IPv4 LAN Prefixes page appears.

      3. Enter the values as described in the following table:

        Table 11: IPv4 Static Route Parameters (L3VPN)

        Field

        Description

        LAN

        Enter the IPv4 address with prefix from the customer LAN to be routed through the L3VPN connection. For example, 192.168.0.1/20.

        Next Hop

        Enter the IPv4 address of the next hop router to be used for forwarding packets in the static route. For example, 10.1.0.1.
        Note:

        In the L3VPN hub-and-spoke topology, by default, the spokes cannot communicate with each other and they can only reach the hub CE device. To ensure that spokes communicate with each other through the hub CE device, add a 0.0.0.0/0 LAN interface with the customer device interface IP address as the next hop.

      4. Click OK.

        The static route details are listed in the IPv4 LAN Prefixes table.

      5. Expand Cascaded LAN Prefixes and click the add (+) icon next to Ipv6 LAN Prefixes.

        The IPv6 LAN Prefixes page appears.

      6. Enter the values as described in the following table:

        Table 12: IPv6 Static Route Parameters (L3VPN)

        Field

        Description

        LAN

        Enter the IPv6 address with prefix from the customer LAN to be routed through the L3VPN connection. For example, 2001:db8::1:2/127.

        Next Hop

        Enter the IPv6 address of the next hop router to be used for forwarding packets in the static route. For example, 2001:db8::2:1.

      7. Click OK.

        The static route details are listed in the IPv6 LAN Prefixes table.

      8. (Optional) To edit or delete an entry, select the entry and click the edit or delete icons present above the IPv4 or IPv6 LAN Prefixes tables.

    4. OSPF—To set the OSPF routing protocol:

      1. Expand Routing Protocols and click Add > OSPF on the Add Connection page.

        The Add OSPF page appears.

      2. Enter the values as described in the following table:

        Table 13: OSPF Parameters (L3VPN)

        Field

        Description

        Address Family

        Select the IP addressing protocol to be configured for the OSPF sessions. You can select either IPv4, IPv6, or both.

        Area Address*

        Enter the OSPF area address to be used for the interface connecting to the service provider network. For example, 0.0.0.1.

        Metric

        Enter the cost of using the OSPF link to the service provider network.

        Enter a number in the range 1 through 65,535.

      3. Click OK.

        The OSPF details are listed in the Routing Protocols table.

    5. BGP—To set the BGP routing protocol:

      1. Expand Routing Protocols and click Add > BGP on the Add Connection page.

        The Add BGP page appears.

      2. In the Address Family field, select the IP addressing protocol to be configured for the BGP sessions. You can select either IPv4, IPv6, or both.

      3. (Mandatory) In the Autonomous System field, enter the autonomous system number of the network in which you want to configure the L3VPN service.

      4. Click OK.

        The BGP details are listed in the Routing Protocols table.

    6. Direct—Use the direct routing protocol when a customer LAN at the site is directly connected to the service provider network.

      To use the direct routing, click Add > Direct. The entry is listed in the Routing Protocols table.

    7. (Optional) To edit or delete an entry, select the entry and click the edit or delete icons present above the Routing Protocols table.

    Add Service Parameters for L3VPN Site Network Access

    Expand Service and add the service parameters by referring to the following table:

    Table 14: Service Parameters (L3VPN)

    Field

    Description

    Service Input Bandwidth*

    Enter the download bandwidth (in Mbps) for the site from the provider network.

    Enter a value from 0 to 9,223,372,036,854 Mbps.

    Service Output Bandwidth*

    Enter the upload bandwidth (in bps) from the site to the service provider network.

    Enter a value from 0 to 9,223,372,036,854 Mbps.

    Add VPN Attachment Parameters for L3VPN Site Network Access

    Expand VPN Attachment > Attachment Flavor and click the Site Role drop-down to select the role of the site in the VPN topology:

    • Any-to-any role—In this role, all VPN sites can communicate with each other.

    • Hub role—The site has a hub role in a hub-and-spoke VPN service topology.

    • Spoke role—The site has a spoke role in a hub-and-spoke VPN service topology.

    Note:

    The any-to-any role is supported if you select the any-to-any VPN service topology for the L3VPN service. The hub-and-spoke roles are supported if you select the hub-spoke service topology for the L3VPN service.

    Add Stitching Parameters for L3VPN Site Network Access

    Expand Stitching if you select service for Access Type in step 3.

    1. Select a site network access from the Reference Network Access drop-down list.

      The Reference Network Access refers to the site network access that is initiating the stitch.

      Note:

      When you select regular as the Access Type, the stitching section is not displayed.

  4. Do any of the following:

    1. Click Cancel to exit the Add Connection page without saving the changes you made.

    2. Click OK to save the connection details you added.

      You are returned to the Customer Site Settings page of the Add L3VPN wizard and the connection you added is listed in the Site Network Access table.

  5. Configure the post update placement parameters for the L3VPN service. See Add L3VPN Service Post Update Placements Parameters.