Multi Point VPN Service Activity SA3: Multi Point VPN Service Magnus Bergroth NORDUnet Brian Bach Mortensen, NTW2013 18 September 2013 Copenhagen

Agenda Objectives MP VPN in a nutshell Objective Organisation and resources Achievements – so far Service Part Technical Part Challenges Last mile Outreach Conclusions & Summary Looking ahead

Multi Point VPN in a nutshell Connecting private network islands Remote branch offices Experiments needing exchange Allows users to keep communication private Provides multipoint to multipoint connections Layer 3 (IP) transport Standardized interfaces Carriers Carrier (RFC4364) BGP-LU (RFC3107) Fills a hole in the multi domain service catalogue Creating the possiblity for l3vpn opens up for the use of l2vpn using the same techonlogy.

Communication via IP NORDUnet Geant PSNC Funet Garr Site-C Site-A

Enable MPLS forwarding NORDUnet Geant PSNC Funet MPLS MPLS VPN MPLS VPN MPLS PE PE Garr MPLS Transit Networks Carrier of carrier VPN for MPLS BGP added with Label unicast Advertise your PE with a label. Can reach all Pes with a label. Site-C PE Site-A Site-C

VPN NORDUnet Geant PSNC Funet Garr But its not dynamic and automated MPLS MPLS VPN MPLS VPN MPLS PE PE Garr MPLS VPNs are configured between the ena PE:s For point to point VPN an easy setup For more complex l3ypn and vpls can routereflectors be used. No need for configuration in the transit networks. But its not dynamic and automated So not same use cases as BoD! Site-C PE Site-A Site-C

Organisations & Resources Currently 14 NRENs have joined Still counting new NRENs joining Product Manager: Xavier Jeannin - Renater Technical lead: Tomasz Szewczyk - PSNC NORDUNet: Magnus Bergroth 0.05FTE per NREN partner to cover service pilot phase updating the service as need arise cover operational acceptance Currently 13 NRENs have “committed” to deliver the service And still counting….. Current NRENs are: FUnet, NDN, Deic, DFN, RENATER, GARR, GRNET, GEANT, PSNC, LITnet, HEAnet, CARnet, AMRES, redIRIS. Product manager: Xavier Jeannin (Renater) Technical lead: Tomasz Schwezyk (PSNC) NDN tech lead: Magnus Bergroth 0.05FTE per NREN partner So involvement is not motivated by big lump sums from the EC

Building Multipoint VPN Multipoint VPN design draft delivered Experimental test done in network lab & across all involved NREN networks Build on strong interface standards already enabled Identified potential use cases (ITER, PRACE, LHCone, etc.) Negotiation with additional NRENs wanting to pilot and deploy the service is ongoing Multi Point Service “awareness” raised significantly throughout GN3

Achievements cont Provisioning only done at edges by design! Thus enabling somewhat quicker establishment of services Service definitions have been produced Service structure have been defined Follows “Best Practice” in place Technical training of NOC members need to start throughout fall 2013 To ensure that NRENs can actually handle it as a production service end of Y1

Last mile Getting all the way to the customer premises Possible Although: Regional and campuses are still “in the way” Have been observed as troublesome in the past Does not become easier with multitude of end point organisations Takes a lot of coordination But that’s life working with customers

Thank you Any questions?