3.3. VPN Connectivity

Enterprise Cloud 2.0 allows connection with your Arcstar Universal One (hereafter Universal One).
The overall flow are as follows.
vpn_controlpanel_top

3.3.1. How to Subscribe a VPN Connectivity (Multi-Cloud Connect)

  • To connect Enterprise Cloud 2.0 with Universal One, application for Multi-Cloud Connect needs to be made.

  • On the control panel, select and open the “VPN Connection ”.

vpn_controlpanel_top

Note

  • For application from the business portal, check the conditions below:

    • The time slot for acceptance through the business portal is 9:30 am to 5:30 pm on weekdays, Japan time. Applications are not accepted on weekends, national holidays, and year-end/new year holidays (12/29 to 1/3).

    • After contract information on Arcstar Universal One is shown on the portal, the portal application function is available. Approx. 10 days after the work is finished, the contract information is shown.

    • For new application of Multi-Cloud connect, it is assumed to possess a completed UNO-representative contract (V number). For application from the portal, a completed UNO L3 access line is needed.

    • When subsequently inputting an order for the same VPN number, input the next order after the previous order was accepted or an error occurred.

    • For UNO contracts, two patterns are available: Japanese-subsidiary contract (Cat-J) and overseas-affiliated-company contract (Cat-W). In the case where the contract of Japanese domestic UNO is an overseas-affiliated-company contract (Cat-W), application for MCC (ECL2.0 connections) cannot be made in the Japanese region.

    • Inquiries about API application are accepted by the portal 24 hours a day, every day of the year. The time slot for dealing with failures is 9:30 am to 5:30 pm on weekdays, Japan time.

    • For the Japanese region, check the conditions below:

      • For new setup, bandwidth change, and abolishment regarding one MCC (ECL2.0 connections), application can be made once a day.

      • As for contract change between best effort and guarantee, applications for abolishment and setup can be made on the same day because the best effort contract and guarantee contract are treated as different MCC (ECL2.0 connections) contracts.

    • For overseas regions, check the conditions below:

      • Regarding the line applied for with an application form, applications for band change and abolishment cannot be made through the business portal.

  • In the Japanese region, only applications made through the business portal are accepted. For any inquiries, contact your sales representative.

The display shifts to the page below ”.

vpn_multi_cloud_connect

Note

  • The manual of Universal One portal is available on Universal One portal screen.

  • Please refer to the manual on Universal One portal.

  • For the usage of Universal One portal, make inquiries as follows with tickets of the business portal.

  • Creation of a new ticket -> Network -> Arcstar Universal One -> Inquiry about the application

  • In the application process, the consent items need to be agreed with. After checking the consent items shown on the screen, check the checkbox for “Agree with the items above ”.

vpn_multi_cloud_connect
  • Select a VPN group and application location, and then click “Next ”.

vpn_apply
  • Make entries for application items regarding a request, and then click “Next ”. If the stipulator information or applicant information are inappropriate, contact your sales representative.

  • Regarding the “Tenant ID (テナントID)” item, the tenant ID of Enterprise Cloud 2.0 of the same contract can be selected from the pull-down menu.

  • To connect with Enterprise Cloud 2.0 of another contract not listed in the pull-down menu, select “Others ”, and then enter a tenant ID, API key, and API secret key.

vpn_apply

Note

  • When the application is made, the IP address (/29) for connecting the tenant of this service and Universal One is needed. Regarding Universal One, duplicate/included addresses cannot be specified.

  • The tenant ID of the tenant to be connected with Universal One, the API key of the current user and the API secret key are needed. For the methods for checking the ID and API keys, refer to ‘Checking various kinds of information <https://ecl.ntt.com/documents/tutorials/rsts/CustomerPortal/user_parameter.html>’_.

  • To connect Universal One under another name with Enterprise Cloud 2.0, the following needs to be performed:

  • The IP address (/29) of a connection segment is assigned as follows:

    • The first-half /30 is applied to the ACT line, and the second-half /30 is applied to the SBY line.

    • The lower numbers of individual segment addresses are applied to the UNO side, and the higher numbers are assigned to the cloud side.

vpn_multi_cloud_connect
  • On the request detail check screen, check that the contents of the individual items are correct. Click the “OK ” button to confirm the application request.

vpn_multi_cloud_connect

Note

  • To make another application after clicking “OK ” button on the browser in use.

  • The status of the request can be checked with “Application History ”.

  • “お申し込み履歴画面”にて、リクエストのステータスが”受付中”となっていることを確認してください。ステータスが”受付完了”となれば開通となり、メニューに応じた課金が開始いたします。
vpn_multi_cloud_connect

3.3.2. Setting up the VPN Connectivity (Gateways)

Once the VPN Connectivity has been completely done after you subscription, the information in its subscription will display as below:

VPN Top

3.3.2.1. Adding a Gateway Interface

Click the name of the displayed VPN Gateways, then display **VPN Gateway Details**”. “
To connect a Logical Network to the VPN Gateway, you need to set up a new Gateway Interface.
Select the **Gateway Interface**” tab, then click “Add Gateway Interface”.”
VPN

Input the following items, when your adding a new Gateway Interface.

VPN Interface

Name

You can choose any name for the Internet Gateway.

Description

This can be set to reflect the descriptions of Internet Connectivity (Gateway).

A Logical Network to be Connected to the Internet (the Connected Logical Network”)”

Specify a destination Logical Network to be connected to your Universal One.

Gateway IPv4 Address

Specify the IP Address to be assigned to the Gateway. Assign this Gateway’s IP Address within the IP Address range of the existing Logical Network.

Primary Device IPv4 Address

Specify a primary IP Address for the Internet Gateway. Assign the IP Address within the range of the existing Logical Network’s IP Address.

Secondary Device IPv4 Address

Specify the Secondary IP Address of the Internet Gateway. Assign this IP Address within the IP Address range of the existing Logical Network.

VRRP Group ID

The Virtual Router Redundancy Protocol (VRRP) is a computer networking protocol that provides for automatic assignment of available Internet Protocol (IP) routers to participating hosts. This increases the availability and reliability of routing paths via automatic default gateway selections on an IP subnetwork.nYou can utilize the Internet Gateway with designing a redundant configuration at a VRRP. In that case, you are required to specify the Group ID of the VRRP.

Note

The default value of Gateway Interface VRRP (Virtual Router Redundancy Protocol) Group ID is set as 2”. Therefore, in case that VRRP ID overlaps upon one Logical Network, the transmission may not work properly. So, you are advised to duly modify the value, if you use VRRP Group ID “2” at other devices.”

3.3.2.2. Add a Static Route

If you create a Static Route to a Logical Network, click the [ Static Route ] tab. Once the [ Add Static Route ] tab will display, click [ Add Static Route ] at the [ Static Route ] tab.
NOTE: Anything about the Routing information, set up in Add Static Route”, will be advertised as a BGP Route to the Universal One side.”
VPN vpn_staticroute

3.3.3. Bandwidth Modification of VPN Connectivity (Multi-Cloud Connect)

Move to the VPN Connectivity upon a Control Panel.

vpn_controlpanel_top

Clicking “VPN Connection Application ” button.

vpn_multi_cloud_connect

Check the contract information, and select “Bandwidth Change ”.

vpn_multi_cloud_connect

In the application process, the consent items need to be agreed with. After checking the consent items shown on the screen, check the checkbox for “Agree with the items above ”.

vpn_multi_cloud_connect

Select a bandwidth value to be changed, and then click “Next ”.

vpn_multi_cloud_connect

On the request detail check screen, check that the contents of the individual items are correct. Click the “OK ” button to confirm the application request.

vpn_multi_cloud_connect

3.3.4. Terminating a VPN Connectivity (Multi-Cloud Connect) .

Move to the VPN Connectivity upon a Control Panel.

vpn_controlpanel_top

Clicking “VPN Connection Application ” button.

vpn_multi_cloud_connect

Check the contract information, and select “Cancel ”.

vpn_multi_cloud_connect

In the application process, the consent items need to be agreed with. After checking the consent items shown on the screen, check the checkbox for “Agree with the items above ”.

vpn_multi_cloud_connect

On the request detail check screen, check that the contents of the individual items are correct. Click the “OK ” button to confirm the application request.

vpn_multi_cloud_connect

3.3.5. Changing from best effort contract to guarantee contract in terms of VPN connections (Multi-Cloud Connect)

  • The two methods below are available to change from best effort contract to guarantee contract.

  • Select either one depending on the customer’s environment.

3.3.5.1. Pattern 1

  • This method asks to generate new VPN connections beforehand and switch.

  • Communication disconnection occurs for approx. 1 hour. (Depending on the number of static routes, the duration of communication disconnection may exceed 1 hour.)

  • Note that the IP address (/30×2) of the segment which connects an ECL2.0 tenant with Universal One changes.

Note

  • The time slot for acceptance through the business portal is 9:30 am to 5:30 pm on weekdays, Japan time. Applications are not accepted on weekends, national holidays, and year-end/new year holidays (12/29 to 1/3).

Application for new VPN connections

Note

  • Specify an IP address range which differs from that of the segment which connects a tenant of an existing VPN service with Universal One.

Disconnection of a logical network having existing VPN connections made

  • Click the “Gateway Interface ”.

  • It takes several minutes to finish the deletion of the gateway interface.

Note

  • After this item is executed, communication disconnection occurs.

Static route deletion through existing VPN connections

  • Click the “Static Route ”.

  • It takes several minutes to delete one static route.

Connection of a logical network through mew VPN connections

Static route setting through new VPN connections

Note

  • After this item is executed, communication recovery is made.

Cancel of existing VPN connections

3.3.5.2. Pattern 2

  • This method asks to cancel existing VPN connections and then apply for new VPN connections, to switch.

  • Communication disconnection occurs for approx. 4 hours. (Depending on the number of static routes, the duration of communication disconnection may exceed 4 hours.)

  • The segment which connects a tenant of an existing VPN service with Universal One does not need to be changed.

Note

  • The time slot for acceptance through the business portal is 9:30 am to 5:30 pm on weekdays, Japan time. Applications are not accepted on weekends, national holidays, and year-end/new year holidays (12/29 to 1/3).

  • Be careful with the execution timing of “Cancel Existing VPN Connections ”.

Cancel of existing VPN connections

Note

  • After this item is executed, communication disconnection occurs.

Application for new VPN connections

Note

  • It is also possible to specify the same IP address range as of the segment which connects a tenant of an existing VPN service with Universal One.

Connection of a logical network through mew VPN connections

Static route setting through new VPN connections

Note

  • After this item is executed, communication recovery is made.