How to connect to LHCONE L3VPN

Preparing to connect

Get the physical connection

A TierX can connect to the LHCONE L3VPN via its preferred or closest LHCONE Provider. The type of connection, the router interface, the routing protocol and all the connection details have to be agreed with the LHCONE provider of choice.

How to use the L3VPN connection

In order to connect to the L3VPN, a TierX site should have:

  • public IP addresses
  • a public ASN
  • a BGP capable router
Private ASes are not allowed in the LHCONE. If a site doesn't have a public AS, it may ask the VRF operator to announce the site address as belonging to the VRF's AS or any other AS dedicated for this purpose.

The LHCONE L3VPN transports LHC data traffic only. To do so:

  • TierX can announce only IP prefixes assigned to their WLCG servers according to the LHCONE AUP
  • Traffic must be symmetric: TierXs can send into the L3VPN only packets with IP source address in the announced address space. It's important to assure symmetry in order to avoid TCP traffic drops due to statefull firewalls (please refer to this presentation).

Validation of a new connection

TierX sites can validate their brand new connection to the LHCONE by tracing the path to IP addresses of the LHCONE perfSONAR probes. They are listed here: https://twiki.cern.ch/twiki/bin/view/LHCONE/SiteList (in the columns "LAT node" or "BW node" of the large table).

Operations

In case of connectivity issue, a TierX has to get in touch with the NOC of its Network Operator.

Terminology

  • ASN: Autonomous System Number
  • L3VPN or LHCONE-VRF: the full LHCONE VPN domain, made by the interconnections of all partecipating VRFs
  • TierX: WLCG Tier1/2/3 end site
  • VRF: LHCONE Layer3 VPN instance provided by a single Network Operator.

Topic attachments
I Attachment History Action Size Date Who Comment
PDFpdf LHCONE-BGP-Community-Filtering.pdf r1 manage 169.8 K 2019-01-17 - 19:45 MichaelOConnorExternal LHCONE Community based BGP filtering
PDFpdf LHCONEconnectionguide-1.2.pdf r1 manage 166.8 K 2016-09-27 - 16:49 MichaelOConnorExternal LHCONE Site Provisioning Guidelines V1.2
Edit | Attach | Watch | Print version | History: r18 < r17 < r16 < r15 < r14 | Backlinks | Raw View | WYSIWYG | More topic actions
Topic revision: r18 - 2019-01-17 - MichaelOConnorExternal
 
    • Cern Search Icon Cern Search
    • TWiki Search Icon TWiki Search
    • Google Search Icon Google Search

    LHCONE All webs login

This site is powered by the TWiki collaboration platform Powered by PerlCopyright & 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback