X

Lumen help

Adding an IP VPN On‑Demand connection to AWS

With Lumen® IP VPN On‑Demand, you can use NaaS Manager to create a connection from a Lumen VRF to Amazon Web Services (AWS). To create the connection, you'll need your AWS account ID from Amazon. Be sure to have that information handy to type in (or copy/paste). 

Note: With Amazon Web Services Hosted Connections, we recommend you create a redundant connection to qualify for better availability SLAs. 

To create an IP VPN connection to AWS: 

1. Prepare the AWS connection
2. Add the connection in NaaS Manager
3. Complete the AWS connection

Step 1: Prepare the AWS connection

To prepare the connection in AWS: 

  1. Go to the AWS page and sign in.
  1. Create a Direct Connect gateway. 
  1. Copy your AWS Account ID. You will paste this when creating the On-Demand connection.

Step 2: Add the connection in NaaS Manager

To add the IP VPN On‑Demand connection:

  1. Click Services.

    Control Center shows the Services console. Use the console to access an inventory of your services, check the status of orders, and manage your services.
Services console
  1. In the Service Managers box, click Network-as-a-Service (NaaS).
     

The NaaS Manager Overview lists connection options. 

NaaS Manager Overview tab
  1. Click Add Connection for IP VPN On-Demand.
  1. From the Customer ID and Billing Account Number lists, select the customer number and billing account number you want to add IP VPN On-Demand to.

    NaaS Manager fills in the VRF inventory based on the customer ID and billing account number you selected. 
  1. In the Service Nickname field, type a name for the connection you're creating. (Be sure to use something memorable. This name will appear on your invoice.) 
  1. In the From Location (Select Your VRF) section, select or create a VRF for the other end of your connection.

    • Select the VRF to use for the other end of your connection. Click View Details for a VRF to view the VRF's routes.

    • Click Create New, then type a description for the new VRF in the New VRF Description field. NaaS Manager will create the VRF and activate your VPN service once you create your connection. 
NaaS Manager Services tab
  1. From the Cloud Provider list, select AWS.
  1. Fill in the information for the AWS connection: 

    1. In the AWS Account ID field, type your AWS account ID.

    2. From the Cloud Provider On Ramp list, select an on ramp. 
  1. Click CONTINUE. 
  1. Use the Billing Method buttons to select whether you want monthly or hourly billing for the connection, then select the bandwidth for the connection. Bandwidth options are determined by the destination (to location). (You can't change the bandwidth once you create the connection. If you need to choose a different bandwidth after creating the connection, disconnect the connection and create a new one.)
IP VPN On-Demand bandwidth and price
  1. Click CONTINUE.
  1. In the Select Additional Settings section, fill in the additional details for the connection:

    1. In the AS Number on AWS field, type the autonomous system number from Amazon (ranges from 64512 to 65534 or 4200000000 to 4294967294) used when creating the Direct Connect gateway.

    2. Select whether this is a primary or backup connection. 

    3. In the IPv4 Routing Option field, select the radio button for the routing option you want to use for the connection. Learn more about routing options for an IP VPN connection 

    4. Use the buttons to select whether you want to advertise default routes. 
NaaS Manager Services tab
  1. Click CONTINUE. 
  1. Review the order information and correct any missing or invalid selections, then click SUBMIT ORDER.

    NaaS Manager creates the request for connection, places it in Pending Activation status, and routes you to the Services tab so you can monitor the status of the connection. To see status updates, click . Once Lumen assigns the permanent VRF (within five minutes), the connection changes to Active status. 
  1. If you want to add resiliency for this connection, do one of the following:

    • For non‑critical (production, development, test) resiliency, repeat steps 2‑12 using the same VRF and same AWS on‑ramp location.

    • For high resiliency, repeat steps 2‑12 using the same VRF and a different AWS on‑ramp location.

    • For maximum resiliency, repeat steps 2‑12 three more times:

      1. Create a second connection using the same VRF and same AWS on‑ramp location as the first connection. 

      2. Create a third connection using the same VRF and a different AWS on‑ramp location.

      3. Create a fourth connection using the same VRF and same AWS on‑ramp location you used for the third connection. 

Learn more about AWS resiliency options 

Step 3: Complete the AWS connection

To complete the connection in AWS: 

  1. Go to the AWS page and sign in.
  1. Locate the Direct Connect gateway with the ID that matches the connection ID in the service details to location in NaaS Manager and create the virtual interface.