X

Lumen help

Adding an IP VPN On-Demand connection to AWS

With Lumen® IP VPN On‑Demand, you can use Control Center to add a connection from a Lumen VRF to Amazon Web Services (AWS). To add the connection, you'll need your AWS account ID from Amazon. Be sure to have that information handy to type in (or copy/paste). 

Note: With Amazon Web Services Hosted Connections, we recommend you create a redundant connection to qualify for better availability SLAs. 

There are three steps to successfully create and use an IP VPN On-Demand connection to AWS: 

1. Prepare the AWS connection
2. Add the connection in Control Center
3. Complete the AWS connection

Step 1: Prepare the AWS connection

To prepare the connection in AWS: 

  1. Go to the AWS page and sign in.
  1. Create a Direct Connect gateway. 
  1. Copy your AWS Account ID. You will paste this when creating the On-Demand connection.

Step 2: Add the connection in Control Center

To add the IP VPN On‑Demand connection:

  1. Using the left menu, click Services, then click Add Services.

    Control Center shows services you can add with the Lumen digital experience.
Add Services
  1. Click + Add for IP VPN On-Demand.
  1. From the Customer ID and Billing Account Number lists, select the customer number and billing account number you want to add IP VPN On-Demand to.

    Control Center fills in the VRF inventory based on the customer ID and billing account number you selected. 
  1. In the Service Nickname field, type a name for the connection you're creating. (Be sure to use something memorable. This name will appear on your invoice.) 
  1. In the From Location (Select Your VRF) section, select or create a VRF for the other end of your connection.

    • Select the VRF to use for the other end of your connection. Click View Details for a VRF to view the VRF's routes.

    • Click Create New, then type a description for the new VRF in the New VRF Description field. Control Center will create the VRF and activate your VPN service once you create your connection. 
NaaS Manager Services tab
  1. From the Cloud Provider list, select AWS.
  1. Fill in the information for the AWS connection: 

    1. In the AWS Account ID field, type your AWS account ID.

    2. From the Cloud Provider On Ramp list, select an on ramp. 
  1. Click CONTINUE. 
  1. Use the Billing Method buttons to select whether you want monthly or hourly billing for the connection, then select the bandwidth for the connection. Bandwidth options are determined by the destination (to location). 
  1. Click CONTINUE.
  1. In the Select Additional Settings section, fill in the additional details for the connection:

    1. In the AS Number on AWS field, type the autonomous system number from Amazon (ranges from 64512 to 65534 or 4200000000 to 4294967294) used when creating the Direct Connect gateway.

    2. Select whether this is a primary or backup connection. 

    3. In the IPv4 Routing Option field, select the radio button for the routing option you want to use for the connection. Learn more about routing options for an IP VPN connection 

    4. Use the buttons to select whether you want to advertise default routes. 
NaaS Manager Services tab
  1. Click CONTINUE. 
  1. Review the order information and correct any missing or invalid selections, then click SUBMIT ORDER.

    Control Center creates the connection request, places it in Pending Activation status, and routes you to the Services tab so you can monitor the status of the connection. To see status updates, click . Once Lumen assigns the permanent VRF (within five minutes), the connection changes to Active status. 
  1. If you want to add resiliency for this connection, do one of the following:

    • For non‑critical (production, development, test) resiliency, repeat steps 2‑12 using the same VRF and same AWS on‑ramp location.

    • For high resiliency, repeat steps 2‑12 using the same VRF and a different AWS on‑ramp location.

    • For maximum resiliency, repeat steps 2‑12 three more times:

      1. Create a second connection using the same VRF and same AWS on‑ramp location as the first connection. 

      2. Create a third connection using the same VRF and a different AWS on‑ramp location.

      3. Create a fourth connection using the same VRF and same AWS on‑ramp location you used for the third connection. 

Learn more about AWS resiliency options 

Step 3: Complete the AWS connection

To complete the connection in AWS: 

  1. Go to the AWS page and sign in.
  1. Locate the Direct Connect gateway with the ID that matches the connection ID in the service details to location in Control Center and create the virtual interface.