Secure Cloud Interconnect Welcome Kit

• The SCI Customer Connection needs to be ordered with the Aggregated Billing field set to Yes
• The SCI Customer Connection needs to be ordered in the same Aggregated Billing Region. In case a partner location outside the Aggregated Billing Region is used then a new Aggregation Pool is created, which should have a new Data Plan as well.
• The SCI Customer Connection needs to be ordered on the same billing account number. In case a different billing account number is used then a new Aggregation Pool is created, which should have a new Data Plan as well.
• The first SCI Customer Connection should be ordered with a Data Plan to which the Aggregation Pool volume will be charged. In case multiple SCI Customer Connections are ordered with a Data Plan the committed volumes are summed before calculating the overage. The overage is charged to the largest Data Plan. Multiple Data Plans in the Aggregation Pool should be prevented.
• The following SCI Customer Connections should be ordered with a Usage Plan. Each SCI Customer Connection Usage Plan volume will be added to the Aggregation Pool volume which is charged to the SCI Customer Connection with the Data Plan. In case there are only Usage Plans in the Aggregation Pool, then the pool volume is charged as Usage Plan which should be prevented. 

Note: The recommended Aggregation Pool setup is to have one large shared Data Plan in each Aggregation Pool with only additional Usage Plans because a larger Data Plan provides lower cost per gigabyte.

• When you change the Aggregated Billing field from No to Yes, the SCI Customer Connection becomes part of the Aggregation Pool defined by the current assigned billing account number and the partner location which defines the Aggregated Billing Region. Make sure to change the Data Plan field to Usage or Data Plan according to the recommended Aggregation Pool setup. 

Note: In case the current assigned billing account number does not match with the desired Aggregation Pool billing account number, please contact your Verizon Account Team before changing Aggregated Billing field to Yes.

• When you change the Aggregated Billing field from Yes to No, the SCI Customer Connection leaves the Aggregation Pool defined by the current assigned billing account number and the partner location which defines the Aggregated Billing Region. Make sure to change the Data Plan field to the desired Usage or Data Plan as the SCI Customer Connection will be charged based on the Data Plan field.

Note: In case the SCI Customer Connection was the large shared Data Plan of the Aggregation Pool, then change another existing SCI Customer Connection in the same Aggregation Pool from a Usage Plan to a large shared Data Plan to avoid the Aggregation Pool being charged as Usage.

• When you change the Data Plan field from Data Plan to Usage Plan while the Aggregated Billing field is set to Yes, and in case the SCI Customer Connection is the large shared Data Plan of the Aggregation Pool, then change another existing SCI Customer Connection in the same Aggregation Pool from a Usage Plan to a large shared Data Plan to avoid the Aggregation Pool being charged as Usage.
• When you change the Data Plan field from a Usage Plan to a large shared Data Plan while the Aggregated Billing field is set to Yes, please make sure you change the existing large shared Data Plan in the Aggregation Pool to a Usage Plan to avoid multiple Data Plans being charged.
• When you disconnect an SCI Customer Connection with a Data Plan while the Aggregated Billing field is set to Yes, and in case the SCI Customer Connection is the large shared Data Plan of the Aggregation Pool, then change another existing SCI Customer Connection in the same Aggregation Pool from a Usage Plan to a large shared Data Plan to avoid the Aggregation Pool being charged as Usage.

To complete your signed order, a Verizon Order Manager or a Service Contact will be assigned to your Secure Cloud Interconnect order and contact you by phone to verify your order details. This usually occurs within 4 business days after your order is submitted.

The following fields require configuration:

• BAN: The Billing Account Number (BAN) will now be assigned to the connection. Please check the SCI Data Plan and Aggregated Billing section of this Welcome Kit to understand which billing account number should be assigned.

Note: Please work with your Verizon Account Team to entitle your Virtual Enterprise Center user to the required BAN’s because Dynamic Network Manager will only show the SCI Customer Connections which match with the entitled BAN’s.

• VPN Name: Select the customer Private IP VPN for the SCI Customer Connection.
• Customer ID: This field provides you the possibility to cross reference the SCI Customer Connection with your cloud service provider customer identification number.
  
  The following numbers can be used per cloud service provider:
  • Amazon: Amazon Account ID is optional.
  • Equinix: 
    • In case of partner service Amazon, the Amazon Account ID is mandatory because it is required for creating the Equinix Cloud Exchange Fabric virtual connections.
    • In case of partner service SAP, the SAP Cloud Peering Authorization Key is mandatory because SAP first needs to approve the SCI Customer Connection and it is required for the Equinix Cloud Exchange Fabric virtual connections.
  • Microsoft: Microsoft Subscription ID is optional.
  • Google Carrier Interconnect: Google Cloud Project ID is optional.
  • Google Carrier peering: Google Cloud Platform / Google Workspace ID is optional.
  • Oracle: Oracle Account ID is optional.
  • IBM: IBM Cloud Console Ticket ID (Case ID) is mandatory because IBM first needs to approve the SCI Customer Connection.
  • SAP: Cloud Peering Authorization Key is mandatory because SAP first needs to approve the SCI Customer Connection.
  • Salesforce: Salesforce Account ID is optional.

Note: The SCI Customer Connection can be delivered without the optional customer identification numbers or can be self-defined by providing your own connection identifier.

• Customer Service ID: This field provides you the possibility to cross reference the SCI Customer Connection with your cloud service provider service key.
  
  The following keys can be used per cloud service provider: 
  • Amazon: Amazon Account ID is optional.
  • Microsoft: Microsoft ExpressRoute Service Key is optional.

For all other cloud service providers, you can leave this field empty.

Note: The SCI Customer Connection can be ordered without a service key. You can provide the service key during the SCI Customer Connection activation phase. Please refer to the SCI Activation phase in the Welcome Kit for further details.

Upon a successful Order Verification Call, your order will be submitted for provisioning. The provisioning is automated and takes place in 1 business day. The SCI Customer Connection will be automatically made available in Dynamic Network Manager.

The by default applied SCI Customer Connection network settings can be verified in the Dynamic Network Manager submenu Network Settings. In case a change is needed please contact your Verizon Account Team. Below are the most common change requests:

1. The SCI Customer Connection for Amazon private peering is configured with Distribute List Default Only setting to prevent exceeding the Amazon Direct Connect route quota.
   
   This setting can be removed or replaced with Distribute List Remove Default in case your customer Private IP VPN number of routes is below the quota.
   
   In case your customer Private IP VPN exceeds Amazon route quota or only specific routes need to be advertised then a Border Gateway Protocol (BGP) Community route filter can be configured.
   
   For the BGP Community route filter the routes (which can also be summarised routes) need to be tagged with the BGP Community value on the customer edge routers.
   
   
2. The SCI Customer Connection for Microsoft private peering is configured without route filter.
   
   The Distribute List Remove Default setting can be added to prevent the SCI Customer Connection to become the default gateway for the Azure Virtual Network in case your customer Private IP VPN holds a default route.
   
   In case your customer Private IP VPN exceeds Microsoft route quota or to advertise only specific routes a Border Gateway Protocol (BGP) Community route filter can be configured.
   
   For the BGP Community route filter the routes (which can also be summarised routes) need to be tagged with the BGP Community value on the customer edge routers.
   
   
3. The SCI Customer Connection for Google Carrier Interconnect for Google Cloud private peering is configured without route filter.
   
   The Distribute List Remove Default setting can be added to prevent the SCI Customer Connection to become the default gateway for the Google Cloud in case your customer’s Private IP VPN holds a default route.
   
   In case your customer’s Private IP VPN exceeds Google route quota or to advertise only specific routes a Border Gateway Protocol (BGP) Community route filter can be configured.
   
   For the BGP Community route filter the routes (which can also be summarised routes) need to be tagged with the BGP Community value on the customer edge routers.
   
   
4. The SCI Customer Connection BGP route preference setting is based on Autonomous System (AS) path length which is default not modified.
   
   AS path prepending in and/or out can be requested to make an SCI Customer Connection less preferred.
   
   
5. The SCI Customer Connection maximum supported routes setting is configured according to the maximum routes of the selected Private IP VPN.
   
   This value needs to support the extra amount of routes received by the SCI Customer Connection peering service. The value can be increased.
   
   Note: Please contact your Account Manager if you need to increase this value.
   
   Note: The dedicated public peering service amount of received routes is controlled by the customer cloud configuration. Please check how many routes your Private IP VPN will receive.
   
   Note: The shared public peering service amount of received routes is controlled by the cloud service providers. Please check how many routes your Private IP VPN will receive.
   
   
6. The SCI Customer Connection Extranet to the customer Private IP VPN setting is by default set to Spoke which prevents the exchange of routes between SCI Customer Connections.
   
   In case route exchange is required between two or more SCI Customer Connections then this configuration can be modified to Hub which creates the private cloud to cloud communication.

The requirement for Secure Cloud Interconnect can be met via one or more of the following:

• For a site-to-cloud configuration, at least one Private IP connection and a SCI Customer Connection.
• For a cloud-to-cloud configuration, at least two SCI Customer Connections on a Private IP VPN.
• For multiple wireless devices and no physical/landline location, one Private IP wireless gateway and one SCI Customer Connection.

This important call with your Order Manager confirms the configuration and technical details you need for your service to work for you. While you may have discussed some configuration details with your sales person, it’s important to review with your Order Manager the entire configuration.

Please refer to the “Cloud Service Provider” section in the navigation area.

Often your Cloud Service Provider (CSP) requires information related to your SCI Customer Connection. To obtain this information, you should log in to Dynamic Network Manager, and you will be able to find the configuration required by your CSP.

CSPs may often ask for details such as:

• IP addresses
• Virtual Local Area Network (VLAN) IDs
• Autonomous System Number 

With Verizon Enterprise Center Mobile, you have access to information you need to manage your critical business functions on-the-go. You can manage your Verizon account from a smartphone or a tablet using the mobile application for single sign-on access to Verizon Enterprise Center, My Business Account.

Smartphone users can download an app from Google Play or the App Store that supports access to Verizon Enterprise Center, My Business, and Verizon portals. Simply search for “My Verizon Enterprise;” download the app; and conveniently launch right into Quick Tasks or sign in to your business portal for more management options. An icon is added to your phone’s home screen for easy access the next time you log in. Requirements are as follows:

• App Store: Apple iPhone models that have at least a 13.x iOS version in the U.S. on any carrier or Wi-Fi network.
• Google Play: Selected devices using an operating system of Android 5 or higher in the U.S. on any carrier or Wi-Fi network

You can also access Verizon Enterprise Center Mobile with a tablet by signing into a browser-based application at http://verizonenterprise.com. The tablet functionality will be the same as the smartphone app, supporting key business functions that vary by the users’ portal and permissions. Accessing the Verizon Enterprise Center from a mobile device or tablet will not provide the same options as the desktop version.

Verizon Enterprise Center portal users can use Quick Tasks for repairs, billing, and some wireless functions or sign-in to get access to key business functions delivering near real-time information to you.

Verizon is committed to providing a high level of performance for Secure Cloud Interconnect which is demonstrated by the Service Level Agreements outlined in the Private IP Service Level Agreements (SLAs) for Secure Cloud Interconnect.

For more information regarding the SLAs, reference the applicable Private IP Gateway service Secure Cloud Interconnect in the Private IP Service Guide.

Private IP customers will be able to use the Differentiated Services Code Point (DSCP) Rewrite feature in Dynamic Network Manager to set QoS on incoming packets from Cloud Service Providers (CSPs) to prioritize the delivery of applications across the Private IP network.

For details on QoS, please refer to the Private IP Welcome Kit.

With Dynamic Network Manager, you have the ability to review daily usage reports that show the amount of data that has been transferred over the connection for the month to date. You can also view traffic patterns for the inbound and outbound traffic and set usage alerts via Dynamic Network Manager.

Customer Application Programming Interfaces’ (APIs’) are only available for Enterprise customers on Verizon Rapid Delivery contracts and are not available for U.S. Federal Agencies. Management APIs’ enable you to better manage your Secure Cloud Interconnect service with the ability to create your own reports.

There are two types of Management APIs’:  Billing Usage API and Utilization API.

• With the Billing Usage Application Programming Interface (API), you can view the traffic upon which your invoice is based directly from your own portal without having to log into the Verizon Enterprise Center. With this API, you can see the total gigabytes of data which are passed over a SCI Customer Connection for a specified date range. 
  
  Both ingress and egress traffic can be viewed. You are able to specify the traffic which you would like to see by providing the Billing Account Number (BAN) ID, month, and year. You have the option to enter a start date and end date in the month.
  
  
• With the Utilization Application Programming Interface (API), you can view your peak utilization and through-put data which could be used to identify applications driving peak traffic and monitor the actual spikes in traffic. The data will be published in megabits per second of data which are passed over a SCI Customer Connection at 15-minute intervals. 
  
  Both ingress and egress traffic can be viewed, and the data is refreshed every hour. You are required to provide the SCI Customer Connection Service ID. You have the option to enter a start date and end date in the month. 
  
  The start and end dates are restricted to the 30/31 days in the month selected. If a start and end date are not provided, the data will be automatically pulled for the entire month. You will see usage detail for that Service ID for the specified date range.
  

With the SCI Customer Connection you have high bandwidth capability which reduces the need for capacity planning. The connection enables you to get the full flexibility you would expect from your cloud resources.

Secure Cloud Interconnect can now be ordered with Virtual Network Services, which is a comprehensive suite of network services that supports virtual network functions using Verizon’s Hosted Network Services platform which can replace traditional, appliance-based network equipment like routers, firewalls, etc. 

Both Virtual Network Services and Secure Cloud Interconnect are key components of our Software Defined Networking strategy and help provide you with greater flexibility, visibility, and control over your network.

With Verizon Hosted Network Services, Secure Cloud Interconnect is available with Palo Alto and Check Point today. This single-tenant service can help provide additional protection for Secure Cloud Interconnect customer networks from threats that might originate on a shared cloud platform and is available with optional Verizon Managed Security Services (MSS) Analytics for heuristics and correlation analysis.

Note: The Hosted Network Services option is limited to Virtual Private Cloud (VPC) SCI Customer Connections.

No. Secure Cloud Interconnect can accommodate any port speed. However, some CSPs may limit their port speed, and you should discuss port speed limitations with your CSPs.

Every additional Cloud Service Provider (CSP) will require one or multiple SCI Customer Connections. If you have to add additional CSPs to your service, please contact your Verizon Account Team for more details, or you may also order the service through Verizon Enterprise Center portal.

You have the choice of three global consumption-based pricing plans: 

• a Non-Committed Usage Plan, 
• a Committed Data Plan, 
• an Aggregated Billing Data Plan. 

The pricing plans are designed to be flexible so you can choose the right plan for your exact requirements and environment. You can change your pricing plans on a monthly basis.

The amount of usage calculated each month is based on ingress and egress traffic from the SCI Customer Connection to the Cloud Service Provider (CSP).

• With the Non-Committed Usage Plan, you pay one flat rate for each gigabyte (GB) used regardless of volume. A non-recurring charge (NRC) also applies. The bill is calculated at the end of each month. If your traffic varies from day to day, you are more likely to benefit from this plan.
• If you have steadier data traffic patterns and prefer to commit to a certain level of monthly data traffic, the Committed Data Plan might be your best option. This plan, which works like a cell phone data plan, enables you to sign-up for a committed rate (monthly recurring cost). The rate per gigabyte (GB) decreases as the total commitment increases.
• If a Committed Data Plan structure is best for your needs, you may achieve even a lower cost structure and simplify your budget planning process by selecting the Aggregated Billing option. This option allows you to pay for a single Aggregated Billing Data Plan per Aggregated Billing Region (Asia Pacific, Europe Middle East and Africa, Latin America, and the United States). As noted above, overage charges apply when the data used exceeds the Aggregated Billing Data Plan option selected. 

The following example illustrates how the Aggregated Billing works.

Suppose you have SCI Customer Connections in the following locations:

Without Aggregated Billing, you would have to estimate and monitor seven separate SCI Customer Connections to determine the right pricing plan.

With Aggregated Billing, you would be able to select one Aggregated Billing Data Plan for your U.S. sites: Cloud Service Provider (CSP) A sites in New York and Los Angeles and the Cloud Service Provider (CSP) B site in Ashburn; and a separate Aggregated Billing Data Plan for your APAC sites: CSP A sites in Tokyo and Sydney and the CSP B site in Hong Kong. Although Frankfurt would still be sized as a separate SCI Customer Connection, you would have the flexibility to move that connection to a Aggregated Billing Data Plan, if you launched another SCI Customer Connection in EMEA.

Verizon continually looks to broaden the list of approved CSPs, but if the CSP you need is not listed within this Welcome Kit, you would be unable to use them at this time.

For Secure Cloud Interconnect product planning, please let your Verizon Account Team know which CSP you would like Verizon to add to our offering.  

Verizon’s agreement with our CSPs has a very broad scope of coverage globally, but there are select areas where the service may not be available.

If your desired CSP location is not covered by the current Secure Cloud Interconnect offering, please contact your Verizon Account Team for assistance. 

You need to order a Private Wireless Gateway. 

While most customers find the standard configuration meets their needs, there are some additional options for you to connect using more complex architectures. 

For additional information about other options, contact your Verizon Account Team.

Your SCI Customer Connection order is visible in Verizon Enterprise Center portal if you have the proper entitlements. 

There may be several reasons why you are unable to see your connection. One of the most common reasons is due to your Billing Account Number (BAN) not being associated with your credentials. 

Please contact your Verizon Account Team for assistance. 

If you have a question on your order during the ordering, please contact your Order Manager or your primary service point of contact. 

After the order completion, please login to the Verizon Enterprise Center portal and contact customer support, or contact your Verizon Account Team. 

At this time, Wide-Area Network (WAN) Analysis is only available for Private IP service but NOT for Secure Cloud Interconnect. Check with your Cloud Service Provider (CSP) for any WAN reporting functionality which they might offer.

Verizon’s Managed Services is not available with Secure Cloud Interconnect as the service is an un-managed product.

Your billing terms are outlined in your Secure Cloud Interconnect contract and the Verizon Services Agreement.

Your Order Manager will inform you of when your services will begin billing via e-mail. You can also check your bill 24/7 via Verizon Enterprise Center portal.

Online inquires for all Services: When viewing your invoice online in Verizon Enterprise Center portal, click “Create an Invoice Inquiry” from the Invoice Summary screen and follow the instructions to create and monitor an online inquiry.

To make any changes in your Data Plan with Secure Cloud Interconnect, you would need to submit a change order with your Verizon Account Team or directly in the Verizon Enterprise Center portal.