Private network connections

Uninett provides several services for those who need to connect multiple physical locations. We help you find the right solution, whether you need an LVPN solution or an optical channel.. 

We offer L2VPN, L3VPN and optical channel.

What is private network connections L2VPN?

The standard solultion comes as an 802.1q VLAN tag on an existing physical connection to Uninett. Dedicated physical ports can be provided on request. When using existing connections without VLAN tags, the connection must be reconfigured. Traffic is encapsulated using MPLS, and is carried through the grid between the two end points.

No capacity is reserved in the network for traffic that is carried by the service. In other words, such traffic is treated just like all other traffic.

Uninett guarantees that unencapsulated traffic between end points will not leak out at customer access points where it is not meant to terminate. However, the service offers no guarantee of confidentiality, since the traffic content is not encrypted.  

 The traffic between the two end points will be subject to re-routing in the event of a fall-out of single connections internally in Uninett’s grid, similar to that which applies for normal IP traffic between the two end points – provided there is an alternative pathway. A single L2VPN connection will, however, be vulnerable to interference on the two border routers in Uninett. If you want to set up the most fault-tolerant connection between two installations – which will not be subject to such interference – then you should set up two connections using two different Uninett border routers. This is a form of dynamic routing over connections. 

What is private network connections L3VPN?

Uninett can offer a Layer 3 VPN service. A Layer 3 VPN for a customer will be implemented in Uninett’s routers as a private routing instance so that, for example, the transport of traffic and routes with RFC1918 addresses between different installations will be possible. Routing between a customer-specific Layer 3 VPN provided by Uninett and the customer is accomplished with the routing protocol BGP.

Where layer-2 VPN is «point to point», Layer 3 VPN will be a «multi-point solution». Layer 3 VPN will be like a «private virtual network cloud».

The VPN service does not provide encryption, merely an assurance of traffic separation.

Access is typically provided as an 802.1q VLAN tag on an existing physical connection to Uninett. Dedicated physical ports can also be provided on request.

The traffic inside a Layer 3 VPN is encapsulated in MPLS and is carried over Uninett’s grid with the aid of MPLS routing. It will be re-routed in the event of a fall-out of a single internal connection in Uninett’s grid the same way it is done for our normal IP traffic between end points, provided there is an alternate pathway.

A single connection, however, will be vulnerable to interference on the border router in Uninett to which the connection is made (risk elements involve «equipment breakdowns» or «planned maintenance/upgrading»). To minimize the risk of being temporarily cut off from a Layer 3 VPN, two separate connections to two different Uninett routers can be made.

What is private network connections optical channel?

At long distances, the grid is largely based on infrastructure where Uninett has access to its own wavelengths. In parallel with the research network, we can run private connections. It is even possible to connect these together with corresponding lines that can be offered through our international collaborators. A typical application might involve a research project that requires a high capacity with a guaranteed performance, or if one wants to connect two departments within an organization to a private network.

This service runs parallel with the ordinary research network, with which it shares optical infrastructure. Applications that could benefit greatly by this service are in the heavy natural science environments, environments that handle large amounts of data, or where there is a need for closed networks. Specialized test networks can also be set up with the aid of this service. The interface is 1, 10 and 100 Gigabites Ethernet, as well as 2.5 and 10 Gbit/s SDH. Error tolerance can be assigned as needed.

Who is private network connections for?

Private network connections can be established for anyone who uses Uninett as their Internet service provider.   

Service organization?

The service is run in parallel with the ordinary research network, with which it shares infrastructure.

Dialogue with the college and university sector and the prioritization of work related to the service will be handled by the Priority Council for Network and Web-based Services

Get private network connections

Private network connections can be established for anyone who uses Uninett as their Internet service provider.   

Contact us


The service is monitored 24/7 by Uninett operations center. The Operations Center receives error messages and provides technical user support.

Uninett service center