Service specification for VW series

This Article provides VW series technical specifications. If you have any question and comment please feel free to contact us .

 

1. Administration

1-1.  Access Method

IIJA provides Remote VPN account for admin users. You can register (up to 3) account. IIJA provide those accounts initially and it is customer's responsibility to manage those credentials.  IIJA accepts add/delete/edit of those accounts during business hours.

Source IP Restriction

By default, VPN gateway is permitted as "ANY" and if you prefer to restrict it, you can register specific IP address or range. We accept add/delete/edit of those IP-filter during business hours. 

1-2. Control Panel

1-3. Account and Permissions

IIJA provides (1) admin account for customer. you may register up to (2) more accounts for same permission. However, it is not provided by default. It is customer's responsibility to manage those credentials.  IIJA accepts add/delete/edit of those accounts during business hours.

Browse List of Permissions

1-4. Password Policy

Default Admin Password Policy is described below and can be modified for your organization's compliance policy. Password policy depends on customer. Please ask IIJA support for more detail.

Lockout Policy

 

1-5. Management Network Throughput (VPN).

Management VPN network access throughput is up to 100Mbps.

 

2. Network

2-1 Internet Connection

IIJA provides shared 10Gbps redundant internet connection.

 

2-2 Network Addressing

IIJA provides IPv4 29 bit mask  (/29 or 255.255.255.248) global network address. The first (3) address are reserved by our gateway device. Thus (4) global address is available for customer to use.

 

2-3 Domain Name Service

There are no restriction or filtering for DNS protocol (53) on our network facility. You are free to chose your own desired DNS server of your choice.

Name Server (Best effort)

216.98.98.4 / 216.98.98.20

Note: The following DNS server only respond query from GIO-US network address range. This DNS service is best effort basis and IIJA has no responsibilities. You are free to chose your own desired DNS.

Reverse DNS Lookup

Reverse DNS Lookup registration can be processed through IIJ America. if you need assistance, please contact us.

 

2-4 Network Time Protocol

There are no restriction or filtering for NTP protocol (123) on our network facility. You are free to chose your own desired NTP server of your choice.

NTP servers (Public)

0.us.pool.ntp.org / 1.us.pool.ntp.org / 2.us.pool.ntp.org / 3.us.pool.ntp.org

Note: The following Public NTP server is provided by us.pool.ntp.org and use of this NTP service is best effort basis and IIJA or us.pool.ntp.org has no responsibilities. You are free to chose your own desired NTP.

 

2-5 Dedicated Network

You can build to order dedicated Internet connection with additional charge (1Mbps up to 1Gbps). Also, you may bring your own circuit (MPLS, cross connect, etc) with VW series. IIJA is happy to assist your network demands. please contact our sales contact .

 

3. Host Server

3-1 Hardware and Software

Host server spec

Software for VW series

VMware vSphere ESXi 6.5 Enterprise Plus (or higher)

 

3-2 HA configuration

vSphere DRS

vSphere DRS is enabled by default.

vSphere HA

vSphere HA is enabled by default with following setup.

 

3-3 vMotion

 

Type 1. Change Host

you can move Virtual Machines between host servers.

 

 

Type 2. Change Datastore

you can move Virtual machines data file (.vmx .vmdk) between Datastores*.

*Datastore = Storage Logical Volumes. (IIJA put backup datastore into maintenance mode as default. Please contact IIJA to use another datastore)

 

 

 

3-3 vSwitch

External vSwitch (WAN or Cross connect use)

Provided 1 External Switch by default.

Internal vSwitch (LAN only)

Provided 3 Internal Switch by default.

Default Virtual Network Configuration

3-4 Alarms and Scheduled Tasks

Alarms

Please contact IIJA for create Alarms. The alert for customer is disabled by default. Following alerts can be sent via email.

• Datastore usage on disk
• Host CPU usage
• Host memory usage
• Virtual machine Consolidation Needed status
• Virtual machine CPU usage
• Virtual machine error
• Virtual machine Fault Tolerance state changed
• Virtual Machine Fault Tolerance vLockStep interval Status Changed
• Virtual machine memory usage

Schedules Tasks

You can create and manage your own scheduled tasks.

 

3-5 Guest OS Snapshot

Snapshot retention policy: Using a single snapshot for less than 72 hours is recommended. IIJA will delete snapshots during maintenance if those snapshots are more than 30 days old.

Reference:
Best practices for using snapshots in the vSphere environment
EN: https://kb.vmware.com/s/article/1025279
JP: https://kb.vmware.com/s/article/1025279?lang=ja

 

4. Storage

4-1 Local Datastore

Each Host has a HDD or SSD (Raid1) local storage to store ESXi hypervisor software.

4-2 iSCSI (SSD All Flash) Datastore

Each Storage has a power unit redundancy, dual controller and RAID6 with hot-spare configuration.

4-3 FC (SSD All Flash) Datastore

Each Storage has a power unit redundancy, dual controller and RAID6 with hot-spare configuration.

 

5. Components

5-1 vFirewall service (default)

VW series provides managed Cisco VPN gateway by default.

Feature Includes Firewall, NAT and Site to Site IPSec VPN. Remote Access is option with an additional charge.

* ASAv5 reserves 1vCPU and 2GB RAM from host server resources.

1. Maximum throughput measured with User Datagram Protocol (UDP) traffic under ideal conditions.

2. The VPN throughput and the number of sessions depend on the ASA device configuration and VPN traffic patterns. These elements should be taken into consideration as part of your capacity planning.

3. The VPN session maximum is 250 for both IPsec and Anyconnect combined.

 

5-2 Seil/x86 service (option)

IIJA provides managed virtual router (option) available for VW series.

Feature Includes Site to Site VPN, NAT and Remote Access.

please consult with our Sales Rep for details.

 

5-3 Layer2 connection service (option)

IIJA provides Layer2 connection service (option) to connect with various system components.

• GIO-US product integration
• Appliance colocation
• Dedicate Network circuits
• Datacenter Cross connect

Conditions may apply, please consult with our Sales Rep for details.

 

5-4 Backup and DR Service (option)

IIJA provides Virtual Machine Backup service (option) for VW series.

please consult with our Sales Rep for details.

 

5-5 Monitoring (option)

contents under construction

please consult with our Sales Rep for details.

 

5-6 OS Software Licensing

The Guest VM on GIO-US platform need to meet licensing compliance. If you bring your own OS Software onto GIO-US platform via .ISO .ova .ovf or another executable media, Please check its licensing policy. IIJA provides Microsoft SPLA licensing for those who need to deploy Microsoft Application with GIO-US.

 

6. Technical support

 

6-1. Manual and Documents

Please visit our GIO-US help center   site.

6-2. Technical Support contacts

Please visit our  Technical contacts  site.

6-3 Maintenance and Outage Information

Please visit our  IIJ America's Website .

6-4 Maintenance Schedule

Please vist our  Maintenance Schedule  site.

6-5 Service Level Agreement

Please visit our GIO US Service Level Agreement (SLA)   site.