skip to content

IT Help and Support

University Information Services

As well as the regular routed IP data network connection, the UDN (University Data Network) supports some layer 2 (switched) services.

VLANs presented to institutions between sites will use tags in the Global range of the UDN VLAN numbering scheme.


More information on these is given below.

Additional routed VLAN

As part of the PoP switch service, institutions get a routed data VLAN with the UDN (which can have multiple IP ranges). If an institution requires an additional VLAN (e.g. for an administratively separate part of their institution), they can request one is set up, either with new addresses or by moving some of their existing addresses across.

Institutions can have one additional VLAN (i.e. up to a total of two) as part of the standard PoP charge. Any VLANs beyond this are charged for.

Each VLAN can be configured according to a different model for routing (e.g. edge connection / directly-routed or statically routed). Full information about available options is on the 'IP routing on institutional connections' page.

Infrastructure service VLANs provided for a specific service (e.g. voice, wireless access points, BMS, etc.) are paid for by the service itself and do not count against this limit.

Local PoP VLAN service

An institution with a PoP switch may wish to have a local VLAN which is used to provide internal connectivity between ports on the PoP, not uplinked directly to the UDN. For example, the institutional may loop a firewall through the PoP, with the "outside" linked to the regular UDN data VLAN and an "inside" fed down to internal switches and hosts.

This service is described in details on the PoP equipment page.

Inter-site VLAN service

There are two main ways in which VLANs can be provided between sites.  Which is available depends on whether and institution has a PoP or direct connect (as used to deliver BGP directly between UDN and institution routers).

The services cannot be mixed: if one site has a PoP and the other directly links with BGP, the VLAN service is not available.

Both variants of the service are charged-for.

Inter-site VLAN between PoP switches

An institution may wish to extend a VLAN across separate sites, fed through different PoPs, as part of a private, internal network (much like a local VLAN, but across PoPs). The UDN inter-site VLAN service provides this using a redundant path across the backbone, via both of the upstream routers.

There are, however, a number of caveats to this service:

  • The inter-site VLAN is presented as an additional VLAN on the PoPs at each end — it cannot be an extension of one of the existing VLANs (e.g. the main data VLAN). However, an institution can loop a connection from their internal network into the inter-site VLAN to extend it (this can be done by a simple cable between the two VLANs).
  • The 802.1Q tag to be used will be selected by the UIS from the range of global VLANs in the UDN numbering scheme.
  • The service is limited to a point-to-point connection between two PoPs: it cannot be expanded to support three or more sites: more sites will require separate VLANs.  The VLAN can be presented on multiple ports on each PoP, however.  For multiple sites, the routed MPLS VPN service is more suitable.
  • Rapid Per-VLAN Spanning Tree Plus (Rapid-PVST+) protocol is used to manage redundancy between the PoPs on the UDN backbone and will extend into the institutional network to support Spanning Tree in the same way as any other VLAN on the PoP switch.
  • This service is not available into the hosted portion of the UIS server network in UIS-managed data centres from elsewhere on the UDN.

There are two different technologies used to provide this service; which is used depends on the routers used by the interconnected sites and sometimes a mix of the two technologies is used. The most common technology is EoMPLS (Ethernet over MPLS) and, because of this, the inter-site VLAN service as a whole can sometimes be referred to by UIS Networks as the EoMPLS service. Which technology is used has no effect on the service as seen by the institution.

When requesting this service, the PoPs at each end must be named, along with how the VLAN is to be presented on them.

Inter-site VLANs via direct links

The inter-site VLAN service is also available between institutions with a direct link to a UDN router (as used for the BGP service) and no PoP switch.  There are some important differences between this and the service via PoP switches.

When BGP is used at both ends, two separate virtual circuits between the router downlink interfaces to each institution will be provided as 802.1Q tagged VLANs.  The institutions at each end will need to work together to operate the pair redundantly.

Unlike the service provided through PoPs, the service across direct links does carry Spanning Tree BPDUs, allowing them to be used in a redundant topology.

There are some complications with this arrangement which may make it unavailable, in some cases. These will be determined when the service is requested and the particular situation analysed.

Institutions with router connections are strongly advised to use the MPLS VPN Service instead (perhaps using internal eBGP peerings): this scales better, provides better separation to limit the scope of faults to an individual site and performs better.

When requesting this service, the two pairs of endpoints must be specified.

Other VLAN services

In addition to the layer 2 VLAN services themselves, the UDN can supply other VLANs to institutions through their PoP, in addition to their main data VLAN. These include MPLS site VLANs for other institutions, infrastructure service network VLANs and bridged wireless SSID VLANs.


VLAN services are a charged-for service on a per-VLAN basis:


Annual  Charge

New  Installation

Additional routed VLAN via PoP £74 N/A
Inter-site VLAN £74 N/A

All prices are subject to VAT, where applicable.

Last updated: 20th December 2021