1
SERVICE DESCRIPTION FOR BUSINESS VPN SERVICE
1.1
General Service Description
Business VPN provides connectivity between Locations in an "any-to-any" environment by enabling
any customer edge ("CE") router within the virtual private network ("VPN") to communicate with other
CE routers in the same VPN) using IP switching. This Network Service relies on the Orange MultiProtocol Label Switching ("MPLS") architecture, which is comprised of CE router(s), Provider Edge
("PE") routers, and Provider ("P") routers. The CE router, which is installed at the Customer Location,
connects to the PE router through an access medium. Each CE router is equipped with one or more
LAN interface types that connect the Customer’s LAN to the Orange Network. Unless otherwise
agreed and configured by Orange, Business VPN does not allow the CE routers in different VPNs to
communicate with one another
1.2
Standard Service Elements
The standard elements of Business VPN Service are as follows:
(a) Service Bandwidth and Managed CPE – The IP bandwidth ("Service Bandwidth") parameter
is limited to the bandwidth of the Tail Circuit, although the actual Service Bandwidth is less than
the Tail Circuit bandwidth because of the overhead. An Orange-managed CE router is installed at
each Location, unless Customer elects to provide and manage its own CE router;
(b) Traffic Management – Location-specific traffic management, which is implemented through the
Class of Service mechanisms ("COS"), prioritizes the network traffic by assigning one level of
priority for voice traffic, a separate priority level for video traffic, and three levels of priority for
data traffic. The Service Type (as hereinafter defined) and the Location’s Site Profile (as
hereinafter defined) purchased by Customer will determine the Class of Service.
(c) Service Levels – Service Levels are based on the Site Profile, Service Type, and the level (i.e.
standard vs. extended) of Service Select – Service Delivery and Service Select – Service
Support purchased by Customer.
(d) MPLS VPN – Secure VPN is provided through Multi-Protocol Label Switching technology.
(e) Access Circuit – Unless the Location’s Site Profile is Business VPN Small Off-Net, or unless
otherwise specified in the Agreement, Orange will order the access circuit from the TO if it is able
to do so. Where available, the access circuit can be delivered through different technologies such
as xDSL, cable, WiMax, Ethernet, leased lines, FTTx, etc.
(f) Network and Incident Management – Where available and depending on the Location’s Site
Profile and the type of Service Select - Service Support (i.e. extended or standard support)
purchased by Customer, Orange can provide network and incident management support on a
24x7x365 basis.
1.3
1.3.1
Business VPN Site Profiles
Site Profiles. Generally. Customer can designate the Business VPN profile of each Location ("Site
Profile") as Business VPN Small, Business VPN Small VM, Business VPN Small Off-Net, or Business
VPN Corporate after considering whether or not the Location is a critical site, and whether or not the
following are needed: (a) end-to-end performance levels for the network traffic; (b) voice or video are
to be combined with data traffic on a single IP plug; (c) multi-protocol encapsulation solution rather
than pure IP service for the Location; and (d) any of the optional service features (e.g. Telepresence
Connect, Multicast, etc.) for the Business VPN Service. Table 1 summarizes the main attributes of the
Site Profiles.
Table 1: Site Profile Attributes
Any-to-Any IP Plug
Business VPN Small &
Business VPN Small VM
Business VPN
Small Off-Net
Business VPN
Corporate
Yes
Yes
Yes
Design and Configuration of the Business VPN
Yes
Yes
Yes
Provisioning and Management of CE Routers
Yes
Yes
Yes
End-to-End IP Performance Levels
No
No
Yes
Application Awareness
No
No
Yes
Multi-Protocol Integration
Multimedia Integration
Optional Business VPN Service Features
No (IP only)
Yes
‡
Case-by-case basis
No (IP only)
Yes
No
Yes
Case-by-case basis
Case-by-case basis
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
‡
1 of 8
Service Description for Business VPN Service
Business VPN Small &
Business VPN Small VM
‡
Business VPN
Small Off-Net
Business VPN
Corporate
Availability depends on countries, Service Bandwidth, and Service architecture.
1.3.2
1.3.3
Business VPN Small. Business VPN Small supports by default only the D2 Class of Service, which
means that all network traffic will be prioritized as D2 Class of Service. The availability of the optional
Business VPN service features is subject to Orange approval. Business VPN Small is implemented
using xDSL or FTTx technology. Orange will, at its discretion, implement Business VPN Small using
PSTN line, ISDN line, fiber, or dedicated copper.
Subject to the agreement from Orange, Customer may provide the PSTN line or ISDN line and in such
event Customer will be responsible for the installation, monitoring, and maintenance of the PSTN or
ISDN access circuits. Such PSTN line or ISDN must be installed by Customer at the Location prior to
the installation of the Business VPN Small at the Location. Service Select – Service Delivery and
Service Select – Service Support do not apply to the PSTN or ISDN access provided by Customer.
(a) Service Infrastructure. Except as otherwise provided in this Clause 1.3.2, Orange will provide
the CE router, the access service to the Orange Network, and the IP bandwidth. The Service
Bandwidth will be configured to support the DSL or FTTx access downstream speed. The access
service may either be DSL, FTTx, cable, or WiMAx.
(b) Orange-Managed Router. Orange will configure the CE router based on the standard Orange
IP-only configuration. Business VPN Small does not include the provision of Domain Name
System ("DNS"), which is Customer's responsibility.
(c) Service Bandwidth. The Service Bandwidth is limited to the bandwidth of the access circuit,
although the actual Service Bandwidth is less than the access circuit’s bandwidth because of the
overhead. The Service Bandwidth is not guaranteed and may vary by Location and the time of
day.
(d) Traffic Management. As an optional feature and subject to additional charges, Orange may be
able to support an additional Class of Service prioritized over the D2 Class of Service. This
feature is only available for defined countries and is subject to a minimum Service Bandwidth
requirement. Orange will confirm the availability of this feature in certain countries and the
minimum Service Bandwidth requirement at the time Customer indicates an interest in this
optional feature.
Business VPN Small Off-Net. Except as set forth in the Agreement, Business VPN Small Off-Net
also has the same service features, requirements, and limitations as Business VPN Small. However,
instead of connecting the Location to the VPN using an Orange supplied access circuit, the Location
will be connected to the VPN by using a Customer supplied public Internet access service.
Connectivity between the VPN and the Off-Net Location is secured through IPsec protocols. The
following conditions apply to Business VPN Small Off-Net:
(a) If Orange is unable to order and deliver the access for Business VPN Small due to regulatory
restrictions or constraints, or if the Customer wants to use its own access, then Customer will be
required to order the access directly from the access provider. In such event, Customer will
(i) provide the access that is required to implement the Service, (ii) ensure that the access is
installed at the Location prior to the installation of the Service, (iii) be responsible for payment of
all charges associated with the access, including paying such charges directly to the access
provider, and (iv) upon the request of Orange provide all information regarding such access.
Service Select – Service Delivery and Service Select – Service Support do not apply to any
access provided by Customer.
(b) Orange will provide and manage the CE router at the Location. Orange will also provide a Silver
Service Type port to the Orange Network, but Orange will not provide the access to the Orange
Network. Instead, Customer is responsible for (i) ordering the access-based Internet service from
an Internet service provider ("ISP"), (ii) ensuring that the Internet-based access service is
installed prior to the installation of the Business VPN Small Off-Net, (iii) managing and
maintaining the Internet-based access service and the associated equipment (e.g. modem,
router, etc.) needed to connect the Location to the Orange Network, (iv) testing and confirming
the acceptability of the Internet service, (v) resolving any faults (e.g. Service outage) in the
Business VPN Small Off-Net, which are caused by the Internet service, (vi) paying for the
Internet service and any supporting access service(s), and disconnecting the Internet service
when the Business VPN Small Off-Net Service is disconnected.
(c) Customer is responsible for ensuring that the Internet service is configured in accordance with
the Orange specifications (which Orange will identify and may modify from time to time). The
configuration includes the following:

Point-to-Point Protocol over Ethernet ("PPPoE") with either dynamic or static public IP
address with Internet DSL modem or with Internet router configured in bridge mode;
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
2 of 8
Service Description for Business VPN Service



Ethernet 10/100 Mbit/s interface (USB interface is not supported);
Access speed no greater than those quoted in Table 2; and
Internet broadband service must enable IPSec Passthrough.
Table 2: Business VPN Small Off-Net Maximum Access Speed
‡‡
Speed Category
Symmetric Service Support
Asymmetric Service Support
<8Mbit/s
8/8 Mbit/s
(Download + Upload speeds ) / 2 < 8Mbps
<16Mbit/s
16/16Mbit/s
(Download + Upload speeds ) / 2 < 16Mbps
<30Mbit/s
30/30Mbit/s
(Download + Upload speeds ) / 2 < 30Mbps
<50Mbit/s
50/50Mbit/s
(Download + Upload speeds ) / 2 < 50Mbps
<80Mbit/s
80/80Mbit/s
(Download + Upload speeds ) / 2 < 80Mbps
‡‡
If Customer uses the Business VPN Small Off-Net in conjunction with Local Internet Browsing optional features, then the
maximum access speed is reduced by 30%.
(d)
1.3.4
Customer must also comply with all regulatory requirements and obtain all regulatory approvals
in order for Customer to use the Business VPN Small Off-Net (e.g. certificates for using IPSecenabled devices and encryption technology).
(e) The provisioning of Business VPN Small Off-Net by Orange will be subject to the installation and
successful testing of the Internet service. Customer will identify the configuration of the Internet
service and line speed in the Order for Business VPN Small Off-Net, and Customer will notify
Orange immediately of any changes that are made to Customer’s Internet service during the
Service Term.
(f) Any change to Customer’s Internet service may result in additional Charges for Business VPN
Small Off-Net. Orange will have no responsibility or liability with respect to, or for any faults in the
Business VPN Small Off-Net caused by any third-party products or services (including the
Internet service provided by Customer’s Internet service provider).
(g) Prior to reporting any Incident to Orange, Customer must confirm that the Internet service is in
proper operational condition. Notwithstanding anything to the contrary contained in the
Agreement, Service Select – Service Delivery and Service Select – Service Support do not cover
the Internet service (including any equipment associated with the Internet service) or any
Incidents that are caused by the Internet service.
(h) Some Business VPN optional service features (e.g. NAS backup) are not available with Business
VPN Small Off-Net.
Business VPN Small VM. Except as set forth in the Agreement, Business VPN Small VM also has the
same service features, requirements, and limitations as Business VPN Small. The Location will be
connected to the VPN by using an Orange-supplied public Internet access service. Orange will, at its
discretion, implement Business VPN Small VM using PSTN line, fiber, dedicated copper, wireless or
radio-link. The 3G/4G access or Satellite link are not supported.
Subject to agreement from Orange or in case government regulations require Customer to do so,
Customer may (or will, as the case may be) provide the PSTN line and in such event Customer will be
responsible for the installation, monitoring and maintenance of the PSTN access circuits. Such PSTN
line must be installed by Customer at the Location prior to the installation of the Business VPN Small
VM at the Location. Service Select – Service Delivery and Service Select – Service Support do not
apply to the PSTN access provided by Customer.
(a) Orange will provide and manage the CE router at the Location and the Internet access to the
Orange Network. Orange is responsible for (i) ordering the Access-based Internet service from a
Local Internet service provider ("LISP") or from an aggregator, (ii) managing and maintaining the
Internet-based access service and the associated equipment (e.g. modem, router, etc.).
(b) The Internet service provided by Orange includes:

Point-to-Point Protocol over Ethernet ("PPPoE") with either dynamic or static public IP
address. At least one public IPv4 address will be provided by default. If Customer needs
more than one public address or static IP address, the requirement must be specified to the
Orange Solutions Consultant who will first validate the request. Additional or static public IP
addresses may be subject to additional charges.

Internet service enables IPSec Passthrough.
(c) Orange will comply with all government regulations that are applicable to its delivery of the
Business VPN Small VM. Due to regulatory constraints, the Business VPN Small VM Service
may not be available in some countries (e.g. countries under government embargo, countries
where IPsec tunneling is prohibited, etc.). Orange reserves the right to modify the Service
Availability Service Levels in order to comply with the regulatory requirements. Customer is
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
3 of 8
Service Description for Business VPN Service
1.3.5
1.4
1.4.1
1.4.2
1.4.3
1.5
1.5.1
responsible for complying with all regulatory requirements and for obtaining all regulatory
approvals in order for Customer to use the Business VPN Small VM (e.g. certificates for using
IPsec-enabled devices and encryption technology).
(d) Some Business VPN optional service features (e.g. Continuity solutions) are not available with
Business VPN Small VM.
Business VPN Corporate. The Business VPN Corporate profile may use Leased Lines, Ethernet or
DSL access. The requested Service Bandwidth with Class of Service support is configured for
Customer based upon the Location’s requirements.
(a)
Service Infrastructure:

The access bandwidth depends on the bandwidth availability in each country where the
Location is situated and this bandwidth should reflect the mid to long-term bandwidth needs
of the Location.

A subdivision of the access bandwidth, the IP Service Bandwidth represents the short-term
bandwidth needs of the Location. The IP Service Bandwidth parameter is limited to the
bandwidth of the Tail Circuit, although the actual IP bandwidth is less than the Tail Circuit
bandwidth because of the overhead. Business VPN Corporate Service Bandwidth varies
from 64kbps to 5Gbps, and the availability varies per country and per access method.
(b) Orange-Managed Router. Orange will provide and manage the CE router, including IOS
upgrades.
Business VPN Security
Native Security Features of Business VPN. Orange uses the following security measures to
safeguard the privacy of the Business VPN traffic:
(a) Physical Security. The P routers and PE routers, which maintain the MPLS-VPN logical
security, are located in Orange premises.
(b) Connection to Network Devices. Telnet or SNMP access to network devices is restricted to a
defined set of management stations located in a protected administration area. In addition, both
SNMP and Telnet sessions are controlled by passwords.
(c) Separate Routing Tables Per VPN. The PE router holds one VPN Routing Forwarding table
("VRF") per customer. Each PE-to-CE sub-interface is assigned to a VRF by the PE
configuration, and each VRF contains only the routes of Customer’s VPN. Each VPN is assigned
to a unique identifier (i.e. BGP route target attribute), which is used by the network to route and to
separately filter Customer’s traffic.
(d) CPE. The CE router does not hold the VPN definition logically defined on the PE router. Since
the PE router is located in the Orange premises, the MPLS-VPN logical security features are not
compromised if the CE router configuration is breached.
(e) Access Security. While Leased Lines and ATM- based access services are inherently secure,
access connectivity via third party networks (e.g. public Internet or layer 3 IP networks) are
secured using a tunneling technology (i.e. Layer 2 Tunneling Protocol (or "L2TP") or Internet
Protocol Security (or "IPSec")). These tunnels ensure the privacy of the IP packets and
Customer’s VPN. For Ethernet access, traffic isolation is maintained through the Ethernet virtual
connection ("EVC") and virtual local area network ("VLAN") concepts.
Enhanced Security. Customer can enhance the basic security features of the Business VPN Service
by purchasing Orange security services. The Service Descriptions for specific Orange Security
Services are available upon request.
Limitations. In all cases, and notwithstanding anything to the contrary set forth in the Agreement,
Customer will be solely responsible for its own network security policy and security violation response
procedures. While the security measures described in this Service Description protect Customer's
network against unauthorized access, Business VPN does not guarantee in any sense an absolute
network security or that the Service prevents all security breaches. It is Customer's responsibility to
design a comprehensive security program in conjunction with any other service providers or
professionals chosen by Customer.
Classes of Service
Classes of Service, Generally. Traffic management (including application awareness and congestion
prevention) is managed via IP classes of service. Orange offers five (5) Classes Of Service ("CoS"),
and whereby three (3) Classes of Service are dedicated to data traffic with bandwidth allocation and
prioritization principles; one (1) Class of Service is dedicated to video traffic with specific video
performance considerations; and one (1) Class of Service is dedicated to voice traffic with real-time
traffic management considerations. However, if Customer purchases the Business VPN Internet
optional feature, a sixth Class of Service (also referred to as data best effort CoS) is provided for
Internet traffic in order to maintain the priority of the D1, D2, and D3 data traffic.
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
4 of 8
Service Description for Business VPN Service
The three data CoS, the video CoS, and the voice CoS employ bandwidth management and
prioritization mechanisms, which allocate the available Service Bandwidth in proportion to the "relative
weight" of each CoS whenever traffic congestion occurs on the access circuit. These bandwidth
management and prioritization mechanisms mitigate the occurrence of traffic congestion by proactively
detecting over-capacity needs and by managing the congestion if the capacity needs exceed all of the
"buffer" capacity of the CE router and the access circuit.
(a) Data Classes of Service: The data CoS are categorized as follows:

Data 1 (D1): The Data 1 ("D1") CoS, which is generally used for business-critical data
applications that require maximum Service Bandwidth performance and availability, has the
highest priority of all the data traffic, and the D1 traffic is given the highest priority in terms
of bandwidth availability if there is network congestion.

Data 2 (D2): The Data 2 ("D2") CoS, which is used for 'standard business' data application
traffic that requires a high level of Service Bandwidth performance and availability, has an
intermediate level of priority when network congestion occurs.

Data 3 (D3): The Data 3 ("D3") CoS, which is generally used for non-business critical data
applications, has the lowest priority when network congestion occurs. This CoS benefits
from the same level of service as the D1 and D2 CoS; however, D3 traffic slows down when
access congestion occurs in order to provide the D1 and D2 traffic the maximum available
Service Bandwidth and priority.
Each data Class of Service is allowed to use all the available Service Bandwidth on the access
up to 100% of the available Service Bandwidth. However, as explained in Clause 1.5.1(c) below,
the voice CoS has priority over the three data CoS in case of network congestion.
(b) Video Class of Service (RT-Vi). The real-time video (“RT-Vi”) CoS, which is used to transport
videoconferencing applications that require Service Bandwidth performance and availability,
employs class-based weight and fair queuing mechanisms and has a guaranteed Service
Bandwidth in case of access congestion. This CoS is optional and subject to additional charges.
All traffic that exceeds the allocated Service Bandwidth, as determined by the speed and number
of simultaneous video sessions being supported, is discarded in order to protect the three data
CoS.
(c) Voice Class of Service (RT-Vo). The real-time voice ("RT-Vo") CoS uses a "real time" priority
mechanism to manage the voice traffic over the IP network. This CoS is optional and subject to
additional charges. Jitter is the service quality indicator for voice traffic.
The voice CoS has priority over the three data CoS, but it is limited to a maximum allocated Service
Bandwidth defined in the table in Clause 1.6. All traffic that exceeds the allocated Service Bandwidth is
discarded in order to protect the three data CoS. Customer can use Business VPN for Business Talk
Service. Business Talk Service (which is a managed voice service) is a separate Orange service
offering and is subject to additional charges. A service description of the Business Talk Service is
available upon request.
1.6
Class of Service Limitations
(a)
The maximum available Service Bandwidth for real time traffic (e.g. voice, video, Telepresence
Connect) varies according to the type of access medium and the country where the Location is
situated.
(b) The Platinum Service Type is not available when using satellite access or DSL access unless
agreed in writing by Orange.
(c) The following limitations apply for Silver, Gold, Platinum, Service Types and the Gold and
Platinum flexible options:

Minimum Service Bandwidth for D1 CoS: 16 kbps.

Minimum Service Bandwidth for D2 CoS: 12 kbps.
Table 3 provides a summary of the bandwidth allocations for each Class of Service and Table 4 details
the Business VPN Corporate’s minimum Service Bandwidth requirement for real-time traffic.
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
5 of 8
Service Description for Business VPN Service
Table 3: Class of Service Bandwidth Allocation
Class of Service
Service
Type
RT-Vi and RT-Vo
‡‡‡
D1
D2
D3
Not applicable.
Not applicable.
Maximum bandwidth =
100% of total available
Service Bandwidth.
Not applicable.
Not applicable.
Maximum bandwidth =
60% of total available
Service Bandwidth.
Maximum bandwidth =
30% of total available
Service Bandwidth.
Maximum bandwidth =
10% of total available
Service Bandwidth.
Not applicable.
Maximum bandwidth =
66% of total available
Service Bandwidth.
Maximum bandwidth =
33% of total available
Service Bandwidth.
Not applicable.
Not applicable.
Not applicable.
Maximum bandwidth =
100% of total available
Service Bandwidth.
Not applicable.
Maximum bandwidth =
60% of total available
Service Bandwidth minus
RT-Vi and RT-Vo
bandwidth.
Maximum bandwidth =
30% of total available
Service Bandwidth minus
RT-Vi and RT-Vo
bandwidth.
Maximum bandwidth =
10% of total available
Service Bandwidth
minus RT-Vi and RTVo bandwidth.
Maximum bandwidth =
66% of total available
Service Bandwidth minus
RT-Vi and RT-Vo
bandwidth.
Maximum bandwidth =
33% of total available
Service Bandwidth minus
RT-Vi and RT-Vo
bandwidth.
Not applicable.
Not applicable.
Maximum bandwidth =
100% of total available
Service Bandwidth minus
RT-Vi and RT-Vo
bandwidth.
Not applicable.
Silver
Gold
 In case of Business VPN
Corporate built on Leased
Lines: maximum RT
bandwidth = 75% of total
Service Bandwidth.
 In case of Business VPN
Corporate built on Ethernet
or xDSL access: maximum
RT bandwidth = 40% of total
Service Bandwidth.
Platinum
 With Business VPN service
for Telepresence: maximum
RT bandwidth = 75% of total
Service Bandwidth.
‡‡‡
When Ethernet access bandwidth is significantly greater than the IP Service Bandwidth (i.e. Ethernet bandwidth is 20%
higher than service IP bandwidth), voice traffic can be extended to 75% of the IP Service Bandwidth.
Table 4: Minimum Service Bandwidth Requirement
Business VPN Corporate Access
‡
Minimum Service Bandwidth
Leased Line Dedicated Access
 RT-V o/BTG: 64kbps (FR) / 1Mbps (ATM)
 TP: 4M bps
 RT-Vi: 256kbps
Ethernet Dedicated Access
 1Mbps
Integrated Access (SHDSL)
 RT-Vo: 512kbps
 BTG: 1M bps
 RT-Vi: 1M bps
1.6.1
Service Types
(a) Silver. The Silver Service Type is the basic Service Type for Business VPN Service. The Silver
Service Type allows Customer to obtain an "any-to-any" Business VPN plug for Locations that
require IP-only service. It does not provide multi-protocol encapsulation or application
prioritization.
(b) Gold. The Gold Service Type allows Customer to manage the application traffic by using CoS
management standard profiles that allocate and distribute the access bandwidth in case of traffic
congestion. It also provides multi-protocol management. Customer can classify it’s the data
applications into one of the three data CoS.
(c) Platinum. Since the Platinum Service Type allows multi-protocol management and data
application traffic management, the Platinum Service Type includes the D1, D2, D3, RT-Vi, and
RT-Vo CoS. This enables Customer to give greater priority for either voice traffic or video traffic,
or for both traffics.
(d) Flexible Options for Gold and Platinum Service Types. Orange can provide "flexible options"
for Gold and Platinum Service Types ("Flexible CoS") if Customer requires greater control of the
bandwidth management. The Flexible CoS allows both the customization of the access
bandwidth for each CoS and traffic prioritization.
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
6 of 8
Service Description for Business VPN Service
1.7
1.7.1
1.7.2
1.7.3
1.8
Application Management
Classification Rules. Customer must define a set of classification rules for its applications during the
design of the Business VPN network. The classification rules can be modified during the lifecycle of
the Business VPN network with the assistance of an Orange Professional Services consultant.
(a) From the CE Router to the Backbone. Orange will configure the CE router according to the
application classification rules specified by Customer. The application classification rules define
how the CE router manages the application traffic classification (i.e. prioritization) for the outgoing
traffic. Applications are classified according to their corresponding Class of Service (data or
voice). When formulating the application classification rules, Customer must focus on the main
applications that are to be given top priority in terms of traffic management. The remaining
applications will be automatically classified according to the default Class of Service configured
on the access.
(b) From the Network to the CE Router. The incoming traffic (i.e. traffic moving from the Orange
Network to the CE router) takes precedence over the outgoing traffic (i.e. traffic moving from the
CE router to Orange Network), and the Business VPN network automatically classifies the
incoming traffic according to its Class of Service. If the incoming traffic’s CoS is not configured on
the access, then it is classified as an “unknown type of traffic” and placed in the "by default"
Class of Service configured on the access. The per-CoS traffic assignment rules correspond to
how traffic flow is mapped to a Class of Service, and is similar to specifying an access control list.
If any incoming traffic does not match any of the application classification rules, then this
incoming traffic is sent into the lower level Class of Service (e.g. D2 CoS or D3 CoS).
Enterprise Application Management for the FLEXIBLE Options. If Customer selects the Flexible
CoS options, then it is recommended that Customer also purchase the Orange Enterprise Application
Management Service. A Service Description of the Enterprise Application Management Service is
available upon request.
Network Boost. Network Boost is an optional service feature of the Business VPN Service. It provides
Customer with visibility concerning the traffic flows, restores the traffic control, and ensures the right
level of performance for Customer’s critical applications. Network Boost includes dashboards
indicators that let Customer know how the applications are performing and a global objective-based
Quality of Service that enables real-time resource adaptation to reach the application’s performance
objectives. Any and all Charges for Network Boost are in addition to the Charges for Business VPN
Service. A description of Network Boost is available upon request.
Customer Care Services
Service management support, network management support, and installation support are provided via
Service Select – Service Delivery, Service Select – Service Support, and Service Transition. The
scope of these customer care services depends on the level of coverage purchased by customer
(e.g. standard, extended or customized). These customer care services are separate from the
Business VPN Service, and they are more fully described in the Service Descriptions for Service
Select – Service Delivery, Service Select – Service Support, and Service Transition. Unless otherwise
expressly set forth in the Orders for Business VPN Service or the Charges Schedule for Business VPN
Service, any and all Charges applicable to Service Select – Service Delivery, Service Select – Service
Support, Service Transition Extended are not included in the Charges for Business VPN Service.
1.9
Border Gateway Protocol Limitation
The total number of Border Gateway Protocol ("BGP") routes (i.e. the paths to another network
dynamically learned by the routers rather than configured into a router’s profile) that Customer is
allowed to send into the Orange Network is 500 BGP prefixes per CE router. If Customer needs more
than 500 prefixes per CE router, then the Orange Solutions Consultant must first validate the
allowance of such additional prefixes. Static routing is implemented by default with Business VPN
Small, BVPN Small VM, and Business VPN Small Off-Net, but BGP can be ordered by Customer as
an optional billable feature.
1.10
Service Installation in Saudi Arabia
In Saudi Arabia, the TO will provide the domestic portion of the Business VPN Service and the access
circuit. The TO will perform technical feasibility studies during the implementation of the Order rather
than before Customer signs the Order. Either Party may cancel the Order without any liability if the TO
determines that it cannot provide the domestic connectivity or access circuit in accordance with the
technical specifications indicated on the Order.
If the TO can provide the domestic connectivity or Access circuit but at a different speed or Class of
Service than the one requested by Customer on the Order, Orange will suspend the Business VPN
Service installation and will check with Customer to determine if Customer is still interested in the
Service albeit at a different speed or Class of Service. If Customer agrees to proceed with the Service
installation even though at different technical specifications, Orange and Customer will either (a)
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
7 of 8
Service Description for Business VPN Service
cancel the Order and enter into a new Order, or (b) modify the Order via a Change Order. The new
Order or the Change Order (as applicable) will reflect the new technical specifications and Charges for
the Business VPN Service.
1.11
Acceptance Test
The Acceptance Tests for voice, data, and video are independent from each other. An Acceptance
Test is considered successful if Orange is able to establish Internet Protocol connectivity between a
CE router at the new Location and a CE router at another Location within the same IP VPN
community.
1.12
Voice Traffic
Customer will not use the Business VPN Service to carry real time voice traffic unless and to the
extent expressly set out in an Order or otherwise authorized in writing by Orange.
END OF SERVICE DESCRIPTION FOR BUSINESS VPN SERVICE
SD.Business VPN.GBL.10-15
Orange and Orange Business Services are trading names of the Orange Group and are trademarks of Orange Brand Services Limited.
CONFIDENTIAL
8 of 8