Creating Z-Side Service Tokens

A service token is a unique Equinix Fabric key that grants you authorization to an interconnection asset.

You can create and share a Z-side service token if you want a customer to connect to your service using their port or device. Z-side tokens authorize an existing Equinix Fabric customer to create a connection from their port or virtual device to your port, a Network Edge virtual device or a network. The customer redeeming the Z-side token is billed for the provisioned virtual connection.

Once a Z-side service token is created and shared with the customer, the customer has full permission to create a connection to your port or other asset defined by the service token. You can get information about a token (such as the status) or delete a token at any time.

note

Net new Equinix Fabric users who create connections to a shared port using a Z-side service token will not be able to open a support ticket with Equinix. This must be done by the owner of the shared asset. Existing Equinix Fabric users can open a ticket within the Equinix Customer portal. For more information about support tickets, see Support.

A Z-side service token can be shared with you by a provider (reseller, carrier, or service provider) to enable connectivity to a shared, multi-tenant port, a Network Edge virtual device or network object. For more information see Redeeming a Z-side Token.

Prerequisites

Before creating a service token, you must have:

• An Equinix Fabric account, with one of the following IAM roles assigned: Fabric Connection Manager, Fabric Manager, Fabric Service Provider, Fabric Service Profile Manager, or End Customer Fabric Manager.

• Access permissions to an asset that you want to create a service token for.

To create a Z-side service token:

1. Log in to the Customer Portal > Fabric Dashboard.

2. From the Service Tokens menu, select Create Service Token.

Basic Configuration

On the Basic Configuration page, in the Service Token Type section, select Z-side Connection Service Token.

In the Select Asset Type section, select asset type, then provide token details depending on your selection.

Port

1. Select a location, then choose a port.

2. Deselect Allow a remote Connection to be created if you don't want to allow connections that originate in a different metro.

3. Enter VLAN identifier(s).

Click Next: Token Details.

Virtual Device

1. Select a location.

2. Choose a virtual device type:

   • Virtual Devices - Single instance virtual devices.
   • Redundant Devices - A pair of redundant virtual devices. Important: In case of redundant devices, you must create a separate service token for each device in the redundancy pair.
   • Clusters - Clustered virtual devices.

3. Select a virtual device instance.

4. Deselect Allow a remote Connection to be created if you don't want to allow connections that originate in a different metro.

5. Select a network interface on your virtual device.

Click Next: Token Details.

Network

1. Choose a network type:

   • EVP-LAN - Used to connect Dot1Q encapsulated ports or virtual devices.
   • EP-LAN - Used to connect untagged EPL ports.

2. Select network scope, then choose a network instance.

Click Next: Token Details.

Token Details

On the Service Token Details page:

1. Select the expiration date.

   tip

   The maximum number of days the token remains valid is 90.

2. Set the maximum allowed connection bandwidth that can be established using this service token.

3. Enter the email address(es) of the user(s) who will use the service token.

Click Next: Review.

Review and Create

On the Review page, review the service token configuration, details, and recipient(s), then click Create Service Token.

Click Copy to copy the service token.

note

The creator of the connection that uses a Z-side token will be billed for the connection.

Create Service Tokens Using API

You can use Fabric API to automate this procedure and integrate it with your internal systems. For details, see Create Service Token.