In order to improve the resilience and security of its network, Belnet has launched a Service Improvement Programme which involves all connected organisations.
As part of this programme, we ask that you configure your Point-to-Point IP addresses so that they are no longer used for outbound IP traffic.
Please carefully read the FAQ below for all the details of this change as well as the different technical procedures to be followed.
Why is this change necessary?
What does this change involve?
Which organisations are affected by this change?
How do I check if my Point-to-Point IP address is not being used for outbound IP traffic?
What do I need to do in my organisation?
What is the deadline for making these changes?
What will it cost?
Where can I find more technical documentation and useful links?
Who can I contact in case of questions or problems?
Why is this change necessary?
Following the major DDoS attack we experienced on our network in 2021, Belnet wants to strengthen its network's resilience to provide better protection for the entire Belnet community from this type of attack.
What does this change involve?
This is an addressing change to simplify our network's protection, especially against DDoS attacks.
A Point-to-Point IP address is used to interconnect the customer's infrastructure and is used in the routing of its data. Any other use will no longer be permitted as stipulated in point 5 of the General Terms and Conditions of Delivery of Connectivity Services:
"BELNET provides the CUSTOMER with a "Point to Point" IP address for each separate connection to enable the routing of data traffic between BELNET's PoP and the CUSTOMER's router. This IP address may only be used for this purpose and must not be used by the CUSTOMER in its network configuration."
This change consists in verifying the correct use of your Point-to-Point address and, if necessary, making it compliant with the General Terms and Conditions as referred to above.
Which organisations are affected by this change?
All organisations connected to the Belnet network.
How do I check if my Point-to-Point IP address is not being used for outbound IP traffic?
It is very difficult for Belnet to confirm if you are wrongfully using a Point-to-Point address, sometimes there are indications but we cannot be 100% certain. Check in your configuration where any Point-to-Point addresses are used.
They should exclusively be used for routing between us and you. If they appear in your configuration for any other service (NAT, VPN, etc.), you will likely be impacted.
If you are uncertain about which Point-to-Point ranges apply to you, contact our Belnet Service Desk.
What do I need to do in my organisation?
Configure your Point-to-Point IP addresses so that they are no longer used for outbound IP traffic. Follow these 2 steps:
- Check the configuration of your Belnet network access points and make sure your Point-to-Point addresses have no other purpose than routing.
- If your Point-to-Point addresses are used for other reasons (providing services, NAT, etc.), please reconfigure these services with public addresses that belong to you. If in doubt, please contact your Technical Advisor using our form below.
What is the deadline for making these changes?
A transition period of 6 months is planned to give you time to make the addressing changes.
From 1 October 2022, Belnet will activate the necessary filters to block all incoming data traffic to Point-to-Point IP addresses.
What will it cost?
In principle, there are no costs associated with this change, unless your organisation wishes to use an external party to adjust the configuration.
Where can I find more technical documentation and useful links?
Who can I contact in case of questions or problems?
Contact our Technical Advisors by completing the contact form below.
Do you need help? Our Technical Advisors are here for you