AYY logo
Trinet

the Otaniemi campus student network founded in 1986

Trinet Network Technology

General

The Trinet network is based solely on Ethernet technology. The core network and Internet connections were upgraded to 10 Gbps in 2009-2010, and most recently to 100 Gbps in 2018. The remaining parts of the network use either 10 Gbps (unprotected core access) or 10+10 Gbps (protected core access) links.

The network topology is visualized in the Trinet weathermap.

Routers

Trinet uses two Juniper MX204 routers that provide IPv4 and IPv6 routing for the entire network. Each router has a dedicated 100 Gbps connection to Funet, and they are interconnected via a 100 Gbps link. Each router has a total forwarding capacity of approximately 400 Gbps.

Current sites and edge switches

Please refer to the following table if you are interested in the current situation in the apartment buildings or in the AYY offices.

LocationSwitchesUser AccessTowards BackboneIP MTUDHCP FilteringRA/DHCPv6 FilteringIPv4 MulticastIPv6 Multicast
AYYJämeräntaival 12 * Cisco Catalyst 4506-E1 Gbps20+20 Gbps9000XXXX
AYYJämeräntaival 3 A1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 3 B1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 3 C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 5 A1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 5 B1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 5 C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 62 * Cisco Catalyst 4506-E1 Gbps20+20 Gbps9000XXXX
AYYJämeräntaival 7 A1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 7 B1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYJämeräntaival 7 C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 91 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 10 A-B1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 10 C-D1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 10 E-F1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 10 G1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 10 H1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 11 A-D2 * Cisco Catalyst 4506-E1 Gbps20+20 Gbps9000XXXX
HOASJämeräntaival 11 E-F1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASJämeräntaival 11 G-I2 * Cisco Catalyst 4506-E1 Gbps20+20 Gbps9000XXXX
HOASJämeräntaival 11 J-M2 * Cisco Catalyst 4506-E1 Gbps20+20 Gbps9000XXXX
AYYMiestentie 2 B2 * Cisco Catalyst 4506-E1 Gbps20+20 Gbps9000XXXX
AYYOtakaari 18 A1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYOtakaari 18 B-C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYOtakaari 201 * HP ProCurve 5406R1 Gbps10+10 Gbps9000XXXX
AYYOtaranta 8 A1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYOtaranta 8 B1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYOtaranta 8 C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYOtaranta 8 D1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYOtaranta 8 E1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYServinkuja 11 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
OASServinkuja 2 A-C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
OASServinkuja 2 D-F1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASServinkuja 5 A1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASServinkuja 5 B1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASServinkuja 61 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
OASServin Maijan tie 11 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
HOASServin Maijan tie 31 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYServin Maijan tie 6 A-C1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYServin Maijan tie 6 D-G1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYServin Maijan tie 101 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYServin Maijan tie 12 A-F1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYServin Maijan tie 12 G-K1 * Cisco Catalyst 4506-E1 Gbps10+10 Gbps9000XXXX
AYYArkadiankatu 281 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYAtlantinkatu 72 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYHaarniskatie 82 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYKaj Franckin katu 41 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYKääpiöidenpolku 42 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYMäyrätie 11 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYRummunlyöjänkatu 11 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYRummunlyöjänkatu 31 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYTuhkimontie 22 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYTurkismiehentie 81 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYYVaasankatu 101 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
Rantasauna1 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
Servin Mökki1 * HP ProCurve 2920-48G1 Gbps10 Gbps9000XXXX
TF Otakaari 221 * Juniper EX42001 Gbps10+10 Gbps9000XXX
TF Otakaari 221 * HP ProCurve 2626100 Mbps1 Gbps1500X X 
TF Otakaari 223 * HP ProCurve 2650100 Mbps1 Gbps1500X X 
AYY Otakaari 111 * Cisco Catalyst 4506-E1 Gbps10 Gbps9000XXXX
AYY Otakaari 112 * HP ProCurve 2910al1 Gbps10 Gbps9000XXXX

Cabling and wall sockets at the current sites

The following table provides cabling and wall socket for each building. The amount of possible wall sockets and connected Ethernet ports varies case-by-case, depending on when the building has been built or last renovated. Please note that there might be some exceptions such as extra wall sockets. This table describes the general baseline configuration.

Every wall socket should have at least one connected port. Recently built or renovated buildings usually have wall sockets in every room but some older buildings may only have a single wall socket to be shared for the whole apartment. If your apartment has only one connected wall socket and multiple tenants, the connection must be shared.

In some apartments there might be a small apartment's own distribution panel where uplink connections can be patched to desired rooms and wall sockets. A small switch can be used if there are not enough uplink ports for each wall socket. More info can be found from our instructions.

The table also indicates single-mode fiber readiness, although fiber connections are not currently in use.

LocationSocket TypeConnected PortsFibersNotes
AYYJämeräntaival 1DualOdd4 * SM
AYYJämeräntaival 3DualAll4 * SM
AYYJämeräntaival 5DualAll4 * SM
AYYJämeräntaival 6DualAll4 * SM
AYYJämeräntaival 7DualAll4 * SM
HOASJämeräntaival 9DualAllPorts labeled as "atk" and "puh"
HOASJämeräntaival 10DualAllDistribution panel in apartments.
HOASJämeräntaival 11DualAllDistribution panel in some family apartments at JT11 A-D
AYYMiestentie 2 BDualOdd4 * SM
AYYOtakaari 18 ADualOdd4 * SM
AYYOtakaari 18 B-CDualOdd
AYYOtakaari 20Single
AYYOtaranta 8DualOddDistribution panel in some family apartments at OR8 A and C
AYYServinkuja 1Single
OASServinkuja 2Single
HOASServinkuja 5DualOdd2 * SM
HOASServinkuja 6DualAll
OASServin Maijan tie 1Single
HOASServin Maijan tie 3Single
AYYServin Maijan tie 6SingleOnly one connection per apartment
AYYServin Maijan tie 10SingleOnly one connection per apartment
AYYServin Maijan tie 12SingleOnly one connection per apartment
AYYArkadiankatu 28DualOdd
AYYAtlantinkatu 7DualAll4 * SM
AYYHaarniskatie 8SingleOnly one connection per apartment
AYYKaj Franckin katu 4Single
AYYKääpiöidenpolku 4Single
AYYMäyrätie 1Single
AYYRummunlyöjänkatu 1Single
AYYRummunlyöjänkatu 3DualOdd
AYYTuhkimontie 2Single
AYYTurkismiehentie 8Single
AYYVaasankatu 10DualAll4 * SM

Routing and Switching Layers

Except for the routing layer (ie. Juniper MX routers), the Trinet network is fully based on Layer 2 Ethernet switching at the aggregation and access levels. Access switch connectivity to the core network is typically protected using a simple active/passive link-state scheme.

The routers use Multi-Protocol Label Switching (MPLS) as the underlay technology, along with the Label Distribution Protocol (LDP) to provide modern capabilities to protect the network in case of a link or a device failure. Currently, Trinet uses fairly traditional Virtual Private LAN Service (VPLS) overlay services to connect end-user layer-2 networks to layer-3 routing. In the future, we aim to transition to Segment Routing MPLS (SR-MPLS) as the underlay and Ethernet VPN (EVPN) for overlays and potentially extend the underlay/overlay architecture closer to the network edge.

Unicast and Multicast Routing

Border Gateway Protocol (BGP) is used for both IPv4 and IPv6 unicast and multicast routing. To reduce Internet connectivity convergence delay in the event of a link failure, Bidirectional Forwarding Detection (BFD) is utilized with IPv4 BGP to detect a link failure on a sub-second time scale. The Internal Gateway Protocol (IGP), specifically Intermediate System to Intermediate System (IS-IS), is used to establish connectivity between Trinet routers by advertising the loopbacks and the link networks. The second role for IGP is to provide BGP next-hop reachability. Otherwise BGP carries all external and internal route information.

Both Funet uplinks are typically active as they use the same BGP metric. The model is known as "hot-potato" or closest-exit routing.

Multicast routing uses Protocol Independent Multicast - Sparse-Mode (PIM-SM) and Source-Specific-Mode (PIM-SSM) along with Multicast Source Discovery Protocol (MSDP), which enables inter-domain IPv4 multicast routing.

Customer Access

Trinet uses Virtual Router Redundancy Protocol (VRRP) for customer-facing network segments. Internet Group Management Protocol (IGMP) and Multicast Listener Discovery (MLD) are used for IPv4 and IPv6 multicast, respectively. Jumbo frames are supported, with an IP Maximum Transfer Unit (MTU) of up to 9000 bytes.

User IP addresses are assigned via Dynamic Host Configuration Protocol (DHCP) for IPv4, and via Stateless Address Autoconfiguration (SLAAC) and DHCPv6 for IPv6.

Trinet's security and filtering policies are detailed in the Usage Policy.

© 2025 Veijo Kyläverkko <verkko@ayy.fi>
Last updated: 2025-08-09