mirror of https://github.com/apache/cloudstack.git
doc files for inter vlan routing
This commit is contained in:
Radhika PC
Pranav Saxena
parent
073e6449b7
commit
d50141d268
|
|
@ -0,0 +1,104 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="add-gateway-vpc">
|
||||
<title>Adding a Private Gateway to a VPC</title>
|
||||
<para>A private gateway can be added by the root admin only. The VPC private network has 1:1
|
||||
relationship with the NIC of the physical network. No gateways with duplicated VLAN and IP are
|
||||
allowed in the same data center.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC to which you want to configure load balancing
|
||||
rules.</para>
|
||||
<para>The VPC page is displayed where all the tiers you created are listed in a
|
||||
diagram.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Settings icon.</para>
|
||||
<para>The following options are displayed.</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>IP Addresses</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Private Gateways</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Site-to-Site VPN</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Network ACLs</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select Private Gateways.</para>
|
||||
<para>The Gateways page is displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click Add new gateway:</para>
|
||||
<mediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/add-new-gateway-vpc.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>add-new-gateway-vpc.png: adding a private gateway for the VPC.</phrase>
|
||||
</textobject>
|
||||
</mediaobject>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Specify the following:</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Physical Network</emphasis>: The physical network you have
|
||||
created in the zone.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">IP Address</emphasis>: The IP address associated with the VPC
|
||||
gateway.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Gateway</emphasis>: The gateway through which the traffic is
|
||||
routed to and from the VPC.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Netmask</emphasis>: The netmask associated with the VPC
|
||||
gateway.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">VLAN</emphasis>: The VLAN associated with the VPC
|
||||
gateway.</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
<para>The new gateway appears in the list. You can repeat these steps to add more gateway for
|
||||
this VPC.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,89 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="add-tier">
|
||||
<title>Adding Tiers</title>
|
||||
<para>Tiers are distinct locations within a VPC that act as isolated networks, which do not have
|
||||
access to other tiers by default. Tiers are set up on different VLANs that can communicate with
|
||||
each other by using a virtual router. Tiers provide inexpensive, low latency network
|
||||
connectivity to other tiers within the VPC.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPC that you have created for the account is listed in the page.</para>
|
||||
<note>
|
||||
<para>The end users can see their own VPCs, while root and domain admin can see any VPC they
|
||||
are authorized to see.</para>
|
||||
</note>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC for which you want to set up tiers.</para>
|
||||
<para>The Add new tier dialog is displayed, as follows:</para>
|
||||
<mediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/add-tier.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>add-tier.png: adding a tier to a vpc.</phrase>
|
||||
</textobject>
|
||||
</mediaobject>
|
||||
<para>If you have already created tiers, the VPC diagram is displayed. Click Create Tier to
|
||||
add a new tier.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Specify the following:</para>
|
||||
<para>All the fields are mandatory.</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Name</emphasis>: A unique name for the tier you create.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Network Offering</emphasis>: The following default network
|
||||
offerings are listed: DefaultIsolatedNetworkOfferingForVpcNetworksNoLB,
|
||||
DefaultIsolatedNetworkOfferingForVpcNetworks</para>
|
||||
<para>In a VPC, only one tier can be created by using LB-enabled network offering.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Gateway</emphasis>: The gateway for the tier you create.
|
||||
Ensure that the gateway is within the Super CIDR range that you specified while creating
|
||||
the VPC, and is not overlapped with the CIDR of any existing tier within the VPC.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Netmask</emphasis>: The netmask for the tier you create. </para>
|
||||
<para>For example, if the VPC CIDR is 10.0.0.0/16 and the network tier CIDR is
|
||||
10.0.1.0/24, the gateway of the tier is 10.0.1.1, and the netmask of the tier is
|
||||
255.255.255.0.</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click OK.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Continue with configuring access control list for the tier.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,45 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="add-vm-to-tier">
|
||||
<title>Deploying VMs to the Tier</title>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
|
||||
<para>The VPC page is displayed where all the tiers you created are listed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Add VM button of the tier for which you want to add a VM.</para>
|
||||
<para>The Add Instance page is displayed.</para>
|
||||
<para>Follow the on-screen instruction to add an instance. For information on adding an
|
||||
instance, see Adding Instances section in the Installation Guide.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,75 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="add-vpc">
|
||||
<title>Adding a Virtual Private Cloud</title>
|
||||
<para>When creating the VPC, you simply provide the zone and a set of IP addresses for the VPC
|
||||
network address space. You specify this set of addresses in the form of a Classless Inter-Domain
|
||||
Routing (CIDR) block.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user. </para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click Add VPC. The Add VPC page is displayed as follows:</para>
|
||||
<mediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/add-vpc.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>add-vpc.png: adding a vpc.</phrase>
|
||||
</textobject>
|
||||
</mediaobject>
|
||||
<para>Provide the following information:</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Name</emphasis>: A short name for the VPC that you are
|
||||
creating.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Description</emphasis>: A brief description of the VPC.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Zone</emphasis>: Choose the zone where you want the VPC to be
|
||||
available.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Super CIDR for Guest Networks</emphasis>: Defines the CIDR
|
||||
range for all the tiers (guest networks) within a VPC. When you create a tier, ensure
|
||||
that its CIDR is within the Super CIDR value you enter. The CIDR must be RFC1918
|
||||
compliant.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">DNS domain for Guest Networks</emphasis>: If you want to
|
||||
assign a special domain name, specify the DNS suffix. This parameter is applied to all
|
||||
the tiers within the VPC. That implies, all the tiers you create in the VPC belong to
|
||||
the same DNS domain. If the parameter is not specified, a DNS domain name is generated
|
||||
automatically. </para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,139 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="configure-acl">
|
||||
<title>Configuring Access Control List</title>
|
||||
<para>Define Network Access Control List (ACL) on the VPC virtual router to control incoming
|
||||
(ingress) and outgoing (egress) traffic between the VPC tiers, and the tiers and Internet. By
|
||||
default, all incoming and outgoing traffic to the guest networks is blocked. To open the ports,
|
||||
you must create a new network ACL. The network ACLs can be created for the tiers only if the
|
||||
NetworkACL service is supported.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Settings icon.</para>
|
||||
<para>The following options are displayed.</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>IP Addresses</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Gateways</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Site-to-Site VPN</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Network ACLs</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select Network ACLs.</para>
|
||||
<para>The Network ACLs page is displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click Add Network ACLs.</para>
|
||||
<para>To add an ACL rule, fill in the following fields to specify what kind of network traffic
|
||||
is allowed in this tier. </para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">CIDR</emphasis>: The CIDR acts as the Source CIDR for the
|
||||
Ingress rules, and Destination CIDR for the Egress rules. To accept traffic only from or
|
||||
to the IP addresses within a particular address block, enter a CIDR or a comma-separated
|
||||
list of CIDRs. The CIDR is the base IP address of the incoming traffic. For example,
|
||||
192.168.0.0/22. To allow all CIDRs, set to 0.0.0.0/0.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Protocol</emphasis>: The networking protocol that sources use
|
||||
to send traffic to the tier. The TCP and UDP protocols are typically used for data
|
||||
exchange and end-user communications. The ICMP protocol is typically used to send error
|
||||
messages or network monitoring data.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Start Port</emphasis>, <emphasis role="bold">End
|
||||
Port</emphasis> (TCP, UDP only): A range of listening ports that are the destination
|
||||
for the incoming traffic. If you are opening a single port, use the same number in both
|
||||
fields.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Select Tier</emphasis>: Select the tier for which you want to
|
||||
add this ACL rule.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">ICMP Type</emphasis>, <emphasis role="bold">ICMP
|
||||
Code</emphasis> (ICMP only): The type of message and error code that will be
|
||||
sent.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Traffic Type</emphasis>: Select the traffic type you want to
|
||||
apply. </para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Egress</emphasis>: To add an egress rule, select Egress
|
||||
from the Traffic type drop-down box and click Add. This specifies what type of
|
||||
traffic is allowed to be sent out of VM instances in this tier. If no egress rules
|
||||
are specified, all traffic from the tier is allowed out at the VPC virtual router.
|
||||
Once egress rules are specified, only the traffic specified in egress rules and the
|
||||
responses to any traffic that has been allowed in through an ingress rule are
|
||||
allowed out. No egress rule is required for the VMs in a tier to communicate with
|
||||
each other.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para><emphasis role="bold">Ingress</emphasis>: To add an ingress rule, select Ingress
|
||||
from the Traffic type drop-down box and click Add. This specifies what network
|
||||
traffic is allowed into the VM instances in this tier. If no ingress rules are
|
||||
specified, then no traffic will be allowed in, except for responses to any traffic
|
||||
that has been allowed out through an egress rule.</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
<note>
|
||||
<para>By default, all incoming and outgoing traffic to the guest networks is blocked. To
|
||||
open the ports, create a new network ACL.</para>
|
||||
</note>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click Add. The ACL rule is added.</para>
|
||||
<para>To view the list of ACL rules you have added, click the desired tier from the Network
|
||||
ACLs page, then select the Network ACL tab.</para>
|
||||
<mediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/network-acl.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>network-acl.png: adding, editing, deleting an ACL rule.</phrase>
|
||||
</textobject>
|
||||
</mediaobject>
|
||||
<para>You can edit the tags assigned to the ACL rules and delete the ACL rules you have
|
||||
created. Click the appropriate button in the Actions column.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,89 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="delete-reset-vpn">
|
||||
<title>Restarting and Removing a VPN Connection</title>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
|
||||
<para>The VPC page is displayed where all the tiers you created are listed in a
|
||||
diagram.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Settings icon.</para>
|
||||
<para>The following options are displayed.</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>IP Addresses</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Gateways</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Site-to-Site VPN</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Network ASLs</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select Site-to-Site VPN.</para>
|
||||
<para>The Site-to-Site VPN page is displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>From the Select View drop-down, ensure that VPN Connection is selected.</para>
|
||||
<para>All the VPN connections you created are displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select the VPN connection you want to work with.</para>
|
||||
<para> The Details tab is displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>To remove a VPN connection, click the Delete VPN connection button<inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/remove-vpn.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>remove-vpn.png: button to remove a VPN connection</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject></para>
|
||||
<para>To restart a VPN connection, click the Reset VPN connection button present in the
|
||||
Details tab.<inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/reset-vpn.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>reset-vpn.png: button to reset a VPN connection</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject></para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,97 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="enable-disable-static-nat-vpc">
|
||||
<title>Enabling or Disabling Static NAT on a VPC</title>
|
||||
<para>A static NAT rule maps a public IP address to the private IP address of a VM in a VPC to
|
||||
allow Internet traffic to it. This section tells how to enable or disable static NAT for a
|
||||
particular IP address in a VPC.</para>
|
||||
<para>If port forwarding rules are already in effect for an IP address, you cannot enable static
|
||||
NAT to that IP.</para>
|
||||
<para>If a guest VM is part of more than one network, static NAT rules will function only if they
|
||||
are defined on the default network.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
|
||||
<para>The VPC page is displayed where all the tiers you created are listed in a
|
||||
diagram.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Settings icon.</para>
|
||||
<para>The following options are displayed.</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>IP Addresses</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Gateways</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Site-to-Site VPN</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Network ACLs</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select IP Addresses.</para>
|
||||
<para>The IP Addresses page is displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the IP you want to work with.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Details tab,click the Static NAT button.<inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/enable-disable.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>enable-disable.png: button to enable Statid NAT.</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject>The button toggles between Enable and Disable, depending on whether
|
||||
static NAT is currently enabled for the IP address.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>If you are enabling static NAT, a dialog appears as follows:</para>
|
||||
<mediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/select-vm-staticnat-vpc.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>select-vmstatic-nat.png: selecting a tier to apply staticNAT.</phrase>
|
||||
</textobject>
|
||||
</mediaobject>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select the tier and the destination VM, then click Apply.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 815 B |
Binary file not shown.
|
After Width: | Height: | Size: 735 B |
Binary file not shown.
|
After Width: | Height: | Size: 860 B |
|
|
@ -0,0 +1,80 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="release-ip-for-vpc">
|
||||
<title>Releasing an IP Address Alloted to a VPC</title>
|
||||
<para>The IP address is a limited resource. If you no longer need a particular IP, you can
|
||||
disassociate it from its VPC and return it to the pool of available addresses. An IP address can
|
||||
be released from its tier, only when all the networking ( port forwarding, load balancing, or
|
||||
StaticNAT ) rules are removed for this IP address. The released IP address will still belongs to
|
||||
the same VPC.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC whose IP you want to release.</para>
|
||||
<para>The VPC page is displayed where all the tiers you created are listed in a
|
||||
diagram.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Settings icon.</para>
|
||||
<para>The following options are displayed.</para>
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>IP Addresses</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Gateways</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Site-to-Site VPN</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Network ACLs</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select IP Addresses.</para>
|
||||
<para>The IP Addresses page is displayed.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the IP you want to release.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Details tab, click the Release IP button <inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/release-ip-icon.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>release-ip-icon.png: button to release an IP.</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject></para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,55 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="remove-tier">
|
||||
<title>Removing Tiers</title>
|
||||
<para>You can remove a tier from a VPC. A removed tier cannot be revoked. When a tier is removed,
|
||||
only the resources of the tier are expunged. All the network rules (port forwarding, load
|
||||
balancing and staticNAT) and the IP addresses associated to the tier are removed. The IP address
|
||||
still be belonging to the same VPC.</para>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPC that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Configure button of the VPC for which you want to set up tiers.</para>
|
||||
<para>The Configure VPC page is displayed. Locate the tier you want to work with.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Click the Remove VPC button:</para>
|
||||
<mediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/remove-tier.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>remove-tier.png: removing a tier from a vpc.</phrase>
|
||||
</textobject>
|
||||
</mediaobject>
|
||||
<para>Wait for some time for the tier to be removed.</para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
|
|
@ -0,0 +1,68 @@
|
|||
<?xml version='1.0' encoding='utf-8' ?>
|
||||
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
|
||||
<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
|
||||
%BOOK_ENTITIES;
|
||||
]>
|
||||
<!-- Licensed to the Apache Software Foundation (ASF) under one
|
||||
or more contributor license agreements. See the NOTICE file
|
||||
distributed with this work for additional information
|
||||
regarding copyright ownership. The ASF licenses this file
|
||||
to you under the Apache License, Version 2.0 (the
|
||||
"License"); you may not use this file except in compliance
|
||||
with the License. You may obtain a copy of the License at
|
||||
http://www.apache.org/licenses/LICENSE-2.0
|
||||
Unless required by applicable law or agreed to in writing,
|
||||
software distributed under the License is distributed on an
|
||||
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||
KIND, either express or implied. See the License for the
|
||||
specific language governing permissions and limitations
|
||||
under the License.
|
||||
-->
|
||||
<section id="remove-vpc">
|
||||
<title>Editing, Restarting, and Removing a Virtual Private Cloud</title>
|
||||
<note>
|
||||
<para>Ensure that all the tiers are removed before you remove a VPC.</para>
|
||||
</note>
|
||||
<orderedlist>
|
||||
<listitem>
|
||||
<para>Log in to the &PRODUCT; UI as an administrator or end user. </para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the left navigation, choose Network.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>In the Select view, select VPC.</para>
|
||||
<para>All the VPCs that you have created for the account is listed in the page.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>Select the VPC you want to work with.</para>
|
||||
</listitem>
|
||||
<listitem>
|
||||
<para>To remove, click the Remove VPC button<inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/remove-vpc.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>remove-vpc.png: button to remove a VPC</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject></para>
|
||||
<para>You can edit the name and description of a VPC. To do that, select the VPC, then click
|
||||
the Edit button. <inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/edit-icon.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>edit-icon.png: button to edit a VPC</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject></para>
|
||||
<para>To restart a VPC, select the VPC, then click the Restart button.<inlinemediaobject>
|
||||
<imageobject>
|
||||
<imagedata fileref="./images/restart-vpc.png"/>
|
||||
</imageobject>
|
||||
<textobject>
|
||||
<phrase>restart-vpc.png: button to restart a VPC</phrase>
|
||||
</textobject>
|
||||
</inlinemediaobject></para>
|
||||
</listitem>
|
||||
</orderedlist>
|
||||
</section>
|
||||
Loading…
Reference in New Issue