Virtual Network Management

Managing Isolated Networks

Listing isolated networks

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. In the main content area, you will see all isolated networks owned by your account.

Creating an isolated network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Click Add Network.

By default, the Isolated tab is selected for creating a new isolated network. Provide the following details:

• Name (Required): Use a clear and consistent naming convention (e.g., company-network).
• Description (Optional): Recommended to match the network name for consistency.
• Zone (Required): Select the zone where the network will be deployed.
• Owner Type (Optional): Choose the ownership type of the resource.
  Read more | Resource Ownership
• Domain (Required): Select the domain where the network will reside.
• Account (Required): Select the account that will own the network.
• Network Domain (Optional): DNS domain suffix (e.g., example.local).
• Network Offering (Required): Choose the network offering for this network.
• External ID (Optional): Specify an external ID if the network is managed externally.
• Gateway (Optional): Enter the gateway in x.x.x.x format.
• Netmask (Optional): Enter the subnet mask in x.x.x.x format.
• DNS 1 / DNS 2 (Optional): Provide DNS server addresses.
• IPv4 Address for VR (Optional): Specify the IP address to assign to the Virtual Router.

4. Click OK.

Editing an isolated network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Select the desired network and click Update Network.

The following fields can be edited after creation: name, description, source NAT IP address, network offering, CIDR, network domain, and DNS settings.

• When updating the CIDR, it must be a subset of the original network CIDR.
• When updating the Source NAT IP address, ensure the IP address is already acquired for the network.

Restarting an isolated network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Select the desired network and click Restart Network.

• Enabling Clean Up removes and recreates the Virtual Router supporting the network.

Deleting an isolated network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. In the network list, locate the network you want to remove.
4. Delete the network using one of the following methods:
   • Select the network and click Delete Network at the top.
     
   • Click the delete icon in the quick actions menu (three dots).
     
   • Open the network details page and click Delete at the top.
     

Note: Before deleting a network, all associated resources must be migrated to another network or removed.

Managing isolated network egress firewall rules

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Select a network and open the Egress Rules tab.

By default, isolated networks cannot access the internet. To change this behavior, add an egress rule.

Define the following parameters:

• Source CIDR
• Destination CIDR
• Protocol
• Start Port
• End Port

To allow all outbound traffic, create a rule with:
Source CIDR: 0.0.0.0/0
Destination CIDR: 0.0.0.0/0
Protocol: ALL

You can delete or bulk-delete egress rules from the same tab.

Managing isolated network public IP addresses

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Select a network and open the Public IP Addresses tab.

You will see the Source NAT public IP address associated with the network. From here, you can acquire new public IPs or manage existing ones.

To acquire a new public IP:

1. Click Acquire New IP.
2. Select an available IP from the list.
3. Click OK.

You must have sufficient quota in your domain and account to acquire multiple public IPs.

Managing isolated network permissions

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Select a network and open the Network Permissions tab.

From this page, you can grant access to other accounts or projects by clicking Add Network Permission.

Managing L2 Networks

Listing L2 networks

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. The main content area will display all guest networks accessible under your domain and account. L2 networks will L2 on the type column of the listing

Creating L2 network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Click Add Network.

Switch to the L2 tab at the top

• Name (Required): Use a clean, descriptive naming convention (e.g., company-l2-network).
• Description (Optional): Recommended to match the network name for consistency.
• Zone (Required): Select the zone where the L2 network will be deployed.
• Owner Type (Optional): Select the ownership type.
  Read more | Resource Ownership
• Domain (Required): Domain to which this network belongs.
• Account (Required): Account that owns the network.

4. Click OK to create the network.

Editing L2 network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > L2 Networks.
3. Select the network and click Update Network.

Editable parameters include: Name and Description

Some properties such as source nat ip address and CIDR even though they appear on the edit list the don't have an effect on L2 network.

Deleting L2 network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Choose the L2 network you want to delete.

You can delete the L2 network using one of the following methods:

• Select and click Delete Network from the toolbar.
• Click the delete action from the quick action buttons (three vertical dots).
• Open the network details page and click Delete at the top.

Before deleting an L2 network, ensure no resources such as VM are attached to it.

Managing L2 network permissions

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > Guest Networks.
3. Select the network and open the Network Permissions tab.

From here you can:

• Grant access to other accounts or projects
• Allow shared use of the L2 network across multiple tenants

Click Add Network Permission, select the account or project, and confirm.

Notes on L2 network usage

• L2 networks do not offer DHCP, DNS, or other network functionality.
• Suitable for:
  • Network appliance VMs
  • NFV workloads
  • Tenant-managed routing
  • SDN-managed network segments
• VMs must receive IP assignment from:
  • External DHCP
  • Manual configuration
  • SDN controller
  • VNF appliance

Managing VPC Networks

Listing VPC networks

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > VPC.
3. The main content area will show the list of VPCs owned by your domain and account.
   

Creating a VPC network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > VPC.
3. Click Add VPC.

Provide the following details:

• Name (Required): Use a clean naming convention (e.g., company-vpc).
• Description (Optional): Recommended to match the network name for consistency.
• Zone (Required): Select the zone where the VPC will be created.
• Owner Type (Optional): Choose the resource ownership type.
  Read more | Resource Ownership
• Domain (Required): Domain under which the VPC will reside.
• Account (Required): Account that owns the VPC.
• CIDR (Required): The main CIDR block for the VPC (e.g., 10.0.0.0/16).
• Network Domain (Optional): Domain suffix for all tiers (e.g., vpc.local).
• VPC Offering (Required): Choose the VPC offering that defines available services.
• DNS 1 / DNS 2 (Optional): Provide DNS server addresses.
• IPv4 Address for VR (Optional): Specify the IP address to assign to the Virtual Router.

4. Click OK to create the VPC.

Creating a network tier inside a VPC

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > VPC.
3. Click the desired VPC and go to the Networks tab.
4. Click Add new Network Tier.

Fill in the following:

• Name (Required): Clear name like indexed by your VPC name (e.g., demo-vpc-dmz-tier)
• Network Offering (Required): Select the offering defining services for this tier.
• Gateway (Required): Gateway of the tier (e.g., 10.0.1.1).
• Netmask (Required): Subnet mask (e.g., 255.255.255.0).
• External ID (Optional): Specify an external ID if the network is managed externally.
• ACL (Required): The ACL to be associated with the Network Tier.

Click OK to create the tier.

Listing VPC network tiers

1. Log in to the UI as an administrator.
2. You can list you network tiers either from the VPC detail page or Guest Networks page.
3. In the left navigation panel, click Network > Guest Networks. You will see you VPC network tiers along with other networks owned by your account.
   
4. Or you can also see the list of a VPC network tiers by going into Network > VPC, select your VPC network and go to the Networks tab
   

Creating an ACL lists for VPC network

1. Log in to the UI as an administrator.

2. In the left navigation, choose Network.

3. In the Select view, select VPC.

   All the VPCs that you have created for the Account is listed in the page.

4. Click on the desired VPC to go to the VPC detail page

5. Select Network ACL Lists.
   
   The following default rules are displayed in the Network ACLs page: default_allow, default_deny.

6. Click Add ACL Lists, and specify the following:

   • ACL List Name: A name for the ACL list.
   • Description: A short description of the ACL list that can be
     displayed to users.
     

7. Click on the newly created ACL by going to the Network ACL lists table of the VPC page

8. On the ACL list rules tab of the ACL detail page, click on Add ACL
   

   • Rule Number: The order in which the rules are evaluated.
   • CIDR: The CIDR acts as the Source CIDR for the Ingress rules, and Destination CIDR for the Egress rules. To accept traffic only from or to the IP addresses within a particular address block, enter a CIDR or a comma-separated list of CIDRs. The CIDR is the base IP address of the incoming traffic. For example, 192.168.0.0/22. To allow all CIDRs, set to 0.0.0.0/0.
   • Action: What action to be taken. Allow traffic or block.
   • Protocol: The networking protocol that sources use to send traffic to the tier. The TCP and UDP protocols are typically used for data exchange and end-user communications. The ICMP protocol is typically used to send error messages or network monitoring data. All supports all the traffic. Other option is Protocol Number.
   • Start Port, End Port (TCP, UDP only): A range of listening ports that are the destination for the incoming traffic. If you are opening a single port, use the same number in both fields.
   • Protocol Number: The protocol number associated with IPv4 or IPv6. For more information, see Protocol Numbers.
   • ICMP Type, ICMP Code (ICMP only): The type of message and error code that will be sent.
   • Traffic Type: The type of traffic: Incoming or outgoing.

9. Click Add. The ACL rule is added.

You can later on add more ACL rules, Edit existing ACL rules or Delete existing ACL rules by clicking the appropriate button in the Details tab.

Assigning a custom ACL list to a tier

1. Log in to the UI as an administrator.

2. In the left navigation, choose Network.

3. In the Select view, select VPC.

   All the VPCs that you have created for the Account is listed in the page.

4. Click on the desired VPC to go to the VPC detail page

5. Select the tier for which you want to assign the custom ACL.

6. Click the Replace ACL List icon.

   The Replace ACL List dialog is displayed.

7. Select the desired ACL list.
   

8. Click OK.

Deploying instances to a VPC tier

1. Log in to the UI as an administrator.

2. In the left navigation, choose Network.

3. In the Select view, select VPC.

   All the VPCs that you have created for the Account is listed in the page.

4. Click on the desired VPC to which you want to deploy the
   Instances.

   The VPC detail page is displayed, Click on Networks, where all the tiers you have created are listed.

5. Click Instances tab of the tier to which you want to add an Instance.

The Add Instance page is displayed.

You can also add an Instance to a VPC tier by following the same procedure of adding an instance on a guest network and select the approprate VPC tier on the network section.

Managing public IP addresses in a VPC network

1. Log in to the UI as an administrator.
2. In the left navigation panel, click Network > VPC.
3. Select the VPC network and go to Public IP Addresses tab.

You will see the Source NAT public IP address associated with the network. From here, you can acquire new public IPs or manage existing ones.

To acquire a new public IP:

1. Click Acquire New IP.
2. Select an available IP from the list.
3. Click OK.

You must have sufficient quota in your domain and account to acquire multiple public IPs.

Removing a VPC tiers

You can remove a tier from a VPC. A removed tier cannot be revoked. When a tier is removed, only the resources of the tier are expunged. All the network rules (port forwarding, load balancing and staticNAT) and the IP addresses associated to the tier are removed. The IP address still be belonging to the same VPC.

1. Log in to the UI as an administrator.

2. In the left navigation, choose Network.

3. In the Select view, select VPC.

   All the VPC that you have created for the Account is listed in the page.

4. Click on the desired VPC to go to the VPC detail page

5. Select the tier you want to remove in the Networks tab.

6. In the Network Details tab, click the Delete Network button.
   

   Click Yes to confirm. Wait for some time for the tier to be removed.

Editing, restarting, and deleting a VPC

Ensure that all the tiers are removed before you remove a VPC.

1. Log in to the UI as an administrator.

2. In the left navigation, choose Network.

3. In the Select view, select VPC.

   All the VPCs that you have created for the Account is listed in the page.

4. Select the VPC you want to work with.

5. In the Details tab, click the Remove VPC button

   You can remove the VPC by also using the remove button in the Quick View.

   You can edit the name and description of a VPC. To do that, select the VPC, then click the Edit button.

   To restart a VPC, select the VPC, then click the Restart button.