Oracle by Example brandingCreate a Virtual Cloud Network for Cloud Manager in the Oracle Cloud Infrastructure Console (Optional)

section 0Before You Begin

This 45-minute tutorial shows you how to create a virtual cloud network (VCN) in the Oracle Cloud Infrastructure Console. 

Background

To create a Cloud Manager instance on Oracle Cloud Infrastructure, you need a Virtual Cloud Network, or VCN, subnets that are either public or private, route table, and security lists to define access rules and restrictions. If you use Resource Manager to install the Cloud Manager stack, you can create a VCN and necessary networking resources as part of the Resource Manager process. In that case you can skip this tutorial. This procedure is meant for advanced users who want to set up the network resources manually.

This is the fourth tutorial in the Install PeopleSoft Cloud Manager series. Read the tutorials in the order listed. The optional tutorials offer alternate methods for setup.

section 1Create a VCN with Related Resources

To create a VCN with related (default) resources:

  1. In the Compute Console, select Networking, Virtual Cloud Networks.

  2. Click Create Virtual Cloud Network.

    Virtual Cloud Networks page, click Create Virtual Cloud Network button
    Description of this image

  3. On the Create Virtual Cloud Network dialog box, select the compartment you want to work in from the drop-down list, which is mycmprt in this example.

    Create Virtual Cloud Network dialog box, top
    Description of this image

  4. Enter a name for the VCN, such as pscm_network. Make a note of the name, as you will need it when creating the Cloud Manager instance.

  5. Select the option CREATE VIRTUAL CLOUD NETWORK PLUS RELATED RESOURCES, as shown in this example, to create a VCN with default components, including three public subnets, an Internet gateway, a route table, and a security list.

    If you prefer to define the resources for the VCN, select the option CREATE VIRTUAL CLOUD NETWORK ONLY. After you create the VCN, create the necessary components to fit your requirements.

  6. Select the option USE DNS HOSTNAMES IN THIS VCN. The Create VCN process assigns a DNS label based on the VCN name.

  7. Click Create Virtual Cloud Network.

    Create Virtual Cloud Network dialog box, bottom
    Description of this image

  8. When the network is ready, click Close.

    Create Virtual Cloud Network, complete
    Description of this image

  9. On the Virtual Cloud Networks page, select the VCN name to review the details.

  10. Update the security lists to allow all necessary ports.

section 2Create Subnets and Edit Security Lists

This section gives an example of creating a public subnet with a security list that allows access between the Cloud Manager instance and file server instance. The subnet where Cloud Manager is created (and where NFS also gets provisioned) needs to allow the ingress of four NFS-related TCP ports (2049, 111, 892, 32803). This will ensure that NFS mounts will work across Linux and Windows in all the subnets within the VCN. For simplicity, the source in the stateful ingress rules can be the whole VCN’s CIDR.

  1. If you want to add more public or private subnets, go to the details page for the VCN and click Create Subnet.

    Virtual Cloud Network details page
    Description of this image
  2. If you want to modify or add a security list to one of the subnets, select the subnet. On the details page, click Edit All Rules.

    Note that the subnet already includes a security rule to allow SSH access on port 22, and two security rules for ICMP traffic.

    Subnet details page
    Description of this image

  3. On the Edit Security List Rules dialog box, under Allow Rules for Ingress, click Add Rule.

    Edit Security List Rules dialog box
    Description of this image

  4. Enter 10.0.0.0/16 for the Source CIDR. This is the same as the CIDR for the VCN.

  5. Accept TCP as the protocol.

  6. Enter 2049 for the Destination Port Range.

  7. Repeat steps 3 through 6 for NFS-related ports 111, 892, 32803. Also add a rule for the HTTP port, default 8000, and any other ports you need.

  8. When you have added all the security rules, click Save Security List Rules.

  9. Specify this subset when you create the Cloud Manager and file server instances.

section 3Create a NAT Gateway for a Private Subnet (Optional)

Here are the high-level steps for creating a NAT Gateway for a private subnet. This section assumes that you have already created a VCN, and want to add a NAT Gateway.

For more information, see the Oracle Cloud Infrastructure Documentation, NAT Gateway.

  1. In the Oracle Cloud Infrastructure Console, select Networking > Virtual Cloud Networks and select your VCN.

  2. Create a NAT Gateway.

  3. Create a Route Table, and select the NAT Gateway as the target.

  4. Create a private subnet, and select the Route Table.

  5. Select the private subnet when creating environment templates in Cloud Manager.

After setting up the NAT gateway, you can use various methods for setting up inbound connections, such as VPN or bastion.  If you don’t want to use a NAT gateway for any reason, you can also enable access to the internet by configuring a web proxy.

next stepNext Tutorial

Create a Custom Linux Image for PeopleSoft Cloud Manager (optional)

more informationWant to Learn More?