Permitting Access for Oracle Database Ports in Oracle Compute Cloud Service Instances


Options



Before You Begin

Purpose

This tutorial describes the process to set up network security to open Oracle Database port 1521 or 1522 on a Linux VM in Oracle Compute Cloud Service.

Time to Complete

10 minutes

Background

To access the Oracle Database that is set up on the Linux VM in Oracle Compute Cloud Service as part of a  PeopleSoft full tier or database tier deployment, you need to set up the network security to open the Oracle Database ports on the Linux VM in Oracle Compute Cloud Service.

Context

This tutorial is part of the following set of tutorial, which describe how to migrate a PeopleSoft environment to Oracle Compute Cloud Service:

  • Generating SSH Key Pair for Oracle Compute Cloud Service Instances
  • Using PeopleSoft Update Images in Oracle Compute Cloud Service
  • Migrating PeopleSoft Applications to Oracle Compute Cloud Service
  • Permitting Access for the Samba Shared Drive in Oracle Compute Cloud Service Instances
  • Permitting Access for Oracle Database Ports in Oracle Compute Cloud Service Instances
  • Accessing the Samba Shared Drive from a Microsoft Windows VM for PeopleTools Client Deployment
  • Deploying PeopleTools Clients for PeopleSoft Update Manager on a Microsoft Windows Host or VM

What Do You Need?

  • A subscription to Oracle Compute Cloud Service is mandatory and you must be a user with the Compute_Operations and Storage Read Write Group roles.
  • A Linux VM instance created in Oracle Compute Cloud Service (Oracle Cloud) with an Oracle database deployed
  • The port number from the TNS entry or psfconfig.yaml file for the Oracle Database, either 1521 or 1522
  • A Microsoft Windows VM instance created in Oracle Cloud or a Microsoft Windows host or VM on-premises (that is, at your site). The Microsoft Windows VM will access the Oracle database in the Linux VM on Oracle Compute Cloud Service.

Creating Security Lists

  1. Sign in to Oracle Cloud My Services.
    Select the identity domain where you have created your Linux VM for the PeopleSoft full-tier or db-tier deployment with an Oracle Database and Microsoft Windows VM in Oracle Compute Cloud Service, and enter your Oracle Cloud user name and password.
  2. Select Oracle Compute Cloud Services, Open Services.
  3. Click the Network tab:
    Oracle Compute Cloud Service Network page
  4. Select the Security Applications tile:
    Security Applications page
  5. Click Create Security Applications:
    Security Applications page, click Create Security Applications
  6. Enter the information on the Create Security Application page for Port 1521 or 1522 (as specified in the TNS entry for the Oracle Database), and then click the Create button:
    Create Security Application page for Port 1521
    • Name: Enter a descriptive name, such as psftuser_sec_app_1521
    • Port Type: Select tcp.
    • Port Range Start: Enter 1521 or 1522
  7. Select the Security IP Lists tile:
    Security IP Lists page
  8. Click Create Security IP List:
    Security IP Lists page, click Create Security IP List
  9. Enter the following information on the Create Security IP List page, and then click the Create button:
    Create Security IP List window
    • Name: Enter a descriptive name, sch as psftuser_sec_ip_list_windows.
    • IP List: Enter IP address for the Microsoft Windows host or VM from which you want to access the Oracle database.
      If your Microsoft Windows VM is in Oracle Compute Cloud Service, enter the Microsoft Windows VM instance Private IP address.
      If your Microsoft Windows VM is on premises, enter the Microsoft Windows VM Public IP address.
  10. On the Security Lists page, click Create Security List:
    Security Lists page, click Create Security List
  11. Enter the following information for port 1521 or 1522 on the Create Security List page, and then click the Create button:
    Create Security List window for Port 1521
    • Name: Enter a descriptive name, sch as psftuser_sec_list_1521.
    • Inbound Policy: Select Permit (allow packets) from the drop-down list.
    • Outbound Policy: Select Permit (allow packets) from the drop-down list.

Creating Security Rules

  1. On the Oracle Compute Cloud Service console, Network page, select the Security Rules tile:
    Security Rules page
  2. Click Create Security Rule:
    Security Rules page, click Create Security Rule
  3. Enter the following information for Port 1521 or 1522 on the Create Security Role page, and then click the Create button:
    Create Security Rule window for Port 1521
    • Name: Enter a descriptive name, for example psftuser_sec_rule_1521.
    • Security Application: From the drop-down list, choose the application you created in the previous section, for example psftuser_sec_app_1521.
    • Source: Select the Security IP List radio button, and choose the one that you created for your Microsoft Windows Client Private IP Address, for example psftuser_sec_ip_list_windows.
    • Destination: Choose the Security List that you created in the previous section for port 139, for example psftuser_sec_ip_1521.

Adding Instances to the Security Lists

  1. On the Oracle Compute Cloud Service console, select the Instances tile.
  2. From the Instances list, click the options button for the Linux VM instance created for the PeopleSoft full-tier or db-tier deployment:
    Instances page
  3. On the page for the Linux VM instance, click Add to Security List:
    Selected instance page, click Add to to Security List
  4. Choose the security list created for Port 1521, for example psftuser_sec_list_1521, and then click Attach:
    Add to Security List, choose Port 1521 list
  5. If your Microsoft Windows VM, which needs to access the Oracle database, is in Oracle Compute Cloud Service, proceed with this step and the next 2  steps.

    From the Instances list, click the options button for the Microsoft Windows VM instance created for the PeopleSoft PeopleTools Client deployment.

    Instances page for Windows VM
  6. Click Add to Security List:
    Instances page, click Add to Security List
  7. Choose the security list created for Port 1521, for example psftuser_sec_list_1521, and then click Attach:
    Add to Security List window for Port 139

Want to Learn More?