Setting Up Networking Components
Configure External Key Management network components.
To communicate with Oracle Cloud Infrastructure (OCI), the first step is to step up a Virtual Cloud Network (VCN). The VCN provides a customizable private network with complete control to your cloud networking environment. In External Key Management System, to set up a network configuration, you must configure the following components.
- VCN
- Subnets
- Internet Gateways
- Routing Tables
- Security Rules
A sample scenario of how to configure these components is as follows:
Configuring VCN
Configure VCN as part of network configuration.
Complete the following steps to configure a simple VCN for External KMS.
- Open the navigation menu and click Networking and then click Virtual cloud networks
- In the Virtual cloud networks page, click Create VCN.
- In the Create VCN page, provide the following details:
- Name. Enter a name for the VCN.
- Compartment. Select a compartment that contains the VCN.
- Under IPv4 CIDR Blocks, set the following parameters:
- IPv4 CIDR Blocks: Choose IPV4 CIDR Blocks for the VCN. For example, 10.0.0.0/16.
- Click Create.
Configuring Subnet
- Open the navigation menu and click Networking and then click Virtual cloud networks
- In the Virtual cloud networks page, click the name of the VCN to view its details page.
- Under Resources, click Subnet and then click Create Subnet.
- In the Create Subnet page, provide the following details:
- Name. Enter a name for the subnet.
- Compartment. Select a compartment that contains the subnet.
- Under IPv4 CIDR Blocks, set the following parameters:
- IPv4 CIDR Blocks: Choose IPV4 CIDR Blocks for the Subnet. Choose Private or Public Subnet depending on your requirement. For example, 10.0.0.0/16.
- Click Create Subnet.
Creating Internet Gateway
- Open the navigation menu and click Networking and then click Virtual cloud networks
- In the Virtual cloud networks page, click the name of the VCN to view its details page.
- Under Resources, click Internet Gateways and then click Create Internet Gateway.
- In theCreate Internet Gateways page, provide the following details:
- Name. Enter a name for the internet gateway.
- Compartment. Select a compartment that contains the internet gateway.
- Under Routable Table Association, add the route rules pertinent to you ruse case to your Route Table. We are using the default route table.
- Click Create Internet Gateway.
Creating a Routing Table
- Open the navigation menu and click Networking and then click Virtual cloud networks
- In the Virtual cloud networks page, click the name of the VCN to view its details page.
- Under Resources, click Routing Table and then click Create Routing Table .
- In theCreate Routing Table page, provide the following details:
- Name. Enter a name for the routing table.
- Compartment. Select a compartment that contains the routing table.
- Under Route Rules, click Add Route Rule. In the scenario, the access to VCN is through the internet, so create a Route Rule and type in 0.0.0.0/0 in the destination CIDR.
- Click Create.
Creating a Security List
- Open the navigation menu and click Networking and then click Virtual cloud networks
- In the Virtual cloud networks page, click the name of the VCN to view its details page.
- Under Resources, click Security Lists and then click Security List.
- In theCreate Security List page, provide the following details:
- Name. Enter a name for the routing table.
- Compartment. Select a compartment that contains the routing table.
- Under Allow Rules for Ingress, provide the following details:
- Stateless: Select the check box.
- Source Type: Select CIDR.
- Source CIDR: Provide the source CIDR address.
- IP Protocol: Select the IP protocol as TCP.
- Click Create Security List.