Before You Begin

This 45-minute tutorial shows you how to create a virtual cloud network (VCN) in the Oracle Cloud Infrastructure Console. 

Background

To create a Cloud Manager instance on Oracle Cloud Infrastructure, you need a Virtual Cloud Network, or VCN, subnets that are either public or private, route table, and security lists to define access rules and restrictions. If you use Resource Manager to install the Cloud Manager stack, you can create a VCN and necessary networking resources as part of the Resource Manager process. In that case you can skip this tutorial. This tutorial includes examples of the steps for users who want to create their own VCN.

This is the fourth tutorial in the Install PeopleSoft Cloud Manager series. Read the tutorials in the order listed. The optional tutorials offer alternate methods for setup.

Step 1: Create a VCN and Related Resources

This example uses the Oracle Cloud Infrastructure VCN wizard, which creates a VCN, internet gateway, NAT gateway, regional public subnet, regional private subnet, and security rules. For other options, see Networking in the Oracle Cloud Infrastructure documentation.

  1. In the Oracle Cloud Infrastructure Compute Console, select Networking > Virtual Cloud Networks.

    Note:

    Alternatively, you can start the VCN wizard by clicking the tile Set up a network with a wizard on the Oracle Cloud Infrastructure home page. In that case, skip the next two steps.
  2. Click Start VCN Wizard.
  3. Select VCN with Internet Connectivity (the default selection).
  4. Click Start VCN Wizard.
    Start VCN Wizard dialog box
    Description of this illustration (create_vcn_wizard_start.png)
  5. On the Create a VCN with Internet Connectivity page, enter a name for the VCN.
  6. Select the compartment you want to work in from the drop-down list, and then click Next.

    The name in this example is pscm_network, and the compartment is mycmprt.

    Create a VCN with Internet Connectivity page
    Description of this illustration (create_vcn_wizard_intnetconn_page.png)
  7. Review the networking resources, and then click Create.
    Create a VCN with Internet Connectivit page, Review and Create
    Description of this illustration (create_vcn_wizard_review_top.png)
    Bottom portion of Review and Create page
    Description of this illustration (create_vcn_wizard_review_bottom.png)
  8. When the process is complete, click View Virtual Cloud Network to go to the Virtual Cloud Network details page.
    Created Virtual Cloud Network
    Description of this illustration (create_vcn_wizard_complete.png)
  9. Update the security lists to allow all necessary ports.

Step 2: Edit a Security List

This section gives an example of editing the public subnet created in the previous step to add a security list that allows access between the Cloud Manager instance and file server instance. The subnet where Cloud Manager and the File Storage Service file system is created needs to allow the ingress of four TCP ports (111, 2048, 2049, and 2050) and two UDP ports (111 and 2048). For simplicity, the source in the stateful ingress rules can be the whole VCN’s CIDR.

  1. On the Virtual Cloud Network Details page, select Security Lists under Resources on the left.
    Virtual Cloud Network Details page
    Description of this illustration (vcn_details_select_sec_lists.png)
  2. Select the default security list.
    Security Lists page
    Description of this illustration (vcn_details_def_sec_list.png)
  3. On the Security List details page, click Add Ingress Rule.
    Security List Details page
    Description of this illustration (sec_list_add_ingress_rule.png)
  4. Select Source Type CIDR.
  5. Enter 10.0.0.0/16 for the Source CIDR. This is the same as the CIDR for the VCN.
  6. Select TCP as the IP protocol.
  7. Enter 111 for the Destination Port Range.
    Add Ingress Rules dialog box
    Description of this illustration (add_ingress_rules_dialog_box.png)
  8. Click +Another Ingress Rule.

  9. Repeat steps 4 through 7 for TCP ports 2048, 2049, and 2050 and UDP ports 111 and 2048. Add any other ports you need.

  10. When you have added all the security rules, click Add Ingress Rules.

  11. Specify this subnet when you create the Cloud Manager and file server instances.

Create a NAT Gateway for a Private Subnet

Here are the high-level steps for creating a NAT Gateway for a private subnet. This section assumes that you have already created a VCN, and want to add a NAT Gateway.

For more information, see the Oracle Cloud Infrastructure Documentation, NAT Gateway.

  1. In the Oracle Cloud Infrastructure Console, select Networking > Virtual Cloud Networks and select your VCN.

  2. Create a NAT Gateway.

  3. Create a Route Table, and select the NAT Gateway as the target.

  4. Create a private subnet, and select the Route Table.

  5. Select the private subnet when creating environment templates in Cloud Manager.

After setting up the NAT gateway, you can use various methods for setting up inbound connections, such as VPN or bastion.  If you don’t want to use a NAT gateway for any reason, you can also enable access to the internet by configuring a web proxy.

Next Steps

Use Custom or Private Network Resources with PeopleSoft Cloud Manager (Optional)

Learn More