Creating a Recovery Service Subnet in the Database VCN

In the OCI Console, configure a private subnet for Recovery Service in your database VCN. You must then register the Recovery Service subnet.

1. In the navigation menu, select Networking, and then select Virtual Cloud Networks to display the Virtual Cloud Networks page.
2. Select the VCN in which your database resides.
3. Under Resources, select Security Lists.
4. Select the security list that is used for the VCN, and add two ingress rules to allow destination ports 8005 and 2484.
5. Click Add Ingress Rule, and add these details to set up a rule that allows HTTPS traffic from anywhere:
   1. Source Type: CIDR
   2. Source CIDR: Specify the CIDR of the VCN where the database resides.
   3. IP Protocol: TCP.
   4. Source Port Range: All
   5. Destination Port Range: 8005.
   6. Description: Specify an optional description of the ingress rule to help manage the security rules.
   See: Subnet Size Requirements and Security Rules for Recovery Service Subnet.
6. Click Add Ingress Rule, and add these details to set up a rule that allows SQLNet traffic from anywhere:
   1. Source Type: CIDR
   2. Source CIDR: Specify the CIDR of the VCN where the database resides.
   3. IP Protocol: TCP.
   4. Source Port Range: All
   5. Destination Port Range: 2484.
   6. Description: Specify an optional description of the ingress rule to help manage the security rules.
   See: Subnet Size Requirements and Security Rules for Recovery Service Subnet.
7. In the Virtual Cloud Networks Details page, click Create Subnet. Create a private subnet with a minimum subnet size of /24 (256 IP addresses). See, Overview of VCN and Subnets.
   Alternatively, select a suitable private subnet that already exists in the VCN.
8. Associate the security list with the private subnet. The security list must include ingress rules to allow destination ports 8005 and 2484.
   See: Security Lists.
9. Register the private subnet in Recovery Service. See: Register Recovery Service Subnets.
   Oracle recommends that you register a single Recovery Service subnet per VCN.

   Note:

   If your database VCN restricts network traffic between subnets, then ensure to add an egress rule for ports 2484 and 8005 from the database subnet to the Recovery Service subnet that you create.

For additional configuration details, refer the relevant database service documentation.