Register Recovery Service Subnets

After you have created a private subnet for Recovery Service in your database VCN, use this procedure to register the subnet in Recovery Service.

Multiple protected databases can use the same Recovery Service subnet. In order to ensure that the required number of IP addresses are available to support the Recovery Service private endpoints, you can assign multiple subnets to a Recovery Service subnet that is used by more than one protected database.

Note:

Select an IPv4-only subnet for Recovery Service in your database VCN. Do not select an IPv6-enabled subnet as Recovery Service does not support using an IPv6-enabled subnet.

Ensure that you have completed all the networking service configuration tasks as described in Configuring Network Resources for Recovery Service.

Required IAM Policy

RECOVERY_SERVICE_SUBNET_CREATE

1. Log in to your OCI tenancy.
2. In the navigation menu, click Oracle Database, and select Database Backups to display the Database Backups page.
3. Click Recovery Service Subnets.
4. In the Compartment field, select a compartment where you want to create the Recovery Service subnet.
5. Click Register Recovery Service subnet, and specify the details.
6. In the Name field, enter a name for the Recovery Service subnet.
7. In the Compartment field, select the compartment where you want to create the Recovery Service subnet.
8. In the Virtual cloud network field, select the database VCN.
   Click Change Compartment to select a VCN belonging to a different compartment.
9. In the Subnet field, select a private subnet that you have configured for Recovery Service operations in your database VCN.
   Click Change Compartment to select a private subnet from a different compartment.
10. (Optional) Click +Another Subnet to assign an additional subnet to the Recovery Service subnet.
    If a single subnet does not contain enough IP addresses to support the Recovery Service private endpoints, then you can assign multiple subnets.
11. Click Show advanced options to configure these additional features.
    • Network security groups
    • Tags

    If you have used a network security group (NSG) to implement security rules for Recovery Service in the database VCN, then you must add the Recovery Service NSG to the Recovery Service subnet. The Recovery Service NSG can reside in the same compartment or in a different compartment. However, the NSG must belong to the same VCN to which the specified subnet belongs.

    1. In the Network security groups section, select Use network security groups to control traffic.
    2. Select the Recovery Service NSG you have created in the database VCN.
    3. Click +Another network security group to associate multiple NSGs (maximum five).
    (Optional) In the Tag Namespace field, consider adding a tag namespace, or tagging the control with an existing tag namespace.
12. Click Register.

You can replace a subnet or add more subnets to support the required number of private endpoints.

13. Use these steps to update an existing Recovery Service subnet:
    1. In the Recovery Service subnet details page, under Resources, click Subnets.
    2. Click Add subnets and select the subnets you want to add.
    3. To replace an existing subnet, click the Action menu, and select Remove subnet. You can then add another subnet.

    Note:

    A Recovery Service subnet must be associated with at least one subnet belonging to your database VCN.
14. Use these steps to manage the network security groups (NSGs) for an existing Recovery Service subnet:
    1. In the Network security groups section, click Add network security groups.
    2. Select and add the Recovery Service network security groups (maximum five).
    3. To remove an NSG, select the resource and click Remove.