Configure Network Traffic for Active Data Guard

Configure route tables and network security to enable network communication for Active Data Guard and Far Sync instances between regions.

Establish the local peering between the Hub VCN and the Exadata VCN in both regions and the remote peering between the hub VCNs across regions, as shown in the architecture diagram, following OCI documentation. For more information, see Explore More.

Follow these steps to configure network traffic for Active Data Guard:

1. Set up the network configuration in the primary region (Region 1).
   1. Configure the route rules in the route table associated with the Exadata Client subnet.

      Destination	Target type	Target	Route type	Description
      0.0.0.0	DRG	None	Static	None
      10.0.1.0/24	LPG	lpg_exavcn_region1	Static	Traffic to Exadata Client subnet Region 2
      10.10.0.0/24	LPG	lpg_exavcn_region1	Static	Traffic to Hub VCN Region 1
      10.20.0.0/24	LPG	lpg_exavcn_region1	Static	Traffic to Hub VCN Region 2

   2. Configure the ingress rules in the security list associated with the Exadata Client subnet.

      Stateless	Source	IP protocol	Source port range	Destination port range	Allows	Description
      No	10.10.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Hub VCN Region 1
      No	10.20.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Hub VCN Region 2
      No	10.0.1.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Exadata Client subnet Region 2

   3. Configure the route rules in the route table associated with the subnet in the Hub VCN.

      Destination	Target type	Target	Route type	Description
      10.0.1.0/24	DRG	drg_hubvcn_region1	Static	Traffic to Exadata Client subnet Region 2
      10.182.0.0/24	LPG	lpg_hubvcn_region1	Static	Traffic to Exadata Client subnet Region 1
      10.20.0.0/24	DRG	drg_hubvcn_region1	Static	Traffic to Hub VCN Region 2

   4. Configure the ingress rules in the security list associated with the subnet in the Hub VCN.

      Stateless	Source	IP protocol	Source port range	Destination port range	Allows	Description
      No	10.182.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Exadata Client subnet Region 1
      No	10.20.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Hub VCN Region 2
      No	10.0.1.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Exadata Client subnet Region 2

   5. Configure the route rules in the route table associated with the LPG of the Hub VCN.

      Destination	Target type	Target	Route type	Description
      10.0.1.0/24	DRG	drg_hubvcn_region1	Static	Traffic to Exadata Client subnet Region 2
      10.20.0.0/24	DRG	drg_hubvcn_region1	Static	Traffic to Hub VCN Region 2

   6. Configure the route rules in the route table associated with the DRG of the Hub VCN.

      Destination	Target type	Target	Route type	Description
      10.182.1.0/24	LPG	lpg_hubvcn_region1	Static	Traffic to Exadata Client subnet Region 1

2. Set up the network configuration in the standby region (Region 2).
   1. Configure the route rules in the route table associated with the Exadata Client subnet.

      Destination	Target type	Target	Route type	Description
      0.0.0.0	DRG	None	Static	None
      10.0.1.0/24	LPG	lpg_exavcn_region2	Static	Traffic to Exadata Client subnet Region 1
      10.182.0.0/24	LPG	lpg_exavcn_region2	Static	Traffic to Hub VCN Region 1
      10.20.0.0/24	LPG	lpg_exavcn_region2	Static	Traffic to Hub VCN Region 2

   2. Configure the ingress rules in the security list associated with the Exadata Client subnet.

      Stateless	Source	IP protocol	Source port range	Destination port range	Allows	Description
      No	10.20.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Hub VCN Region 2
      No	10.10.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Hub VCN Region 1
      No	10.182.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Exadata Client subnet Region 1

   3. Configure the route rules in the route table associated with the subnet in the Hub VCN.

      Destination	Target type	Target	Route type	Description
      10.0.1.0/24	LPG	lpg_hubvcn_region2	Static	Traffic to Exadata Client subnet Region 2
      10.10.0.0/24	DRG	drg_hubvcn_region2	Static	Traffic to Hub VCN Region 1
      10.182.0.0/24	DRG	drg_hubvcn_region2	Static	Traffic to Exadata Client subnet Region 1

   4. Configure the ingress rules in the security list associated with the subnet in the Hub VCN.

      Stateless	Source	IP protocol	Source port range	Destination port range	Allows	Description
      No	10.0.1.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Exadata Client subnet Region 2
      No	10.10.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Hub VCN Region 1
      No	10.182.0.0/24	TCP	1521	1521	TCP traffic for port 1521	Ingress from Exadata Client subnet Region 1

   5. Configure the route rules in the route table associated with the LPG of the Hub VCN.

      Destination	Target type	Target	Route type	Description
      10.10.0.0/24	DRG	drg_hubvcn_region2	Static	Traffic to Hub VCN Region 1
      10.182.0.0/24	DRG	drg_hubvcn_region2	Static	Traffic to Exadata Client subnet Region 1

   6. Configure the route rules in the route table associated with the DRG of the Hub VCN.

      Destination	Target type	Target	Route type	Description
      10.0.1.0/24	LPG	lpg_hubvcn_region2	Static	Traffic to Exadata Client subnet Region 2