Managing IP Network Exchanges

Creating an IP Network Exchange

An IP network exchange enables access between IP networks that have non-overlapping addresses, so that instances on these networks can exchange packets with each other without NAT.

Note:

An IP network exchange provides a communication channel across IP networks. However, whether communication is permitted over this channel, the protocols and ports used for communication, and the source and destination IP addresses for which communication is permitted, is controlled by the security rules created and the ACLs applied to the relevant vNICsets.

To complete this task, you must have the Compute_Operations role. If this role isn’t assigned to you or you’re not sure, then ask your system administrator to ensure that the role is assigned to you in Oracle Cloud Infrastructure Classic Console. See Modifying User Roles in Managing and Monitoring Oracle Cloud.

  1. Sign in to the Compute Classic console. If your domain spans multiple sites, select the appropriate site. To change the site, click the Site menu near the top of the page.
  2. Click the Network tab.
  3. In the Network drop-down list, expand IP Network, and then click IP Exchanges.
  4. Click Create IP Exchange.
  5. Enter a name, description, and tags for your IP network exchange and then click Create.
    The IP network exchange is created.

To create an IP network exchange using the CLI, use the opc compute ip-network-exchange add command. For help with that command, run the command with the -h option. For the instructions to install the CLI client, see Preparing to Use the Compute Classic CLI in CLI Reference for Oracle Cloud Infrastructure Compute Classic.

To create an IP network exchange using the API, use the POST /network/v1/ipnetworkexchange/ method. See REST API for Oracle Cloud Infrastructure Compute Classic.

You can also create an IP network exchange by using an orchestration. See Orchestration v1 Attributes Specific to Each Object Type or Orchestration v2 Attributes Specific to Each Object Type.

After creating an IP network exchange, you can add IP networks to the exchange either while creating IP networks, or later, by updating an IP network. See Creating an IP Network and Updating an IP Network.

Listing IP Network Exchanges

After creating IP network exchanges, you can view a list of IP network exchanges and the description of each IP network exchange.

To complete this task, you must have the Compute_Monitor or Compute_Operations role. If this role isn’t assigned to you or you’re not sure, then ask your system administrator to ensure that the role is assigned to you in Oracle Cloud Infrastructure Classic Console. See Modifying User Roles in Managing and Monitoring Oracle Cloud.

  1. Sign in to the Compute Classic console. If your domain spans multiple sites, select the appropriate site. To change the site, click the Site menu near the top of the page.
  2. Click the Network tab.
  3. In the Network drop-down list, expand IP Network, and then click IP Exchanges.
The IP Exchanges page displays a list of IP network exchanges.

To list IP network exchanges using the CLI, use the opc compute ip-network-exchange list command. For help with that command, run the command with the -h option. For the instructions to install the CLI client, see Preparing to Use the Compute Classic CLI in CLI Reference for Oracle Cloud Infrastructure Compute Classic.

To list IP network exchanges using the API, use the GET /network/v1/ipnetworkexchange/container/ method. See REST API for Oracle Cloud Infrastructure Compute Classic.

Adding an IP Network to an IP Network Exchange

If you need to enable access between instances on different IP networks, you can add those networks to an IP network exchange.

If you’ve already created an IP network exchange, you can add the IP network to the IP network exchange when you create the IP network. See Creating an IP Network.

Otherwise, you can add the IP network to the IP network exchange later, by updating the IP network. See Updating an IP Network.

As a best practice, add a maximum of 20 IP networks to an IP network exchange. Due to DHCP limitations routing is automatically configured for only for 20 IP networks in an IP network exchange. If you want to add more than 20 IP networks to an IP network network, you’ll need to manage routing in each instance manually.

Deleting an IP Network Exchange

If no IP networks are using an IP network exchange, or if you no longer want to enable traffic across the IP networks in an IP network exchange, you can delete the IP network exchange.

Note:

If you delete an IP network exchange which is referenced in an IP network, then if you try to create an instance with an interface on that IP network, your instance will go into an error state and won’t be created. The IP network exchange referenced by an IP network must exist when you create an instance with an interface on that IP network.

Prerequisites

  • To complete this task, you must have the Compute_Operations role. If this role isn’t assigned to you or you’re not sure, then ask your system administrator to ensure that the role is assigned to you in Oracle Cloud Infrastructure Classic Console. See Modifying User Roles in Managing and Monitoring Oracle Cloud.

Note:

You should always use your orchestrations to manage resources that you’ve created using orchestrations. Don’t, for example, use the web console or the CLI or REST API to delete an object that you created using an orchestration. This could cause your orchestration to either attempt to re-create the object and associated resources, or to go into an error state.

If you created the object using orchestration v1, then you can delete the object by terminating the orchestration. See Terminating an Orchestration v1.

If you created the object using an orchestration v2, then you can delete the object by suspending, terminating, or updating the orchestration. See Suspending an Orchestration v2, Terminating an Orchestration v2, or Updating an Orchestration v2.

  1. Sign in to the Compute Classic console. If your domain spans multiple sites, select the appropriate site. To change the site, click the Site menu near the top of the page.
  2. Click the Network tab.
  3. In the Network drop-down list, expand IP Network, and then click IP Exchanges.
  4. Identify the IP network exchange that you want to delete. From the menu icon menu, select Delete.

To delete an IP network exchange using the CLI, use the opc compute ip-network—exchange delete command. For help with that command, run the command with the -h option. For the instructions to install the CLI client, see Preparing to Use the Compute Classic CLI in CLI Reference for Oracle Cloud Infrastructure Compute Classic.

To delete an IP network exchange using the API, use the DELETE /network/v1/ipnetworkexchange/name method. See REST API for Oracle Cloud Infrastructure Compute Classic.