Create Static Routes between vApps - Denit Helpdesk

Create Static Routes between vApps In this document you will find the manual for configuring the Network, creating firewall rules and test the connection. Version 1.0

1. Add vApps Network Static Routes within the same Organization vDC Network .......... 2 Network Information

3

Static Routing Settings

3

Procedure: Static Route to vApp3 Network

3

2. Create firewall rules to allow traffic on the static routes ............................................. 5 Procedure: Firewall Rule for Static Route to vApp3

5

3. Test the connection from the vApp_Alpha2_network to the vApp_Alpha3_network .. 7

1.

Add vApps Network Static Routes within the same Organization vDC Network

You can add static routes between two vApp networks that are routed to the same organization vDC network. Static routes allow traffic between the networks. You cannot add static routes between overlapping networks or fenced vApps. After you add a static route to an organization vDC network, configure the network firewall rules to allow traffic on the static route. Static routes function only when the vApps included in the routes are running. If you perform any of the following operations on a vApp that includes static routes, the static routes no longer function and you must remove them manually.   

Change the parent network of a vApp Delete a vApp Delete a vApp network

Prerequisites Verify that the networks have the following configurations:    

A routed organization vDC network. Two vApp networks are routed to the organization vDC network. The vApp networks are in vApps that were started at least once. Static routing is enabled on the two vApps Networks Edges.

Example: Static Route Example Internet

Ext-Network-Vlan210 62.148.163.0/24

External Network vCloud Network & Security Edge Device: Alpha_Edge_Internet Sub-Allocate IP Pools: 62.148.163.20-62.148.163.24

Static Route Defined for: 192.168.3.0/24 via 192.168.1.14

Ext:62.148.163.20

Int:192.168.1.1

Alpha_OrgvDC_Internet

Ext:192.168.1.13

Ext:192.168.1.14

Edge Interface

Alpha10

Alpha11 Alpha13

Edge Interface Int:192.168.3.1

Int:192.168.2.1 vApp_Alpha2_Network

vApp_Alpha3_Network 192.168.3.0/24

192.168.2.0/24

Alpha20

Static Route Defined for: 192.168.2.0/24 via 192.168.1.13 192.168.1.0/24

Alpha21

Alpha30

Alpha31

vApp_Alpha2_Network and vApp_Alpha3_Network are both routed to Alpha_OrgvDC_Internet Network Shared. We create static routes on the vApps Networks to allow traffic between the vApp networks.

Network Information Network Name vApp_Alpha2_Network vApp_Alpha3_Network Alpha_OrgvDC_Internet

Network Specification 192.168.2.0/24 192.168.3.0/24 192.168.1.0/24

Router External IP Address 192.168.1.13 192.168.1.14 NA

Static Routing Settings Static Route to Network vApp_Alpha2_Network vApp_Alpha3_Network

Route Name Static Route to the vApp_Alpha2_Network Static Route to the vApp_Alpha3_Network

Network 192.168.2.0/24

Next Hop IP Address 192.168.1.13

192.168.3.0/24

192.168.1.14

Procedure: Static Route to vApp3 Network A. Click the My Cloud tab and click vApps in the left pane. B.

Click Alpha2 vApp and then the Networking tab

C.

Right-click the vApp_Alpha2_network and select Configure Services.

Route Within this network Within this network

D. On the Static Routing tab, select the Enable Static Routing option and click Add.

E.

Type the name Static Route to the vApp_Alpha3_Network

Network address:192.168.3.0/24 (vApp_Alpha3_Network) Next hop IP: 192.168.1.14 The network address is for the first vApp network to which you add a static route. The next hop IP is the external IP address of that vApp network's router.

F.

Click OK.

G. Click OK. H. Repeat steps Step D through Step G to add a route to the vApp_Alpha2_network.

2.

Create firewall rules to allow traffic on the static routes

Procedure: Firewall Rule for Static Route to vApp3 A. Click the My Cloud tab and click vApps in the left pane. B.

Click Alpha3 vApp and the Networking tab

C.

Right-click the vApp_Alpha3_network and select Configure Services.

D. Click the Firewall tab, select the option Enable Firewall and click Add.

E.

Type the name for the rule.

F.

Type the source IP address 192.168.1.0/24 (Alpha_OrgvDC_Internet Network)

G. Type the destination IP address 192.168.3.0/24 (vApp_Alpha3_Network) H. Select the protocol ANY and action Allow I. Click OK and OK to close the Windows

Repeat steps Step D through Step J to add a route to the vApp_Alpha2_network.

3. Test the connection from the vApp_Alpha2_network to the vApp_Alpha3_network A. Log in to the VM Alpha20 in the vApp Alpha2.

B.

Ping to the VM Alpha30 in the vApp Alpha3.

C.

Repeat this step from the vApp Alpha3 to vApp Alpha2