Corente Cloud Services Exchange (CSX) Corente Cloud Services Gateway Site Survey Form

Size: px

Start display at page:

Download "Corente Cloud Services Exchange (CSX) Corente Cloud Services Gateway Site Survey Form"

Jessica Short
8 years ago
Views:

1 Crente Clud Services Exchange (CSX) Crente Clud Services Gateway Site Survey Frm Use this site survey frm t prvide yur Crente CSX administratr r service prvider with the necessary infrmatin t register yur Crente Services Gateway. Sectin 1: General Infrmatin Site Name Cmpany Address Line 1 Address Line 2 City State/Prvince ZIP/Pstal Cuntry Place an X n the type f gateway yu will be installing. If installing a standard Crente Services Gateway, specify the infrmatin fr either the bare metal r VM gateway deplyment Crente Services Gateway Bare Metal Install x86 Hardware Mdel (ie. Dell PwerEdge 1950) VM Install Hypervisr & Versin (ie. Oracle VM 3.3.2) Crente Services Gateway Virtual Envirnment Editin

Sectin 1: General Infrmatin Site Name Cmpany Address Line 1 Address Line 2 City State/Prvince ZIP/Pstal Cuntry Place an X n the type f gateway yu will be installing.

2 Administratin Cntact Infrmatin Primary Administratr Name Secndary Administratr Name Sectin 2: Firewall Place an X n the device that yu will be using at the site where yu are installing the lcatin gateway. Firewall Prxy Server If yu selected a firewall r prxy server, please prvide the fllwing infrmatin: Brand OS Versin Mandatry Firewall Settings D yu have the ability/access t cnfigure the firewall r prxy server settings t allw fr traffic requirements, as defined in the mandatry utbund/inbund firewall settings belw? Yes N T facilitate Crente netwrk cnnectins, Crente requires that the fllwing rules be implemented at each firewall that prtects a Crente Services Gateway: Outbund Rules Permit traffic frm Crente Services Gateway IP address t TCP prt 443 f ANY IP address (fr diskless Lcatin gateway persnality file dwnlad via HTTPS) Permit traffic frm Crente Services Gateway IP address t UDP Prt 53 f ANY IP address (fr name reslutin f the Crente SCP via DNS) 2 CORENTE SERVICES GATEWAY SITE SURVEY CHECKLIST

Permit TCP traffic frm Surce Prt 1025 65535 f Crente Services Gateway IP address t TCP Destinatin Prt 551 fr ANY IP address (the Crente Service Prt) Permit UDP traffic frm Surce Prt 551 f Crente

3 Permit TCP traffic frm Surce Prt f Crente Services Gateway IP address t TCP Destinatin Prt 551 fr ANY IP address (the Crente Service Prt) Permit UDP traffic frm Surce Prt 551 f Crente Services Gateway IP address t UDP Destinatin Prt 551 ANY IP address (the Crente Service Prt) Inbund Rules Permit TCP Surce Prt frm ANY IP address t TCP Destinatin Prt 551 f Crente Services Gateway IP address (the Crente Service Prt) Permit UDP Surce Prt 551 frm ANY IP address t UDP Destinatin Prt 551 f Crente Services Gateway IP address (the Crente Service Prt) Sectin 3: IP Address Scheme Crente prvides tw placement ptins fr yur Crente Services Gateway: the Peer cnfiguratin and the Inline cnfiguratin. Yur chice f cnfiguratin shuld depend n hw yu wuld like the Lcatin gateway t be placed in yur LAN if yu already have a firewall device. Fill ut the fields crrespnding t the cnfiguratin yu have chsen. Peer Cnfiguratin The Peer cnfiguratin is a Crente Services Gateway with a single Ethernet interface. The Peer Lcatin Gateway is added t an already existing LAN cnsisting f the machines that will be participating in the Crente netwrk. It requires additinal ruting r server cnfiguratin t ensure that packets destined fr a Lcatin partner get ruted t the lcal Lcatin gateway first. The fllwing is an example f Peer Lcatin Gateway placement in a LAN: Figure 1: Peer Cnfiguratin DHCP Yes N 3 CORENTE SERVICES GATEWAY SITE SURVEY CHECKLIST

Gateway IP address (the Crente Service Prt) Permit UDP Surce Prt 551 frm ANY IP address t UDP Destinatin Prt 551 f Crente Services Gateway IP address (the Crente Service Prt) Sectin 3: IP Address

If yu answered N, please prvide the fllwing STATIC IP infrmatin: IP Address (e.g. 192.168.x.

4 If yu answered N, please prvide the fllwing STATIC IP infrmatin: IP Address (e.g x.x) Subnet Mask (e.g x.x) DNS Primary DNS Secndary Default Gateway IP Inline Cnfiguratin The Inline cnfiguratin is a Crente Services Gateway with tw Ethernet interfaces. One Ethernet interface is cnnected t the internal lcal area netwrk (LAN). The ther interface is cnnected t an external interface, which is typically the Internet access device fr that lcatin. All traffic must pass thrugh the Lcatin gateway in rder t reach int and ut f the internal lcal netwrk. The fllwing is an example f Inline Lcatin Gateway placement when the Lcatin gateway is installed in frnt f the LAN (yu can als install an Inline Lcatin Gateway parallel t an existing firewall. Figure 2: Inline Cnfiguratin DHCP Yes N If yu answered N, please prvide the static IP address infrmatin: WAN IP Address (e.g x.x) Subnet Mask (e.g x.x) LAN IP Address (e.g x.x) Subnet Mask (e.g x.x) Default Gateway IP DNS Primary DNS Secndary 4 CORENTE SERVICES GATEWAY SITE SURVEY CHECKLIST

One Ethernet interface is cnnected t the internal lcal area netwrk (LAN). The ther interface is cnnected t an external interface, which is typically the Internet access device fr that lcatin.

5 Sectin 4: Netwrk Envirnment Please describe yur netwrk envirnment (e.g. number f servers, number f subnets, etc.). Als describe where yu wuld like t place yur Crente Services Gateway in yur netwrk, and identify key ruting r firewall hps and IP addresses between the Crente Services Gateway and the Internet. If pssible, please prvide a diagram. This infrmatin will be used t determine prper placement and peratin f the Crente Services Gateway. If yu have any questins regarding this checklist, please cntact Oracle Supprt. 5 CORENTE SERVICES GATEWAY SITE SURVEY CHECKLIST

between the Crente Services Gateway and the Internet. If pssible, please prvide a diagram.

6 Oracle Crpratin, Wrld Headquarters Wrldwide Inquiries 500 Oracle Parkway Phne: Redwd Shres, CA 94065, USA Fax: C O N N E C T W I T H U S blgs.racle.cm/blgs facebk.cm/racle twitter.cm/racle racle.cm Cpyright 2015, Oracle and/r its affiliates. All rights reserved. This dcument is prvided fr infrmatin purpses nly, and the cntents heref are subject t change withut ntice. This dcument is nt warranted t be errr-free, nr subject t any ther warranties r cnditins, whether expressed rally r implied in law, including implied warranties and cnditins f merchantability r fitness fr a particular purpse. We specifically disclaim any liability with respect t this dcument, and n cntractual bligatins are frmed either directly r indirectly by this dcument. This dcument may nt be reprduced r transmitted in any frm r by any means, electrnic r mechanical, fr any purpse, withut ur prir written permissin. Oracle and Java are registered trademarks f Oracle and/r its affiliates. Other names may be trademarks f their respective wners. Intel and Intel Xen are trademarks r registered trademarks f Intel Crpratin. All SPARC trademarks are used under license and are trademarks r registered trademarks f SPARC Internatinal, Inc. AMD, Optern, the AMD lg, and the AMD Optern lg are trademarks r registered trademarks f Advanced Micr Devices. UNIX is a registered trademark f The Open Grup. 0115

This dcument is prvided fr infrmatin purpses nly, and the cntents heref are subject t change withut ntice.

Firewall/Proxy Server Settings to Access Hosted Environment. For Access Control Method (also known as access lists and usually used on routers)

Firewall/Proxy Server Settings to Access Hosted Environment. For Access Control Method (also known as access lists and usually used on routers) Firewall/Prxy Server Settings t Access Hsted Envirnment Client firewall settings in mst cases depend n whether the firewall slutin uses a Stateful Inspectin prcess r ne that is cmmnly referred t as an