Connecting your Virtual Machine to the Internet. BT Cloud Compute. The power to build your own cloud solutions to serve your specific business needs

Transcription

1 Connecting your Virtual Machine to the Internet BT Cloud Compute The power to build your own cloud solutions to serve your specific business needs

2 Introduction Once you have created your virtual machine it will not be accessible from the Internet. By default no firewalls rules are set so no one can access your virtual machine. This guide will help you through the steps necessary to set up the egress firewall rules. Prerequisites Your virtual machine has been deployed on an isolated network (this is the standard network which is auto provisioned). Your isolated network has an external IP Address (again an IP Address is automatically assigned to your default isolated network). Any additional isolated networks will not have a IP Address unless you have added one first. To aid you in the connecting your virtual machines a number of different steps are necessary. You do not need to follow the steps one by one if you have the necessary information to hand. Identifying your network In order to access the virtual machine from the Internet or to access the Internet from your virtual machine you need to ensure you have the necessary firewalls rules in place. To add or change firewall rules you need to access the Managed Resources tabs. From the Home screen select [Managed Resources] followed by [Cloud]. From the Managed Resources tabs select the [Instances] tab From the left hand menu select the virtual machine that you wish to apply the firewall rules to. In this example we have selected a machine we had previously called NIC1DF British Telecommunications plc. 2 of 5 Issue 1

3 For your chosen virtual machine select the [NICs] tab. This will show you the network attributes of your virtual server. In this example we can see the virtual machine is connected to an Isolated network (and therefore could connect to the Internet). We therefore need to make a note of the Network ID as we will need this information later. This is the internal ID of the network your virtual machine is connected to. It is unique to each network and will therefore help us identify which network we need to apply the firewall rules to. Identifying your IP Address Select the [IP Address] tab. Displayed on the left hand navigation will be all the IP Addresses associated with your Account (Master User and Power User will see all). Remember every User will have an IP Address and every location you have deployed a VM will also have an IP Address so there may be many displayed. Scroll through the list of IP Addresses until you find the one with the [Associated Network ID] that matches the [Network ID] you identified and noted earlier. British Telecommunications plc. 3 of 5 Issue 1

4 Setting your firewall rules Now that you have identified the IP Address associated with the network your virtual machine resides on select the [Firewall] tab. This tab allows you to create the firewalls rules associated with your network. For the purposes of this guide we are going to demonstrate how to create a standard rule for TCP/IP traffic using port 80 - this will allow traffic through to a webserver we have installed on our virtual machine. [Source CIDR] [Protocol] [Start Port] [End Port] Enter the source network of the devices you would like to have access to your virtual machine. In this example we want it available to everyone on the Internet so we enter /0 Using the drop down box select the required protocol. In this case we want the default TCP Enter 80. This is the first port in the range you wish the firewall to allow Enter 80. This is the last port in the range you wish the firewall to allow If ICMP is selected as a Protocol enter -1 in both the [Type] and the [Code] boxes that will appear. This will allow the Security & Network Appliance to respond to ICMP requests. Once the firewall ruleset has been entered click on the + button to add the rule, once the rule has been added, you see it displayed as follows: To remove a rule simply select the button against the corresponding rule. Select the [Port Forwarding] tab. This will allow us to define which port on the virtual machine we want to use. British Telecommunications plc. 4 of 5 Issue 1

5 [Public Port] [Private Port] [Protocol] Enter the IP port incoming traffic will be arriving on. This should be within the range you specified earlier Enter the IP port that will be used by the virtual machine for this traffic. This could be a different port from that specified in the [Public Port] box, if so the port will be natted Specify the protocol used by the target server for this traffic type. This should match the settings used previously [Virtual Machine] Select the target virtual machine from the drop down list Once the port forwarding rule has been entered click on + the button to add the rule, once the rule has been added you this will be listed as follows. To remove a rule simply select the button against the corresponding rule. British Telecommunications plc. 5 of 5 Issue 1