Enable the Private Gateway

Knowledge Base

KB0068251

Enable the Private Gateway


Icons/System/eye-open Created with Sketch. 96 Views 06.01.2023 Cloud / Hosted Private Cloud

Objective

The vSphere interface is accessible by default over the Internet. For infrastructures that can be managed through the vRack private network, vSphere access can be switched over to the vRack through the private gateway.

This guide explains how to enable private gateway on your Hosted Private Cloud infrastructure through the OVHcloud API.

Do not enable the Private Gateway if you are using the Disaster Recovery Plan solution Zerto as this would cause Zerto to fail.

Activating the private gateway blocks access from the Internet, so it is important to make sure you can access the vRack.

Requirements

Instructions

Architecture

  • The private gateway is a virtual machine (VM) that will be deployed on the infrastructure and connected to the vRack.
  • The private gateway does not have a route, so only the user of the same subnet can reach the gateway. The connection from another network must be a source-nat.

The TLS certificate remains the same (pcc-X-X-X-X-X.ovh.com).

Prerequisites

  • Creating a Portgroup on the vRack to connect the private gateway. It must be under the right datacenter.
  • Having added the private gateway network to restrictions per source IP.
  • Adding a entry in file /etc/hosts or C:\Windows\system32\etc\hosts for pcc-X-X-X-X.ovh.com with the private IP

Enable the Private Gateway

Before starting, get the following necessary information:

  • serviceName: the Hosted Private Cloud name (syntax: pcc-X-X-X-X)
  • datacenterId: the datacenter ID
  • ip & netmask: the IP address and netmask for the private gateway
  • portgroup: the PortGroup name for vRack connexion.

These elements will be used in the following API calls.

Start activation with:

POST /dedicatedCloud/{serviceName}/datacenter/{datacenterId}/privateGateway/enable

The call creates a task that will deploy the virtual machine and make the network configuration.

You may receive a resource delivery notification (a new datastore). This will not be charged and will be placed in the Admin Storages folder from the Storage view. It is added to host the virtual machine without consuming your datastores.

Disable the Private Gateway

Before starting, get the following necessary information:

  • serviceName: the Hosted Private Cloud name (syntax: pcc-X-X-X-X)
  • datacenterId: the datacenter ID

Turning off the private gateway restores access from the Internet, so it is important to ensure that you have set up the IP filtering you want.

Start deactivation with:

POST /dedicatedCloud/{serviceName}/datacenter/{datacenterId}/privateGateway/disable

Go further

Join our community of users on https://community.ovh.com/en/.

Related articles