Menu

Lumen help

Creating an internet-accessible network

Using Lumen Private Cloud on VMware Cloud Foundation (LPC on VCF), you can create a new software-defined network. In the example below, we show how to create a network with outbound internet.

To create an internet-accessible network:

  1. Create the network.
  2. Create the firewall rule to allow outbound internet access for the network.
  3. Create a source NAT rule to allow outbound internet access for the network.

Step 1: Create the network

  1. On the top menu, click Data Centers.

    The Lumen Private Cloud on VMware Cloud Foundation portal shows Virtual Data Center dashboard.
Virtual Data Center
  1. Click inside the Data Center summary box.
  1. Select your Data Center. Select Networks in the left panel. On the Networks page, click NEW.
Networks
  1. In the New Organization VDC Network wizard, type or select the following: Scope: Default setting.
New Organization VDC Network: Scope
  1. Network Type: Select Routed and click NEXT.
New Organization VDC Network: Network Type
  1. Edge Connection:

    1. Select your Edge.

    2. Click NEXT.
New Organization VDC Network: Edge Connection
  1. General:

    1. Name: Type your network name.

    2. Gateway CIDR: (i.e. 10.20.30.1/24)

    3. Description: Optional.

    4. Click NEXT.
New Organization VDC Network: General
  1. Static IP Pools:

    1. Enter an IP range (e.g., 10.20.30.50-10.20.30.200).

    2. Click ADD.

    3. Click NEXT.
New Organization VDC Network: Static IP Pools
  1. DNS:

    1. Primary DNS: (e.g., 8.8.8.8)

    2. Secondary DNS: (e.g., 8.8.4.4)

    3. DNS suffix: As needed.

    4. Click NEXT.
New Organization VDC Network: DNS
  1. Ready to Complete: Review your selections, then click FINISH.
New Organization VDC Network: Ready to Complete

Step 2: Create the firewall rule to allow outbound internet access for the network

  1. In LPC on VCF, under Networking, click Edges. Click your Edge (siteID-edge-0).
Edge Gateways
  1. In the Edge Gateway - siteID-edge-0 page, select Firewall, and then click EDIT RULES.
Edge Gateway (showing detail for an edge gateway)
  1. Click NEW ON TOP. Type or select the following for the New Rule (click the pencil icons to edit):

    1. Name: Outbound 10.20.30.0 network.

    2. Category: User defined (by default).

    3. Source: Click Any Source.

    4. Destination: Any (by default) - varies by requirements.

    5. Action: Allow.

    6. Enable logging: Unchecked (by default) - varies by requirements.

    7. Click SAVE.
Edit Rules

Step 3: Create a source NAT rule to allow outbound internet access for the network

  1. In the Edge Gateway - siteID-edge-0 page, click NAT, and then click NEW.

Note: You will need to make a note of the public IP that is listed under External IP in order to create this SNAT rule.

Edge Gateway (showing detail for an edge gateway)
  1. Fill in the details for the new rule:

    1. Applied On: Public-1

    2. Original Source IP/Range: 10.20.30.0/24

    3. Translated Source IP/Range: This is the External IP that you recorded from the note above.

    4. Click KEEP.
Edit SNAT Rule