Managing networks

You can create networks, view network details, edit, and delete them.

Limitations

  • If you create allow rules but leave the deny list empty, all incoming traffic will still be allowed.
  • An infrastructure network cannot be renamed if it is used by a compute virtual network.
  • You can only delete networks that are not assigned to any network adapters.

To create a network

Admin panel

  1. On the Infrastructure > Networks screen, click Create network.
  2. In the New network window, specify a network name. Network names may contain only Latin letters, numbers, and underscores, and must be 3 to 32 characters long.
  3. In the Access rules section, do the following:

    • To block traffic from particular IP addresses, IP address ranges, or subnets, specify them in the Deny list section.
    • To allow traffic from particular IP addresses, IP address ranges, or subnets, specify them in the Allow list section. Additionally, specify 0.0.0.0/0 in the Deny list section, to block all other traffic.

  4. Click Create.

Command-line interface

Use the following command:

vinfra cluster network create [--traffic-types <traffic-types>] [--inbound-allow-list <addresses>]
                              [--inbound-deny-list <addresses>] [--outbound-allow-list <rules>]
                              <network-name>
--traffic-types <traffic-types>
A comma-separated list of traffic type IDs or names
--inbound-allow-list <addresses>
A comma-separated list of IP addresses
--inbound-deny-list <addresses>
A comma-separated list of IP addresses
--outbound-allow-list <rules>
A comma-separated list of allow rules in the format: <address>:<protocol>:<port>:<description>
<network-name>
Network name

For example, to create a custom network MyNet and assign the traffic type SSH to it, run:

# vinfra cluster network create MyNet --traffic-types ssh
+---------------------+------------------------------------------+
| Field               | Value                                    |
+---------------------+------------------------------------------+
| id                  | b451c5ed-a553-4214-96c4-d926daa6110e     |
| inbound_allow_list  | []                                       |
| inbound_deny_list   | []                                       |
| name                | MyNet                                    |
| outbound_allow_list | - 0.0.0.0:tcp:8888:Internal management   |
|                     | - 0.0.0.0:tcp:80:HTTP                    |
|                     | - 0.0.0.0:tcp:443:HTTPS                  |
|                     | - 0.0.0.0:udp:53:DNS                     |
|                     | - 0.0.0.0:tcp:53:DNS                     |
|                     | - 0.0.0.0:udp:123:NTP                    |
|                     | - 0.0.0.0:tcp:8443:ABGW registration     |
|                     | - 0.0.0.0:tcp:44445:ABGW Geo-replication |
|                     | - 0.0.0.0:tcp:9877:Acronis Cyber Protect |
|                     | - 0.0.0.0:any:0:Allow all                |
| name                | MyNet                                    |
| traffic_types       | SSH                                      |
| vlan                |                                          |
+---------------------+------------------------------------------+

To view network details

Click the cogwheel icon next to the network name. In the network summary window, the following information is available:

  • The General section includes the network CIDR and subnet mask.
  • The Connected interfaces section shows the nodes’ network interfaces with their IP addresses.

To rename a network

Admin panel

  1. On the Infrastructure > Networks screen, click the cogwheel icon next to the network name.
  2. In the network summary window, click Edit.
  3. In the Edit window, enter a new name, and then click Save.

Command-line interface

Use the following command:

vinfra cluster network set [--name <network-name>] <network>
--name <network-name>
Network name
<network>
Network ID or name

For example, to rename the network MyNet to MyOtherNet, run:

# vinfra cluster network set MyNet --name MyOtherNet

To delete a network

Admin panel

  1. On the Infrastructure > Networks screen, click the cogwheel icon next to the network name.
  2. In the network summary window, click Delete.
  3. In the Delete network window, confirm your action by clicking Delete.

Command-line interface

Use the following command:

vinfra cluster network delete <network>
<network>
Network ID or name

For example, to delete the network MyOtherNet, run:

# vinfra cluster network delete MyOtherNet