Скачать или смотреть Learning Cloud: multiple VPC networks in Google cloud

Objectives
In this lab, you learn how to perform the following tasks:

Create custom mode VPC networks with firewall rules
Create VM instances using Compute Engine
Explore the connectivity for VM instances across VPC networks
Create a VM instance with multiple network interfaces

Create the privatenet network
Create the privatenet network using the gcloud command line.

In the Cloud Console, click Activate Cloud Shell (Cloud Shell).

If prompted, click Continue.

Run the following command to create the privatenet network:

gcloud compute networks create privatenet --subnet-mode=custom
Run the following command to create the privatesubnet-us subnet:

gcloud compute networks subnets create privatesubnet-us --network=privatenet --region=us-central1 --range=172.16.0.0/24
Run the following command to create the privatesubnet-eu subnet:

gcloud compute networks subnets create privatesubnet-eu --network=privatenet --region=europe-west3 --range=172.20.0.0/20
Run the following command to list the available VPC networks:

gcloud compute networks list
The output should look like this (do not copy; this is example output):

NAME SUBNET_MODE BGP_ROUTING_MODE IPV4_RANGE GATEWAY_IPV4
default AUTO REGIONAL
managementnet CUSTOM REGIONAL
mynetwork AUTO REGIONAL
privatenet CUSTOM REGIONAL
default and mynetwork are auto mode networks and create subnets in each region automatically. managementnet and privatenet are custom mode networks and start with no subnets, which gives you full control over subnet creation.

Run the following command to list the available VPC subnets (sorted by VPC network):

gcloud compute networks subnets list --sort-by=NETWORK

Create the firewall rules for privatenet
Create the firewall rules for privatenet network using the gcloud command line.

Return to Cloud Shell. If necessary, click Activate Cloud Shell (Cloud Shell).

Run the following command to create the privatenet-allow-icmp-ssh-rdp firewall rule:

gcloud compute firewall-rules create privatenet-allow-icmp-ssh-rdp --direction=INGRESS --priority=1000 --network=privatenet --action=ALLOW --rules=icmp,tcp:22,tcp:3389 --source-ranges=0.0.0.0/0
The output should look like this (do not copy; this is example output):

NAME NETWORK DIRECTION PRIORITY ALLOW DENY
privatenet-allow-icmp-ssh-rdp privatenet INGRESS 1000 icmp,tcp:22,tcp:3389
Run the following command to list all the firewall rules (sorted by VPC network):

gcloud compute firewall-rules list --sort-by=NETWORK

Create the privatenet-us-vm instance
Create the privatenet-us-vm instance using the gcloud command line.

Return to Cloud Shell. If necessary, click Activate Cloud Shell (Cloud Shell).

Run the following command to create the privatenet-us-vm instance:

gcloud compute instances create privatenet-us-vm --zone=us-central1-c --machine-type=n1-standard-1 --subnet=privatesubnet-us
The output should look like this (do not copy; this is example output):

NAME ZONE MACHINE_TYPE PREEMPTIBLE INTERNAL_IP EXTERNAL_IP STATUS
privatenet-us-vm us-central1-c n1-standard-1 172.16.0.2 35.184.221.40 RUNNING
Run the following command to list all the VM instances (sorted by zone):

gcloud compute instances list --sort-by=ZONE

Task 4.

Create the VM instance with multiple network interfaces
Create the vm-appliance instance with network interfaces in privatesubnet-us, managementsubnet-us, and mynetwork. The CIDR ranges of these subnets do not overlap, which is a requirement for creating a VM with multiple network interface controllers (NICs).

In the Cloud Console, on the Navigation menu, click Compute Engine -- VM instances.

Click Create instance.

Specify the following, and leave the remaining settings as their defaults:

Property Value (type value or select option as specified)

The number of interfaces allowed in an instance is dependent on the instance's machine type and the number of vCPUs. The n1-standard-4 allows up to 4 network interfaces. Refer here for more information.

Click Management, security, disks, networking, sole tenancy.

Click Networking.

For Network interfaces, click the pencil icon to edit.

Specify the following, and leave the remaining settings as their defaults:

Property Value (type value or select option as specified)
Network privatenet
Subnetwork privatesubnet-us
Click Done.

Click Add network interface.

Specify the following, and leave the remaining settings as their defaults:

Property Value (type value or select option as specified)
Network managementnet
Subnetwork managementsubnet-us
Click Done.

Click Add network interface.

Specify the following, and leave the remaining settings as their defaults:

Property Value (type value or select option as specified)
Network mynetwork
Subnetwork mynetwork
Click Done.

Click Create.