Oracle Corente Cloud Services Cook Book Contents 1. Setup Prerequisite for Using This Cook Book ................................................................................................................. 2 2. General Oracle Cloud Documentation ............................................................................................................................ 2 3. Software Requirements and Additional Tools ................................................................................................................ 2 4. Corente Virtual Private Network (VPN) Cloud Service: An Overview ............................................................................. 3 5. Setting Up Corente Services Gateway in Your On-Premise/Data Center Location ........................................................ 5 6. Setting up Corente Services Gateway on Oracle Public Cloud (OPC) ........................................................................... 37 7. Establishing Partnership Between Your On-Premise Gateway and Cloud Gateway .................................................... 48 8. Configuring a Generic Routing Encapsulation (GRE) Tunnel on your Oracle Compute Cloud Service Instance .......... 58 9. Testing Tunnel Connectivity between On-Premise and Oracle Cloud .......................................................................... 66 Appendix ............................................................................................................................................................................... 69 Oracle Corente Cloud Services Cook Book 1 [TOP] 1. Setup Prerequisite for Using This Cook Book Setting up your Oracle Cloud Services Account is a prerequisite to using this cook book. 1.1 The account administrator (designated at the time of subscription purchase) will receive a Welcome email from Oracle Cloud. 1.2 The Welcome email will have the details of the identity domain and credentials to login to the Oracle Cloud account. 1.3 Using the credentials, you will login to the My Services URL mentioned in the email. 1.4 You are also required to have a Secure Shell (SSH) public/private key pair so you can provide the public key when you create an Oracle Compute Cloud instance. This cook book DOES NOT provide steps to generate this SSH Key pair. Please refer document that explains how to generate SSH Key pair. 1.5 You will also receive another email from Oracle Cloud which will contain Corente VPN Account details. 2. General Oracle Cloud Documentation  Cloud Documentation https://docs.oracle.com/cloud/latest/  Corente Cloud Services Exchange http://www.oracle.com/us/technologies/virtualization/corente/overview/index.html  Setting Up VPN for Oracle Compute, Database, and Java Cloud Service Instances http://docs.oracle.com/cloud/latest/stcomputecs/MCVPN/toc.htm 3. Software Requirements and Additional Tools 3.1 Web browser (Internet Explorer 11 and 12, Firefox 31 or later, Chrome 37 or later (also for Android), Safari 7 and 8, Safari Mobile 5 or later (iOS)) 3.2 Putty and Puttygen (http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html) 3.3 Java Web Start – Java Web Start is included in the Java Runtime Environment (JRE) as part of Java SE. Download link. 3.4 Oracle VM Virtual Box Oracle Corente Cloud Services Cook Book 2 [TOP] 4. Corente Virtual Private Network (VPN) Cloud Service: An Overview Corente VPN Cloud Service provides for a secure access to your Oracle Compute Cloud Service, Oracle Java Cloud Service, and Oracle Database Cloud Service instances from your on-premise location or data center through the set- up of Corente Services Gateway (CSG). The below diagram shows a high level architecture of the VPN solution being offered. The below list is an outline of the steps to set up Corente VPN solution on Oracle Cloud:  Set up a Corente Services Gateway (CSG) (on-premises gateway) in your On-Premise/Data Center  Set up Corente Services Gateway (cloud gateway) on Oracle Cloud  Establish partnership between your on-premises gateway and cloud gateway  Configure a Generic Routing Encapsulation (GRE) tunnel on your Oracle Compute Service instance Oracle Corente Cloud Services Cook Book 3 [TOP] At the end of this tutorial, we will be able to accomplish the following scenarios:  Ping Compute Service Instance running behind CSG on Oracle Public Cloud from On-Premise Compute Instance  SSH to Compute Service Instance running behind CSG on Oracle Public Cloud from On-Premise Compute Instance  Ping Compute Instance running behind CSG on On-Premise Location from Compute Service Instance  SSH to Compute Instance running behind CSG on On-Premise Location from Compute Service Instance Oracle Corente Cloud Services Cook Book 4 [TOP] 5. Setting Up Corente Services Gateway in Your On-Premise/Data Center Location 5.1 Configuring Location Gateway for CSG for OnPremise site through App Net Manager Lite This application allows you to manage your application network, but allows you to do so when there is no existing Location Gateway available on your LAN to secure your connection. a. Open the web browser and type in https://www.corente.com. b. Click on the App Net Manager Lite link to download a Java Web Start file. c. Click on the downloaded file (.jnlp extension) to start the App Net Manager Lite application. d. Enter the User ID, Password and Domain information (Corente VPN Account details) and click Login. e. On the next page, under your domain, choose Locations and click New. Oracle Corente Cloud Services Cook Book 5 [TOP] f. On the Add Location Wizard dialog box, click Next. g. Add an appropriate Location Name and click Next. For this tutorial, the Location Name set is OnPremise. Oracle Corente Cloud Services Cook Book 6 [TOP] h. Enter the Physical Address of the location and click Next. i. Make sure the select Allow automatic reboot after maintenance box and click Next. Oracle Corente Cloud Services Cook Book 7 [TOP] j. On the next page, leave the default settings for Location Maintenance. Click Next. k. On the Location Configuration page, choose Inline Configuration. Click Next. Note: When single network interface will be used for both trusted and untrusted connection, then choose Peer Configuration. When there are separate network interfaces each for trusted and untrusted connection, then choose Inline Configuration. Oracle Corente Cloud Services Cook Book 8 [TOP] l. On the WAN Interface Type, select DHCP. Click Next. m. You may leave the DHCP Client Name field BLANK. Click Next. Oracle Corente Cloud Services Cook Book 9 [TOP] n. Enter an appropriate LAN Interface IP Address and Subnet Mask. Click Next. For this tutorial, the LAN Interface IP Address entered is 192.168.200.1 and the Subnet Mask is 255.255.255.0/24. o. Click Yes to add the whole subnet to the Default User Group. Oracle Corente Cloud Services Cook Book 10 [TOP]