Port Management

This function allows you to create and manage ports (network interfaces) to associate with IP addresses in order to connect resources such as virtual servers to a network.

If you specify only a subnet when creating the following resources, the system will automatically create and assign ports.

  • Virtual server

    Note:
    • If you want to create a port by specifying an IP address rather than using automatic assignment with DHCP, first create a port at that IP address in advance, and then assign it to a virtual server.
    • With DHCP, IP addresses that were used for ports will be unavailable for use with other ports for a set period of time after the original port has been deleted.
    Tip: You can add multiple ports to a virtual server.

  • Virtual router

    Note: Ports are assigned automatically only if they are created on the default gateway (x.x.x.1). To add a virtual router to a network to which a virtual router is already connected at the address x.x.x.1, you must configure the port manually.
Note:

When all of the following conditions are met, an inconsistency will occur in the network interface due to functional restrictions:

  • The OS of a virtual server is CentOS 7.x, RHEL 7.x, or Windows
  • A port is attached after a virtual server is deployed
  • A port is attached while a virtual server is operating
  • A virtual server is restarted (stopped and then started)

If an inconsistency occurs, reconfigure the network from the OS. Also, when attaching an added port, attach it after stopping the virtual server.

Creating a Port

Create a port to specify and assign an IP address that is not used in a subnet, or to add a new port to a resource.

Note:

You can assign an IP address only when you create a new port. To change the IP address, use the following procedure:

  1. Delete the port assigned to the existing IP address.
  2. Restart the virtual server.
  3. Specify a new IP address, and re-create the port.
  4. Assign the re-created port to resources.
Tip:

For a Red Hat Enterprise Linux virtual server or a CentOS virtual server, the network interface is not configured automatically if you add multiple ports when creating a virtual server or if you create an additional port. If necessary, create a network interface settings file on your OS.

Create the settings file according to the following steps.

  1. Log in to the virtual server as an Administrator.
  2. Create the settings file for the network interface.
  3. Restart the network services.
Table 1. Creating a Port (List of Items That Can Be Set)
Item Description Required
Network ID Specify the ID of the network to which the port will be connected. Yes
Port Name Specify a name to identify the port.  
Owner Device ID Specify the resource ID that owns the port to be created.  
MAC Address If you explicitly specify a MAC address, the system will assign that MAC address to the port.  
Private IP Address

If you explicitly specify an IP address, the system will assign that IP address to the port. If this setting is omitted, an address from within the range of addresses on the network specified by the network ID will be assigned.

Note: If you specify an IP address that is already in use, creation of the port will fail.
  
List of Allowed Address Pairs

Out of the communications blocked by the filtering rule against IP spoofing1, specify the senders to be explicitly allowed, using a list of combination of MAC address and IP address.

Tip: When running a program such as PRIMECLUSTER on a virtual server, allow the combination of MAC address and IP address of the sender that requires communication, using this parameter.
Warning: You cannot use this function to run Windows NLB. Doing so may affect the underlying IaaS network.
  
List of Security Group IDs Specify as a list the security groups to be applied to the port.  
Availability Zone Name Specify the availability zone where the port will be created. If this setting is omitted, the default availability zone will be used.  
1 The filter that is automatically set is designed to block communications except those from the ports with the combinations of MAC and IP address assigned to the virtual server. Using this filter prevents spoofing with a forged sender IP address or MAC address.