You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by pr...@apache.org on 2012/10/04 08:12:58 UTC
git commit: doc files for inter vlan routing
Updated Branches:
refs/heads/master 073e6449b -> d50141d26
doc files for inter vlan routing
Project: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/commit/d50141d2
Tree: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/tree/d50141d2
Diff: http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/diff/d50141d2
Branch: refs/heads/master
Commit: d50141d26831e01eb878af5cc011aaa748166058
Parents: 073e644
Author: Radhika PC <ra...@citrix.com>
Authored: Thu Oct 4 11:42:25 2012 +0530
Committer: Pranav Saxena <pr...@citrix.com>
Committed: Thu Oct 4 11:42:25 2012 +0530
----------------------------------------------------------------------
docs/en-US/add-gateway-vpc.xml | 104 +++++++++++++++
docs/en-US/add-tier.xml | 89 +++++++++++++
docs/en-US/add-vm-to-tier.xml | 45 +++++++
docs/en-US/add-vpc.xml | 75 +++++++++++
docs/en-US/configure-acl.xml | 139 +++++++++++++++++++++
docs/en-US/delete-reset-vpn.xml | 89 +++++++++++++
docs/en-US/enable-disable-static-nat-vpc.xml | 97 ++++++++++++++
docs/en-US/images/remove-vpc.png | Bin 0 -> 815 bytes
docs/en-US/images/remove-vpn.png | Bin 0 -> 735 bytes
docs/en-US/images/reset-vpn.png | Bin 0 -> 860 bytes
docs/en-US/release-ip-for-vpc.xml | 80 ++++++++++++
docs/en-US/remove-tier.xml | 55 ++++++++
docs/en-US/remove-vpc.xml | 68 ++++++++++
13 files changed, 841 insertions(+), 0 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/add-gateway-vpc.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/add-gateway-vpc.xml b/docs/en-US/add-gateway-vpc.xml
new file mode 100644
index 0000000..616794a
--- /dev/null
+++ b/docs/en-US/add-gateway-vpc.xml
@@ -0,0 +1,104 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="add-gateway-vpc">
+ <title>Adding a Private Gateway to a VPC</title>
+ <para>A private gateway can be added by the root admin only. The VPC private network has 1:1
+ relationship with the NIC of the physical network. No gateways with duplicated VLAN and IP are
+ allowed in the same data center.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC to which you want to configure load balancing
+ rules.</para>
+ <para>The VPC page is displayed where all the tiers you created are listed in a
+ diagram.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Settings icon.</para>
+ <para>The following options are displayed.</para>
+ <itemizedlist>
+ <listitem>
+ <para>IP Addresses</para>
+ </listitem>
+ <listitem>
+ <para>Private Gateways</para>
+ </listitem>
+ <listitem>
+ <para>Site-to-Site VPN</para>
+ </listitem>
+ <listitem>
+ <para>Network ACLs</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Select Private Gateways.</para>
+ <para>The Gateways page is displayed.</para>
+ </listitem>
+ <listitem>
+ <para>Click Add new gateway:</para>
+ <mediaobject>
+ <imageobject>
+ <imagedata fileref="./images/add-new-gateway-vpc.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>add-new-gateway-vpc.png: adding a private gateway for the VPC.</phrase>
+ </textobject>
+ </mediaobject>
+ </listitem>
+ <listitem>
+ <para>Specify the following:</para>
+ <itemizedlist>
+ <listitem>
+ <para><emphasis role="bold">Physical Network</emphasis>: The physical network you have
+ created in the zone.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">IP Address</emphasis>: The IP address associated with the VPC
+ gateway.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Gateway</emphasis>: The gateway through which the traffic is
+ routed to and from the VPC.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Netmask</emphasis>: The netmask associated with the VPC
+ gateway.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">VLAN</emphasis>: The VLAN associated with the VPC
+ gateway.</para>
+ </listitem>
+ </itemizedlist>
+ <para>The new gateway appears in the list. You can repeat these steps to add more gateway for
+ this VPC.</para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/add-tier.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/add-tier.xml b/docs/en-US/add-tier.xml
new file mode 100644
index 0000000..6beaab2
--- /dev/null
+++ b/docs/en-US/add-tier.xml
@@ -0,0 +1,89 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="add-tier">
+ <title>Adding Tiers</title>
+ <para>Tiers are distinct locations within a VPC that act as isolated networks, which do not have
+ access to other tiers by default. Tiers are set up on different VLANs that can communicate with
+ each other by using a virtual router. Tiers provide inexpensive, low latency network
+ connectivity to other tiers within the VPC.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPC that you have created for the account is listed in the page.</para>
+ <note>
+ <para>The end users can see their own VPCs, while root and domain admin can see any VPC they
+ are authorized to see.</para>
+ </note>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC for which you want to set up tiers.</para>
+ <para>The Add new tier dialog is displayed, as follows:</para>
+ <mediaobject>
+ <imageobject>
+ <imagedata fileref="./images/add-tier.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>add-tier.png: adding a tier to a vpc.</phrase>
+ </textobject>
+ </mediaobject>
+ <para>If you have already created tiers, the VPC diagram is displayed. Click Create Tier to
+ add a new tier.</para>
+ </listitem>
+ <listitem>
+ <para>Specify the following:</para>
+ <para>All the fields are mandatory.</para>
+ <itemizedlist>
+ <listitem>
+ <para><emphasis role="bold">Name</emphasis>: A unique name for the tier you create.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Network Offering</emphasis>: The following default network
+ offerings are listed: DefaultIsolatedNetworkOfferingForVpcNetworksNoLB,
+ DefaultIsolatedNetworkOfferingForVpcNetworks</para>
+ <para>In a VPC, only one tier can be created by using LB-enabled network offering.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Gateway</emphasis>: The gateway for the tier you create.
+ Ensure that the gateway is within the Super CIDR range that you specified while creating
+ the VPC, and is not overlapped with the CIDR of any existing tier within the VPC.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Netmask</emphasis>: The netmask for the tier you create. </para>
+ <para>For example, if the VPC CIDR is 10.0.0.0/16 and the network tier CIDR is
+ 10.0.1.0/24, the gateway of the tier is 10.0.1.1, and the netmask of the tier is
+ 255.255.255.0.</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Click OK.</para>
+ </listitem>
+ <listitem>
+ <para>Continue with configuring access control list for the tier.</para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/add-vm-to-tier.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/add-vm-to-tier.xml b/docs/en-US/add-vm-to-tier.xml
new file mode 100644
index 0000000..e401eed
--- /dev/null
+++ b/docs/en-US/add-vm-to-tier.xml
@@ -0,0 +1,45 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="add-vm-to-tier">
+ <title>Deploying VMs to the Tier</title>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
+ <para>The VPC page is displayed where all the tiers you created are listed.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Add VM button of the tier for which you want to add a VM.</para>
+ <para>The Add Instance page is displayed.</para>
+ <para>Follow the on-screen instruction to add an instance. For information on adding an
+ instance, see Adding Instances section in the Installation Guide.</para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/add-vpc.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/add-vpc.xml b/docs/en-US/add-vpc.xml
new file mode 100644
index 0000000..8c088a0
--- /dev/null
+++ b/docs/en-US/add-vpc.xml
@@ -0,0 +1,75 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="add-vpc">
+ <title>Adding a Virtual Private Cloud</title>
+ <para>When creating the VPC, you simply provide the zone and a set of IP addresses for the VPC
+ network address space. You specify this set of addresses in the form of a Classless Inter-Domain
+ Routing (CIDR) block.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user. </para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ </listitem>
+ <listitem>
+ <para>Click Add VPC. The Add VPC page is displayed as follows:</para>
+ <mediaobject>
+ <imageobject>
+ <imagedata fileref="./images/add-vpc.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>add-vpc.png: adding a vpc.</phrase>
+ </textobject>
+ </mediaobject>
+ <para>Provide the following information:</para>
+ <itemizedlist>
+ <listitem>
+ <para><emphasis role="bold">Name</emphasis>: A short name for the VPC that you are
+ creating.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Description</emphasis>: A brief description of the VPC.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Zone</emphasis>: Choose the zone where you want the VPC to be
+ available.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Super CIDR for Guest Networks</emphasis>: Defines the CIDR
+ range for all the tiers (guest networks) within a VPC. When you create a tier, ensure
+ that its CIDR is within the Super CIDR value you enter. The CIDR must be RFC1918
+ compliant.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">DNS domain for Guest Networks</emphasis>: If you want to
+ assign a special domain name, specify the DNS suffix. This parameter is applied to all
+ the tiers within the VPC. That implies, all the tiers you create in the VPC belong to
+ the same DNS domain. If the parameter is not specified, a DNS domain name is generated
+ automatically. </para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/configure-acl.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/configure-acl.xml b/docs/en-US/configure-acl.xml
new file mode 100644
index 0000000..299196c
--- /dev/null
+++ b/docs/en-US/configure-acl.xml
@@ -0,0 +1,139 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="configure-acl">
+ <title>Configuring Access Control List</title>
+ <para>Define Network Access Control List (ACL) on the VPC virtual router to control incoming
+ (ingress) and outgoing (egress) traffic between the VPC tiers, and the tiers and Internet. By
+ default, all incoming and outgoing traffic to the guest networks is blocked. To open the ports,
+ you must create a new network ACL. The network ACLs can be created for the tiers only if the
+ NetworkACL service is supported.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Settings icon.</para>
+ <para>The following options are displayed.</para>
+ <itemizedlist>
+ <listitem>
+ <para>IP Addresses</para>
+ </listitem>
+ <listitem>
+ <para>Gateways</para>
+ </listitem>
+ <listitem>
+ <para>Site-to-Site VPN</para>
+ </listitem>
+ <listitem>
+ <para>Network ACLs</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Select Network ACLs.</para>
+ <para>The Network ACLs page is displayed.</para>
+ </listitem>
+ <listitem>
+ <para>Click Add Network ACLs.</para>
+ <para>To add an ACL rule, fill in the following fields to specify what kind of network traffic
+ is allowed in this tier. </para>
+ <itemizedlist>
+ <listitem>
+ <para><emphasis role="bold">CIDR</emphasis>: The CIDR acts as the Source CIDR for the
+ Ingress rules, and Destination CIDR for the Egress rules. To accept traffic only from or
+ to the IP addresses within a particular address block, enter a CIDR or a comma-separated
+ list of CIDRs. The CIDR is the base IP address of the incoming traffic. For example,
+ 192.168.0.0/22. To allow all CIDRs, set to 0.0.0.0/0.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Protocol</emphasis>: The networking protocol that sources use
+ to send traffic to the tier. The TCP and UDP protocols are typically used for data
+ exchange and end-user communications. The ICMP protocol is typically used to send error
+ messages or network monitoring data.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Start Port</emphasis>, <emphasis role="bold">End
+ Port</emphasis> (TCP, UDP only): A range of listening ports that are the destination
+ for the incoming traffic. If you are opening a single port, use the same number in both
+ fields.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Select Tier</emphasis>: Select the tier for which you want to
+ add this ACL rule.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">ICMP Type</emphasis>, <emphasis role="bold">ICMP
+ Code</emphasis> (ICMP only): The type of message and error code that will be
+ sent.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Traffic Type</emphasis>: Select the traffic type you want to
+ apply. </para>
+ <itemizedlist>
+ <listitem>
+ <para><emphasis role="bold">Egress</emphasis>: To add an egress rule, select Egress
+ from the Traffic type drop-down box and click Add. This specifies what type of
+ traffic is allowed to be sent out of VM instances in this tier. If no egress rules
+ are specified, all traffic from the tier is allowed out at the VPC virtual router.
+ Once egress rules are specified, only the traffic specified in egress rules and the
+ responses to any traffic that has been allowed in through an ingress rule are
+ allowed out. No egress rule is required for the VMs in a tier to communicate with
+ each other.</para>
+ </listitem>
+ <listitem>
+ <para><emphasis role="bold">Ingress</emphasis>: To add an ingress rule, select Ingress
+ from the Traffic type drop-down box and click Add. This specifies what network
+ traffic is allowed into the VM instances in this tier. If no ingress rules are
+ specified, then no traffic will be allowed in, except for responses to any traffic
+ that has been allowed out through an egress rule.</para>
+ </listitem>
+ </itemizedlist>
+ <note>
+ <para>By default, all incoming and outgoing traffic to the guest networks is blocked. To
+ open the ports, create a new network ACL.</para>
+ </note>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Click Add. The ACL rule is added.</para>
+ <para>To view the list of ACL rules you have added, click the desired tier from the Network
+ ACLs page, then select the Network ACL tab.</para>
+ <mediaobject>
+ <imageobject>
+ <imagedata fileref="./images/network-acl.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>network-acl.png: adding, editing, deleting an ACL rule.</phrase>
+ </textobject>
+ </mediaobject>
+ <para>You can edit the tags assigned to the ACL rules and delete the ACL rules you have
+ created. Click the appropriate button in the Actions column.</para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/delete-reset-vpn.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/delete-reset-vpn.xml b/docs/en-US/delete-reset-vpn.xml
new file mode 100644
index 0000000..318e5fe
--- /dev/null
+++ b/docs/en-US/delete-reset-vpn.xml
@@ -0,0 +1,89 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="delete-reset-vpn">
+ <title>Restarting and Removing a VPN Connection</title>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
+ <para>The VPC page is displayed where all the tiers you created are listed in a
+ diagram.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Settings icon.</para>
+ <para>The following options are displayed.</para>
+ <itemizedlist>
+ <listitem>
+ <para>IP Addresses</para>
+ </listitem>
+ <listitem>
+ <para>Gateways</para>
+ </listitem>
+ <listitem>
+ <para>Site-to-Site VPN</para>
+ </listitem>
+ <listitem>
+ <para>Network ASLs</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Select Site-to-Site VPN.</para>
+ <para>The Site-to-Site VPN page is displayed.</para>
+ </listitem>
+ <listitem>
+ <para>From the Select View drop-down, ensure that VPN Connection is selected.</para>
+ <para>All the VPN connections you created are displayed.</para>
+ </listitem>
+ <listitem>
+ <para>Select the VPN connection you want to work with.</para>
+ <para> The Details tab is displayed.</para>
+ </listitem>
+ <listitem>
+ <para>To remove a VPN connection, click the Delete VPN connection button<inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/remove-vpn.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>remove-vpn.png: button to remove a VPN connection</phrase>
+ </textobject>
+ </inlinemediaobject></para>
+ <para>To restart a VPN connection, click the Reset VPN connection button present in the
+ Details tab.<inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/reset-vpn.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>reset-vpn.png: button to reset a VPN connection</phrase>
+ </textobject>
+ </inlinemediaobject></para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/enable-disable-static-nat-vpc.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/enable-disable-static-nat-vpc.xml b/docs/en-US/enable-disable-static-nat-vpc.xml
new file mode 100644
index 0000000..17f0c10
--- /dev/null
+++ b/docs/en-US/enable-disable-static-nat-vpc.xml
@@ -0,0 +1,97 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="enable-disable-static-nat-vpc">
+ <title>Enabling or Disabling Static NAT on a VPC</title>
+ <para>A static NAT rule maps a public IP address to the private IP address of a VM in a VPC to
+ allow Internet traffic to it. This section tells how to enable or disable static NAT for a
+ particular IP address in a VPC.</para>
+ <para>If port forwarding rules are already in effect for an IP address, you cannot enable static
+ NAT to that IP.</para>
+ <para>If a guest VM is part of more than one network, static NAT rules will function only if they
+ are defined on the default network.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC to which you want to deploy the VMs.</para>
+ <para>The VPC page is displayed where all the tiers you created are listed in a
+ diagram.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Settings icon.</para>
+ <para>The following options are displayed.</para>
+ <itemizedlist>
+ <listitem>
+ <para>IP Addresses</para>
+ </listitem>
+ <listitem>
+ <para>Gateways</para>
+ </listitem>
+ <listitem>
+ <para>Site-to-Site VPN</para>
+ </listitem>
+ <listitem>
+ <para>Network ACLs</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Select IP Addresses.</para>
+ <para>The IP Addresses page is displayed.</para>
+ </listitem>
+ <listitem>
+ <para>Click the IP you want to work with.</para>
+ </listitem>
+ <listitem>
+ <para>In the Details tab,click the Static NAT button.<inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/enable-disable.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>enable-disable.png: button to enable Statid NAT.</phrase>
+ </textobject>
+ </inlinemediaobject>The button toggles between Enable and Disable, depending on whether
+ static NAT is currently enabled for the IP address.</para>
+ </listitem>
+ <listitem>
+ <para>If you are enabling static NAT, a dialog appears as follows:</para>
+ <mediaobject>
+ <imageobject>
+ <imagedata fileref="./images/select-vm-staticnat-vpc.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>select-vmstatic-nat.png: selecting a tier to apply staticNAT.</phrase>
+ </textobject>
+ </mediaobject>
+ </listitem>
+ <listitem>
+ <para>Select the tier and the destination VM, then click Apply.</para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/images/remove-vpc.png
----------------------------------------------------------------------
diff --git a/docs/en-US/images/remove-vpc.png b/docs/en-US/images/remove-vpc.png
new file mode 100644
index 0000000..aa9846c
Binary files /dev/null and b/docs/en-US/images/remove-vpc.png differ
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/images/remove-vpn.png
----------------------------------------------------------------------
diff --git a/docs/en-US/images/remove-vpn.png b/docs/en-US/images/remove-vpn.png
new file mode 100644
index 0000000..27145ce
Binary files /dev/null and b/docs/en-US/images/remove-vpn.png differ
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/images/reset-vpn.png
----------------------------------------------------------------------
diff --git a/docs/en-US/images/reset-vpn.png b/docs/en-US/images/reset-vpn.png
new file mode 100644
index 0000000..04655dc
Binary files /dev/null and b/docs/en-US/images/reset-vpn.png differ
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/release-ip-for-vpc.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/release-ip-for-vpc.xml b/docs/en-US/release-ip-for-vpc.xml
new file mode 100644
index 0000000..466ec66
--- /dev/null
+++ b/docs/en-US/release-ip-for-vpc.xml
@@ -0,0 +1,80 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="release-ip-for-vpc">
+ <title>Releasing an IP Address Alloted to a VPC</title>
+ <para>The IP address is a limited resource. If you no longer need a particular IP, you can
+ disassociate it from its VPC and return it to the pool of available addresses. An IP address can
+ be released from its tier, only when all the networking ( port forwarding, load balancing, or
+ StaticNAT ) rules are removed for this IP address. The released IP address will still belongs to
+ the same VPC.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC whose IP you want to release.</para>
+ <para>The VPC page is displayed where all the tiers you created are listed in a
+ diagram.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Settings icon.</para>
+ <para>The following options are displayed.</para>
+ <itemizedlist>
+ <listitem>
+ <para>IP Addresses</para>
+ </listitem>
+ <listitem>
+ <para>Gateways</para>
+ </listitem>
+ <listitem>
+ <para>Site-to-Site VPN</para>
+ </listitem>
+ <listitem>
+ <para>Network ACLs</para>
+ </listitem>
+ </itemizedlist>
+ </listitem>
+ <listitem>
+ <para>Select IP Addresses.</para>
+ <para>The IP Addresses page is displayed.</para>
+ </listitem>
+ <listitem>
+ <para>Click the IP you want to release.</para>
+ </listitem>
+ <listitem>
+ <para>In the Details tab, click the Release IP button <inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/release-ip-icon.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>release-ip-icon.png: button to release an IP.</phrase>
+ </textobject>
+ </inlinemediaobject></para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/remove-tier.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/remove-tier.xml b/docs/en-US/remove-tier.xml
new file mode 100644
index 0000000..b5996eb
--- /dev/null
+++ b/docs/en-US/remove-tier.xml
@@ -0,0 +1,55 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="remove-tier">
+ <title>Removing Tiers</title>
+ <para>You can remove a tier from a VPC. A removed tier cannot be revoked. When a tier is removed,
+ only the resources of the tier are expunged. All the network rules (port forwarding, load
+ balancing and staticNAT) and the IP addresses associated to the tier are removed. The IP address
+ still be belonging to the same VPC.</para>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user.</para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPC that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Configure button of the VPC for which you want to set up tiers.</para>
+ <para>The Configure VPC page is displayed. Locate the tier you want to work with.</para>
+ </listitem>
+ <listitem>
+ <para>Click the Remove VPC button:</para>
+ <mediaobject>
+ <imageobject>
+ <imagedata fileref="./images/remove-tier.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>remove-tier.png: removing a tier from a vpc.</phrase>
+ </textobject>
+ </mediaobject>
+ <para>Wait for some time for the tier to be removed.</para>
+ </listitem>
+ </orderedlist>
+</section>
http://git-wip-us.apache.org/repos/asf/incubator-cloudstack/blob/d50141d2/docs/en-US/remove-vpc.xml
----------------------------------------------------------------------
diff --git a/docs/en-US/remove-vpc.xml b/docs/en-US/remove-vpc.xml
new file mode 100644
index 0000000..c5eff85
--- /dev/null
+++ b/docs/en-US/remove-vpc.xml
@@ -0,0 +1,68 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN" "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+<!ENTITY % BOOK_ENTITIES SYSTEM "cloudstack.ent">
+%BOOK_ENTITIES;
+]>
+<!-- Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+ http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+-->
+<section id="remove-vpc">
+ <title>Editing, Restarting, and Removing a Virtual Private Cloud</title>
+ <note>
+ <para>Ensure that all the tiers are removed before you remove a VPC.</para>
+ </note>
+ <orderedlist>
+ <listitem>
+ <para>Log in to the &PRODUCT; UI as an administrator or end user. </para>
+ </listitem>
+ <listitem>
+ <para>In the left navigation, choose Network.</para>
+ </listitem>
+ <listitem>
+ <para>In the Select view, select VPC.</para>
+ <para>All the VPCs that you have created for the account is listed in the page.</para>
+ </listitem>
+ <listitem>
+ <para>Select the VPC you want to work with.</para>
+ </listitem>
+ <listitem>
+ <para>To remove, click the Remove VPC button<inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/remove-vpc.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>remove-vpc.png: button to remove a VPC</phrase>
+ </textobject>
+ </inlinemediaobject></para>
+ <para>You can edit the name and description of a VPC. To do that, select the VPC, then click
+ the Edit button. <inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/edit-icon.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>edit-icon.png: button to edit a VPC</phrase>
+ </textobject>
+ </inlinemediaobject></para>
+ <para>To restart a VPC, select the VPC, then click the Restart button.<inlinemediaobject>
+ <imageobject>
+ <imagedata fileref="./images/restart-vpc.png"/>
+ </imageobject>
+ <textobject>
+ <phrase>restart-vpc.png: button to restart a VPC</phrase>
+ </textobject>
+ </inlinemediaobject></para>
+ </listitem>
+ </orderedlist>
+</section>