The Network tab enables the Platform Administrator to manage the network settings for
containers or virtual nodes in HPE Ezmeral Container Platform.
The Network tab of the System Settings screen
(see The System Settings Screen)
enables the Platform Administrator to create, edit, and/or delete floating IP
address ranges.
The top of this tab contains the following functions:
- Internal Gateway IP: If the Routable
Network check box is checked, this field lists the gateway IP
address that will be used by the containers/virtual nodes. This IP address must
lie outside the specified floating IP ranges. This field does not appear when
the Routable Network check box is not checked. See Switching Public and
Private Networks.
- Routable Network: The Routable Network check
box is checked when the floating IP ranges used by virtual
nodes/containers can be directly accessed from the corporate network. When this
box is not checked, it means that users cannot access virtual nodes/containers
directly; instead, they must access the Gateway hosts in the platform and
provide the port number that corresponds to the service they want to reach on a
specific virtual node/container. The Cluster Details
screen lists the Gateway host and port number to use for
each available service. See Viewing
Cluster Details, Viewing Training Cluster Details, Viewing Notebook Cluster
Details, or Viewing Deployment Cluster Details. This option can be enabled and
disabled as needed to accommodate evolving network conditions, such as if a
range of IP addresses becomes directly available on the corporate network. Keep
in mind that this may require adding, editing, and/or removing floating IP
ranges, as described in Adding a
New Range and Editing an Existing Range, below. You may also switch back and forth
between public (routable) and private (non-routable) container networks, as
described in Switching
Public and Private Networks.
- Tenant Network Isolation: The Tenant Network Isolation check box
is checked when virtual clusters are isolated at the tenant/project level,
meaning that clusters in one tenant/project cannot communicate with virtual
clusters in any other tenant or project. Clearing this check box removes tenant
network isolation, meaning that virtual clusters in one tenant/project can
communicate with virtual clusters in all tenants/projects. You must delete all
existing virtual clusters before changing this setting, as described in Deleting a Cluster, Deleting a Training Cluster,
Deleting a Notebook
Cluster, or Deleting
a Deployment Cluster. This setting does not affect cluster Isolation
Mode (see Cluster Isolation).
- Submit: Click the Submit button when you have finished making
changes to the Gateway IP address, network routing, and/or tenant/project
network isolation settings.
When the Routable Network option has been enabled as described in Switching Public and Private
Networks, this tab contains an Add New Float Range button, which
opens the Add Floating IP Range popup (see Adding a New Range). See Network Requirements for an explanation
of networking terms and various networking scenarios, including information about
routable and non-routable networks. Also, if you need to change your network from
routable to non-routable (or vice-versa), you will do so using the Routable Network
check box, as described in Switching Public and Private Networks.
The table on this screen contains the following information and functions:
- Name: Name of a floating IP address range.
- Description: Description of the floating IP address range.
- Floating IP Range: Range of addresses that allow network
access from outside to the virtual nodes/containers that HPE Ezmeral Container Platform will create as part of future clusters.
- External Interface: NIC selected for this floating IP range. Each host
must use the same NIC to access this floating IP range. For example, if you
selected the eth0 NIC on the Controller host, then the eth0 NIC on
each Worker host must also be able to reach this IP range. You may select a
different interface, if available and desired.
- Next Hop: IP address of the external gateway.
- Actions: The following actions are available for each floating IP address
range:
- Delete: Clicking the Delete icon (trash can) deletes the
selected floating IP address range.
- Edit: Clicking the Edit icon (pencil) in the
Actions column opens the Edit Floating IP range popup
for the selected range. See Editing an Existing
Range.
Note: You cannot edit or delete network settings if the deployment has been
configured to use a private, non-routable container network. See
Switching Public and Private
Networks for information on changing the container network from private
(non-routable) to public (routable) and vice-versa.
Adding a New Range
To add a new floating IP address range:
-
Click the Add New Float Range button. The Add Floating IP range
popup appears.
- Enter the following information:
- Name: Name of the
range.
- Description: Brief description of the
range.
- Floating IP Range: Starting IP address and ending
IP address of the range, plus the CIDR.
- Floating IP External
interface: NIC to be used for this IP address
range.
- Floating IP Next hop: IP address of the
external gateway for this IP address range.
- If your network allows you to ping the next hop IP address, then check the
Ping Next hop IP check box. Otherwise, leave it blank.
- Click Submit to save your changes when finished.
Editing an Existing Range
To edit an existing floating IP address range:
-
In the Actions column of the Network tab, click the Edit
icon (pencil) for the floating IP address range you want to edit. The
Edit Floating IP range popup appears.
- Edit any or all of the following:
- Name: Name of the
range.
- Description: Brief description of the
range.
- Floating IP Range: Starting IP address and ending
IP address of the range, plus the CIDR.
- Floating IP External
interface: NIC to be used for this IP address
range.
- Floating IP Next hop: IP address of the
external gateway for this IP address range.
- If your network allows you to ping the next hop IP address, then check the
Ping Next hop IP check box. Otherwise, leave it blank.
- Click Submit to save your changes when finished.