LAB GCP: Getting Started with VPC Networking and Google Compute Engine

Overview

Task 1. Explore the default network

View the subnets

1. In the Cloud Console, on the Navigation menu > VPC network > VPC networks.
2. Click default.

 

View the routes

1. In the left pane, click Routes.
2. Click Route Management.
   Notice that there is a route for each subnet and one for the Default internet gateway (0.0.0.0/0).
   These routes are managed for you, but you can create custom static routes to direct some packets to specific destinations. For example, you can create a route that sends all outbound traffic to an instance configured as a NAT gateway.

View the Firewall rules

• In the left pane, click Firewall.
  Notice that there are 4 Ingress firewall rules for the default network:
  • default-allow-icmp
  • default-allow-rdp
  • default-allow-ssh
  • default-allow-internal

Delete the Firewall rules

1. In the left pane, click Firewall.
2. Select all default network firewall rules.
3. Click Delete.
4. Click Delete to confirm the deletion of the firewall rules.

Delete the default network

1. In the left pane, click VPC networks.
2. Select the default network.
3. Click Delete VPC network.
4. Click Delete to confirm the deletion of the default network.
   Wait for the network to be deleted before continuing.
5. In the left pane, click Routes.
   Notice that there are no routes.
6. In the left pane, click Firewall.
   Notice that there are no firewall rules.

Try to create a VM instance

1. On the Navigation menu >  Compute Engine > VM instances.
2. Click Create instance.
3. Accept the default values and click Create. Notice the error.
4. Click Go to Issues.
5. In Network Interfaces, notice the no more networks and no network available errors.
6. Click Cancel.

 

Task 2. Create a VPC network and VM instances

Create an auto mode VPC network with Firewall rules

1. On the Navigation menu > VPC network > VPC networks.
2. Click Create VPC network.
3. For Name, type mynetwork.
4. For Subnet creation mode, click Automatic.
   Auto mode networks create subnets in each region automatically.
5. For Firewall, select all available rules.
   These are the same standard firewall rules that the default network had.
   The deny-all-ingress and allow-all-egress rules are also displayed, but you cannot check or uncheck them because they are implied. These two rules have a lower Priority (higher integers indicate lower priorities) so that the allow ICMP, custom, RDP and SSH rules are considered first.
6. Click Create.
   When the new network is ready, notice that a subnet was created for each region.
7. Explore the IP address range for the subnets in and europe-west2.

 

Create a VM instance in

 

Create a VM instance in europe-west2

1. Click Create instance.
2. Specify the following, and leave the remaining settings as their defaults:

   

Task 3. Explore the connectivity for VM instances

Verify connectivity for the VM instances

1. On the Navigation menu > Compute Engine > VM instances.
   Note the external and internal IP addresses for mynet-eu-vm.
2. For mynet-us-vm, click SSH to launch a terminal and connect.

• By default, Compute Engine adds the generated key to project or instance metadata.
• If your account is configured to use OS Login, Compute Engine stores the generated key with your user account.

3. To test connectivity to mynet-eu-vm‘s internal IP, run the following command, replacing mynet-eu-vm‘s internal IP:

4. To test connectivity to mynet-eu-vm‘s external IP, run the following command, replacing mynet-eu-vm‘s external IP:

 

Remove the allow-icmp firewall rules

1. On the Navigation menu > VPC network > Firewall.
2. Select the mynetwork-allow-icmp rule.
3. Click Delete.
4. Click Delete to confirm the deletion.
   Wait for the firewall rule to be deleted.
5. Return to the mynet-us-vm SSH terminal.
6. To test connectivity to mynet-eu-vm‘s internal IP, run the following command, replacing mynet-eu-vm‘s internal IP:

7. To test connectivity to mynet-eu-vm‘s external IP, run the following command, replacing mynet-eu-vm‘s external IP:

 

 

Remove the allow-custom firewall rules

1. On the Navigation menu > VPC network > Firewall.
2. Select the mynetwork-allow-custom rule.
3. Click Delete.
4. Click Delete to confirm the deletion.
   Wait for the firewall rule to be deleted.
5. Return to the mynet-us-vm SSH terminal.
6. To test connectivity to mynet-eu-vm‘s internal IP, run the following command, replacing mynet-eu-vm‘s internal IP:

7. Close the SSH terminal:

 

Remove the allow-ssh firewall rules

1. On the Navigation menu > VPC network > Firewall.
2. Select the mynetwork-allow-ssh rule.
3. Click Delete.
4. Click Delete to confirm the deletion.
5. Wait for the firewall rule to be deleted.
6. On the Navigation menu, click Compute Engine > VM instances.
7. For mynet-us-vm, click SSH to launch a terminal and connect.