The network configuration for an AWS Outpost is done together with Amazon Personnel. Before deployment an AWS Outposts Logical Network Assessment is performed where AWS will request or provide information on topics such as firewall configuration, service link IP addresses, and local gateway configuration.
To allow iSCSI connectivity between an AWS Outpost and FlashArray a subnet must be created within a VPC that is routable to the customer subnet on which the FlashArray iSCSI ports reside.
It is strongly advised to have redundant network access between the AWS Outpost and FlashArray.
|
|
To configure the VPC and subnet on a new AWS Outpost follow these steps:
Step 1: Open the Services Menu and Select the VPC Dashboard
It will be under Network and Content Delivery.
Step 2: In the VPC Dashboard Navigate to Your VPCs
Step 3: Create a New VPC
There will be an existing VPC. The new VPC will contain a subnet for EC2 instances which is routable between FlashArray and the AWS Outpost.
The subnet for the EC2 instance can be dedicated for iSCSI traffic or shared with iSCSI and application traffic.
This example assumes the subnet will be shared between the application and iSCSI traffic.
In the Your VPCs view select Create VPC.
Provide a name and IPv4 CIDR block for the VPC.
Once the VPC is created review its details.
Step 4: Associate the VPC with the Outpost
In Services search for an navigate to AWS Outposts. Once in the AWS Outposts service view, navigate to Local gateway and route tables. Select the topmost local gateway and route table.
In the local gateway and route tables view identify the section titled VPC associations. If there is no existing association then the VPC created in Step 3: Create a New VPC (above) will be used. Select Associate VPC.
Select the relevant VPC from the drop down menu and then select Associate VPC.
Ensure that the VPC has associated with the AWS Outpost successfully.
Step 5: Create a Subnet for the VPC
In the AWS Outposts, Outposts view select the Actions dropdown and Create subnet from the menu.
Select the VPC ID from the dropdown menu and then scroll further down to Subnet settings.
Provide an IPv4 CIDR block to be used for the Subnet. This subnet must be routable to the customer subnet assigned to the FlashArray iSCSI ports.
Select Create subnet when complete.
Ensure that when the subnet is created that it is associated with the correct Outpost ID.
Step 6: Create a Route Table for the VPC
In the VPC Dashboard navigate to the Route tables view. There will potentially be some existing route tables that can be edited but this guide will assume that a new route table will be created and edited.
Select Create route table.
Provide the route table with a name and assign the VPC created in Step 3 . Select Create route table when complete.
Once the route table has been successfully created it needs to be associated with the previously created subnet. Select the Subnet associations for the route table and then select Edit subnet associations.
Select the relevant subnet from the Available subnets and then select Save associations.
Once the subnet has been associated the correct route needs to be added. Select the Routes view for the routing table and select Edit routes.
In the Edit routes view select Add route.
For this example, the destination route being assigned will be 0.0.0.0/0 . This is then assigned to the logical gateway as its target. Select Save changes when complete.
Review all of the settings for the route.