All Products
Search
Document Center

Cloud Backup:Step 3: Configure network and security settings

Last Updated:May 31, 2024

This topic describes how to configure the network and security settings required for disaster recovery, including vSwitch mappings and security group mappings.

Add a vSwitch mapping

Perform the following steps to create a vSwitch mapping:

  1. Log on to the Cloud Backup console.

  2. In the left-side navigation pane, choose Disaster Recovery > ECS Disaster Recovery.

  3. If you are not using EBS Async Replication, click Switch to EBS Async Replication.image

  4. On the Site Pairs tab, click the site pair and then click the Network & Security tab.

  5. On the vSwitch Mapping tab, click Add vSwitch Mapping.

  6. In the Add vSwitch Mapping dialog box, select the vSwitches that are used by the production site and the disaster recovery site. Click OK.image.png

    After the vSwitch mapping is created, you can find it on the vSwitch Mapping tab. image.pngIf the configuration is incorrect, you can click Edit or Delete in the Operation column of the vSwitch mapping to modify or delete the mapping.

Add a security group mapping

Perform the following steps to create a security group mapping:

  1. Log on to the Cloud Backup console.

  2. In the left-side navigation pane, choose Disaster Recovery > ECS Disaster Recovery.

  3. If you are not using EBS Async Replication, click Switch to EBS Async Replication.image

  4. On the Site Pairs tab, click the site pair and then click the Network & Security tab.

  5. On the Security Group Mapping tab, click Add Security Group Mapping.

  6. In the Add Security Group Mapping dialog box, select the security groups of the production site and the disaster recovery site. Click OK.

    • Production Site Security Group: the security group used by the Elastic Compute Service (ECS) instance at the production site. You can create custom security group rules in a security group to control inbound and outbound traffic for ECS instances in the security group. Security group rules help control access to cloud resources and improve network security.

    • Automatically Create Security Group at DR Site: If you turn on the switch, a security group is automatically created at the disaster recovery site.

    • Security Group at DR Site: the security group used by the ECS instance at the disaster recovery site.

    • Automatically Sync Rules: If you turn on the switch, security group rules for the production site are automatically synchronized to the disaster recovery site. This feature ensures that the security group rules of the ECS instance at the production site are the same as those of the ECS instance at the disaster recovery site.

    image.png

After the security group mapping is created, you can find it on the Security Group Mapping tab.image.png

If the configuration is incorrect, you can click Edit or Delete in the Operation column of the security group mapping to modify or delete the mapping.