How to use Private Networks with Elastic Metal servers
Private Networks allow your Elastic Metal servers to communicate in an isolated and secure network without needing to be connected to the public internet. This is an optional-billed feature, available with our Elastic Metal server ranges.
Each server can be connected to one or several Private Networks, letting you build your own network topologies. Private Networks' built-in DHCP server manages the allocation of private IP addresses for Elastic Metal servers (and other resources) when they are attached to the network.
Private Networks allow your Elastic Metal servers to communicate with other Scaleway resources in an isolated and secure network, without the need of being connected to the public internet.
Before you start
To complete the actions presented below, you must have:
- A Scaleway account logged into the console
- Owner status or IAM permissions allowing you to perform actions in the intended Organization
- An Instance
How to enable and disable the Private Networks feature
You can enable/disable Private Networks on compatible Elastic Metal servers either during creation of the server, or afterward.
During the creation of your Elastic Metal server
You can choose to enable the Private Networks feature during the creation of your Elastic Metal server. Simply use the toggle icon toggle icon when prompted by the creation wizard to enable the feature. If you do not enable the feature, it remains disabled by default.
After the creation of your Elastic Metal server
- Navigate to the Elastic Metal servers page of the Scaleway console. A list of your Elastic Metal servers displays.
- Click the server for which you want to enable/disable the Private Networks feature. The server's Overview page displays.
- Scroll to the Private Networks feature panel.
- Click Enable or Disable to enable/disable the Private Networks feature as required.
- Confirm the action when prompted.
How to attach and detach Elastic Metal servers to a Private Network
You can attach/detach Elastic Metal servers to a Private Network from either the Elastic Metal section of the console, or the VPC section.
You can also attach custom resources, such as virtual machines hosted on your Elastic Metal server, to Private Networks, by specifying their MAC addresses upon attachment. Follow the instructions for attaching such a resource in the Private Networks documentation.
From the Elastic Metal section of the console
- Navigate to the Elastic Metal page of the Scaleway console. A list of your Elastic Metal servers displays.
- Click the server you want to attach/detach from a Private Network.
- Click the Private Networks tab.
- Click Attach to a Private Network and continue to step 5. Otherwise, to detach your server from a Private Network, click the icon next to the Private Network and confirm the action when prompted.
- Either:
- Select Attach to an existing Private Network, and choose a network from the drop-down list to attach your server to. Remember, only Private Networks in the same region as your server will be displayed.
- Select Attach to a new Private Network, and enter a name for the new Private Network you wish to create.
- Choose whether to auto-allocate an available IP from the pool (the CIDR block defined at the time of creating the Private Network), or use a reserved IP address for the attachment. You must make this choice for both the IPv4 and IPv6 address that the Elastic Metal server will have on this Private Network.
- Click Attach to Private Network to confirm.
From the VPC section of the console
Creating a new Private Network from the VPC section of the console allows you to control which VPC you create it in, and to optionally create a custom CIDR block for the network.
See our dedicated documentation how to create a Private Network and how to attach resources from the VPC section of the console.
How to configure the network interface on your Elastic Metal server for Private Networks
You must configure the virtual network interface on each Elastic Metal server you have added to a Private Network. Traffic from the public internet and traffic from a Private Network will pass through the same network interface of the Elastic Metal server. We must therefore separate the traffic by adding a VLAN interface.
-
Make a note of your Elastic Metal server's VLAN ID. You can view this in the Private Networks tab of the Elastic Metal server in question.
-
Find the network interface using the
ip link show
command:ip link show
The output will vary depending on the server, but here is an example:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000 link/ether 9c:b6:54:bb:6c:64 brd ff:ff:ff:ff:ff:ff 3: eno2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 link/ether 9c:b6:54:bb:6c:65 brd ff:ff:ff:ff:ff:ff
In this case, the network interface is identified by
eno1
. -
Enter the following command to add a virtual link to the network interface. Replace
1234
with the VLAN ID you noted down in step 1 andeno1
(if necessary) with the relevant network interface name identified in step 3.sudo ip link add link eno1 name eno1.1234 type vlan id 1234
-
Enter the following command to bring up the virtual link. Make the necessary replacements for
eno1
and1234
as you did previously.sudo ip link set eno1.1234 up
If DHCP is activated on your Private Network and you are using a DHCP client, you do not need to continue to the next step. Your Elastic Metal server should be assigned an IP address which is compatible with our internal IPAM.
If you have not activated DHCP or do not have a DHCP client, proceed to the next step to manually configure an IP address.
-
Enter the following command to assign an IP address. Make the necessary replacements for
eno1
and1234
as you did previously.sudo ip addr add 10.10.10.10/24 dev eno1.1234
-
Optionally persist this configuration across reboots by creating a new netplan configuration. Make the necessary replacements for
eno1
and1234
as you did previously.# e.g.: /etc/netplan/51-private-networks.yaml network: version: 2 vlans: eno1.1234: id: 1234 link: eno1 addresses: - 10.10.10.10/24
How to configure the Private Network on Windows Server 2019 and 2022
- Log into your server as
Administrateur
using the Remote Desktop client. - Launch the Server Manager application.
- Click Local Server in the menu on the left. Then click NIC Teaming in the Properties section.
- Click Tasks > New Team. Enter a team name of your choice (e.g.
default
) and tick the checkbox NIC1. Then click OK. - Select the Team interfaces tab in the Adapters and Interfaces section. Click Tasks > Add interface. A pop-up displays.
- Enter a name for the new interface (e.g.
default - VLAN 1234
if your VLAN ID is 1234). Select Specific VLAN and enter the ID of your VLAN (e.g. 1234). Click OK to confirm.
Static IP configuration (optional)
-
Click Start > Run and type
ncpa.cpl
. Then click OK to open the network connection manager. -
Click on your VLAN network connection and right-click on it to open the menu. Click Properties to display the connection properties.
-
Select Internet Protocol version 4 (TCP/IPv4) and click Properties. A pop-up displays.
-
Click Use the following IP address and configure the IPv4 configuration of your Private Network. Then click OK to save your configuration.
-
Click Close to close the network interface properties.
Additional configuration for virtual machines running on Hyper-V
If you are running virtual machines with Hyper-V, refer to the Microsoft documentation regarding Hyper-V and VLANs.
Below is an example of how to connect one Private Network to a virtual machine created by Hyper-V on a Windows Server 2022 host (the Elastic Metal server's operating system).
-
Open a PowerShell terminal and run the following command:
Get-NetAdapter
This command will display the network interface names. Copy the name of the interface that is "Up".
-
Create a new VMSwitch:
New-VMSwitch -Name "SET Team" -NetAdapterName "<NAME OF THE NETWORK INTERFACE>" -EnableEmbeddedTeaming $true
-
Create a "custom" resource in the Private Network.
-
When creating the VM, select the SET switch in the networking creation menu.
-
Copy the MAC address of the VM from the Network adapter section of the VM settings, under the Advanced features subsection.
-
Change the Virtual Machine settings:
- Go to the "Network adapter" section of the VM in Hyper-V.
- Set the VLAN ID (copy it from the Private Network menu in the Elastic Metal server console).
How to delete a Private Network
See our dedicated documentation how to delete a Private Network.