For AI agents: the complete documentation index is available at https://docs.us.ovhcloud.com/en/llms.txt, the full documentation bundle is available at https://docs.us.ovhcloud.com/en/llms-full.txt, and this page is available as Markdown at https://docs.us.ovhcloud.com/en/hosted-private-cloud/vmware/enable-private-gateway.md.
  • English

How to Enable the Private Gateway

View as Markdown

The vSphere interface is accessible by default over the Internet. For infrastructures that can be managed through the vRack private network, vSphere access can be switched over to the vRack through the private gateway.

This guide explains how to enable a private gateway on your Hosted Private Cloud infrastructure through the OVHcloud API.

Danger

WARNING: Do not enable the Private Gateway if you are using the Disaster Recovery Plan solution Zerto as this would cause Zerto to fail.

Warning

NOTE: Activating the private gateway blocks access from the Internet, so it is important to make sure you can access the vRack.

Requirements

Instructions

Architecture

  • The private gateway is a virtual machine (VM) that will be deployed on the infrastructure and connected to the vRack.
  • The private gateway does not have a route, so only the user of the same subnet can reach the gateway. The connection from another network must be a source-nat.
Warning

NOTE: The TLS certificate remains the same (pcc-X-X-X-X-X.ovh.com).

Prerequisites

  • Creating a Portgroup on the vRack to connect the private gateway. It must be under the correct datacenter.
  • Having added the private gateway network to restrictions per source IP.
  • Adding an entry in file /etc/hosts or C:\Windows\system32\etc\hosts for pcc-X-X-X-X.ovh.com with the private IP.

Enable the Private Gateway

Before starting, get the following necessary information:

  • serviceName: the Hosted Private Cloud name (syntax: pcc-X-X-X-X)
  • datacenterId: the datacenter ID
  • ip & netmask: the IP address and netmask for the private gateway
  • portgroup: the PortGroup name for vRack connexion.

These elements will be used in the following API calls.

Start activation with:

POST/dedicatedCloud/{serviceName}/datacenter/{datacenterId}/privateGateway/enable

The call creates a task that will deploy the virtual machine and make the network configuration.

You may receive a resource delivery notification (a new datastore). This will not be charged and will be placed in the Admin Storages folder from the Storage view. It is added to host the virtual machine without consuming your datastores.

Disable the Private Gateway

Before starting, get the following necessary information:

  • serviceName: the Hosted Private Cloud name (syntax: pcc-X-X-X-X)
  • datacenterId: the datacenter ID
Warning

NOTE: Turning off the private gateway restores access to the Internet, so it is important to ensure that you have set up the IP filtering you want.

Start deactivation with:

POST/dedicatedCloud/{serviceName}/datacenter/{datacenterId}/privateGateway/disable

 

Go further

Browse all the VMware on OVHcloud guides.

Browse the rest of the OVHcloud US documentation for guides on our other products and services.

Learn more about VMware on OVHcloud on the OVHcloud US website.