Abiquo 5.0

Skip to end of metadata
Go to start of metadata

Introduction to external networks

External Networks belong to a single enterprise and they may have public or private IP addresses. VMs in more than one virtual datacenter can use IP addresses on the same external network. You can make an external network the default for an enterprise's datacenters or virtual datacenters, thus streamlining the configuration of access to networks outside the virtual datacenter.

In private cloud, an administrator defines the external network in the network infrastructure (VLANs in the switch or network manager), and then a cloud administrator creates the corresponding network in the platform, supplying the VLAN tag or VXLAN tag. In vCloud Director, an administrator may onboard, create, synchronize, and delete external networks.

Display external networks

You can display and manage external in the platforms in infrastructure, or for public cloud regions, in virtual datacenters.

To display external networks:

  1. Go to Infrastructure → Private → select datacenter → Network → External
  2. Or in vCloud Director, go to Virtual datacenters → Network → External. The platform displays networks that have been deleted in the provider in gray text.

You can scroll through the network list using the page number and arrow buttons at the bottom of the list. And you can filter the list by entering text and wildcards to search for in network names.

On the External IPs page, click on the header of a column to sort by that column, use the search box to filter the results by any field, and navigate through the pages with the page scroll.

Create an external network

External networks belong to a single enterprise and may have public or private IP address ranges used in more than one virtual datacenter.

Before you begin:

  • If you are using a network virtualization system to manage external networks, first precreate the networks in the network virtualization systems. You will need the network address, gateway, and VLAN or VXLAN tag.
  • If you are using standard networking, you will need the VLAN tag to use with this network

  • If you are using vCloud Director, you can create or onboard external networks and manage them in the Virtual datacenters view. See VMware vCloud Director

To create an external network:

  1. Go to Infrastructure → Private → select Datacenter → Servers view → Network → External
  2. Click the  add button  and enter the details

Define static routes




The name of the external VLAN with up to 128 characters

IPv6To create an IPv6 network, select this checkbox
StrictFor IPv6 networks only. If you select Strict, the platform will automatically generate EUI64 IP addresses.

Net. Address

The network address of the VLAN

Netmask (CIDR)

The network mask in CIDR format. For IPv4, the value can be from 16 to 30 inclusive, and for IPv6, enter a value of 64, 56, or 48


The gateway of the network, which must be within the range defined by the network address and the network mask


The tag to use for this network, e.g. VLAN tag


Check tag availability for all racks of the datacenter as you should define each network with the same tag on all racks. Green = available, Yellow = in use, Red = unavailable

Network service typeSelect the Network Service Type, which represents a Network Interface on the hypervisors.


Select to create an unmanaged network, when you will manage IP addresses outside Abiquo


Select the owner enterprise that will use the external VLAN

DeviceTo manage IP addresses with a network virtualization system, select the device that defines this system in the cloud platform. VMs deployed on this network must allow traffic to the appropriate ports for the virtualization system's connection, e.g. DHCP

Primary DNS

Address of the Primary DNS server

Secondary DNS

Address of the Secondary DNS server

DNS suffix

The default DNS suffix

RestrictedSelect to create a Restricted network so that users require the privileges to Attach NICs in restricted networks and/or Detach NICs from restricted networks
Excluded from firewallSelect Excluded from firewall to define a network where VM firewall policies will not apply

Static Routes

Select the Define checkbox to add and modify static routes

When you create an IPv4 network, the platform will create an IP address for the gateway. When you create an IPv6 network, the platform does not create IP addresses.

Create static routes 

To add a Static Route:
  1. When creating or editing an IPv4 network
  2. Select the Define checkbox. 
  3. Enter the details of the static route. For example, to add a static route to the network/netmask via the gateway/next hop





    Destination network mask

    Network ID

    Destination network or host

    Gateway IP

    Next hop (on your network)

  4. Click Save and the platform will add the static routes to the VM network configuration. To delete a static route, click the delete button ("X") beside the static route details.

  • The platform will configure the static routes in VMs using the network configuration method so it may not always be possible to update the static routes in a deployed VM.
  • If you are using DHCP to configure VMs, changes to static routes will be received by the VMs when they reconnect to the DHCP server; for example, after they are restarted. 

Add IP Addresses

To add IP addresses to your network:

  1. Go to Infrastructure → Private → select Datacenter → Servers view → Network → External or Public
  2. Click the + Add button in the top right-hand corner
  3. Complete the dialog

Enter the Number of IPs to create and the From IP address (the first in the range). The From IP address must be a new address that does not already exist in the network. After creating the first IP address, the platform will try to create the other IPs and it will skip any existing IP addresses. 

For example, if you have IP addresses in network, which are 30, 33, and 34 and then you request 3 new IPs from The new IPs created should be as follows: 31, 32, 35. 
IP Addresses

When you add IPv6 addresses on strict networks, you don't need to set the starting address. On non-strict IPv6 networks, Abiquo recommends that you create an automatic IP address, or you can enter a From IP address manually.

Related pages:

Make IP addresses Available

After you create public, external, or NAT IP addresses, they will automatically be available to all users to purchase or reserve for their virtual datacenters.  

Abiquo recommends that you should make unavailable any IP addresses that will be used for administration purposes, for example, the IPv4 gateway network address.

To edit the available IP addresses:

  1. Go Infrastructure → Private → select datacenter → Servers view → Network → select network type
  2. Click the Available IPs link in the top right-hand corner of the IPs page
  3. The Edit network popup for Available IPs will open and by default, all IPs will be in the Available column
  • To move an IP, select it and click a single arrow button
  • To move all IPs from one column to the other column, use the double arrow buttons to move in the direction indicated by the arrows

  • Public or NAT IPs that have been purchased or reserved by the users of an enterprise will not display in the Available list and you cannot make these IPs unavailable.

Make an external network the default

You can make an external network the default for an enterprise in a datacenter (see Configure a location for an enterprise) or a virtual datacenter (See Manage Networks).

Modify an external network

To update an external network:
  1. Select it in the Networks list on the External page, and click the edit button  above Networks list.

You can modify the following fields if there are no VMs deployed in the network.



The name of the external or unmanaged VLAN

GatewayIPv4 only. The gateway of the network must be an IP address inside the range defined by the network address and the network mask


The VLAN tag to use for this VLAN

Network service typeThe Network Service Type is a group of network interfaces on the hypervisors that this network will use.
EnterpriseThe enterprise that will use this network
DeviceThe device pointing to the network virtualization system for the SDN integration
RestrictedSelect to restrict this network so that only users with the privileges to manage NICs in restricted networks can use these addresses on VMs

You can modify these fields at any time but the changes will only apply to VMs deployed after the changes are made.


Primary DNS

The address of the primary DNS server for your network

Secondary DNSThe address of the secondary DNS server for your network

DNS suffix

The DNS suffix for your network

Delete an external network

Before you begin, check that there are no VMs using IP addresses from this network. You cannot delete an external network if any of its IP addresses are in use on VMs.

To delete an external network:

  1. Select it in the Networks list on the External page
  2. Click the trash can delete button.

If an onboarded network has been deleted in the provider, its name will display in light gray text. If a VM is using an IP from this network, then you cannot deploy the VM.

If there are no VMs using the IPs of an external network that was already deleted in the provider, to delete the network in the platform, select it and click the delete button.

How to Put an IP on a denylist

In private cloud, to quarantine an IP address in order to prevent a tenant from using it, or to release a quarantined IP address, do these steps.
  1. Select one or more IPs
  2. Click the quarantine (!) symbol and confirm. 

The platform will toggle the quarantine status of the selected IPs. 

 Click here to show/hide the screenshot

Pages related to networking

  • No labels