Create an NCC Gateway spoke

This page describes how to create an NCC Gateway spoke resource in a specified region connected to the Network Connectivity Center (NCC) hub.

Console

  1. In the Google Cloud console, go to the Network Connectivity Center page.

    Go to Network Connectivity Center

  2. In the project menu, select a project in which you want to create the spoke.

  3. Click the Spokes tab.

  4. Click Add spokes.

  5. In the Select hub section, select the hub location as follows:

    • To attach the new spoke to a hub in the same project, select In project PROJECT_NAME and select the hub name from the list.
    • Choose a Topology:
    • For a greenfield deployment of NCC Gateway, choose Hybrid inspection topology
    • For a brownfield deployment, you can use the existing Star or Mesh topology.

  6. Enter a Spoke name and optionally, a Description.

  7. Select NCC Gateway as the Spoke type.

    If you're using hybrid inspection topology, an NCC Gateway spoke can only be in the gateways group. For detailed information about spoke groups, see Spoke groups.

  8. Choose the Region that you want the gateway spoke to be deployed in.

  9. Choose the Aggregated capacity of the gateway spoke, in Gbps.

    Supported capacity values are 1, 10, or 100.

  10. In the Reserved IP range field, enter a block of IP address ranges used to allocate supporting infrastructure for this gateway—for example, 10.1.2.0/23.

    The IP address block must be a /23 range. This IP address block must not overlap with subnets in any spoke or peer network that the gateway can communicate with.

    IP address ranges can't be within the 100.64.0.0/10 block as it is a space reserved for use by the internet service provider (ISP) infrastructure.

    You can't change assigned IP address ranges. Some IP address ranges are reserved for SSE partners.

  11. Optional: to add routes advertised from NCC Gateway to the hub, in the Routes advertised from NCC Gateway to hub section, do the following:

    • Enter the Route name.
    • Enter an IP range for the route.
    • Enter the Priority for the route.

    To add additional routes, click Add route and repeat the process starting with entering a Route name.

  12. Click Done.

  13. If you want to add more spokes, click Add spoke and begin the process again, starting with entering a Spoke name.

  14. When you have finished adding spokes, click Create. The NCC page updates to show details about the spokes that you created.

After the spoke is created, you can associate the spoke with a Cloud Router. To do so, click the spoke that you just created. On the Spoke details page, click Add Cloud Router. Then, follow the instructions to Create a Cloud Router.

You can also attach it to Secure Access Connect by clicking Secure Access Connect attachments and following the instructions to Create a Secure Access Connect attachment.

gcloud

Use the gcloud network-connectivity spokes gateways create command:

gcloud network-connectivity spokes gateways create SPOKE_NAME \
    --region=REGION \
    --hub=HUB \
    --capacity=CAPACITY \
    --ip-range-reservations=IP_RANGE \
    --group=SPOKE_GROUP

Replace the following values:

  • SPOKE_NAME: the name of the spoke
  • REGION: the region that you want theNCC Gateway to be deployed in
  • HUB: the name of the hub for the spoke

  • CAPACITY: the capacity of the gateway spoke, in Gbps

    Supported capacity values are 1, 10, or 100.

  • IP_RANGE: a block of IP address ranges used to allocate supporting infrastructure for this gateway—for example, 10.1.2.0/23

    The IP address block must be a /23 range. This IP address block must not overlap with subnets in any spoke or peer network that the gateway can communicate with.

    IP address ranges can't be within the 100.64.0.0/10 block as it is a space reserved for use by the internet service provider (ISP) infrastructure.

    You can't change assigned IP address ranges. Some IP address ranges are reserved for SSE partners.

  • SPOKE_GROUP: the spoke group for your spoke. This can vary based on the topology that you're using for your hub.

    • For a greenfield deployment of NCC Gateway, use hybrid inspection topology
    • For a brownfield deployment, you can use the existing Star or Mesh topology. For details, about connectivity topologies, see Connectivity topologies.

API

To create an NCC Gateway spoke, use the projects.locations.spokes.create method.

  POST https://networkconnectivity.googleapis.com/v1/projects/PROJECT_ID/locations/global/spokes/SPOKE_NAME
  {
    "hub":"HUB_NAME",
    "location" : LOCATION,
    "gateway": {
       "ip_range_reservation": IP_RANGE,
       "capacity": CAPACITY
       "group": SPOKE_GROUP
    },
  }

Replace the following values:

  • PROJECT_ID: the project ID of the project that contains the new spoke
  • SPOKE_NAME: the name of the spoke
  • HUB_NAME: the name of the hub that you are attaching the spoke to
  • LOCATION: the region that you want the NCC Gateway to be deployed in

  • IP_RANGE: a block of IP address ranges used to allocate supporting infrastructure for this gateway—for example, 10.1.2.0/23

    The IP address block must be a /23 range. This IP address block must not overlap with subnets in any spoke or peer network that the gateway can communicate with.

    IP address ranges can't be within the 100.64.0.0/10 block as it is a space reserved for use by the internet service provider (ISP) infrastructure.

    You can't change assigned IP address ranges. Some IP address ranges are reserved for SSE partners.

  • CAPACITY: the capacity of the gateway spoke, in Gbps

    Supported capacity values are 1, 10, or 100.

  • SPOKE_GROUP: the spoke group for your spoke. This group can vary based on the topology that you're using for your hub. For details, see Connectivity topologies.

Previous
Set up NCC and create a hub
Next
Connect the Secure Access Connect attachment