After you have created a private subnet for Recovery
Service in your database VCN, use this procedure to register the subnet in Recovery
Service.
Multiple protected databases can use the same
Recovery
Service subnet. In order to ensure that the required number of IP addresses are available to support the
Recovery
Service private endpoints, you can assign multiple subnets to a
Recovery
Service subnet that is used by more than one protected database.
Note
- Select an IPv4-only subnet for Recovery
Service in your database VCN. Do not select an IPv6-enabled subnet as Recovery
Service does not support using an IPv6-enabled subnet.
- For Oracle Database@Azure and Oracle Database@Google Cloud, you must register the Recovery Service subnet by associating network security groups (NSG).
- Log in to your OCI tenancy.
- In the navigation menu, click Oracle Database, and select Database Backups to display the Database Backups page.
- Click Recovery Service Subnets.
- In the Compartment field, select a compartment where you want to create the Recovery
Service subnet.
- Click Register Recovery Service subnet, and specify the details.
- In the Name field, enter a name for the Recovery
Service subnet.
- In the Compartment field, select the compartment where you want to create the Recovery
Service subnet.
- In the Virtual cloud network field, select the database VCN.
Click Change Compartment to select a VCN belonging to a different compartment.
- In the Subnet field, select a private subnet that you have configured for Recovery
Service operations in your database VCN.
Click Change Compartment to select a private subnet from a different compartment.
- (Optional) Click +Another Subnet to assign an additional subnet to the Recovery
Service subnet.
If a single subnet does not contain enough IP addresses to support the Recovery
Service private endpoints, then you can assign multiple subnets.
- Click Show advanced options to configure these additional features.
- Network security groups
- Tags
If you have used a network security group (NSG) to implement security rules for Recovery
Service in the database VCN, then you must add the Recovery Service NSG to the Recovery Service subnet. The Recovery Service NSG can reside in the same compartment or in a different compartment. However, the NSG must belong to the same VCN to which the specified subnet belongs.
Note
For Oracle Database@Azure and Oracle Database@Google Cloud, you must register the Recovery Service subnet by associating network security groups (NSG).
- In the Network security groups section, select Use network security groups to control traffic.
- Select the Recovery
Service NSG you have created in the database VCN.
- Click +Another network security group to associate multiple NSGs (maximum five).
(Optional) In the Tag Namespace field, consider adding a tag namespace, or tagging the control with an existing tag namespace.
- Click Register.
You can replace a subnet or add more subnets to support the required number of private endpoints.
- Use these steps to update an existing Recovery
Service subnet:
- In the Recovery Service subnet details page, under Resources, click Subnets.
- Click Add subnets and select the subnets you want to add.
- To replace an existing subnet, click the Action menu, and select Remove subnet. You can then add another subnet.
Note
A Recovery
Service subnet must be associated with at least one subnet belonging to your database VCN.
- Use these steps to manage the network security groups (NSGs) for an existing Recovery
Service subnet:
- In the Network security groups section, click Add network security groups.
- Select and add the Recovery
Service network security groups (maximum five).
- To remove an NSG, select the resource and click Remove.