新增公用 IP 位址Add public IP addresses

在本文中,我們將外部地址稱為公用 IP 位址。In this article, we refer to external addresses as public IP addresses. 在 Azure Stack Hub 的內容中,公用 IP 位址是可從 Azure Stack Hub 外部存取的 IP 位址。In the context of Azure Stack Hub, a public IP address is an IP address that's accessible from outside of Azure Stack Hub. 外部網路是否為公用網際網路可路由傳送或位於內部網路,而且是否使用私人位址,都不影響本文的目的—步驟相同。Whether that external network is public internet routable or is on an intranet and uses private address space doesn't matter for the purposes of this article, the steps are the same.

雖然您可以設定多個 IP 集區,但您將無法選取要使用哪一個。While you can set up multiple IP pools, you won't be able to select which one to use. Azure Stack Hub 會將所有 IP 集區作為一個。Azure Stack Hub threads all IP pools as one. 當您建立資源時,您無法挑選要指派的 IP。When you create a resource, you can't pick an IP for assignment.

重要

本文中的步驟僅適用於使用合作夥伴工具組 1809 版或更新版本所部署的系統。The steps in this article apply only to systems that were deployed using the partner toolkit version 1809 or later. 在 1809 版之前部署的系統需要更新機架頂端 (TOR) 交換器存取控制清單 (ACL),以便允許新的公用 VIP 集區範圍。Systems that were deployed before version 1809 require the top-of-rack (TOR) switch access control lists (ACLs) to be updated to PERMIT the new public VIP pool range. 如果您執行的是較舊的交換器設定,請與 OEM 合作,為新的公用 IP 集區新增適當的允許 ACL,或使用最新的合作夥伴工具組重新設定交換器,以防止新的公用 IP 位址遭到封鎖。If you are running older switch configurations, work with your OEM to either add the appropriate PERMIT ACLs for the new public IP pool or reconfigure your switch using the latest partner toolkit to prevent the new public IP addresses from being blocked.

新增公用 IP 位址集區Add a public IP address pool

在 Azure Stack Hub 系統的初始部署後,您可以將公用 IP 位址新增到您的 Azure Stack Hub 系統。You can add public IP addresses to your Azure Stack Hub system at any time after the initial deployment of the Azure Stack Hub system. 了解如何檢視公用 IP 位址使用狀況查看目前的使用量,以及公用 IP 位址在您的 Azure Stack Hub 上的可用性。Check out how to View public IP address consumption to see what the current usage and public IP address availability is on your Azure Stack Hub.

大致而言,將新的公用 IP 位址區塊新增到 Azure Stack Hub 的程序如下所示:At a high level, the process of adding a new public IP address block to Azure Stack Hub looks like this:

新增 IP 流量

向您的提供者取得位址區塊Obtain the address block from your provider

您必須執行的第一件事是取得要新增到 Azure Stack Hub 的位址區塊。The first thing you'll need to do is to obtain the address block you want to add to Azure Stack Hub. 根據您取得位址區塊的來源,請考慮前置時間的長度,並根據 Azure Stack Hub 中的公用 IP 位址使用率管理這段前置時間。Depending on where you obtain your address block from, consider what the lead time is and manage this against the rate at which you're consuming public IP addresses in Azure Stack Hub.

重要

Azure Stack Hub 會接受您提供的任何位址區塊,只要這是有效的位址區塊,且並未與 Azure Stack Hub 中的現有位址範圍重疊即可。Azure Stack Hub will accept any address block that you provide if it's a valid address block and doesn't overlap with an existing address range in Azure Stack Hub. 請確定您取得的有效位址區塊可路由傳送,而且並未與 Azure Stack Hub 連接的外部網路重疊。Please make sure you obtain a valid address block that's routable and non-overlapping with the external network to which Azure Stack Hub is connected. 您將範圍新增到 Azure Stack Hub 後,便無法加以移除。After you add the range to Azure Stack Hub, you can't remove it.

將 IP 位址範圍新增到 Azure Stack HubAdd the IP address range to Azure Stack Hub

  1. 在瀏覽器中,移至您的系統管理員入口網站儀表板。In a browser, go to your administrator portal dashboard. 此範例中,我們將使用 https://adminportal.local.azurestack.externalFor this example, we'll use https://adminportal.local.azurestack.external.
  2. 以雲端操作員的身分登入 Azure Stack Hub 系統管理員入口網站。Sign in to the Azure Stack Hub administrator portal as a cloud operator.
  3. 在預設儀表板上,尋找 [區域管理] 清單,然後選取您想要管理的區域。On the default dashboard, find the Region management list and select the region you want to manage. 在此範例中,我們使用本機。For this example, we use local.
  4. 尋找 [資源提供者] 動態磚,然後按一下網路資源提供者。Find the Resource providers tile and click on the network resource provider.
  5. 按一下 [公用 IP 集區使用量] 動態磚。Click on the Public IP pools usage tile.
  6. 按一下 [新增 IP 集區] 按鈕。Click on the Add IP pool button.
  7. 提供 IP 集區的名稱。Provide a name for the IP pool. 您選擇的名稱可協助您輕鬆地識別 IP 集區。The name you choose helps you easily identify the IP pool. 您無法在此欄位中使用特殊字元,例如 "/"。You can't use a special character like "/" in this field. 可以設定與位址範圍相同的名稱,不過並非必要這麼做。It's a good practice to make the name the same as the address range, but that isn't required.
  8. 輸入要以 CIDR 標記法新增的位址區塊。Enter the address block you want to add in CIDR notation. 例如:192.168.203.0/24For example: 192.168.203.0/24
  9. 您在 [位址範圍 (CIDR 區塊) 欄位] 中提供有效的 CIDR 範圍時,[起始 IP 位址]、[結束 IP 位址] 和 [可用的 IP 位址] 欄位會自動填入。When you provide a valid CIDR range in the Address range (CIDR block) field the Start IP address, End IP address and Available IP addresses fields will automatically populate. 這些是唯讀而且自動產生,因此不需要修改 [位址範圍] 欄位中的值便無法變更這些欄位。They're read-only and automatically generated so you can't change these fields without modifying the value in the Address range field.
  10. 檢閱刀鋒視窗的資訊,並確認一切正確之後,選取 [確定] 認可變更,並將位址範圍新增到 Azure Stack Hub。After you review the info on the blade and confirm that everything looks correct, select Ok to commit the change and add the address range to Azure Stack Hub.

後續步驟Next steps

檢閱縮放單位節點動作Review scale unit node actions.