How to Create a VPC Network with Firewall on Google Cloud

A Virtual Private Cloud (VPC) network is a virtual version of a physical network that is implemented inside the production network of Google. This section provides information about how to create a VPC network with firewall for the virtual gateway instance on Google Cloud.

Note: Before you configure the firewall, ensure that you have created a VPC network for the Virtual Gateway instance on Google Cloud.

Follow these steps:

1. Navigate to VPC Network > VPC networks, and then click CREATE VPC NETWORK.
2. In the Name field, type a name for the VPC.
3. For the Subnet create mode, select Custom or Automatic as needed.
4. If you select Custom, do the following:
• Name: Type a name for the subnet.
• Region: Select a region.
• IP stack type: Select IPv4 (single-stack) as an IP stack type.
• Type an IPV4 range for the subnet.
5. Note: Under Firewall rules, Arcserve recommends that you do not select any firewall rules.
5. Click CREATE.
6. The VPC network is created successfully and displays under the VPC networks table.
6. After you create a VPC network, create firewall rules. To create firewall rules to open the ports 8014 and 4091, which are required for UDP to function, click the VPC network name that you have created.
7. 
7. Under the Firewalls tab, click ADD FIREWALL RULE.
8. 
8. On the Create a firewall rule page, do the following, and then click CREATE:
1. Type a name for the firewall rule.
2. (Optional) Provide a description for the new firewall rule.
3. Specify the Network for the firewall rule.
4. Specify the priority of the firewall rule. The lower the number, the higher the priority.
5. For Direction of traffic, select Ingress.
6. For Action on match, select Allow.
7. Specify the Protocols and ports to which the rule applies:
• To apply rule to all protocols and destination ports, select Allow all.
• To define specific protocols and destination ports, select Specified protocols and ports.
• To include the TCP protocol and destination ports, select TCP and provide a comma-separated list of destination ports, such as 8014, 4091, and 3389.
• Port 3389 is required for the initial UDP set up. Once the UDP agent package is installed, 3389 can be removed from the VPC firewall.
• Note: As the above ports are opened to the Internet, limit the source to your own IPs.
9. 
10. You have successfully created a VPC network and added the firewall rules.