Create a core network and core network policy - AWS Network Manager

Create a core network and core network policy

After you've created your global network, you can create a core network within your global network. When you create your core network, you also create the core network policy that deploys your network structure as it sets up the permissions. When the core network has been created, you can then create attachments within the network, and set up transit gateways and devices. At any time, you can also modify your policy and deploy a new version to better suit your business needs. For steps to create a new version of a policy, see Create a core network policy version.

Note

You can only have one core network for each of your global networks.

Create a core network while creating a global network

To create a core network while creating a global network

Prerequisite: Create a global network.

  1. Create the core network. See Create a global network.

  2. On the Create core network page, under Core network general settings, enter a Name and Description to identify the core network.

  3. (Optional) Choose Additional settings to add one or more Key and Value tags to help identify this network resource.

  4. (Optional) Under Core network policy settings, set the beginning and ending ASN range (Autonomous System Number). Format the range as xxxxx - xxxxx.

    ASN is the Border Gateway Protocol (BGP) for the new core network. Valid ranges are 6451265334 and 42000000004294967294. The ASN range is left-closed and right-open. This means that the leftmost number is included in the range but the rightmost number is not. For example, if you choose an ASN range of 64900-64903, the actual available ASN range is 64900 through 64902. 64903 is not included.

    Important

    While the ASN range is optional, we recommend that you define a range in your initial core network policy. Once created, that ASN range is locked into that policy and can't be changed. If you connect the core network to any network using BGP, define the ASN range in the initial policy in order to prevent ASN overlap.

  5. Choose the Edge locations. These are the Regions where your edges are located. You can have more than one edge location, but you must choose at least one. You can select multiple edge locations from the dropdown list.

  6. Enter a Name to identify the segment. The name can include up to 100 alphanumeric characters. Blank spaces and hyphens are not allowed. For example, if this core network is going to be used for development work, you can name the segment development.

  7. Choose Next to review the global network details. Choose Edit to make any changes.

  8. Choose Create global network.

    Your global network is created. The core network policy starts creating and deploying your core network.

    Important

    A core network is not deployed instantaneously after creation. It can sometimes take several minutes or longer to complete, depending on the number of edge locations. While the core network is being created, you can't create any attachments within your core network or create policy versions. To view the status of the deployment, in the navigation pane, choose Policy versions. While the policy is being implemented, the Change set state is Executing. After the policy is implemented, the Alias is LIVE, and the Change set state changes to Execution succeeded.

  9. After your policy is LIVE and the core network has been created, you can begin to add attachments to your core network. See Create an attachment.

Create a core network after creating a global network

Follow these steps to create a core network after creating a global network. You can only have one core network per global network. If the global network you choose to create a core network for already has an associated core network, you'll be unable to create a new one without first deleting the existing core network.

To create a core network after creating a global network
  1. Access the AWS Network Manager console at https://console.aws.amazon.com/networkmanager/home/.

  2. Under Connectivity, choose Global networks.

  3. On the Global networks page, if you have multiple global networks, choose the global link that doesn't already have a Core network.

    Note

    You can only have one core network for each global network.

  4. Under Core network in the navigation pane, choose Create core network.

    The page displays a message that a core network is not enabled.

  5. Choose Create core network.

  6. On the Create core network page, enter an optional Name and Description for the core network. The name can include up to 100 alphanumeric characters.

  7. (Optional) Under Additional settings, add one or more Key and Value tags to help identify this core network.

  8. Choose the Edge locations. These are the Regions where your edges are located. You can have more than one edge location, but you must choose at least one. You can select multiple edge locations from the dropdown list.

  9. Enter a Segment name and Segment description to identify the segment. The name can include up to 100 alphanumeric characters. Blank spaces and hyphens are not allowed. For example, if this core network is going to be used for development work, you can name the segment development.

  10. Choose Create core network.

  11. Your global network is created, and the core network policy starts creating and deploying your core network.

    Important

    A core network is not deployed instantaneously after creation. It can sometimes take several minutes or longer to complete, depending on the number of edge locations. While the core network is being created, you can't create any attachments within your core network or create policy versions. To view the status of the deployment, in the navigation pane, choose Policy versions. While the policy is being implemented, the Change set state is Executing. After the policy is implemented, the Alias is LIVE, and the Change set state changes to Execution succeeded.

  12. After your policy is LIVE and the core network has been created, you can begin to add attachments to your core network. See Create an attachment.

To view policy deployment status
  1. While the policy is deploying, the Core network page displays a message that no live core network can be found. To see the status of the policy deployment, continue with the following step.

  2. The Policy versions page displays the current status of the deployment. To view the current status of the deployment, choose the Progress details status bar. The Events section of the page shows the following:

    • Type — What's being deployed for the policy. For example, this might be a core network or a segment.

    • Action — The action being taken for the Type. This can be Add,

    • State — The current state of the deployment.

    • Edge locations — Any locations for the policy type.

    • Identifier — The identifier path for the policy type.

    • Start time — The timestamp when deployment of the policy type started.

    • End time — The timestamp when deployment of the policy type finished.

  3. After your policy is LIVE and the core network has been created, you can begin to add attachments to your core network. See Create an attachment.

Next step: Create an attachment.