Set up Network Connectivity Center and create a hub

This page describes how to create a Network Connectivity Center hub using the hybrid inspection topology so that you can add NCC Gateway spokes and VPC spokes to the hub.

For an introduction to NCC Gateway, see the NCC Gateway overview.

Before you begin

Before you get started, review the following sections.

Create or select a project

To make it easier to configure Network Connectivity Center, start by identifying a valid project.

1. Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

2. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Go to project selector

3. Make sure that billing is enabled for your Google Cloud project.

4. Install the Google Cloud CLI.

5. If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity.

6. To initialize the gcloud CLI, run the following command:

   gcloud init

7. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Go to project selector

8. Make sure that billing is enabled for your Google Cloud project.

9. Install the Google Cloud CLI.

10. If you're using an external identity provider (IdP), you must first sign in to the gcloud CLI with your federated identity.

11. To initialize the gcloud CLI, run the following command:

    gcloud init

12. If you are using the Google Cloud CLI, set your project ID by using the gcloud config set command.

    gcloud config set project PROJECT_ID

    Replace PROJECT_ID with your unique project ID.

    The gcloud CLI instructions on this page assume that you have set your project ID.

13. To confirm that you set the project ID correctly, use the gcloud config list command.

    gcloud config list --format='text(core.project)'

Enable the Network Connectivity API

Before you can perform any tasks using NCC Gateway, you must enable the Network Connectivity API.

Alternatively, you can enable the API by using the Google Cloud console API Library, as described in Enabling APIs.

Get access

To work with Network Connectivity Center and NCC Gateway, you need the permissions described in Roles and permissions.

Identify resources

When you reference resources by using the gcloud CLI or the API, use the conventions described in the following table.

"https://www.googleapis.com/compute/projects/PROJECT_ID/zones/ZONE/instances/INSTANCE_NAME"

      

"projects/PROJECT_ID/zones/ZONE/instances/INSTANCE_NAME"

    

 "HUB_NAME"

    

Create a Network Connectivity Center hub

To create a Network Connectivity Center hub with the preset hybrid inspection topology, follow these steps:

gcloud beta network-connectivity hubs create HUB_NAME \
    --preset-topology=hybrid-inspection

POST https://networkconnectivity.googleapis.com/v1beta/projects/PROJECT_ID/locations/global/hubs
{
  "name":"HUB_NAME",
  "description":"DESCRIPTION",
  "labels": {
    "KEY": "VALUE"
  },
  "presetTopology": "HYBRID_INSPECTION"
}

Connect VPC networks to the hub

The process for connecting VPC networks to a hub differs depending on whether the network and hub are in the same project.

Connect VPC networks and hub from different projects

To connect VPC networks from different projects, use the following steps:

• A VPC spoke administrator proposes a VPC spoke in a different project
• A hub administrator reviews proposed VPC spokes

Connect VPC networks and hub in the same project

If the VPC networks and hub are in the same project, you can follow these steps in this section.

gcloud network-connectivity spokes linked-vpc-network create SPOKE_NAME \
    --hub=HUB_NAME \
    --description=DESCRIPTION \
    --vpc-network=VPC_NETWORK_URI \
    --global \
    --group=GROUP_NAME

POST https://networkconnectivity.googleapis.com/v1/projects/PROJECT_ID/locations/global/spokes/SPOKE_NAME

{
 "hub":"HUB_NAME",
 "description": "DESCRIPTION",
 "linkedVpcNetwork": {
    "uri": "VPC_NETWORK_URI",
    "include_export_ranges": "[INCLUDE_RANGES]",
    "exclude_export_ranges": "[EXCLUDE_IPV4_RANGES]",
    "group": "GROUP_NAME"
 },
}