Claud Shell commands-Virtual Networks Module 1.2.5

Question 1

create the privatenet

Answer 1

gcloud compute networks create privatenet –subnet-mode=custom

Question 2

create the privatesubnet-us subnet

Answer 2

gcloud compute networks subnets create privatesubnet-us –network=privatenet –region=Lab region –range=172.16.0.0/24

Question 3

list the available VPC networks

Answer 3

gcloud compute networks list

Question 4

To list the available VPC subnets (sorted by VPC network)

Answer 4

gcloud compute networks subnets list –sort-by=NETWORK

Question 5

create the privatenet-allow-icmp-ssh-rdp firewall rule

Answer 5

gcloud compute firewall-rules create privatenet-allow-icmp-ssh-rdp –direction=INGRESS –priority=1000 –network=privatenet –action=ALLOW –rules=icmp,tcp:22,tcp:3389 –source-ranges=0.0.0.0/0

Question 6

list all the firewall rules

Answer 6

gcloud compute firewall-rules list –sort-by=NETWORK

Question 7

create the privatenet-us-vm instance

Answer 7

gcloud compute instances create privatenet-us-vm –zone=Lab Zone –machine-type=e2-micro –subnet=privatesubnet-us –image-family=debian-11 –image-project=debian-cloud –boot-disk-size=10GB –boot-disk-type=pd-standard –boot-disk-device-name=privatenet-us-vm

Question 8

all the VM instances (sorted by zone)

Answer 8

gcloud compute instances list –sort-by=ZONE

Question 9

ssh to vm-internal through IAP tunel

Answer 9

gcloud compute ssh vm-internal –zone us-central1-c –tunnel-through-iap.

iap needs to be enabled by firewall
If instance doesn’t have external IP we can’t simple ssh to it from cloud shel

Question 10

set the project Id

Answer 10

gcloud config set project [projectID]

Question 11

Copy an image from a public Cloud Storage bucket to your own bucket.

Answer 11

gsutil cp gs://cloud-training/gcpnet/private/access.svg gs://$MY_BUCKET

Question 12

cloud bucket get the default access list that’s been assigned to setup.html

Answer 12

gsutil acl get gs://$BUCKET_NAME_1/setup.html

Question 13

cloud bucket set the access list to private

Answer 13

gsutil acl set private gs://$BUCKET_NAME_1/setup.html

Question 14

cloud bucket update the access list to make the file publicly readable

Answer 14

gsutil acl ch -u AllUsers:R gs://$BUCKET_NAME_1/setup.html

Question 15

cloud bucket create boto file for configuring your own encryption keys

Answer 15

gsutil config -n

Question 16

cloud bucket add own encryption keys to bucket conf

Answer 16

add key generated by

python3 -c ‘import base64; import os; print(base64.encodebytes(os.urandom(32)))’

to boto file and it is used automatically when uploading files to the bucket

Question 17

cloud bucket rewrite a file

Answer 17

When a file is encrypted, rewriting the file decrypts it
gsutil rewrite -k gs://$BUCKET_NAME_1/setup.html
Co

Question 18

cloud bucket view cloud lifecycle policy

Answer 18

view the current lifecycle policy

Question 19

cloud bucket set lifecycle policy

Answer 19

gsutil lifecycle set life.json gs://$BUCKET_NAME_1
Copie

Question 20

cloud bucket view the current versioning status

Answer 20

gsutil versioning get gs://$BUCKET_NAME_1

Question 21

cloud bucket enable versioning

Answer 21

gsutil versioning set on gs://$BUCKET_NAME_1

Question 22

synchronise a directory to a bucket

Answer 22

gsutil rsync -r ./firstlevel

Question 23

authorize the VM to use the Google Cloud API

Answer 23

gcloud auth activate-service-account –key-file credentials.json

Question 24

deploy the application to App Engine using yaml file

Answer 24

gcloud app deploy app.yaml

Question 25

create a VPC network called vpc-demo

Answer 25

gcloud compute networks create vpc-demo --subnet-mode custom

Question 26

create subnet vpc-demo-subnet1 in the region

Answer 26

gcloud compute networks subnets create vpc-demo-subnet1 \ --network vpc-demo --range 10.1.1.0/24 --region "filled at lab start"

Question 27

Create a firewall rule to allow all custom traffic within the network:

Answer 27

gcloud compute firewall-rules create vpc-demo-allow-custom \ --network vpc-demo \ --allow tcp:0-65535,udp:0-65535,icmp \ --source-ranges 10.0.0.0/8

Question 28

Create a firewall rule to allow SSH, ICMP traffic from anywhere:

Answer 28

gcloud compute firewall-rules create vpc-demo-allow-ssh-icmp \ --network vpc-demo \ --allow tcp:22,icmp

Question 29

Create a VM instance vpc-demo-instance1 in zone

Answer 29

gcloud compute instances create vpc-demo-instance1 --machine-type=e2-medium --zone "filled at lab start" --subnet vpc-demo-subnet1

Question 30

create an HA VPN in the vpc-demo network:

Answer 30

gcloud compute vpn-gateways create vpc-demo-vpn-gw1 --network vpc-demo --region "filled at lab start"

Question 31

View details of the vpc-demo-vpn-gw1 gateway to verify its settings:

Answer 31

gcloud compute vpn-gateways describe vpc-demo-vpn-gw1 --region "filled at lab start"

Question 32

Create a cloud router in the vpc-demo network

Answer 32

gcloud compute routers create vpc-demo-router1 \ --region "filled at lab start" \ --network vpc-demo \ --asn 65001

Question 33

Create the first VPN tunnel in the vpc-demo network:

Answer 33

gcloud compute vpn-tunnels create vpc-demo-tunnel0 \ --peer-gcp-gateway on-prem-vpn-gw1 \ --region "filled at lab start" \ --ike-version 2 \ --shared-secret [SHARED_SECRET] \ --router vpc-demo-router1 \ --vpn-gateway vpc-demo-vpn-gw1 \ --interface 0

Question 34

Create the second VPN tunnel in the vpc-demo network

Answer 34

gcloud compute vpn-tunnels create vpc-demo-tunnel1 \ --peer-gcp-gateway on-prem-vpn-gw1 \ --region "filled at lab start" \ --ike-version 2 \ --shared-secret [SHARED_SECRET] \ --router vpc-demo-router1 \ --vpn-gateway vpc-demo-vpn-gw1 \ --interface 1

Question 35

Create the router interface for tunnel0 in network vpc-demo

Answer 35

gcloud compute routers add-interface vpc-demo-router1 \ --interface-name if-tunnel0-to-on-prem \ --ip-address 169.254.0.1 \ --mask-length 30 \ --vpn-tunnel vpc-demo-tunnel0 \ --region "filled at lab start"

Question 36

Create the BGP peer for tunnel0 in network vpc-demo:

Answer 36

gcloud compute routers add-bgp-peer vpc-demo-router1 \ --peer-name bgp-on-prem-tunnel0 \ --interface if-tunnel0-to-on-prem \ --peer-ip-address 169.254.0.2 \ --peer-asn 65002 \ --region "filled at lab start"

Question 37

Allow traffic from network VPC on-prem to vpc-demo:

Answer 37

gcloud compute firewall-rules create vpc-demo-allow-subnets-from-on-prem \ --network vpc-demo \ --allow tcp,udp,icmp \ --source-ranges 192.168.1.0/24

Question 38

List the VPN tunnels you just created

Answer 38

gcloud compute vpn-tunnels list