1. How to Provision Group Based Policy and VM Instances
Self-Managed Cloud
January 4, 2016

2. Policy Overview What is a Policy? Who can do this? Any restrictions?
Prerequisites?
Where we are in the process (Visio flow)

3. Summary Screen
This is the Home screen. When accessing your portal, this is the default view.
Navigate to the Policy menu.

4. Create Policy Actions, Classifiers and Rules
Navigate to the Application Policy menu.
Start at the right most tab and work your way to the left. Each subsequent tab builds the Policy Rule Set based on the definitions provided in the previous tab.
Highlight Policy Actions, then click Create Policy Rule Set.
In Group Based Policy, groups are defined by policies that determine interaction between consumers of data and providers of data.
The Policy Rule Sets that are created here determine the access and nature of data that interacts between providers and consumers.

5. Create Policy Action Create a Policy Action.
Fundamentally, this means create an action that will be allowed, redirected, copied, logged, QoS.
In this example we’re creating a Policy Action that will build into a Policy Rule Set that allows a specific type of traffic. The plan is to allow HTTP traffic over Port 80.

6. Create Policy Actions – Application Policies
In the Policy Actions tab, your new policy will be summarized here.
Now go to the Policy Classifiers tab and click Create Policy Classifier.

7. Create Policy Classifier
In the Policy Classifier, we are going to establish the traffic protocol…
and specify the port and direction of traffic…
Remember, that we establish rules based on Provider or Consumer. In this case, the Classifier can be built into a Consumed rule set as traffic is ingress (consumed) from another source.

8. Create Policy Classifier
In the Policy Classifiers tab, your new policy will be summarized here.
Now go to the Policy Rules tab and click Create Policy Rule.

9. Create Policy Rule
In creating the Policy Rule, we’re going to start at the left chevron and work our way to the right.
Click Next after each completing the entry in each shadow box.

10. Create Policy Rule
Here, select the Policy Classifier rule we just built.
In the event you attempt to build a Policy Rule and don’t see a Policy Classifier, you can create one by clicking the + symbol next to the pull down.
Click Next.

11. Create Policy Rule Here, we pull in the Policy Action we just created.
In the event you attempt to build a Policy Rule and don’t see a Policy Action, you can create one by clicking the + symbol next to the pull down.
Click Create.

12. Create Policy Rule
Your new Policy Rule is summarized on the Policy Rules tab.
Click the Policy Rule Set tab.

13. Create Policy Rule Set
From here, we create the Policy Rule Set, again, building from right to left.

14. Create Policy Rule Set Summarized Policy Rule Set.
Now that the Policy Rule Set has been built, we can create Groups that are comprised of Members that utilize Policy Rule Sets.

15. Navigate to Groups
From here, we will construct a Group that will incorporate the Policies we just built.
Within Groups are also Members. Members are VM instances.
Groups consist of Internal and External types. External groups are those groups that will interact with external I/O connectivity.
As this is a Web server, we want it to have External access so we will select the External tab and then click Create External Group.

16. Create an External Group
Give your new Group a name.
As this Web server is consuming data from the Internet, it requires a Consumed Policy Rule Set.
This is the rule set we just built in under Application Policy.
Click Next.

17. Create an External Group
Select the default External Connectivity option.
Click Create.
Your new External Group has been created.
From here, we add Members, which are VM instances. Each VM will inherit the rules of the group.

18. Create an Internal Group
Click on the Internal tab.
Then click Create Internal Group.

19. Create an Internal Group
Create an Internal Group with the same Group Names and Policies as before.

20. Create an Internal Group
Select the default Network Policy and Network Services Policy.
Click Create.
You are taken to the Group page.
Your new Internal Group is summarized on the Internal tab.
Click on the Group Name.

21. Create an A Group Member (VM Instance)
Note that the name of your Group shows you which group you are viewing.
Click Create Member.

22. Create Member (Instance)
Here you configure the VM instance.
Start on the Details tab and configure as desired.
The Device size is the size of the Root volume. The minimum recommended size is selected by default.

23. Import Key Pair
In the Access & Security tab, Key Pairs can be uploaded by clicking on the + symbol.
Key Pairs are generated external to the user interface.
The Public Key is pasted here.
Click Import Key Pair.
When done, click Launch to start the provisioning process.

24. Instance Configuration
Navigate to Compute, then Instances.
From here, you can complete the VM configuration process by selecting various activities from the Actions pull down menu.

25. Notices ©2015 Sungard Availability Services. All Rights Reserved.
This document contains Sungard Availability Services’ confidential or proprietary information.
Sungard Availability Services is a trademark of SunGard Data Systems Inc. or its affiliate used under license. The Sungard Availability Services logo by itself is a trademark of Sungard Availability Services Capital, Inc. or its affiliate.  All other trade names are trademarks or registered trademarks of their respective holders.