Step 5. Specify Network Settings

At the Networking step of the wizard, do the following:

Choose an Amazon virtual private cloud (VPC) to which the Veeam Backup for AWS appliance will be connected.

You can create a new VPC or specify an existing one:

To create a new VPC, select the (create new) option from the Amazon VPC drop-down list. Veeam Backup & Replication will automatically create a virtual network with a set of predefined security group rules.

To specify an existing VPC, select it from the Amazon VPC drop-down list. For a VPC to be displayed in the list of available networks, it must be created in AWS for the region specified at step 3 of the wizard as described in AWS Documentation.

Choose a subnet in which the Veeam Backup for AWS appliance will be launched.

You can create a new subnet or specify an existing one:

To create a new subnet, select the (create new) option from the Subnet drop-down list. Veeam Backup & Replication will automatically create a subnet in the specified VPC.
To specify an existing subnet, select it from the Subnet drop-down list. For a subnet to be displayed in the list of available subnets, it must be created in the specified VPC as described in AWS Documentation.

Important

Consider the following:

The specified Amazon VPC and subnet must have the outbound internet access to AWS services listed in the Veeam Backup for AWS User Guide, section AWS Services.

The specified Amazon VPC and subnet must allow inbound internet access from both the backup server and a local machine that you plan to use to work with Veeam Backup for AWS.

To learn how to enable internet access for Amazon VPCs and subnets, see AWS Documentation.

Choose a security group that will be associated with the Veeam Backup for AWS appliance.

You can create a new security group or specify an existing one:

To create a new security group, select the (create new) option from the Security group drop-down list. Veeam Backup & Replication will automatically create a group.
To specify an existing security group, select it from the Security group drop-down list. For a security group to be displayed in the list of available groups, it must be created in AWS as described in AWS Documentation.

Important

If you select an existing security group, consider that security group rules must allow inbound internet access from both the backup server and a local machine that you plan to use to work with Veeam Backup for AWS. To learn how to create security group rules, see AWS Documentation.

[Applies only if you have chosen to create a new security group] In the Backup server public IP address field, specify an IP address or a scope of IP addresses that will be allowed to access the Veeam Backup for AWS appliance. Veeam Backup & Replication will create a security rule for the specified IP addresses. Note that the backup server IP address must fall into the specified IP address range.

Tip

The IPv4 address ranges must be specified in the CIDR notation (for example, 12.23.34.0/24). To specify multiple IP addresses or multiple scopes of IP addresses, use a comma-separated list.