PrivateZone is a VPC-based resolution and management service for private domain names. Networks in a Cloud Enterprise Network (CEN) instance can access the PrivateZone service through CEN.


Make sure that the host region and access region have networks (VPC, VBR, and CCN) attached to the CEN instance.


  1. Log on to the CEN console.
  2. Click the ID of the target CEN instance.
  3. Click the PrivateZone tab, and then click Authorization.
    Note You need to grant permissions to Smart Access Gateway only for the first time you configure PrivateZone access.
  4. In the Cloud Resource Access Authorization dialog box, click Confirm Authorization Policy to allow local branches associated with a CCN (a component of Smart Access Gateway) in the CEN instance to access PrivateZone.

  5. Click Set Private Zone and then in the Set Private Zone dialog box, set the following parameters:
    1. Host Region: Select the region to which the VPC configured with PrivateZone belongs.
    2. Host VPC: Select the VPC that is configured with PrivateZone.

      The PrivateZone service can be selected only by selecting the VPC in the host region.

    3. Access Region: Select the region where the access is initiated.
      • The access region can be CCN, or the same region as the host region. Make sure that the network in the selected access region has been attached to the CEN instance.
      • If you select a CCN instance and the CCN instance account is different from that of the VPC instance or CEN instance, you must authorize the instance. For more information, see Grant permissions to CCN.
    4. Click OK.