All Products
Search
Document Center

NAT Gateway:Convert a NAT service plan to an Internet Shared Bandwidth

Last Updated:Aug 23, 2023

You can convert an existing NAT service plan to an Internet Shared Bandwidth. EIP bandwidth plans support bandwidth sharing and transfer on a regional scale. After you purchase an Internet Shared Bandwidth, you can associate all elastic IP addresses (EIPs) that are in the same region with the Internet Shared Bandwidth. This way, the EIPs can share the bandwidth of the Internet Shared Bandwidth. This reduces bandwidth costs.

Description

When you convert a NAT service plan to an Internet Shared Bandwidth, the current connections are not interrupted. Therefore, your workloads are not affected. After you convert a NAT service plan to an Internet Shared Bandwidth:

  • The public IP addresses in the NAT service plan are converted to EIPs.

  • The NAT service plan is converted to an Internet Shared Bandwidth, which is easier to manage and more cost-effective.

  • If you fail to convert a NAT service plan to an Internet Shared Bandwidth, you can continue to use the NAT service plan. If you fail to locate the cause of the failure, you can contact technical support from the DingTalk group 35128151.

Preparations

Before you convert a NAT service plan, make sure that the following requirements are met:

  • The permissions to convert NAT service plans are acquired by your account.

    We recommend that you use your Alibaba Cloud account to convert NAT service plans. If you convert the NAT service plan as a Resource Access Management (RAM) user, you must use your Alibaba Cloud account to attach the following permission policies to the RAM user in the RAM console.

    • AliyunNATGatewayFullAccess

    • AliyunEIPFullAccess

    • AliyunCommonBandwidthPackageFullAccessAdd permissions

  • Idle EIPs are sufficient within your account.

    After the NAT service plan is converted to an Internet Shared Bandwidth, the public IP addresses in the NAT service plan are converted to EIPs. Make sure that the number of EIPs is greater than or equal to the number of public IP addresses in the NAT service plan. In the Virtual Private Cloud (VPC) console, you can view the number of EIPs on the Quota Management page. If the number of EIPs is insufficient, you can apply for more EIPs in the VPC console. Quota management

  • Permissions to convert a pay-by-data-transfer NAT service plan are acquired.

    If the NAT service plan to be converted is billed on a pay-by-data-transfer basis, you must submit a ticket before you can convert the NAT service plan.

  • The information about the NAT service plan is backed up.

    Before you convert a NAT service plan, back up the information as described in the following table. This way, you can track the conversion progress and verify the result.

    ID of the NAT service plan

    Region

    Maximum bandwidth

    Number of public IP addresses

    Status

    ID of the Internet Shared Bandwidth

    bwp-xxx1

    China (Hangzhou)

    200 Mbps

    20

    Successful

    cbwp-xxx1

    bwp-xxx2

    China (Shanghai)

    500 Mbps

    50

    Pending

    N/A

Procedure

After the prerequisites are met, perform the following operations to start the conversion:

  1. Call the ConvertBandwidthPackage operation to complete the conversion. For more information, see ConvertBandwidthPackage.

  2. Verify the conversion result.

    You can check the ID of the Internet Shared Bandwidth to verify the conversion result. IDs of NAT service plans are converted based on the following rule: ${cbwpId}='c'+${bwpId}. For example, if the ID of the NAT service plan is ${bwpId}=bwp-e8caejcj, the ID of the Internet Shared Bandwidth is cbwp-e8caejcj.

  3. After all NAT service plans are converted, navigate to the NAT Gateway tab on the Quota Management page and apply for the natgw_privilege_allow_bind_eip permission.

    The application is automatically reviewed. Wait 1 minute and click the Refresh icon to view the latest status of the application.

    Note

    If you want to associate other EIPs with the NAT gateway after you apply for the natgw_privilege_allow_bind_eip permission, log off from the NAT Gateway console and log on again. Then, you can associate the EIPs with the NAT gateway. For more information, see Associate an EIP with an Internet NAT gateway.

    Permissions that are required for associating EIPs with NAT gateways