This topic describes how to use Smart Access Gateway (SAG) to connect an office outside the Chinese mainland to Alibaba Cloud.
Background information
A company has an office in Singapore and the company wants to connect the clients in the office to Alibaba Cloud, as shown in the following figure.
The following table describes how network resources are allocated in this example.
Resources | Description | Capacity |
---|---|---|
SAG devices | SAG-100WM | 1 |
SAG bandwidth | In the Singapore (Singapore) region | 2 Mbps |
Cloud Enterprise Network (CEN) instances | Default edition | 1 |
Cloud Connect Network (CCN) instances | In the Singapore (Singapore) region | 1 |
Virtual private clouds (VPCs) | In the Singapore (Singapore) region | 1 |
Elastic Compute Service (ECS) instances | In the Singapore (Singapore) region | 2 |
Prerequisites
- A VPC is deployed in the Singapore (Singapore) region. For more information, see Create and manage a VPC.
- A Cloud Enterprise Network (CEN) instance is created and associated with the VPC. For more information, see Create a VPC connection.
- An SAG device is prepared.
You cannot purchase SAG devices in the SAG console in areas outside the Chinese mainland. If you need to purchase SAG devices in areas outside the Chinese mainland, contact your account manager.
Procedure
Step 1: Purchase bandwidth for the SAG device
After you purchase an SAG device, you can purchase bandwidth for the SAG device in the SAG console. After you purchase bandwidth, Alibaba Cloud creates an SAG instance to facilitate device management.
- Log on to the SAG console.
- In the top navigation bar, select the region.
- On the Smart Access Gateway page, choose .
- On the buy page, set the following parameters and click Buy Now.
Parameter Description SAG Device Area Select the area where you want to use the SAG device. Singapore (Singapore) is selected in this example.
Note If the area that you want to select is not listed on the buy page, we recommend that you select the nearest area.For example, if you want to use SAG devices in Thailand which is not listed on the buy page, you can select China (Hong Kong).
Device Spec Select the model of the SAG device that you want to purchase. SAG-100WM is selected in this example. Have SAG Devices Already Yes is selected in this example. Quantity Skip this parameter. The default value is used in this example. Peak Bandwidth Area Select the area where you want to use the bandwidth resources. This area is the same as the Area that you specify for the SAG device. Instance Name Specify a name for the SAG instance. test123 is used in this example. The name must be 2 to 128 characters in length, and can contain letters, digits, periods (.), hyphens (-), and underscores (_). It must start with a letter.
Peak Bandwidth Specify the maximum bandwidth that the SAG device can reach. Unit: Mbit/s. The default value is used in this example. Subscription Duration Select a subscription duration. The default value is used in this example. - On the Confirm Order page, confirm the information and click Confirm Purchase.
- In the Shipping Address dialog box, enter the recipient address and then click Buy Now. Note You must provide the address of the recipient before you can complete the payment. The console does not record this information.
- On the Pay page, select a payment method and complete the payment.
Step 2: Configure the SAG device
After you purchase an SAG device, you must configure the device and connect it to your private network.
- Connect the SAG device to your private network.
- Log on to the SAG console.
- In the top navigation bar, select the Singapore (Singapore) region. In the left-side navigation pane, click Smart Access Gateway.
- Activate the SAG device.
- On the Smart Access Gateway page, find the SAG instance and choose in the Actions column.
- In the Activate dialog box, click OK.
- Associate the SAG device with the SAG instance. You can associate SAG devices with SAG instances to facilitate device management and configurations.
- Add routes.
Step 3: Enable network communication
After you configure the SAG device, you must create network connections to enable the clients in the office to communicate with the VPC.
- Log on to the SAG console.
- In the top navigation bar, select Singapore (Singapore).
- Attach the SAG instance to a CCN instance.
- Attach the CCN instance to a CEN instance.
- Configure an ECS security group.
Step 4: Test network connectivity
After you complete the preceding steps, you can run the ping command to test the network connectivity between the office and the ECS instance. If an echo reply packet is returned, it indicates that the private network of the office is connected to Alibaba Cloud.
ping <IP address of the ECS instance>