Smart Access Gateway (SAG) APP supports the roaming feature. Roaming allows clients to access private networks across areas. This way, you can remotely access resources on Alibaba Cloud at any time.

Background information

This feature enables employees that work off-site to remotely access the private networks of their companies. Roaming can replicate information about client accounts added to an SAG APP instance to SAG APP instances deployed in other areas. After the information is replicated, the clients can connect to Cloud Connect Network (CCN) instances in these areas and then connect to Alibaba Cloud. This way, the clients can access their private networks across areas.

Before you use the roaming feature, note the following limits:

  • Within the same area, you cannot replicate information about client accounts among SAG APP instances.
  • The CIDR blocks of the private networks attached to the source and destination SAG APP instances cannot overlap with each other.
  • The client accounts from which information is replicated have not been added to the destination SAG APP instance.


  1. Log on to the SAG console.
  2. In the left-side navigation pane, click Smart Access Gateway APP.
  3. In the top navigation bar, select the target area.
  4. On the Smart Access Gateway APP page, click the ID of the target SAG APP instance.
  5. Click the Client Accounts tab and find the target client account.
  6. In the Actions column, choose More> Roaming.
  7. In the Configure Roaming dialog box that appears, set the following parameters.
    Configure roaming
    Parameter Description
    Client Account The username of the client account from which information is replicate to another SAG APP instance.

    The replicated client account uses the same username as the source client account.

    Configure Roaming Select the area where the destination SAG APP instance is deployed.
    Associate with SAG Instance Select the SAG APP instance to which you want to replicate the client account information.
  8. Click OK.

What to do next

After the client account information is replicated to the specified SAG APP instance, you must enter the ID of the destination SAG APP instance when you log on to the SAG app. The replicated client account uses the same username and password as the source client account. For more information, see Connect to Alibaba Cloud.