Network instances, such as virtual border routers (VBRs) and Cloud Connect Network (CCN) instances, that are attached to a Cloud Enterprise Network (CEN) instance can access cloud services deployed in virtual private clouds (VPCs).

Prerequisites

Background information

Cloud services refer to the Alibaba Cloud services that use the 100.64.0.0/10 CIDR block to provide services. These cloud services include Object Storage Service (OSS), Log Service (SLS), and Data Transmission Service (DTS). After a VPC and a VBR or a CCN instance are attached to the same CEN instance, your on-premises network can access cloud services deployed in the VPC through the CEN instance. Access cloud services through CEN 2.1

Procedure

  1. Log on to the CEN console.
  2. On the Instances page, find the CEN instance that you want to manage and click the ID of the instance.
  3. On the instance details page, click the ID of the transit router that is deployed in the same region as the cloud service.
  4. On the transit router details page, click the Cloud Services tab.
  5. On the Cloud Services tab, click Configure AnyTunnel.
  6. In the Configure AnyTunnel dialog box, set the following parameters:
    • Service IP address: Enter an IP address or CIDR block used by the cloud service. This IP address or CIDR block must fall into 100.64.0.0/10. For example, you can enter 100.118.28.52/32.
    • Service Region: Select the region where the cloud service is deployed.
      Note Make sure that at least one VPC in the selected region is attached to the CEN instance.
    • Host VPC: Select the VPC attached to the CEN instance from the drop-down list.

      After you set the preceding parameters, the VBR or CCN instance can access the cloud service through the VPC.

    • Access Region: Select the region where the VBR or CCN instance that needs to access the cloud service is deployed.
      Note
      • Make sure that the VBR or CCN instance is attached to the CEN instance.
      • A VBR can access only cloud services that are deployed in the same region as the VBR through the CEN instance.
    • Description: Enter a description for the cloud service.

      The description must be 2 to 256 characters in length, and can contain digits, hyphens (-), underscore (_), and periods (.). It must start with a letter and cannot start with http:// or https://.

  7. Click OK.
    Note
    • Typically, a cloud service uses multiple IP addresses. Repeat the preceding steps to add routes to all the IP addresses of the cloud service.
    • After you set the preceding parameters, routes to the cloud services are added to the default route table of the transit router.