All Products
Search
Document Center

Cloud Enterprise Network:Create a VBR connection

Last Updated:Mar 07, 2024

To allow a data center connected to a virtual border router (VBR) to communicate with other networks that are connected to a transit router, such as virtual private clouds (VPCs) in the same region or a different region, connect the VBR to the transit router. The transit router allows the data center to communicate with VPCs in the same region or in a different region, and other data centers.

Prerequisites

Connect a VBR to an Enterprise Edition transit router

Create a VBR connection

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transfer Router tab, find the transit router that you want to manage and click Create Connection in the Actions column.

  4. On the Connection with Peer Network Instance page, set the following parameters and click OK.

    Parameter

    Description

    Network Type

    Select Virtual Border Router (VBR).

    Region

    Select the region where the network instance is deployed.

    Transit Router

    The transit router in the selected region is displayed.

    Resource Owner ID

    Select the Alibaba Cloud account that owns the network instance.

    • If the network instance and the transit router that you want to connect belong to the same Alibaba Cloud account, select Current Account.

    • If the network instance and the transit router that you want to connect belong to different Alibaba Cloud accounts, select Different Account, and enter the ID of the Alibaba Cloud account to which the network instance belongs.

    Attachment Name

    Enter a name for the VBR connection.

    Tag

    Add a tag to the VBR connection.

    • Tag Key: The tag key cannot be an empty string. The tag key can be up to 64 characters in length. The key cannot start with acs: or aliyun or contain http:// or https://.

    • Tag Value: The tag value can be an empty string. The tag value must be 1 to 128 characters in length. The parameter value cannot start with acs: or aliyun or contain http:// or https://.

    You can add one or multiple tags to the VBR connection. For more information about tags, see Manage tags.

    Network Instance

    Select the ID of the VBR that you want to connect to the transit router.

    Advanced Settings

    When you create a VBR connection, the system automatically enables the following features in the advanced settings:

    • Associate with Default Route Table of Transit Router

      After this feature is enabled, the VBR connection is automatically associated with the default route table of the transit router. The transit router forwards the traffic of the VBR based on the default route table.

    • Propagate System Routes to Default Route Table of Transit Router

      After this feature is enabled, the system routes of the VBR are advertised to the default route table of the transit router. This way, the VBR can communicate with other network instances that are connected to the transit router.

    • Propagate Routes to VBR

      After this feature is enabled, the system automatically advertises the routes in the transit router route table that is associated with the VBR connection to the VBR.

    You can clear the check boxes to disable the advanced features. If you want to enable the VBR to communicate with other network instances, you can configure associated forwarding and route learning on the transit router. For more information, see Manage routes.

    After you create a VBR connection, you can view the details about the VBR connection on the Intra-region Connections tab on the details page of the transit router. For more information, see View network instance connections.

    Note

    If the DEVICE_MODEL_FORBIDDEN error message is returned, refer to FAQ to troubleshoot the issue.

Change the transit router route table associated with the VBR connection

After you create a VBR connection, you can change the transit router route table that is associated with the VBR connection.

Warning

If route synchronization is enabled for the VBR connection, the routes synchronized to the VBR are withdrawn after the route table is changed. Then, the routes in the new route table are synchronized to all route tables of the VBR. For more information, see Route synchronization.

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transit Router tab, click the ID of the transit router that you want to manage.

  4. On the Intra-region Connections tab, click the ID of the VBR connection that you want to manage.

  5. In the Attachment Details panel, find the Basic Information section and click Modify next to Associated Route Table.

  6. In the Modify Route Table dialog box, select a route table and click OK.

Connect a VBR to a Basic Edition transit router

  1. Log on to the CEN console.

  2. On the Instances page, click the ID of the CEN instance that you want to manage.

  3. On the Basic Settings > Transfer Router tab, find the transit router that you want to manage and click Create Connection in the Actions column.

  4. On the Connection with Peer Network Instance page, set the following parameters and click OK.

    Parameter

    Description

    Network Type

    Select Virtual Border Router (VBR).

    Region

    Select the region where the network instance is deployed.

    Transit Router

    The transit router in the selected region is displayed.

    If no transit router is available in the selected region, the system automatically creates a transit router.

    Resource Owner ID

    Select the Alibaba Cloud account that owns the network instance.

    • If the network instance and the transit router that you want to connect belong to the same Alibaba Cloud account, select Current Account.

    • If the network instance and the transit router that you want to connect belong to different Alibaba Cloud accounts, select Different Account, and enter the ID of the Alibaba Cloud account to which the network instance belongs.

    Network Instance

    Select the ID of the network instance that you want to connect.

    After you create a VBR connection, you can view the details about the VBR connection on the Intra-region Connections tab on the details page of the transit router. For more information, see View network instance connections.

    Note

    If the DEVICE_MODEL_FORBIDDEN error message is returned, refer to FAQ to troubleshoot the issue.

Connect a VBR to a transit router by calling API operations

Alibaba Cloud provides a set of tools that allow you to create VPC connections by calling API operations, such as Alibaba Cloud SDKs (recommended), Alibaba Cloud CLI, Terraform, and Resource Orchestration Service (ROS). For more information, see the following API references: