This topic describes how to use a Cloud Enterprise Network (CEN) instance to connect network instances created by different accounts and in different regions. In this topic, Account A and Account B are used as an example to describe how to attach a network instance under Account B to the CEN instance under Account A.

Prerequisites

Before you start, make sure that the following requirements are met:
  • Network instances that you want to connect are created, such as virtual private clouds (VPCs), virtual border routers (VBRs), and Cloud Connect Network (CCN) instances.
  • The network instances that you want to connect do not use Express Connect.

Step 1: Use Account A to create a CEN instance

  1. Log on to the CEN console.
  2. On the Instances page, click Create CEN instance.
  3. Set the following parameters to create a CEN instance:
    • Name: Enter a name for the CEN instance. The name must be 2 to 128 characters in length, and can contain digits, underscores (_), and hyphens (-). It must start with a letter or Chinese character. In this example, DifferentAccountDifferentRegion is entered.
    • Attach Network:

      • Network Type: Select the type of network instance that you want to connect. Supported network instances are VPCs, VBRs and CCN instances. In this topic, VPC is selected.
      • Region: Select the region where the network instance is created. In this topic, China (Beijing) is selected.
      • Networks: Select the network instance that you want to attach. In this example, a VPC is selected.
  4. Obtain the ID of the CEN instance that you created.
    In this example, the ID of the CEN instance is cen-xxxxxxxxxx4l7.

Step 2: Use Account B to grant Account A the permissions to attach network instances

The following example shows how to attach a VPC created by a different account to a CEN instance. You can also attach a VBR or a CCN instance.

  1. Log on to the VPC console with Account B.
  2. In the left-side navigation pane, click VPCs.
  3. In the top menu bar, select China (Qingdao).
  4. Find the VPC that you want to attach, and click its ID.
  5. On the Authorize Cross Account Attach CEN tab, click Authorize Cross Account Attach CEN.
  6. In the dialog box that appears, enter the ID of the account that is used to create the CEN instance and the ID of the CEN instance, and then click OK.

Step 3: Use Account A to attach the network instance

After the permissions are granted, Account A can attach the network instance created by Account B:

  1. Log on to the CEN console with Account A.
  2. On the Instances page, find the CEN instance that you want to manage, and click Manage in the Actions column.
  3. On the Networks page, click Attach Network and set the following parameters to attach the network instance:
    • Account: Select Different Account.
    • Owner Account: Enter the ID of the account to which the network instance that you want to attach belongs. In this example, the ID of Account B is entered.
    • Network Type: Select the type of the network instance that you want to attach. Supported network instances are VPCs, VBRs, and CCN instances. In this example, VPC is selected.
    • Region: Select the region where the network instance is created. In this example, China (Qingdao) is selected.
    • Networks: Select the network instance that you want to attach. In this example, the VPC on which you have acquired permissions is selected.

Step 4: Purchase a bandwidth plan

To connect network instances in different regions, you must purchase a bandwidth plan.

  1. On the Instances page of the CEN console, click the ID of the CEN instance that you want to manage, and then click Bandwidth Plans.
  2. Click Purchase Bandwidth Plan(Subscription).
  3. On the Non Cross-border tab, set the following parameters to purchase a bandwidth plan:
    • CEN: Select the CEN instance for which you want to purchase a bandwidth plan.
    • Area A: Select an area to be connected. Mainland China is selected in this example.
    • Area B: Select the other area to be connected. Mainland China is selected in this example.

      In this example, China (Qingdao) and China (Beijing) are the regions to be connected. Therefore, mainland China is specified for both Area A and Area B.

    • Bandwidth: Select the maximum bandwidth of the bandwidth plan. In this topic, 8 Mbit/s is selected.
    • Name: Enter a name for the bandwidth plan. In this example, MainlandBandwidthPlan is entered.
    • Duration: Specify a subscription duration. In this example, 1 month is specified.

Step 5: Set a bandwidth for cross-region communication

  1. On the Instances page of the CEN console, click the ID of the CEN instance that you want to manage, and then click Region Connections.
  2. Click Set Region Connection.
  3. Configure the bandwidth for cross-region communication:
    • Bandwidth Plans: Select a bandwidth plan. In this example, Mainland China to Mainland China is selected.
    • Connected Regions: Select the regions to be connected. The regions must belong to the areas that you set for the bandwidth plan. In this example, China (Qingdao) and China (Beijng) are selected.
    • Bandwidth: Specify a bandwidth for cross-region communication. In this example, 5 Mbit/s is specified.

Step 6: Test the connectivity

Log on to an Elastic Compute Service (ECS) instance in one of the attached network instances. Then, ping the private IP address of an ECS instance in another attached network instance to test the connectivity.

Note Make sure that the operation is allowed by the rules in the security groups of the ECS instances.