If the network instance that you want to attach to your Cloud Enterprise Network (CEN) instance belongs to another account, you must acquire the permissions from the account that owns the network instance first. After the permissions are acquired, you can attach the network instance to your CEN instance.

Prerequisites

Before you begin, you must obtain the following information:
  • The ID of the Alibaba Cloud account to which the CEN instance belongs.
  • The ID of the CEN instance.

VPC authorization

The following example shows how Account B acquires the permissions to attach a virtual private cloud (VPC) of Account A to a CEN instance that belongs to Account B.

Notice After the permissions are acquired, you can log on to the CEN console with Account B and then attach the VPC to the CEN instance. Then, other network instances attached to the CEN instance can communicate with the VPC.
  1. Log on to the VPC console with Account A.
  2. In the top menu bar, select the region where the VPC is created.
  3. On the VPCs page, find the VPC that you want to manage and click its ID.
  4. Click the Authorize Cross Account Attach CEN tab. On the tab, click Authorize Cross Account Attach CEN.
  5. In the Attach to CEN dialog box, enter the UID of Account B and the ID of the CEN instance, and then click OK.
    After you complete the configuration, you can view information about the authorization on the Authorize Cross Account Attach CEN tab. VPC authorization
  6. Record the ID of the VPC under Account A and the ID of Account A. You can navigate to the Account Management page to view the account ID.
    View the account ID

VBR authorization

The following example shows how Account B acquires the permissions to attach a virtual border router (VBR) of Account A to a CEN instance that belongs to Account B.
Notice
  • Starting November 1, 2019, you are no longer allowed to attach VBRs under other accounts to your CEN instances by default. To use this feature,submit a ticket.
  • After the permissions are acquired, you can log on to the CEN console with Account B and then attach the VBR to the CEN instance. Then, other network instances attached to the CEN instance can communicate with the VBR.
  1. Log on to the Express Connect console with Account A.
  2. In the left-side navigation pane, click Virtual Border Routers (VBRs).
  3. In the top menu bar, select the region where the VBR is created.
  4. On the Virtual Border Routers (VBRs) page, click the ID of the VBR that you want to manage.
  5. On the page that appears, click the CEN Authorization tab and click Authorize CEN of Another Account to Load Instance.
  6. On the Authorize CEN of Another Account to Load Instance page, enter the UID of Account B and the ID of the CEN instance under Account B, and click OK.
    After you complete the configuration, you can view information about the authorization on the Authorize CEN of Another Account to Load Instance tab. VBR authorization
  7. Record the ID of the VBR under Account A and the ID of Account A. You can navigate to the Account Management page to view the account ID.
    View the account ID

CCN instance authorization

The following example shows how Account B acquires the permissions to attach a Cloud Connect Network (CCN) instance of Account A to a CEN instance that belongs to Account B.

Notice After the permissions are acquired, you can log on to the CEN console with Account B and then attach the CCN instance to the CEN instance. Then, other network instances attached to the CEN instance can communicate with the CCN instance.
  1. Log on to the SAG console with Account A.
  2. In the left-side navigation pane, click CCN.
  3. In the top menu bar, select the region where the CCN instance is created.
  4. On the CCN page, click the ID of the CCN instance that you want to connect.
  5. On the page that appears, click the CEN Cross Account Authorization Information tab. On the tab, click CEN Cross Account Authorization.
  6. In the Attach to CEN dialog box, enter the UID of Account B and the ID of the CEN instance under Account B and click OK.
    After you complete the configuration, you can view information about the authorization on the CEN Cross Account Authorization Information tab. CCN instance authorization
  7. Record the ID of the CCN instance under Account A and the ID of Account A. You can navigate to the Account Management page to view the account ID.
    View the account ID

What to do next

After you acquire the permissions from the account that owns the network instance, you can use the account ID and the network instance ID to attach the network instance to your CEN instance. For more information, see Attach a network instance.