After an Express Connect circuit is enabled, you must create a virtual border router (VBR) for the Express Connect circuit. The VBR is used to route traffic between the virtual private cloud (VPC) and the data center that are connected through the Express Connect circuit.

Background information

A VBR is a router deployed between a VPC and customer-premises equipment (CPE) in a data center. Each VBR is associated with a route table. You can add routes to the route table of a VBR to control network traffic forwarding. A VBR provides the following features:
  • Exchanges data between a VPC and a data center.
  • Determines the type of virtual interface of an Express Connect circuit: Layer 3 router interface or Layer 3 VLAN subinterface.

    Adds or identifies VLAN tags if a Layer 3 VLAN subinterface is used.

  • Supports Border Gateway Protocol (BGP) routing.

Create a VBR

  1. Log on to the Express Connect console.
  2. In the top navigation bar, select the region and click Virtual Border Routers (VBRs) in the left-side navigation pane.
  3. On the Virtual Border Routers (VBRs) page, click Create VBR.
  4. In the Create VBR panel, set the following parameters and click OK.
    Parameter Description
    Account Specify whether to create a VBR for the current or another Alibaba Cloud account.
    • Current Account (default): creates a VBR for the current Alibaba Cloud account.
    • For others account create: creates a VBR for another Alibaba Cloud account.
    Note
    • Only Express Connect partners that have acquired the A26 business license issued by the Ministry of Industry and Information Technology (MIIT) and the following Express Connect partners can create VBRs for other accounts: China Unicom, China Mobile, China Telecom, China Radio and Television, and CITIC Networks.
    • This feature is disabled by default. To create VBRs for other accounts, Submit a ticket.
    Name This parameter is required only when Account is set to Current account.

    Enter a name for the VBR. The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). The name must start with a letter and cannot start with http:// or https://.

    Owner Account This parameter is required only when Account is set to For others account create.

    Enter the Alibaba Cloud account for which you want to create the VBR.

    Physical Connection Interface Select an Express Connect circuit to associate with the VBR. Make sure that the Express Connect circuit is installed and works as expected.
    VLAN ID Enter the VLAN ID of the VBR. Valid values: 0 to 2999.
    • If the VLAN ID is set to 0, the switch port of the VBR is a Layer 3 router interface but not a VLAN interface. When a Layer 3 router interface is used, each Express Connect circuit corresponds to a VBR.
    • If the VLAN ID is set to a value from 1 to 2999, the switch port of the VBR is a Layer 3 VLAN subinterface. When a Layer 3 VLAN subinterface is used, each VLAN ID corresponds to a VBR. In this case, the Express Connect circuit with which the VBR is associated can be used to connect to VPCs that belong to different Alibaba Cloud accounts. VBRs in different VLANs are isolated from each other at Layer 2.

    For example, a company has multiple subdivisions or subsidiaries. Each subdivision or subsidiary has a separate Alibaba Cloud account. Each Alibaba Cloud account has a separate VPC. If the company applies for an Express Connect circuit, the company must assign a VLAN ID to each subdivision or subsidiary. When the company creates router interfaces, the VLAN IDs are used to identify the subsidiaries or subdivisions that use the Express Connect circuit. In this case, the VBRs of each subsidiary or subdivision are isolated at Layer 2.

    IPv4 Address of Gateway at Alibaba Cloud Side Specify an IPv4 address for the VBR.
    IPv4 Address of Gateway at Customer Side Specify an IPv4 address for the gateway device in the data center.
    Subnet Mask (IPv4 Address) Enter the subnet mask of the IPv4 addresses that you specified for the VBR and the gateway device in the data center. You can enter a subnet mask with more bits because only two IP addresses are required.

Purchase VBRs after the free VBR quota is exhausted

When your free VBR quota is exhausted, you can choose to purchase VBRs.

Note Before you purchase VBRs for your account or other accounts, you must Submit a ticket to acquire the permissions.
  1. Log on to the Express Connect console.
  2. In the top navigation bar, select the region and click Virtual Border Routers (VBRs) in the left-side navigation pane.
  3. On the Virtual Border Routers (VBRs) page, click Create VBR.
  4. In the Create VBR panel, set the following parameters and click OK.
  5. In the Warn message, click buy.
  6. On the buy page, set the following parameters, click Buy Now, and then complete the payment.
    • Region: Use the default value for this parameter.
    • Bandwidth: Specify the bandwidth limit of the VBR.
    • Quantity: Specify the number of VBRs that you want to purchase.
    • Duration: Specify the subscription duration. To prevent service interruptions caused by overdue payments, we recommend that you enable Auto-renewal.

      You can also renew VBRs on the details page of the associated Express Connect circuit. For more information, see Renewal management.

    After you complete the payment, you can choose Expenses > Orders in the top navigation bar to view the order details. VBR names are displayed in the pconn- ${vbrId} format. vbrId indicates the VBR ID. For example, if the name of a VBR is pconn-vbr-uf6ql2vm2avp****, the ID of the VBR is vbr-uf6ql2vm2avp****.

Set the bandwidth limit of a VBR

You can change the bandwidth limit of a VBR free of charge.

Note Before you change the bandwidth limit of a VBR, you must submit a ticket to acquire the permissions.
  1. Log on to the Express Connect console.
  2. In the top navigation bar, select the region and click Exclusive Physical Connection in the left-side navigation pane.
  3. On the Exclusive Physical Connection page, click the ID of the Express Connect circuit.
  4. On the details page of the Express Connect circuit that you want to manage, choose More > Bandwidth Settings in the Actions column.
  5. In the Bandwidth Settings panel, specify Bandwidth Cap and click OK.

Modify a VBR

You can modify a VBR as needed.

  1. Log on to the Express Connect console.
  2. In the top navigation bar, select the region and click Virtual Border Routers (VBRs) in the left-side navigation pane.
  3. On the Virtual Border Routers (VBRs) page, find the VBR that you want to manage and click Modify in the Actions column.
  4. To modify the VBR, set the following parameters and click OK.
    Parameter Description
    VLAN ID Enter the VLAN ID of the VBR. Valid values: 0 to 2999.
    • If the VLAN ID is set to 0, the switch port of the VBR is a Layer 3 router interface instead of a VLAN interface. When a Layer 3 router interface is used, each Express Connect circuit corresponds to a VBR.
    • If the VLAN ID is set to a value from 1 to 2999, the switch port of the VBR is a Layer 3 VLAN subinterface. When a Layer 3 VLAN subinterface is used, each VLAN ID corresponds to a VBR. In this case, the Express Connect circuit with which the VBR is associated can be used to connect to VPCs that belong to different Alibaba Cloud accounts. VBRs in different VLANs are isolated from each other at Layer 2.

    For example, a company has multiple subdivisions or subsidiaries. Each subdivision or subsidiary has a separate Alibaba Cloud account. Each Alibaba Cloud account has a separate VPC. If the company applies for an Express Connect circuit, the company must assign a VLAN ID to each subdivision or subsidiary. When the company creates router interfaces, the VLAN IDs are used to identify the subsidiaries or subdivisions that use the Express Connect circuit. In this case, the VBRs of each subsidiary or subdivision are isolated at Layer 2.

    IPv4 Address of Gateway at Alibaba Cloud Side Specify an IPv4 address for the VBR.
    IPv4 Address of Gateway at Customer Side Specify an IPv4 address for the gateway device in the data center.
    Subnet Mask (IPv4 Address) Enter the subnet mask of the IPv4 addresses that you specified for the VBR and the gateway device in the data center. You can enter a long subnet mask because only two IP addresses are required.
    BFD Parameter The following parameters take effect only when BFD is enabled: For more information about how to enable BFD, see Configure BGP.
    • Submission Interval: Specify the interval at which BFD packets are sent. Valid values: 200 to 1000. Unit: milliseconds.
    • Reception Interval: Specify the interval at which BFD packets are received. Valid values: 200 to 1000. Unit: milliseconds.
    • Detection Time Multiplier: Specify the maximum number of packets that can be dropped when the initiator sends BFD packets to the accepter for fault detection. Valid values: 3 to 10.

Delete a VBR

You can delete VBRs that you no longer need.

  1. Log on to the Express Connect console.
  2. In the top navigation bar, select the region and click Virtual Border Routers (VBRs) in the left-side navigation pane.
  3. On the Virtual Border Routers (VBRs) page, click Delete in the Actions column.
  4. In the Delete VBR message, click Confirm.

References