After you establish a physical connection, you must create a virtual border router (VBR) that works as a bridge to forward data from the VPC to your on-premises data center.

Background information

VBR is a router between the VPC and the customer-premises equipment (CPE) in your on-premises data center. VBR uses one route table. You can configure route entries in the route table to manage traffic forwarding in the VBR. VBR provides the following functions:
  • Exchanges data packets as an intermediate router between the VPC and the on-premises data center.
  • Determines the port mode of the physical connection: Layer-3 route interface mode or VLAN-based Layer-3 subinterface mode.
  • Attaches or identifies VLAN tags in Layer-3 subinterface mode.
  • Supports BGP dynamic routing.

Procedure

  1. Log on to the Express Connect console.
  2. In the left-side navigation pane, choose Virtual Border Routers (VBRs) > Virtual Border Routers (VBRs).
  3. Click Create VBR.
  4. Configure the VBR. Click OK.
    Parameter Description
    Account By default, only Current account is available. In other words, you can create a VBR only for the current account by default.

    To create a VBR for another account, submit a ticket to apply for permissions. You can create a VBR for another account only when the account type indicates For others account create.

    Account This parameter is displayed only when the account type is set to For others account create. Set this parameter to the ID of another account.
    Name This parameter is displayed only when the account type is set to Current account. Set the name of the VBR.
    Physical Connection Interface Select a physical connection interface that works properly.
    VLAN ID Enter the VLAN ID of the VBR. Valid values: 0 to 2999.
    • If the VLAN ID is set to 0, the switch port of the VBR uses the Layer-3 route interface mode instead of the VLAN mode. In Layer-3 route interface mode, each physical connection corresponds to a VBR.
    • If the VLAN ID is set to a value ranging from 1 to 2999, the switch port on the VBR uses VLAN-based Layer-3 subinterface mode. In Layer-3 subinterface mode, each VLAN ID corresponds to a VBR. In this mode, the physical connection of the VBR can connect the VPCs created by multiple accounts. VBRs that correspond to different VLANs are isolated from one another by the Layer-2 network.

    For example, a company has multiple subdivisions or subsidiaries. Each has a separate Alibaba Cloud account. Each account has a separate VPC. If the company applies for a physical connection, they must plan a VLAN ID for each subdivision or subsidiary. When the company creates router interfaces, they use VLAN IDs to identify the subsidiaries or subdivisions that use the physical connection. This way, the subsidiaries or subdivisions are isolated by using the Layer-2 network.

    Gateway IP Address on Alibaba Cloud Side Enter the IP address of the gateway used for access from the VPC to your on-premises data center.
    Gateway IP Address on Customer Side Enter the IP address of the gateway used for access from your on-premises data center to the VPC.
    Subnet Mask Enter the subnet masks of the gateway IP address on the Alibaba Cloud side and of the gateway IP address on the customer side. Only two IP addresses are required. Therefore, you can enter longer subnet masks.
  5. Click OK.