After you establish a physical connection, you must create a virtual border router (VBR) to function as a data forwarding bridge from a virtual private cloud (VPC) to an on-premises data center.

Background information

A VBR is a router between the customer-premises equipment (CPE) and the VPC in your on-premises data center. A VBR uses one route table. You can configure route entries in the route table to forward VBR traffic. A VBR provides the following features:
  • Exchanges data packets between the VPC and the on-premises data center as an intermediate router.
  • Determines the port mode of the physical connection: Layer 3 router interface mode or VLAN-based Layer 3 subinterface mode.
  • Attaches or identifies VLAN tags in Layer 3 subinterface mode.
  • Supports Border Gateway Protocol (BGP) dynamic routing.

Procedure

  1. Log on to the Express Connect console.
  2. In the left-side navigation pane, click Virtual Border Routers (VBRs).
  3. Click Create VBR.
  4. Configure the VBR and click OK.
    Parameter Description
    Account By default, only Current account is available. In other words, you can create a VBR only for the current account.

    To create a VBR for another account, submit a ticket to apply for permissions. You can create a VBR for another account only when the account type indicates For others account create.

    Owner Account This parameter is displayed only when the account type is set to For others account create. Set this parameter to the ID of another account.
    Name The name of the VBR.

    This parameter is displayed only when the account type is set to Current account.

    Physical Connection Interface The physical connection interface that works properly.
    VLAN ID The VLAN ID of the VBR. Valid values: 0 to 2999.
    • If the VLAN ID is set to 0, the switch port of the VBR uses the Layer 3 router interface mode instead of the VLAN mode. In Layer 3 router interface mode, each physical connection corresponds to a VBR.
    • If the VLAN ID is set to a value ranging from 1 to 2999, the switch port on the VBR uses VLAN-based Layer 3 subinterface mode. In Layer 3 subinterface mode, each VLAN ID corresponds to a VBR. In this mode, the physical connection of the VBR can connect the VPCs created by multiple accounts. VBRs that correspond to different VLANs are isolated from one another by the Layer 2 network.

    For example, assume that a company has multiple subdivisions or subsidiaries. Each subdivision or subsidiary has a separate Alibaba Cloud account. Each account has a separate VPC. If the company applies for a physical connection, they must plan a VLAN ID for each subdivision or subsidiary. When the company creates router interfaces, they use VLAN IDs to identify the subsidiaries or subdivisions that use the physical connection. This way, the subsidiaries or subdivisions are isolated using the Layer 2 network.

    IPv4 Address of Gateway at Alibaba Cloud Side The IPv4 address of the gateway that supports routing from the VPC to your on-premises data center.
    IPv4 Address of Gateway at Customer Side The IPv4 address of the gateway that supports routing from your on-premises data center to the VPC.
    Subnet Mask (IPv4 Address) The subnet mask of the gateway IPv4 address on the Alibaba Cloud side and the gateway IPv4 address on the customer side. You can enter a long subnet mask because only two IP addresses are required.
    Enable IPv6 Enable IPv6.

    Enable IPv6 after you apply for service permissions.

    IPv6 Address of Gateway at Alibaba Cloud Side Enter the IPv6 address of the gateway that supports routing from the VPC to your on-premises data center.
    IPv6 Address of Gateway at Customer Side Enter the IPv6 address of the gateway that supports routing from your on-premises data center to the VPC.
    Subnet Mask (IPv6 Address) The subnet mask of the gateway IPv6 address on the Alibaba Cloud side and the gateway IPv6 address on the customer side.

    We recommend that you enter a mask no greater than 64 bits.

    Note After you enable IPv6, only lowercase IPv6 global unicast addresses (GUAs) are supported.
  5. Click OK.