When you migrate data between network-attached storage (NAS) file systems, you must allow access to both the source and destination NAS file systems from Data Transport. You must ensure that both the source and destination NAS file systems reside in the same virtual private cloud (VPC).

Precautions

If the account that hosts the source NAS file system is different from the account that hosts the destination file system, log on to the Data Transport console with the account that hosts the source to create an NAS data address.

Two NAS file systems do not reside in the same VPC

You must ensure that the source and destination NAS file systems reside in the same VPC. This enables communication between the two file systems.

  • Apsara File Storage NAS
    • The mount targets that you add to the source and destination NAS file systems must reside in the same VPC. For more information, see Add a mount point.
    • If access to an NAS file system is restricted, you must allow access to the NAS file system from all IP addresses in the VPC where the NAS file system resides. For more information, see Manage access permissions of a file system.
  • Third-party NAS services
    • You can use one of the following methods to add servers that have the source and destination NAS file systems mounted to the same VPC:
      • To allow access to an NAS file system from all IP addresses in a VPC, you can connect the server that hosts the NAS file system to the VPC by using a dedicated circuit. For more information, contact Alibaba Cloud Technical Support.
      • To allow access to an NAS file system from all IP addresses in a VPC, you can connect the server that hosts the NAS file system to the VPC over a VPN network.
    • If access to an NAS file system is restricted, you must allow access to the NAS file system from all IP addresses in the VPC where the NAS file system resides.

Two NAS file systems reside in the same VPC

If the source and destination NAS file systems reside in the same VPC, communication between the file systems is enabled by default. If access to an NAS file system is restricted, you must allow access to the NAS file system from all IP addresses in the VPC where the NAS file system resides.

Two NAS file systems reside in different VPCs

  • If two NAS file systems reside in different VPCs, you must connect these VPCs by using Cloud Enterprise Network (CEN).
  • If access to an NAS file system is restricted, you must allow access to the NAS file system from all IP addresses in the VPC where the NAS file system resides.

Create and authorize a RAM user

  1. Log on to the RAM console.
  2. Choose Identities > Users > Create User.
  3. Select Console Password Logon and Programmatic Access, and enter the required user account information.
  4. Save the new account, password, AccessKey ID, and AccessKey secret.
  5. Find the user account, and click Add Permissions to grant the OSS read/write permission (AliyunOSSFullAccess) and Data Transport management permission (AliyunMGWFullAccess) to the RAM user.
    Add permissions
  6. In the left-side navigation pane, select Overview, click the link in the RAM user logon section, and enter the username and password of the new RAM user to log on to the console.
    User logon address