This topic describes how to connect virtual border routers (VBRs) to a transit router of Cloud Enterprise Network (CEN) in the same region. After you connect VBRs to a transit router, the transit router establishes private network connections among the VBRs.

Prerequisites

  • The Alibaba Cloud account that owns the transit router and the Alibaba Cloud account that owns the VBR belong to the same enterprise.
  • A transit router is deployed in the region of the VBR. For more information, see Create a transit router.
  • You can connect a transit router to a VBR that belongs to the same or a different Alibaba Cloud account. If you want to connect a transit router to a VBR that belongs to a different Alibaba Cloud account, you must first acquire the permissions. For more information, see Grant permissions on a network instance that belongs to another account.

Connect a VBR to an Enterprise Edition transit router

Connect VBRs

  1. Log on to the CEN console.
  2. On the Instances page, find the CEN instance that you want to manage and click the instance ID.
  3. On the Basic Settings > Transit Router tab, find the transit router that you want to manage and click Create Connection in the Actions column.
  4. On the Connection with Peer Network Instance page, set the following parameters and click OK.
    ParameterDescription
    Instance TypeSelect Virtual Border Router (VBR).
    RegionSelect the region where the network instance is deployed.
    Transit RouterThe transit router in the selected region is displayed.

    If no transit router is found in the selected region, the system automatically creates a transit router.

    Resource Owner IDSpecify whether the network instance belongs to the current or a different Alibaba Cloud account.
    • If the network instance and the transit router that you want to connect belong to the same Alibaba Cloud account, select Your Account.
    • If the network instance and the transit router that you want to connect belong to different Alibaba Cloud accounts, select Different Account, and enter the ID of the Alibaba Cloud account to which the network instance belongs.
    Attachment NameEnter a name for the connection.

    The name must be 2 to 128 characters in length, and can contain letters, digits, underscores (_), and hyphens (-). It must start with a letter.

    Network InstanceSelect the ID of the VBR that you want to connect to the transit router.
    Advanced SettingsWhen you create a VBR connection, the system automatically enables the following features in the advanced settings:
    • Associate with Default Route Table of Transit Router

      After this feature is enabled, the VBR connection is automatically associated with the default route table of the transit router. The transit router forwards the traffic of the VBR based on the default route table.

    • Propagate System Routes to Default Route Table of Transit Router

      After this feature is enabled, the system routes of the VBR are advertised to the default route table of the transit router. This way, the VBR can communicate with other network instances that are connected to the transit router.

    • Propagate Routes to VBR

      After this feature is enabled, the system automatically advertises the routes in the transit router route table that is associated with the VBR connection to the VBR.

    You can disable these advanced features by clearing the check boxes. If you want to enable the VBR to communicate with other network instances, you can configure associated forwarding and route learning on the transit router. For more information, see Manage routes.

    Note If the DEVICE_MODEL_FORBIDDEN error message is returned, refer to FAQ to troubleshoot the issue.

Change the transit router route table associated with the VBR connection

After you create a VBR connection, you can change the transit router route table that is associated with the VBR connection.

Warning If the VBR connection has route synchronization enabled, the routes synchronized to the VBR are withdrawn after the route table is changed. Then, the routes in the new route table are synchronized to all the route tables of the VBR. For more information, see Route synchronization.
  1. Log on to the CEN console.
  2. On the Instances page, find the CEN instance that you want to manage and click the instance ID.
  3. On the Basic Settings > Transit Router tab, click the ID of the transit router that you want to manage.
  4. On the Intra-region Connections tab, find the VBR connection that you want to manage and click the ID.
  5. In the Attachment Details panel, find the Basic Information section and click Modify next to Associated Route Table.
  6. In the Modify Route Table dialog box, select a route table and click OK.

Connect a VBR to a Basic Edition transit router

  1. Log on to the CEN console.
  2. On the Instances page, find the CEN instance that you want to manage and click the instance ID.
  3. On the Basic Settings > Transit Router tab, find the transit router that you want to manage and click Create Connection in the Actions column.
  4. On the Connection with Peer Network Instance page, set the following parameters and click OK.
    ParameterDescription
    Instance TypeSelect Virtual Border Router (VBR).
    RegionSelect the region where the network instance is deployed.
    Transit RouterThe transit router in the selected region is displayed.

    If no transit router is found in the selected region, the system automatically creates a transit router.

    Resource Owner IDSpecify whether the network instance belongs to the current or a different Alibaba Cloud account.
    • If the network instance and the transit router that you want to connect belong to the same Alibaba Cloud account, select Your Account.
    • If the network instance and the transit router that you want to connect belong to different Alibaba Cloud accounts, select Different Account, and enter the ID of the Alibaba Cloud account to which the network instance belongs.
    Network InstanceSelect the ID of the network instance that you want to connect.
    Note If the DEVICE_MODEL_FORBIDDEN error message is returned, refer to FAQ to troubleshoot the issue.

References