This topic describes how to use Basic Edition transit routers to connect virtual private clouds (VPCs) that are deployed in the same region.

Regions that support Basic Edition transit routers

Table 1. Regions that support Basic Edition transit routers
AreaRegion
Chinese mainlandChinese mainland CCN
Asia PacificJapan CCN, Singapore CCN, Hong Kong CCN, Malaysia CCN, and Indonesia CCN
EuropeFrankfurt CCN
AustraliaAustralia CCN

Sample scenario

Important

  • Beginning Mach 31, 2022, Basic Edition transit routers are supported only in Cloud Connect Network (CCN) regions. Other regions support only Enterprise Edition transit routers by default. If you have Basic Edition transit routers in regions that no longer support Basic Edition transit routers, we recommend that you upgrade the Basic Edition transit routers to Enterprise Edition, which supports more features and a greater networking capacity. Fore more information, see Upgrade Basic Edition transit routers.

  • This scenario assumes that a Cloud Enterprise Network (CEN) instance is created within your Alibaba Cloud account, and a Basic Edition transit router is deployed in the China (Guangzhou) region. If you do not have a Basic Edition transit router, you can use an Enterprise Edition transit router. For more information, see Use Enterprise Edition transit routers to enable intra-region communication between on-premises and cloud networks.

A company has deployed two VPCs (VPC1 and VPC2) in the China (Guangzhou) region. Elastic Compute Service (ECS) instances are deployed in the VPCs. The two VPCs cannot communicate with each other. Due to business growth, the company wants to enable the two VPCs to communicate with each other.

In this case, the company can use Cloud Enterprise Network (CEN) to connect the two VPCs to the Basic Edition transit router in the China (Guangzhou) region. Then, the two VPCs can communicate with each other.

Use Basic Edition transit routers to connect VPCs in the same region

Prerequisites

  • Two VPCs are deployed in the China (Guangzhou) region. ECS instances are deployed in the VPCs. For more information, see Create a VPC with an IPv4 CIDR block.
    The following table shows how CIDR blocks are allocated to the VPCs. Make sure that the CIDR blocks do not overlap.
    Network instanceCIDR blockNetwork instance regionECS instance IP address
    VPC1
    • VPC CIDR block: 192.168.0.0/16
    • vSwitch CIDR block: 192.168.0.0/24
    		China (Guangzhou)192.168.0.239
    VPC2
    • VPC CIDR block: 10.0.0.0/16
    • vSwitch CIDR block: 10.0.0.0/24
    		China (Guangzhou)10.0.0.97
  • You must be aware of the security group rules that are applied to the ECS instances in the VPCs. Make sure that the security group rules allow the VPCs to communicate with each other. For more information, see View security group rules and Add a security group rule.

Step 1: Connect the VPCs to the transit router

Connect the VPCs to the transit router in the China (Guangzhou) region. Then, the VPCs automatically learn routes from each other to establish network communication.

  1. On the Instances page, click the ID of the CEN instance that you want to manage.
  2. Navigate to the Basic Settings > Transit Router tab, find the transit router that you want to manage, and then click Create Connection in the Actions column.
  3. On the Connection with Peer Network Instance page, set the following parameters and click OK.
    • Network Type: Select VPC.
    • Region: Select the region where the network instance is deployed. In this example, China (Guangzhou) is selected.
    • Transit Router: The system automatically creates a transit router in the selected region.
    • Resource Owner ID: Select the Alibaba Cloud account to which the VPC belongs. In this example, Your Account is selected.
    • Network Instance: Select the ID of the network instance. In this example, VPC1 is selected.
  4. Repeat Step 3 to connect VPC2 to the transit router in the China (Guangzhou) region.
    After both VPCs are connected to the transit router, they can automatically learn routes from each other, as shown in the following figure. You can manage the routes of the VPCs in the VPC console. For more information, see Create and manage a route table.
    Figure 1. Routes learned by VPC1
    Routes learned by VPC1
    Figure 2. Routes learned by VPC2
    Routes learned by VPC2

Step 2: Test the network connectivity

After VPC1 and VPC2 are connected to the transit router, they can communicate with each other. In the following example, VPC1 is used to test the network connectivity between VPC1 and VPC2.

  1. Log on to the ECS instance that is deployed in VPC1. For more information, see Connection methods.
  2. On the ECS instance, run the ping command to test the network connectivity between VPC1 and VPC2.
    Note In this example, VPC1 runs the Alibaba Cloud Linux operating system. For more information about how to use the ping command in other operating systems, see the manual of the operating system that you use. 
    ping <The IP address of the ECS instance in VPC2>

    The following echo reply packet indicates that VPC1 and VPC2 are connected.

    Use Basic Edition transit routers to connect VPCs in the same region - test network connectivity