Cloud Enterprise Network:Use route maps to allow specified VPCs to communicate with each other

Subnetting

The following table describes the CIDR blocks of VPC 1, VPC 2, and VPC 3.

Step 1: Configure route maps that set all network instances to block routes from the transit routers.

Perform the following operations to configure route maps to block routes from the transit routers deployed in the China (Hong Kong) and Germany (Frankfurt) regions to VPC 1, VPC 2, and VPC 3:

1. Log on to the CEN console.
2. On the Instances page, find the CEN instance that you want to manage and click the ID of the instance.
3. On the instance details page, find the region where you want to add a route map and click the ID of the transit router deployed in the region.
4. On the details page of the transit router, click the Route Table tab and click Route Maps.
5. On the Route Maps page, click Add Route Map. Configure a route map for the transit router in the Germany (Frankfurt) region based on the following information and click OK:
   • Route Map Priority: Enter a priority value for the route map. A lower value indicates a higher priority In this example, 100 is entered.
   • Description: Enter a description for the route map. This parameter is optional. In this example, VPCs in the Germany (Frankfurt) region deny routes from the transit router is entered.
   • Region: Select the region to which the route map is applied. In this example, Germany (Frankfurt) is selected.
   • Transmit Direction: Select the direction of the route map. In this example, Export from Regional Gateway is selected.
   • Match Conditions: Set the match conditions of routes. In this example, VPC is specified as Destination Instance Type.
   • Action Policy: Select the action that you want to perform on a route if the route meets all match conditions. In this example, Deny is selected.

   
6. On the Add Route Map page, set the following parameters and click OK to add a route map for the transit router in the China (Hong Kong) region:
   • Route Map Priority: Enter a priority value for the route map. A lower value indicates a higher priority In this example, 100 is entered.
   • Description: Enter a description for the route map. This parameter is optional. In this example, VPCs in the China (Hong Kong) region deny routes from the transit routers is entered.
   • Region: Select the region to which the route map is applied. In this example, China (Hong Kong) is selected.
   • Transmit Direction: Select the direction of the route map. In this example, Export from Regional Gateway is selected.
   • Match Conditions: Set the match conditions of routes. In this example, VPC is specified as Destination Instance Type.
   • Action Policy: Select the action that you want to perform on a route if the route meets all match conditions. In this example, Deny is selected.

   
   After you add the route maps, navigate to the Routing Information tab of the network instances, and check whether VPC 1, VPC 2, and VPC 3 have denied routes from the regional gateways that are deployed in the specified regions. The following figure shows that VPC 1 has denied routes from the regional gateways.

Step 2: Configure a route map that allows VPC 1 to accept routes from VPC 3

Perform the following operations to allow VPC 1 to accept routes from VPC 3:

1. In the left-side navigation pane, click Instances.
2. On the Instances page, find the CEN instance that you want to manage and click the ID of the instance.
3. On the instance details page, find the region where you want to add a route map and click the ID of the transit router deployed in the region.
4. On the details page of the transit router, click the Route Table tab and click Route Maps.
5. On the Route Maps page, click Add Route Map. Set the following parameters and click OK:
   • Route Map Priority: Enter a priority value for the route map. A lower value indicates a higher priority In this example, 50 is entered.
   • Description: Enter a description for the route map. This parameter is optional. In this example, Allow VPC 1 to accept routes from VPC 3 is entered.
   • Region: Select the region to which the route map is applied. In this example, China (Hong Kong) is selected.
   • Transmit Direction: Select the direction of the route map. In this example, Export from Regional Gateway is selected.
   • Match Conditions: Set the match conditions of routes. In this example, the following match conditions are set:
     • Source Region: Select Germany (Frankfurt).
     • Source Instance IDs: Select the ID of VPC 3.
     • Target Instance IDs: Select the ID of VPC 1.
   • Action Policy: Select the action that you want to perform on a route if the route meets all match conditions. In this example, Permit is selected.

   
   After you add the route map, navigate to the Routing Information tab of the network instances. You can check whether VPC 1 has accepted routes from VPC 3.

Step 3: Configure a route map that allows VPC 3 to accept routes from VPC 1

Perform the following operations to allow VPC 3 to accept routes from VPC 1:

1. In the left-side navigation pane, click Instances.
2. On the Instances page, find the CEN instance that you want to manage and click the ID of the instance.
3. On the instance details page, find the region where you want to add a route map and click the ID of the transit router deployed in the region.
4. On the details page of the transit router, click the Route Table tab and click Route Maps.
5. On the Route Maps page, click Add Route Map. Set the following parameters and click OK:
   • Route Map Priority: Enter a priority value for the route map. A lower value indicates a higher priority. In this example, 50 is entered.
   • Description: Enter a description for the route map. This parameter is optional. In this example, Allow VPC 3 to accept routes from VPC 1 is entered.
   • Region: Select the region to which the route map is applied. In this example, Germany (Frankfurt) is selected.
   • Transmit Direction: Select the direction of the route map. In this example, Export from Regional Gateway is selected.
   • Match Conditions: Set the match conditions of routes.
     • Source Region: Select China (Hong Kong).
     • Source Instance IDs: Select the ID of VPC 1.
     • Target Instance IDs: Select the ID of VPC 3.
   • Action Policy: Select the action that you want to perform on a route if the route meets all match conditions. In this example, Permit is selected.

   
   After you add the route map, navigate to the Routing Information tab to check whether VPC 3 has accepted routes from VPC 1.

Step 4: Test the connectivity

Perform the following operations to test the connectivity between the VPCs:

1. Log on to ECS 1 in VPC 1.
2. Run the ping command to ping the IP address of the ECS instance in VPC 3 to test the connectivity.
   The result indicates that VPC 1 can access the ECS instance in VPC 3. This indicates that VPC 1 and VPC 3 can communicate with each other.
3. Log on to the ECS instance in VPC 2.
4. Run the ping command to ping the IP address of ECS 1 in VPC 1 to test the connectivity.
   The result indicates that the ECS instance in VPC 2 failed to access VPC 1. This indicates that VPC 1 and VPC 2 cannot communicate with each other.
5. Log on to the ECS instance in VPC 3.
6. Run the ping command to ping the IP address of the ECS instance in VPC 2 to test the connectivity.
   The result indicates that the ECS instance in VPC 3 failed to access VPC 2. This indicates that VPC 2 and VPC 3 cannot communicate with each other.