You can use Alibaba Cloud Cloud Enterprise Network (CEN) to implement network connectivity between workspaces or between workspaces and data centers. This topic describes how to attach a secure office network to or detach a secure office network from a CEN instance.

Prerequisites

  • Your workspace is of the convenience account type.
  • A CEN instance is created. For more information, see Create a CEN instance.

Background information

CEN provides a high-availability network that is built on the global private network of Alibaba Cloud that offers high performance and low latency. You can use CEN to establish private network connections between virtual private clouds (VPCs) in different regions, or between VPCs and data centers. This helps accelerate network convergence, improve the quality and security of cross-network connection, and connect all network resources. For more information, see What is CEN?

CEN consists of the following components:
  • CEN instances

    CEN instances are basic network resources that you can use to create and manage interconnected networks. After you create a CEN instance, you can attach different networks to the instance and implement network connectivity between the attached networks.

  • Transit router instances

    Transit routers are core components of CEN. A CEN instance creates a transit router instance in each region. Each transit router instance represents a transit router. You can use transit routers to connect network instances that are deployed in the current region to other network instances that are deployed in the same or different regions. This way, the network instances can communicate with each other. Transit routers support regional route tables, route maps, and cross-region connections. You can also use transit routers to create custom policies for traffic communication, isolation, and redirection based on your business requirements. For more information, see How transit routers work.

  • Bandwidth plans

    You are not charged for communication between network instances in the same region. To enable communication between network instances across regions, you must purchase bandwidth plans and set the cross-region bandwidth. For more information, see Billing.

After you create a CEN instance, you can attach a secure office network to the CEN instance to implement network connectivity for different scenarios. For example, the secure office network (VPC) of your workspace needs to communicate with another network instance, such as a VPC, virtual border router (VBR), or Cloud Connect Network (CCN) instance, or cloud desktops in different workspaces need to communicate with each other.
Note You can attach the secure office network of a workspace only to a single CEN instance. When you configure the secure office network of a workspace that is of the enterprise AD account type, you must attach the network to a CEN instance. After you attach the secure office network, it cannot be detached from the CEN instance.

Attach a secure office network to a CEN instance

To attach the secure office network of a workspace to a CEN instance, perform the following steps:

  1. Log on to the EDS console.
  2. In the top navigation bar, select a region.
  3. In the left-side navigation pane, choose Network > Secure Office Network.
  4. On the Secure office network page, find the network that you want to attach and click Attach to CEN Instance in the Actions column.
  5. In the dialog box that appears, select a CEN instance that belongs to your Alibaba Cloud account or a different Alibaba Cloud account based on your requirements.
    • If you select the Same Account tab, you must select the CEN instance you want to attach from the drop-down list, and then click Confirm.
    • If you select the Different Account tab, you must enter information about the CEN instance for verification.
      1. Enter the ID of the CEN instance and the ID of the Alibaba Cloud account to which the instance belongs.
      2. Click Get Verification Code. The system will send the code to the email address that is associated with the Alibaba Cloud account. Obtain the verification code from the email address and enter the code.
      3. Click Submit to check whether the specified information is valid and whether the CIDR block conflicts exist.

        If the verification fails, follow the on-screen prompts to proceed.

      4. Click Confirm.

Detach a secure office network from a CEN instance

If you no longer require network connectivity between the secure office network of a workspace and the network of other workspaces or data centers, you can detach the secure office network from the CEN instance. To detach the secure office network, perform the following steps:

  1. On the Secure Office Network page, find the network that you want to detach and click Detach from CEN Instance in the Actions column.
  2. In the dialog box that appears, click OK.