All Products
Search

This Product

    Cloud Phone:Enable internet access for a Cloud Phone

    Document Center

    Cloud Phone:Enable internet access for a Cloud Phone

    Last Updated:Jul 08, 2026

    This topic describes how to enable internet access for a Cloud Phone instance. If your newly purchased Cloud Phone cannot connect to the internet, follow the steps in this topic to configure its network settings.

    Configure internet access for a Cloud Phone

    Procedure

    1. Log on to the Cloud Phone console.

    2. Find the instance that requires internet access and click View Network to go to the Network page.

    3. On the Network page, click the VPC ID to go to the VPC console.

    4. On the VPC details page, click the Resource Management tab and check for an internet NAT gateway within the VPC.

      1. If no internet NAT gateway exists, go to the NAT Gateway page to create one.

      Note

      • Select the VPC where your instance is located.

      • Although no specific vSwitch is required, we recommend selecting one in the same zone as your instance.

      • Access Mode:

        • Select SNAT for All VPC Resources to bind an elastic IP address at the VPC level. This action automatically creates an SNAT entry that allows all instances in the VPC to access the internet through the NAT gateway.

        • To use different CIDR block settings for each instance, select Configure Later. After the NAT gateway is created, go to the SNAT Management page and manually create an SNAT entry. For details, see Step 7.

      • Elastic IP address:

        • If you have an existing elastic IP address, select it.

        • If not, select the option to purchase a new one.

    5. If the VPC already has an internet NAT gateway with a bound elastic IP address and a configured SNAT entry, the Cloud Phone can access the internet. Otherwise, proceed to Step 6 and Step 7.

    6. Go to the NAT gateway details page and click Bind Elastic IP Address. If no elastic IP addresses are available, create a new one.

    7. Go to the NAT gateway details page, click the SNAT Management tab, and create an SNAT entry.

      On the Create SNAT Entry page, configure the Entry Name and EIP Affinity (disabled by default), and then click OK.

      Note

      Select the appropriate SNAT entry scope:

      • VPC: All Cloud Phone instances in the VPC can access the internet using the configured elastic IP address.

      • vSwitch: Cloud Phone instances within the specified vSwitch can access the internet using the configured elastic IP address.

      • Specific instance: The specified Cloud Phone instance can access the internet using the configured elastic IP address.

      • Custom: You can specify a CIDR block. Cloud Phone instances within the specified CIDR block can access the internet using the configured elastic IP address.

    Troubleshoot connectivity issues

    If the Cloud Phone still cannot access the internet after you complete the preceding steps, check the route table and security group settings.

    Check the route table

    Note

    By default, the system automatically creates a route table in the VPC after you create an internet NAT gateway.

    1. Log on to the VPC console and go to the details page of the VPC that contains your instance.

      Click the Resource Management tab and find the number of route tables in the VPC Resources section.

    2. Click the number next to Route Table to go to the Route Tables page.

      The route table is bound to a vSwitch, and the associated vSwitch is also displayed.

    3. Click the Route Table ID to open the details page. On the Route Entries tab, view the Custom route entries.

      Verify that a route entry exists with the destination CIDR block set to 0.0.0.0/0, the next hop type set to NAT Gateway, and the status set to Available. This ensures that traffic is correctly routed to the NAT gateway.

    4. Ensure the next hop is the internet NAT gateway where you configured the SNAT entry. If so, proceed to check the SNAT scope and security group settings. If not, delete the current route entry and add a new one.

    5. Click Add Route Entry and set the next hop type to NAT Gateway.

    Set the Destination CIDR Block to 0.0.0.0/0. From the NAT Gateway drop-down list, select the internet NAT gateway with the configured SNAT entry. Then, click OK.

    Check the security group

    Note

    By default, when you create an instance, the system automatically creates a security group and attaches it to the instance's elastic network interface.

    1. On the Instance Management page of the Cloud Phone console, find the private IP address of the instance. This is the private IP address of its elastic network interface.

    2. In the ECS console, go to the Elastic Network Interfaces page. Use the private IP address from the previous step to find the corresponding elastic network interface. Click its ID to view details and find the associated security group.

    3. Click the security group ID to go to the Security Group Details page and check the Outbound Rules.

      By default, an enterprise security group denies all outbound traffic. A correct outbound rule should have the following settings: Action is set to Allow, Priority is 80, Protocol is All, Port Range is -1/-1, and Destination is 0.0.0.0/0 (all IPv4 addresses).