Connect an IDC to an ENS VPC via ENA - Edge Network Acceleration

Example scenario

A company has an on-premises IDC in Macao (China) with the private CIDR block 172.16.100.0/24. The company also has a VPC with the CIDR block 192.168.200.0/24 on the ENS China Macao-1 node. To establish private connectivity, a 100 Mbps ENA link is provisioned, and Border Gateway Protocol (BGP) is used to exchange routing information between the IDC and an Edge Virtual Border Router (EVBR).

The following table describes the CIDR blocks used in this example. Plan your own CIDR blocks accordingly, and make sure they do not overlap.

Organization	CIDR block planning	Server or client address
On-premise IDC	`172.16.100.0/24`	Client address: `172.16.100.1`
ENS VPC	`192.168.200.0/24`	ENS instance address: `192.168.200.1`
EVBR	VLAN: 100 EVBR-side IPv4 peer IP address: `10.0.0.2/30` Customer-side IPv4 peer IP address: `10.0.0.1/30`	Not applicable

Prerequisites

Make sure that your Alibaba Cloud account has passed verification. You can check the verification status in the Account Center.
You have created a VPC and a vSwitch on the Alibaba Cloud ENS China Macao-1 node, and deployed your services on cloud resources such as ENS instances in the VPC. For more information, see Create and manage VPCs and vSwitches.
You have connected edge access ports and lines to your on-premises IDC. For more information, see Edge access ports and lines.
You understand the billing rules for ENA. For information about edge access ports, edge access lines, and edge multi-point connection bandwidth pricing, see:
- Pricing for edge access ports and lines
- Edge Multi-point Network pricing

Procedure

Step 1: Create an Edge Private Network (EPN) instance

Create and activate an EPN instance to establish your edge private network.

Log on to the Edge Network Acceleration (ENA) console and choose Business Instances > Create EPN Instance.

On the EPN Instances page, click Create EPN Instance and configure the parameters.

Parameter	Description
Name	Enter a name for the instance.
Region	Select Global (Outside Chinese Mainland).
Description	Enter a description for the instance.

After you configure the parameters, click OK.
After the instance is created, click OK in the dialog, then click Buy Now on the payment page.

Note
EPN is pay-as-you-go. No payment is required at this time. For billing details, see Edge Private Network pricing.
On the order confirmation page, click Enable Now.

Step 2: Create an EVBR on the edge access port and configure routing

On the EPN Instances page, find the EPN instance that you created and click Details.

On the details page of the EPN instance, click Add EVBR and configure the following parameters.

Note

The parameters in this topic are for reference only. Adjust the values as needed. For more information, see Create an access point.

Parameter	Description	Example value
Edge Access Port	Select the edge access port on which to create the EVBR.	Select the edge access port instance on which to create the EVBR. Note If the edge access port instance does not exist, see Edge network resources to create one.
VLAN ID	Specify the VLAN ID for the EVBR.	100
Bandwidth	Specify the bandwidth for the EVBR, in Mbit/s.	100
Route Method	Select BGP or static routing.	BGP
Client AS Number	Specify the BGP AS number for the EVBR peer.	65001
Edge Cloud Peer IP Address	Specify the IPv4 address for the EVBR side.	`10.0.0.2/30`
Client Peer IP Address	Specify the IPv4 address for the customer side.	`10.0.0.1/30`

Configure routing for the on-premises IDC.
1. Configure the BGP protocol on the on-premises gateway device. The AS number for the ENA EVBR is 45103.
2. Announce the 172.16.100.0/24 route to the EVBR neighbor over BGP.

Step 3: Create an Edge Node Service Gateway and associate a vSwitch

On the EPN Instances page, find the EPN instance that you created and click Details.

On the details page of the EPN instance, click Add ENSGW and configure the following parameters.

Parameter	Description	Example value
Node	Select the ENS node on which to create the ENSGW.	`mo-taipa-1`
Rate Limit (Mbit/s)	Specify the bandwidth limit for the ENSGW, in Mbit/s.	100

On the instance details page, verify that the ENSGW status is running.

Click Associate vSwitch to the right of the ENSGW and configure the following parameter.

Note

After creating the ENSGW, you must associate it with an ENS vSwitch to add the corresponding VPC to the network.

Parameter	Description
vSwitch	Select the ENS vSwitch to add to the EPN instance. Note You can view ENS vSwitches in the ENS console.

After you confirm the information, select I Have Confirmed the vSwitch Information, and then click OK.

Step 4: Test connection

To verify connectivity, perform the following steps:

On the host with the IP address 172.16.100.1 in the on-premises IDC, open a command-line terminal.
Run the ping 192.168.200.1 command to ping the ENS instance IP address. A reply indicates that the on-premises IDC can communicate with the ENS VPC 192.168.200.0/24.