Virtual Private Cloud:Create a VPC with an IPv6 CIDR block

Step 1: Create a VPC and vSwitches

1. Log on to the VPC console.

2. In the top navigation bar, select the region where you want to create the VPC. In this example, China (Hangzhou) is selected.

3. On the VPC page, click Create VPC.

4. On the Create VPC page, specify the parameters that are described in the following table and click OK.

   Note

   In this example, Assign (Default) is selected for the IPv6 CIDR Block parameter. After you create the VPC, the system automatically assigns an IPv6 CIDR block whose subnet mask is /56 to the VPC and creates a free IPv6 gateway. You can use the IPv6 gateway to manage IPv6 traffic.

   Parameter	Description
   VPC
   Region	The region where you want to create the VPC is displayed. In this example, China (Hangzhou) is displayed.
   Name	Enter a name for the VPC.
   IPv4 CIDR Block	Enter a primary IPv4 CIDR block for the VPC. In this example, 192.168.0.0/16 is used. Note After you create the VPC, you cannot change its primary IPv4 CIDR block. However, you can add a secondary IPv4 CIDR block for the VPC. For more information, see Add a secondary CIDR block.
   IPv6 CIDR Block	Specify whether to assign an IPv6 CIDR block to the VPC. In this example, Assign (Default) is selected. If you set this parameter to Assign, the system automatically creates an IPv6 gateway of Free Edition for this VPC, and assigns an IPv6 CIDR block with the subnet mask /56, such as 2xx1: db8::/56. By default, IPv6 addresses are used only for communication within private networks. If you want to use an IPv6 address to access the Internet or provide services for IPv6 clients over the Internet, you must purchase Internet bandwidth for the IPv6 address. For more information, see Enable and manage IPv6 Internet bandwidth. Note After you create the VPC, you cannot change the IPv6 CIDR block.
   Description	Enter a description for the VPC.
   Resource Group	Select the resource group to which the VPC belongs.
   vSwitch
   Name	Enter a name for the vSwitch.
   Zone	Select a zone for the vSwitch from the drop-down list. In this example, Hangzhou Zone H is selected.
   IPv4 CIDR Block	Enter an IPv4 CIDR block for the vSwitch. In this example, 192.168.24.0/24 is entered. When you specify an IPv4 CIDR block for the vSwitch, take note of the following limits: The CIDR block of a vSwitch must be a subset of the CIDR block of the VPC to which the vSwitch belongs. For example, if the CIDR block of a VPC is 192.168.0.0/16, the CIDR block of a vSwitch in the VPC can range from 192.168.0.0/17 to 192.168.0.0/29. The first IP address and the last three IP addresses of a vSwitch CIDR block are reserved. For example, if a vSwitch CIDR block is 192.168.1.0/24, the IP addresses 192.168.1.0, 192.168.1.253, 192.168.1.254, and 192.168.1.255 are reserved. If a vSwitch is required to communicate with vSwitches in other VPCs or with data centers, make sure that the CIDR block of the vSwitch does not overlap with the destination CIDR blocks. Note After you create the vSwitch, you cannot change its CIDR block.
   IPv6 CIDR Block	Enter an IPv6 CIDR block for the vSwitch. By default, the subnet mask of the IPv6 CIDR block for the vSwitch is /64. You can enter a decimal number from 0 to 255 to define the last 8 bits of the IPv6 CIDR block.

5. (Optional): If you need to add more vSwitches for the VPC, click Add below the vSwitch list and set the parameters.

   You can add at most 10 vSwitches in each VPC.

6. Click OK.

Step 2: Create ECS instances

After you create a VPC and a vSwitch with IPv6 CIDR blocks, create ECS instances with IPv6 IP addresses. In this example, the ECS instances are named ECS01 and ECS02. After you create the ECS instances, assign IPv6 IP addresses to the ECS instances.

1. Log on to the VPC console.

2. In the left-side navigation pane, click vSwitch.

3. Select the region where the vSwitch resides. In this example, China (Hangzhou) is selected.

4. On the vSwitch page, find the vSwitch that you want to manage, and choose Add Cloud Service > ECS Instance in the Actions column.

5. On the Custom Launch tab of the ECS instance buy page, set the parameters and complete the payment. For more information, see Create an instance by using the wizard.

   Set the Quantity and IPv6 parameters based on the following information:

   • Quantity: Specify 2 Units.

   • IPv6: Select Assign IPv6 Address Free of Charge.

6. Go to the Instances page of the ECS console, click the instance IDs to view the assigned IPv6 addresses, and change the instance names to ECS01 and ECS02.

7. Configure static IPv6 addresses for ECS01 and ECS02.

   For more information, see Configure an IPv6 address for an ECS instance that runs Windows and Configure an IPv6 address for an ECS instance that runs Linux.

Step 3: Configure security group rules

Services that are assigned IPv4 addresses cannot communicate with services that are assigned IPv6 addresses. If the current security group rules do not support IPv6 communication, you must configure IPv6 security group rules for ECS01 and ECS02.

1. Log on to the ECS console.

2. In the left-side navigation pane, choose Network & Security > Security Groups.

3. In the top navigation bar, select a region from the drop-down list.

4. Find the security group that you want to manage and click Manage Rule.

5. Configure security group rules.

   Enter the IPv6 CIDR block that you want to authorize in the Authorization Object field. For example, enter ::/0 to authorize all IPv6 addresses.

   For more information about the configurations and common use cases of security group rules, see Add a security group rule and Security groups for different use cases.