Process Description

To enable network communications among VPCs that belong to different accounts within a given region, create a cloud connection, ask other users to authorize their VPCs to you, and load the VPCs to the cloud connection.

Network Communications Among VPCs of Different Accounts shows an example.

Figure 1 Network communications among VPCs under different accounts within the same region

Figure 2 illustrates how you can enable network communications among VPCs under different accounts within the same region.

Figure 2 Process for enabling network communications among VPCs

Procedure

1. Create a cloud connection.
   1. Log in to the management console.
   2. Hover on the upper left corner to display Service List and choose Networking > Cloud Connect.
   3. On the Cloud Connections page, click Create Cloud Connection.
   4. Configure the parameters based on Table 1.

      Table 1 Parameter description

      Parameter	Description	Example Value
      Name	Specifies the cloud connection name. The name can contain 1 to 64 characters, including letters, digits, underscores (_), hyphens (-), and periods (.).	CC_01
      Enterprise Project	Provides a cloud resource management mode, in which cloud resources and members are centrally managed by project.	default
      Description	Provides supplementary information about the cloud connection. The description can contain a maximum of 255 characters.	N/A

   5. Click OK.

      

2. Ask other users to authorize their VPCs to you.

   If your network needs to communicate with the VPCs of other users, ask them to authorize their VPCs to you and then load their VPCs to your cloud connection. The following are steps that other users can follow to authorize their VPCs to you:

   1. In the navigation pane, choose Cloud Connect > Cross-Account Authorization.
   2. Click Network Instances Authorized by Me.
   3. Click Authorize Network Instance.
      Configure the parameters based on Table 2.

      Table 2 Parameter description

      Parameter	Description	Example Value
      Region	Specifies the region where the VPC is located.	CN East-Shanghai1
      VPC	Specifies the VPC to be authorized.	VPC-w2
      Peer Account ID	Specifies the ID of the other user's account.	N/A
      Peer Cloud Connection ID	Specifies the ID of the other user's cloud connection to which your VPCs are to be loaded.	N/A
      Remarks	Provides supplementary information about cross-account authorization, if any.	N/A

   4. Click OK.

      

3. Load network instances.

   Load the VPCs that need to communicate with each other to the cloud connection based on your network plan. To load a VPC that has been authorized to you, perform the following steps:

   1. Log in to the management console.
   2. In the cloud connection list, locate the cloud connection and click its name.
   3. Under Network Instances, click Load Network Instance.
   4. Select Peer account for Account, select the other user's account ID, project ID, and the VPC, and specify the CIDR blocks.
      For details about the parameters, see Table 3.

      Table 3 Parameter description

      Parameter	Description	Example Value
      Account	Specifies whether network instances are from the current account or another account.	Peer account
      Peer Account ID	Specifies the ID of the account that the VPC belongs to.	N/A
      Region	Specifies the region where the VPC you want to connect is located.	N/A
      Peer Project ID	Specifies the project ID of the peer account's VPC.	N/A
      Instance Type	Specifies the type of the network instance to be loaded. Currently, you can load only VPCs across accounts.	VPC
      Peer VPC	Specifies the VPC you want to load.	N/A
      VPC CIDR Block	Specifies the subnets of the VPC you want to load and the custom CIDR blocks.	N/A
      Remarks	Provides supplementary information about the network instances.	N/A

   5. Click OK.

      

   6. In the dialog box indicating that the VPC has been loaded to the cloud connection, if you want to load another VPC, click Load Another Instance. Then click the Network Instances tab to view the VPCs you loaded.
   

   • You can load a network instance to only one cloud connection.
   • Each VPC and the associated virtual gateway can be loaded only once.
   • You need to request authorization to network instances before you can load them to your cloud connection.