Process of Setting Up a Hybrid Cloud Network Using Enterprise Router, VPN, and Direct Connect (Virtual Gateway)

Table 1 describes the overall process of setting up a hybrid cloud network using an enterprise router and Direct Connect and VPN connections that work in an active/standby pair.

**Table 1** Process description of setting up the hybrid cloud network
Procedure	Description
Step 1: Create Cloud Resources	Create an enterprise router. (Only one enterprise router is required in a region.) Create a service VPC with a subnet. Create an ECS in the subnet of the service VPC.
Step 2: Create a Virtual Gateway Attachment to the Enterprise Router	Create a Direct Connect connection to connect an on-premises data center to Huawei Cloud over the line you lease from a carrier. Create a virtual gateway and attach it to the enterprise router. Create a virtual interface to associate the virtual gateway with the Direct Connect connection. Configure routes on the network device in the on-premises data center.
Step 3: Create a VPC Attachment for the Enterprise Router	Attach the service VPC to the enterprise router. In the VPC route table, add a route with the enterprise router as the next hop and the on-premises network CIDR block as the destination.
Step 4: Verify the Network Connectivity Over the Direct Connect Connection	Log in to the ECS and run the ping command to verify the network connectivity over the Direct Connect connection.
Step 5: Create a VPN Gateway Attachment for the Enterprise Router	Create a VPN gateway and attach it to the enterprise router. Create a customer gateway. Create two VPN connections that connect the VPN gateway and the customer gateway and work in an active/standby pair. Configure routes on the network device in the on-premises data center.
Step 6: Verify the Network Connectivity Over the VPN Connection	Log in to the ECS and run the ping command to verify the network connectivity over a VPN connection. VPN works as an alternative to Direct Connect. If you need to verify the network connectivity over a VPN connection, you need to simulate a fault on the Direct Connect connection.