Help Center/ Cloud Bastion Host/ FAQs/ Troubleshooting/ CBH System Login Failures/ Why Does CBH Login Fail Through an ECS in a New VPC Connected with the VPC Where CBH Is via VPN or a VPC Peering Connection
Updated on 2025-09-04 GMT+08:00
View PDF

Why Does CBH Login Fail Through an ECS in a New VPC Connected with the VPC Where CBH Is via VPN or a VPC Peering Connection

Symptom

  1. A VPC with a 10.xx.xx.xx CIDR block was selected for a CBH instance.
  2. This VPC was connected to another VPC with a 192. xx.xx.xx CIDR block via a VPN or VPC Peering connection.
  3. The CBH system can be accessed through the ECSs in the VPC with a 10.xx.xx.xx CIDR block.
  4. There is a low probability that the CBH system cannot be accessed through the ECS in the VPC with a 192.xx.xx.xx CIDR block.
  5. The route in the red box in the following figure was displayed in the network configurations of the CBH system.
    Figure 1 Network configuration

Possible Causes

The CBH system uses a version earlier than 3.3.26.0. In versions earlier than 3.3.26.0, if a CBH system has a large number of requests, threads may be exceptionally stopped during system status checks. As a result, routes may fail to be refreshed, and request traffic is forwarded to ETH0 and then discarded. Login failures then occur.

Solutions

Upgrade the bastion host version to 3.3.26.0.