Help Center/ Workspace/ User Guide (Administrators)/ Common Function Configuration/ Configuring Cloud Desktops to Access the Enterprise Intranet
Updated on 2025-08-20 GMT+08:00
View PDF
Share

Configuring Cloud Desktops to Access the Enterprise Intranet

Scenarios

After you purchase a cloud desktop, the cloud desktop is in the VPC subnet by default and cannot access the enterprise intranet. You need to configure Direct Connect or VPN so that users can access the enterprise intranet from the cloud desktop after accessing it.

Prerequisites

You have used Direct Connect to connect the enterprise intranet to the VPC where the cloud desktop resides by referring to Direct Connect Getting Started. Alternatively, you have connected the on-premises data center to the VPC where the cloud desktop resides by referring to VPN Administrator Guide, for example, Using TheGreenBow IPsec VPN Client to Configure On- and Off-Cloud Communication.

Constraints

If a firewall is used, ensure that ports 8443 and 443 in the outbound direction of the firewall are enabled.

Procedure

  1. Log in to the console.
  2. In the navigation pane, choose Tenant Configuration > Basic Settings.
  3. In the Network Configuration area, click Enable next to Direct Connect Access Address.
  4. (Optional) In the displayed dialog box, configure Direct Connect CIDR Block.

    • Using Direct Connect:
      • Check whether the service subnet of the cloud desktop and the subnet of Direct Connect are in the same range.

        If yes, you do not need to configure the Direct Connect CIDR block.

        If no, you need to configure the Direct Connect CIDR block. You can view the service subnet of the cloud desktop and the subnet CIDR block of Direct Connect on the VPC page.

      • You can configure a maximum of five CIDR blocks. Use semicolons (;) to separate them.
      • An example of CIDR block:

        192.168.11.0/24;172.10.240.0/20

    • Using a VPN connection:

      Enter the CIDR block of the on-premises data center to be connected, for example, 10.119.156.0/24. This CIDR block cannot conflict with that of the VPC where the cloud desktop is located.

  5. In the Enabling Direct Connect Access Addresses dialog box, select I have confirmed, VPC endpoints need to be created when Direct Connect access is enabled. (Creating VPC endpoints is charged.).
  6. Click OK.
  7. Notify end users to use the Direct Connect access address to access cloud desktops.