Help Center/ Workspace/ User Guide (Application Streaming)/ Administrator Operation Guide/ Configuring Common Functions/ Allowing Workspace Application Streaming to Access the Enterprise Intranet
Updated on 2024-10-12 GMT+08:00
View PDF
Share

Allowing Workspace Application Streaming to Access the Enterprise Intranet

Scenarios

After the administrator publishes an application, Workspace Application Streaming is in the VPC subnet by default and cannot access the enterprise intranet. The administrator needs to configure a Direct Connect or VPN connection so that users can access the enterprise intranet after accessing applications with the Internet access function.

Prerequisites

You have used Direct Connect to connect the enterprise intranet to the VPC where the cloud application resides by referring to Direct Connect Getting Started. Alternatively, you have connected the local data center to the VPC where the cloud application resides by referring to VPC Administrator Guide. A typical example is Using TheGreenBow IPsec VPN Client to Configure On- and Off-Cloud Communication.

Constraints

If a firewall is used, ensure that ports 8443 and 443 in the outbound direction of the firewall are enabled.

Procedure

  1. Log in to the Workspace Application Streaming console as an administrator.
  2. In the navigation pane, choose Tenant Configuration.
  3. In the Network Settings area, click Enable next to Direct Connect Access Address.
  4. In the displayed dialog box, configure Direct Connect Network Segment.

    • Using Direct Connect:
      • Check whether the service subnet of Workspace Application Streaming and the subnet of Direct Connect are in the same range.

        If yes, you do not need to configure the Direct Connect network segment.

        If no, configure the Direct Connect network segment in the Direct Connect Network Segment area. You can view the service subnet of Workspace Application Streaming and the subnet network segment of Direct Connect on the VPC page.

      • A maximum of five network segments can be configured. Use semicolons (;) to separate multiple network segments.
      • The network segment is as follows:

        192.168.11.0/24;172.10.240.0/20

    • Using a VPN connection:

      Enter the network segment of the local data center to be connected, for example, 10.119.156.0/24. The network segment of the local data center cannot conflict with that of the VPC where Workspace Application Streaming is located.

  5. In the Enabling Direct Connect Access Addresses dialog box, select I have confirmed, VPC endpoints need to be created when Direct Connect access is enabled. (Creating VPC endpoints is charged.).
  6. Click OK.
  7. Notify end users to use the Direct Connect access address to access Workspace Application Streaming.