How Do I Enable the Internet on Other Cloud Service Pages?

Scenario

After you purchase a cloud desktop, the cloud desktop is in the VPC subnet by default and cannot access the Internet. You need to configure the NAT gateway to share an EIP so that the cloud desktop can access the Internet. You can use the quick entry on Workspace to enable the Internet, or access the NAT and EIP consoles to purchase services.

This section describes how to purchase NAT and EIP services so that the cloud desktop can access the Internet. You can use the quick entry on Workspace to purchase NAT and EIP services to enable the Internet. For details, see Configuring Workspace to Access the Internet.

Prerequisites

• You have obtained the region, project, VPC, and subnet information of the desktop that needs to access the Internet.
• You have the permission for performing operations on the NAT and EIP services.
  

  • By default, a self-registered Huawei account has the operation permissions of all services on Huawei Cloud.
  • To use NAT and EIP, the IAM account created under the Huawei account must be added to the admin user group or a user group with NAT and EIP operation permissions. You can go to the IAM page to check whether the user belongs to the admin user group. If the user group is not an admin user group, grant the IAM account the permission to use the NAT and EIP services. For details, see Creating a User and Granting NAT Gateway Permissions and Creating a User and Granting EIP Permissions.

Procedure (Not Interconnecting to Windows AD)

Creating an EIP

1. Log in to the console as the administrator.
2. Click in the upper left corner and select the region and project where the desktop to access the public network is located.
3. Click and choose Networking > Elastic IP in the service list.
4. On the page displayed, click Buy EIP.
5. Set the parameters by referring to the parameter description in section Assigning an EIP.
   

   Select the region and project of the desktop that you want to access the public network.

6. Click Next.
7. Confirm the configurations and click Submit.

Buying a public NAT gateway

8. Click and choose Networking > NAT Gateway in the service list.
9. Click Buy Public NAT Gateway.
10. Set the parameters by referring to the parameter description in section Buy a Public NAT Gateway.
    

    Select the VPC and subnet to which the desktop that needs to access the Internet belongs.

11. Click Next.
12. Confirm the configurations and click Submit.
13. On the page for adding a rule, click Cancel.

Checking whether the VPC has a route to the NAT gateway

14. Click and choose Business Applications > Workspace in the service list.
15. Click Tenant Configuration.
16. Click the VPC name of the tenant to go to its basic information page.
17. In the Networking Components area on the right of the page, click the number next to Route Tables to go to the route table list page of the VPC.
18. Click the name of the target route table. The basic information list is displayed.
19. Check whether there is a route whose next hop is the NAT gateway in the route list.

    The NAT gateway automatically creates a route 0.0.0.0/0 from the VPC to the NAT gateway to allow traffic from the VPC to the NAT gateway, as shown in Figure 1.

    Figure 1 Route to the NAT gateway
    
    • If the route shown in Figure 1 exists, go to 20.
    • If the route shown in Figure 1 does not exist, add such a route and go to 20.

Adding an SNAT rule

20. Click and choose Networking > NAT Gateway in the service list.
21. On the displayed page, locate the NAT gateway created in 12 and click Configure Rules in the Operation column.
22. On the SNAT Rules tab page, click Add SNAT Rule.
23. Set the parameters based on the parameter description in section Add an SNAT Rule.
    

    Set Scenario to VPC, Subnet to Existing, and EIP to the EIP purchased in 7.

24. Click OK.

    If the added SNAT rule is in the Running state, the rule is added successfully.

Verifying whether the desktop can access the public network through the NAT gateway

25. Use the user account and password to log in to the desktop through the client to check whether the desktop can access the external network.

Procedure (Interconnecting to Windows AD)

Creating an EIP

1. Log in to the console as the administrator.
2. Click in the upper left corner and select the region and project where the desktop to access the public network is located.
3. Click and choose Networking > Elastic IP in the service list.
4. On the page displayed, click Buy EIP.
5. Set the parameters by referring to the parameter description in section Assigning an EIP.
   

   Select the region and project of the desktop that you want to access the public network.

6. Click Next.
7. Confirm the configurations and click Submit.

Buying a public NAT gateway

8. Click and choose Networking > NAT Gateway in the service list.
9. Click Buy Public NAT Gateway. The Buy Public NAT Gateway page is displayed.
10. Set the parameters by referring to the parameter description in section Buy a Public NAT Gateway.
    

    Select the VPC and subnet to which the desktop that needs to access the Internet belongs.

11. Click Next.
12. Confirm the configurations and click Submit.
13. On the page for adding a rule, click Cancel.

Checking whether the VPC has a route to the NAT gateway

14. Click and choose Business Applications > Workspace in the service list.
15. Click Tenant Configuration.
16. Click the VPC name of the tenant to go to its basic information page.
17. In the Networking Components area on the right of the page, click the number next to Route Tables to go to the route table list page of the VPC.
18. Click the name of the target route table. The basic information list is displayed.
19. Check whether there is a route whose next hop is the NAT gateway in the route list.

    The NAT gateway automatically creates a route 0.0.0.0/0 from the VPC to the NAT gateway to allow traffic from the VPC to the NAT gateway, as shown in Figure 1.

    Figure 2 Route to the NAT gateway
    
    • If the route shown in Figure 1 exists, go to 20.
    • If the route shown in Figure 1 does not exist, add such a route and go to 20.

Adding an SNAT rule

20. Click and choose Networking > NAT Gateway in the service list.
21. On the displayed page, locate the NAT gateway created in 12 and click Configure Rules in the Operation column.
22. On the SNAT Rules tab page, click Add SNAT Rule.
23. Set the parameters based on the parameter description in section Add an SNAT Rule.
    

    Set Scenario to VPC, Subnet to Existing, and EIP to the EIP purchased in 7.

24. Click OK.

    If the added SNAT rule is in the Running state, the rule is added successfully.

Configuring DNS forwarding

25. Log in to the DNS server as the administrator.
26. On the taskbar in the lower left corner, click .
27. Click on the right of the Start menu.
28. The Server Manager window is displayed.
29. In the navigation pane on the left, click DNS.
30. In the SERVERS area, right-click a Server name and choose DNS Manager from the shortcut menu.
31. The DNS Manager dialog box is displayed.
32. Expand DNS. Right-click the computer name, and choose Properties from the shortcut menu.
33. On the Advanced tab page, deselect Disable recursion (also disable forwarders) and click Apply.
34. On the Forwarder tab page, click Edit, enter the default DNS server IP address of the desktop region in the text box, and click OK.
    

    The default DNS server IP address of the desktop region can be obtained from the private DNS server addresses provided by Huawei Cloud.

Verifying whether the desktop can access the public network through the NAT gateway

35. Use the user account and password to log in to the desktop through the client to check whether the desktop can access the external network.