Networking Solution for the Scenario Where the Source Server Is in an On-premises Environment, Can Access the Internet, But Cannot Access the Target Server on the Cloud

Using VPN to Establish an Encrypted Channel

If the source server can access the Internet but the target server cannot, you can use a VPN gateway and two dynamic public IP addresses to establish an encrypted, secure channel, which ensures secure and private data transmission. For details about VPN and its billing, see What Is VPN? and Overview of VPN Billing.

Site-to-Cloud VPN provides two types of VPN gateways: Enterprise Edition and Classic Edition. Enterprise Edition VPN gateways offer more functions and higher performance than Classic Edition VPN gateways. For details, see Differences between S2C Enterprise Edition VPN and Classic VPN.

The following uses Enterprise Edition VPN as an example.

1. Create a VPN gateway for the target VPC and configure two EIPs.

   For details, see Creating a VPN Gateway.

2. Create a customer gateway for the source environment.

   For details, see Creating a Customer Gateway.

3. Create a VPN connection to connect the target VPC to the source network.

   For details, see Creating a VPN Connection.

4. Configure the source network devices to enable communication between the source network and the target VPC subnet.

   There are multiple types of network devices. Configure the source network devices by referring to the corresponding sections in the Virtual Private Network Administrator Guide.

5. Verify the network connectivity.
   • Log in to the source server and use the ping command to verify the network connectivity with the target server.

     ping <Target-IP-address>

   • Log in to the target server and use the ping command to check the network connectivity with the source server.

     ping <Source-IP-address>

   If information similar to the following is displayed, the network is connected:

   

Creating a Migration Task on SMS

After confirming that the network is connected, create and execute a migration task by following the instructions provided in Migration Process. Note that you must set Network Type to Private during the configuration.