Help Center/ Cloud Firewall/ User Guide/ CFW Protection/ Enabling VPC Border Traffic Protection/ Managing VPC Border Firewalls/ Adding Private CIDR Blocks
Updated on 2025-12-18 GMT+08:00
View PDF
Share

Adding Private CIDR Blocks

To use public network CIDR blocks other than 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, or the 100.64.0.0/10 segment reserved for carrier-level NAT as private network CIDR blocks, modify private network CIDR blocks or add private CIDR blocks. If private network CIDR blocks are insufficient, the firewall may fail to forward traffic between your VPCs.

Constraints

Up to 32 private CIDR blocks can be configured.

Adding Private CIDR Blocks

  1. Log in to the CFW console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. (Optional) Switch to another firewall instance. Select a firewall from the drop-down list in the upper left corner of the page.
  4. In the navigation pane, choose Assets > Inter-VPC Border Firewalls.
  5. Click Edit Private IP Address Segment next to Custom Private IP Address Segment.
  6. In the dialog box displayed, click Add and then enter a private CIDR block.
  7. Click OK.

Related Operations

Parent Topic: Managing VPC Border Firewalls