Best Practices for Physical Connection Internal Network BGP Configuration using Express Connect
Join us at the Alibaba Cloud ACtivate Online Conference on March 5–6 to challenge assumptions, exchange ideas, and explore what is possible through digital transformation.
This document provides guidance to help you use dynamic routing to quickly build a hybrid cloud with Express Connect.
Prerequisites
- A physical connection has been established.
- A virtual border router (VBR) has been configured and can be pinged by the peering IP address.
For more information, see the first three steps in this guide: https://www.alibabacloud.com/help/doc-detail/44844.htm
Configure Dynamic Routing for Express Connect
The configuration process can be summarized as follows:
- Create a BGP Group
- Create a BGP peer
- Configure a static route from the VBR to the VPC
- Advertise the BGP CIDR block
- Configure a static route from the VPC to the VBR
- Verify the configuration
Step 1: Create a BGP Group
On the console, go to Express Connect > BGP > BGP Groups. Click “Create BGP Group” in the upper-right corner of the window.
Set the BGP parameters.
After the preceding steps are completed, an available BGP group is listed on the BGP Groups page.
To configure a BGP group for your IDC, you need to enter the Alibaba Cloud ASN, 45104. This is unique and remains unchanged. Refer to https://www.alibabacloud.com/help/doc-detail/52410.htm for more information.
Step 2: Create a BGP Peer
On the console, choose Express Connect > BGP > BGP Peers, and click Create BGP Peer in the upper-right corner of the window.
Set the BGP peer parameters.
After the preceding steps are completed, available BGP peers are listed on the BGP Peers page.
Configure a corresponding BGP peer for your IDC.
Step 3: Configure a Static Route from the VBR to the VPC
On the console, choose Express Connect > Physical Connections > Virtual Border Routers (VBRs).
Locate the row that contains the target VBR and click its name or click Manage.
On the Manage page, click Add Route.
In Destination CIDR Block, enter the CIDR block of the VSwitch in the VPC.
In Next-Hop Direction, select “To VPC”.
In Next Hop, select Ri-B.
Step 4: Advertise the BGP CIDR Block
On the console, choose Express Connect > Physical Connections > Virtual Border Routers (VBRs).
Locate the row that contains the target VBR and click its name or click Manage.
On the Manage page, click BGP CIDR Block on the right side of the page.
Advertise the CIDR Block: The static route CIDR block created in the preceding step is also a VSwitch CIDR block in the VPC.
This CIDR block communicates with your IDC network through BGP routing.
Step 5: Configure a Static Route from the VPC to the VBR
On the console, choose Express Connect > VRouter Interface.
Select the VRouter interface on the VPC VRouter side (connection role: Receiver). Click Route Configuration on the right side of the page.
On the displayed VRouters page of the VPC console, click Add Route on the side of the page.
Destination CIDR Block: IDC CIDR block
In Next Hop Type, select VRouter Interface.
In VRouter Interface, select the ID of the API connected to the VBR. In this example, this is Ri-C.
EC is a connection between two networks. After a connection is established, each network generates a VRouter interface. In this example, this is Ri-B on the VBR side and Ri-C on the VPC side. The function of EC is similar to that of an NIC.
Step 6: Verify the Configuration
Use the server in your IDC to ping the ECS instance in the Alibaba Cloud VPC.
If the ECS instance is pinged, the BGP communication has been deployed in the internal network.
Ensure that the host address of your IDC has been advertised in the BGP CIDR block.
The ECS instance address in the Alibaba Cloud VPC has been advertised in the BGP CIDR block of the VBR.
For more information about the performance tests of physical connections, see the following tutorial:
https://www.alibabacloud.com/help/doc-detail/58625.htm