Best Practices for Physical Connection Internal Network BGP Configuration using Express Connect

Join us at the Alibaba Cloud ACtivate Online Conference on March 5–6 to challenge assumptions, exchange ideas, and explore what is possible through digital transformation.

This document provides guidance to help you use dynamic routing to quickly build a hybrid cloud with Express Connect.

Prerequisites

  • A physical connection has been established.
  • A virtual border router (VBR) has been configured and can be pinged by the peering IP address.

For more information, see the first three steps in this guide: https://www.alibabacloud.com/help/doc-detail/44844.htm

Image for post
Image for post

Configure Dynamic Routing for Express Connect

The configuration process can be summarized as follows:

  1. Create a BGP Group
  2. Create a BGP peer
  3. Configure a static route from the VBR to the VPC
  4. Advertise the BGP CIDR block
  5. Configure a static route from the VPC to the VBR
  6. Verify the configuration

Step 1: Create a BGP Group

On the console, go to Express Connect > BGP > BGP Groups. Click “Create BGP Group” in the upper-right corner of the window.

Set the BGP parameters.

Image for post
Image for post

After the preceding steps are completed, an available BGP group is listed on the BGP Groups page.

Image for post
Image for post

To configure a BGP group for your IDC, you need to enter the Alibaba Cloud ASN, 45104. This is unique and remains unchanged. Refer to https://www.alibabacloud.com/help/doc-detail/52410.htm for more information.

Step 2: Create a BGP Peer

On the console, choose Express Connect > BGP > BGP Peers, and click Create BGP Peer in the upper-right corner of the window.

Image for post
Image for post

Set the BGP peer parameters.

Image for post
Image for post

After the preceding steps are completed, available BGP peers are listed on the BGP Peers page.

Configure a corresponding BGP peer for your IDC.

Step 3: Configure a Static Route from the VBR to the VPC

On the console, choose Express Connect > Physical Connections > Virtual Border Routers (VBRs).

Locate the row that contains the target VBR and click its name or click Manage.

Image for post
Image for post

On the Manage page, click Add Route.

Image for post
Image for post

In Destination CIDR Block, enter the CIDR block of the VSwitch in the VPC.

In Next-Hop Direction, select “To VPC”.

In Next Hop, select Ri-B.

Image for post
Image for post

Step 4: Advertise the BGP CIDR Block

On the console, choose Express Connect > Physical Connections > Virtual Border Routers (VBRs).

Locate the row that contains the target VBR and click its name or click Manage.

On the Manage page, click BGP CIDR Block on the right side of the page.

Image for post
Image for post

Advertise the CIDR Block: The static route CIDR block created in the preceding step is also a VSwitch CIDR block in the VPC.

This CIDR block communicates with your IDC network through BGP routing.

Image for post
Image for post

Step 5: Configure a Static Route from the VPC to the VBR

On the console, choose Express Connect > VRouter Interface.

Select the VRouter interface on the VPC VRouter side (connection role: Receiver). Click Route Configuration on the right side of the page.

Image for post
Image for post

On the displayed VRouters page of the VPC console, click Add Route on the side of the page.

Image for post
Image for post

Destination CIDR Block: IDC CIDR block

In Next Hop Type, select VRouter Interface.

In VRouter Interface, select the ID of the API connected to the VBR. In this example, this is Ri-C.

EC is a connection between two networks. After a connection is established, each network generates a VRouter interface. In this example, this is Ri-B on the VBR side and Ri-C on the VPC side. The function of EC is similar to that of an NIC.

Image for post
Image for post

Step 6: Verify the Configuration

Use the server in your IDC to ping the ECS instance in the Alibaba Cloud VPC.

If the ECS instance is pinged, the BGP communication has been deployed in the internal network.

Ensure that the host address of your IDC has been advertised in the BGP CIDR block.

The ECS instance address in the Alibaba Cloud VPC has been advertised in the BGP CIDR block of the VBR.

For more information about the performance tests of physical connections, see the following tutorial:
https://www.alibabacloud.com/help/doc-detail/58625.htm

Written by

Follow me to keep abreast with the latest technology news, industry insights, and developer trends.

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store