平安云|Ping An Cloud- Building Your Smart Future

Creating VPC and Connecting It to the Internet

Create a VPC and Connect it to Internet through NAT Gateway This article describes how to quickly deploy a network that is needed by the cloud host and that can connect to the Internet, including creating a VPC, deploying ECS instances in the VPC, purchasing a NAT Gateway, and controlling the traffic of ECS instances by configuring a security group. Restrictions •   Only DMZ network can connect to the Internet. •   The network should include at least one subnet. When creating the network, you need to create a subnet, as cloud host resources can only be added in a subnet. •   A NAT Gateway cannot be created in the region of East China. To connect the VPC in the region of East China to the Internet, you can use an IGW Gateway. Step 1：Create a VPC, DMZ network domain, and a subnet 1. Log in to the <a href="https://www.pinganyun.com/console/vpc/overview" target="_blank">VPC Console</a>. 2. Click VPC in the left navigation tree to enter the VPC page. 3. Click Create in the upper-right corner of the page to enter the Create VPC page. 4. Create a VPC as described in the following table: <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210206102441-1c40d9d19ca0.png" style="height:469px; width:460px" /> <table border="1" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="width:185px"> Configuration item </td> <td style="vertical-align:top; width:597px"> Description </td> </tr> <tr> <td style="width:185px"> VPC Description </td> <td style="vertical-align:top; width:597px"> Name of the private network. </td> </tr> <tr> <td style="width:185px"> Region </td> <td style="vertical-align:top; width:597px"> Select the region where the VPC is to be created. It is recommended to create a VPC that is the closest to your client. </td> </tr> <tr> <td style="width:185px"> VPC Types </td> <td style="vertical-align:top; width:597px"> Select the type of the VPC. Currently, only financial type is available. </td> </tr> </tbody> </table> 5. Click Create to display the Create Result page as shown below, and the VPC status is displayed as Available. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210206101541-1767762f9ef4.png" style="height:458px; width:387px" /> 6. Click Confirm. 7. Click the VPC name on the VPC page, and then click the Network tab on the Instance Information that opens. 8.  Click Create in the upper-right corner of the Network tab. 9.  Create a DMZ network as described in the following table: <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210206101258-11d646949359.png" style="height:635px; width:449px" /> <table border="1" cellpadding="0" cellspacing="0"> <tbody> <tr> <td> Configuration item </td> <td style="vertical-align:top"> Description </td> </tr> <tr> <td> Network Description </td> <td style="vertical-align:top"> Name of the network. </td> </tr> <tr> <td> Objective Product </td> <td style="vertical-align:top"> Select ECS to be the objective product of the network. </td> </tr> <tr> <td> Partition </td> <td style="vertical-align:top"> Select DMZ. </td> </tr> <tr> <td> VPC Subnets List </td> <td style="vertical-align:top"> •  Fill in custom subnet description. •  Select an availability zone. •  Select the length of the network mask. </td> </tr> </tbody> </table> 10. Click Create to display the following Create Result page, and the status of the network is Available. The creation of a VPC, a network and a subnet is completed. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210206101320-17edcaad91de.png" style="height:560px; width:451px" /> Step 2：Create an ECS instance   1. Log in to the <a href="https://www.pinganyun.com/console/ecs/overview" target="_blank">ECS Console</a>. 2. Click Instance in the left navigation tree to enter the Instance Management page. 3. Click Create in the upper-right corner of the page to enter the Create Instance page. 4. Configure an ECS instance according to your needs. For detailed information, see ECS Operation Guide. Note: During the process of creating an ECS instance, please select the VPC and subnet created in step 1 for network configuration. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704184136-10d495799f3f.png" style="height:441px; width:830px" /> 5. Click Purchase. 6. On the page that opens, check the order, and then click Confirm Open to complete payment. Step 3: Purchase a NAT gateway and configure an SNAT rule and a DNAT rule 1. Log in to the <a href="https://www.pinganyun.com/console/vpc/overview" target="_blank">VPC Console</a>. 2. Click NAT Gateway in the left navigation tree to enter the NAT Gateway page. 3. Click Create in the upper-right corner of the page to enter the Create NAT Gateway page. 4. If you need to configure the NAT gateway, see NAT gateway Operation Guide for detailed information. Note: When you are configuring NAT Gateway, please select the VPC created in step 1. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20210206102212-1b5c834e962f.png" style="height:481px; width:586px" /> 5. Click Purchase to enter the Order Confirmation page. 6. After checking the order, click Confirm Open to complete payment. 7. Return to the NAT Gateway page, and click the host name of the NAT Gateway just created to enter the NAT Detail page. 8. Click the tab Bandwidth, and click Create in the upper-right corner to enter the Create Broadband page. 9. Set the total bandwidth and the number of public IP addresses, and then click Purchase to enter Order Confirmation page. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704184302-1560bb229fa5.png" style="height:373px; width:800px" /> 10. After checking the order, click Confirm Open to complete payment. 11. On the NAT Detail page, select the SNAT Rule tab. Then click Create in the upper-right corner to enter the Create SNAT Rule page. 12. Configure SNAT rule: Source CIDR is the subnet network segment where the ECS instance created in Step 2 is located. Internet IP refers to the Internet IP applied when the broadband is created. Then click Create to complete the creation of SNAT rule. 13. On the NAT Detail page, select the DNAT Rule tab. Then click Create in the upper-right corner to enter the Create DNAT Rule page. 14. Configure DNAT rule according to your needs: Internet IP refers to the Internet IP applied when the broadband is created, and VPC IP is the ECS instance created in Step 2. Then click Create to complete the creation DNAT rule. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704184347-1329f09e9518.png" style="height:494px; width:656px" /> Step 4: Configure Security Group 1. Log in to the <a href="https://www.pinganyun.com/console/ecs/overview" target="_blank">ECS Console</a>. 2. In the left navigation tree, click Networks>Security Group to enter the Security Group page. 3. Click Create in the upper-right corner, and the Create Security Group page will pop up. 4. Select the VPC and DMZ network created in Step 1, and click Confirm to create a security group. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704184500-1ce3336b9cb7.png" style="height:348px; width:701px" /> 5. Click the name of the security group just created to enter the Security Group Information page. 6. On the Instance tab, click Create in the upper-right corner, and pop up the Binding page. 7. Select the ECS instance created in Step 2, and click Confirm to add the ECS instance to the security group. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20212704184632-107de7de943d.png" style="height:510px; width:830px" /> 8. Click the Security Group Rules tab on the Security Group Information page, then click Create in the upper-right corner on the tab, and the dialogue box of Create Security Group Rules will pop up. 9. Configure the Out and In directions for the security group rules.

Did the above content solve your problem? Yes No