<p>Cross-tenant ECS interconnection also requires configuring Express Connects first.</p> <p>The following uses two ECSs (ECS1 and ECS2) under different tenants (Tenant 1 and Tenant 2) as an example to illustrate how to configure cross-tenant interconnection.</p> <p><span style="font-size:18px"><strong>Create Express Connect</strong></span></p> <p>Please perform the following steps to create an Express Connect:</p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp; Log on to Ping An Cloud Console and click <strong>All Products</strong> &rarr; <strong>Express Connect</strong> to enter the VPC Peer Link page.</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp; Click <strong>Add</strong> to enter the Add page.</p> <p>3.&nbsp;&nbsp;&nbsp;&nbsp; Select Local VPC, select <strong>Other Tenant</strong> as Remote Tenant, input the name of the Remote Tenant, Remote VPC and Phone, click <strong>ACQUIRE AUTHORIZATION CODE</strong>, input the received Authorization Code and click VERIFY; input the Local IP Address and Remote IP Address, and click <strong>Confirm</strong> to complete the creation.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20191204142435-1961d9999e1c.png" style="height:516px; width:830px" /></p> <p>&nbsp;</p> <p><span style="font-size:18px"><strong>Configure Security Policy</strong></span></p> <p>After the successful configuration of the Express Connect, if mutual access is required, the security policy of the corresponding port should be opened.</p> <p>The cross-tenant security policy configuration is similar to that under the same tenant. Please follow the above steps to configure the security policy. The following is a brief example illustrating how to connect the ECS under Tenant 2 to the ECS under Tenant 1:</p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp; Create new security group rules in the security group created under Tenant 1. The Rules Direction is IN, and the Authorize IP is the IP address of the subnet under Tenant 2.</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp; Create corresponding security group rules in the security group created under Tenant 2. The Rules Direction is OUT, and the Authorize IP is the IP address of the subnet under Tenant 1.</p> <p>3.&nbsp;&nbsp; When the configuration is completed, test the connection to ensure normal access to port 22.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20181202150431-1301ddea9a1e.png" /></p> <p><strong>Note: </strong>Set security group rules in the reverse way to connect the ECS under Tenant 1 to the ECS under Tenant 2.</p>