<p>If there are multiple VPCs under the same tenant, the interconnection of ECS instances among different VPCs requires opening the security policy and configuring Express Connects among the VPCs.</p> <p>The following uses two ECSs (ECS1 and ECS2) in different VPCs (VPC1 and VPC2) under the same tenant as an example to illustrate how to configure cross-VPC interconnection for the same tenant.</p> <p><span style="font-size:18px"><strong>Create Express Connect</strong></span></p> <p>Please perform the following steps to create an Express Connect:</p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp; Log on to Ping An Cloud Console and click <strong>All Products</strong> &rarr; <strong>Express Connect</strong> to enter the VPC Peer Link page.</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp; Click <strong>Add</strong> to enter the Add page.</p> <p>3.&nbsp;&nbsp;&nbsp;&nbsp; Select <strong>This Tenant</strong> as Remote Tenant, select Local VPC and Remote VPC, select Local IP Address and Remote IP Address, and then click <strong>Confirm</strong> to complete the creation.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20191204113839-18ab89249184.png" style="height:526px; width:830px" /></p> <p>4.&nbsp;&nbsp;&nbsp;&nbsp; Log on to the ECSs to perform the ping test.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20181202150019-10fc8af89f4e.png" /></p> <p><strong>Note:</strong> If the ping succeeds, the Express Connect is configured successfully. However, the ECS cannot be accessed at present because the port policy has not been opened.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20181202150023-1f37751f9c58.png" /></p> <p>&nbsp;</p> <p><span style="font-size:18px"><strong>Configure Security Policy</strong></span></p> <p>After the successful configuration of the Express Connect, if mutual access is required, the security policy of the corresponding port should be opened. Here, port 22 is taken as an example to illustrate how to connect the ECS in VPC2 to the ECS in VPC1. Please perform the following steps to complete the configuration:</p> <p>1.&nbsp;&nbsp;&nbsp;&nbsp; Log on to Ping An Cloud Console and click <strong>All Products</strong> &rarr; <strong>Elastic Compute Service</strong> to enter the Overview page.</p> <p>2.&nbsp;&nbsp;&nbsp;&nbsp; Click <strong>Security Group</strong> to enter the Security Group page.</p> <p>3.&nbsp;&nbsp;&nbsp;&nbsp; Click <strong>Create</strong> and the Create Security Group window pops up.</p> <p>4.&nbsp;&nbsp;&nbsp;&nbsp; Select VPC1 and Network, and then click <strong>Confirm</strong> to complete the creation of a security group.</p> <p>5.&nbsp;&nbsp;&nbsp;&nbsp; On the Security Group page, click the name of the just created security group to enter the Security Group Information page.</p> <p>6.&nbsp;&nbsp;&nbsp;&nbsp; Click <strong>Add Instance</strong> and the Add Instance window pops up.</p> <p>7.&nbsp;&nbsp;&nbsp;&nbsp; SelectECS1 and click <strong>Confirm</strong> to add it to the security group.</p> <p>8.&nbsp;&nbsp;&nbsp;&nbsp; On the Security Group Information page, click <strong>SECURITY GROUP RULES</strong> to enter the security group rules management page.</p> <p>9.&nbsp;&nbsp;&nbsp;&nbsp; Click <strong>Create</strong> and the Create Security Group Rules window pops up.</p> <p>10.&nbsp;&nbsp; Select the Rules Direction (IN) and Protocol Type (TCP), input the Port Range (22) and Authorize IP (the IP address of VPC2), and click <strong>Confirm</strong> to complete the configuration of the ingress security group.</p> <p>11.&nbsp;&nbsp; Repeat step1-9 to create a security group, add ECS2 and create a security group rule for VPC2. On the Create Security Group Rules window, select the Rules Direction (OUT) and Protocol Type (TCP), input the Port Range (22) and Authorize IP (VPC1 IP address), and click <strong>Confirm</strong> to complete the configuration of the egress security group.</p> <p>12.&nbsp;&nbsp; When the configuration is completed, test telnet port 22. Passing the test indicates the configuration of security policy is complete.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20181202150105-1ed11f769b86.png" /></p> <p><strong>Note: </strong>Repeat the above steps and set security group rules in the reverse way to connect the ECS in VPC1 to the ECS in VPC2.</p>