Quick Start · The purchased products, services and features are stipulated by the contract made...

Virtual Private Cloud

Quick Start

Issue 40

Date 2020-04-15

HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without priorwritten consent of Huawei Technologies Co., Ltd. Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respectiveholders. NoticeThe purchased products, services and features are stipulated by the contract made between Huawei andthe customer. All or part of the products, services and features described in this document may not bewithin the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,information, and recommendations in this document are provided "AS IS" without warranties, guaranteesor representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Issue 40 (2020-04-15) Copyright © Huawei Technologies Co., Ltd. i

Contents

1 Quick Start................................................................................................................................ 1

2 Setting Up an IPv4 Network................................................................................................. 3

3 Setting Up an IPv6 Network (OBT).................................................................................. 13

Virtual Private CloudQuick Start Contents

Issue 40 (2020-04-15) Copyright © Huawei Technologies Co., Ltd. ii

1 Quick Start

This document describes how to prepare for and quickly create a VPC with an IPv4or IPv6 CIDR block.

CIDR Block TypesIPv4: When you create a VPC and subnet, IPv4 CIDR block is used by default.Servers on the IPv4 network cannot access IPv6 services on the Internet or provideservices accessible from users using the IPv6 client. For details about how to setup an IPv4 network, see Setting Up an IPv4 Network.

IPv6: When you need to access the IPv6 services on the Internet or provideservices accessible from users using the IPv6 client, you need to enable the IPv6function. After the IPv6 function is enabled, you can provide services for usersusing the IPv4 or IPv6 client. For details about how to set up an IPv6 network, seeSetting Up an IPv6 Network (OBT).

Currently, the IPv6 function is in open beta test only in regions CN North-Beijing4and CN East-Shanghai1. You can try this function only after you request to obtainthe OBT permissions. For details, see IPv4 and IPv6 Dual-Stack Network (OBT).

PreparationsRegistering with HUAWEI CLOUD and Completing Real-Name Authentication

If you already have an authenticated HUAWEI CLOUD account, skip this part. Ifyou do not have a HUAWEI CLOUD account, perform the following operations tocreate an account:

1. Log in at https://www.huaweicloud.com/en-us/ and click Register.2. On the displayed page, register an account as prompted. For details, see

Registering on the HUAWEI CLOUD Management Console.After the registration, the system automatically redirects you to your personalinformation page.

3. Complete real-name authentication by following the instructions in Real-Name Authentication.

Top Up Your Account

Ensure that your account has sufficient balance.

Virtual Private CloudQuick Start 1 Quick Start

Issue 40 (2020-04-15) Copyright © Huawei Technologies Co., Ltd. 1

https://support.huaweicloud.com/en-us/qs-vpc/en-us_topic_0017816228.html

https://support.huaweicloud.com/en-us/qs-vpc/qs_ipv6.html

https://support.huaweicloud.com/en-us/usermanual-vpc/vpc_0002.html

https://www.huaweicloud.com/en-us/

https://support.huaweicloud.com/en-us/qs-consolehome/en-us_topic_0016739341.html

https://support.huaweicloud.com/en-us/usermanual-account/en-us_topic_0077914254.html

https://support.huaweicloud.com/en-us/usermanual-account/en-us_topic_0077914254.html

● For details about the price of EIPs, see Product Pricing Details.● For details about how to top up an account, see Topping Up an Account.

Virtual Private CloudQuick Start 1 Quick Start


https://www.huaweicloud.com/en-us/pricing.html#/eip

https://support.huaweicloud.com/en-us/usermanual-billing/en-us_topic_0031465732.html

2 Setting Up an IPv4 Network

This topic describes how to create a VPC with an IPv4 CIDR block and bind an EIPaddress to an ECS in the VPC to allow the ECS to access the Internet. Figure 2-1shows the configuration procedure.

Figure 2-1 Setting up an IPv4 network

Step 1: Create a VPC

Before creating your VPCs, determine how many VPCs, the number of subnets,and what IP address ranges you will need. For details, see Network Planning.

In the instructions presented here, our sample VPC is named vpc-test and itsdefault subnet called subnet-01.

1. Log in to the management console.

2. Click in the upper left corner and select the desired region and project.

3. Under Network, click Virtual Private Cloud.

Virtual Private CloudQuick Start 2 Setting Up an IPv4 Network



4. Click Create VPC.5. Set the VPC and subnet parameters.

Figure 2-2 Creating a VPC and subnet

Table 2-1 VPC parameter description

Parameter Description Example Value

Region Specifies the desired region.Regions are geographic areasthat are physically isolatedfrom each other. The networksinside different regions are notconnected to each other, soresources cannot be sharedacross different regions. Forlower network latency andfaster access to your resources,select the region nearest you.

CN North-Beijing1

Name Specifies the VPC name. vpc-test




CIDR Block Specifies the Classless Inter-Domain Routing (CIDR) blockof the VPC. The CIDR block ofa subnet can be the same asthe CIDR block for the VPC(for a single subnet in theVPC) or a subset (for multiplesubnets in the VPC).The following CIDR blocks aresupported:10.0.0.0/8–24172.16.0.0/12–24192.168.0.0/16–24

192.168.0.0/16

EnterpriseProject

When creating a VPC, you canadd the VPC to an enabledenterprise project.An enterprise projectfacilitates project-levelmanagement and grouping ofcloud resources and users. Thename of the default project isdefault.For details about creating andmanaging enterprise projects,see the EnterpriseManagement User Guide.

default

Tag Specifies the VPC tag, whichconsists of a key and valuepair. You can add a maximumof ten tags to each VPC.The tag key and value mustmeet the requirements listedin Table 2-3.

● Key: vpc_key1● Value: vpc-01



https://support.huaweicloud.com/en-us/usermanual-em/en-us_topic_0131965280.html


Table 2-2 Subnet parameter description


AZ An AZ is a geographic locationwith independent powersupply and network facilitiesin a region. AZs are physicallyisolated, and AZs in the sameVPC are interconnectedthrough an internal network.

AZ3

Name Specifies the subnet name. subnet-01

CIDR Block Specifies the CIDR block forthe subnet. This value must bewithin the VPC CIDR block.

192.168.0.0/24

AdvancedSettings

Two options are available,Default and Custom. You canset Advanced Settings toCustom to configure advancedsubnet parameters.

Default

Gateway Specifies the gateway addressof the subnet.

192.168.0.1

DNS ServerAddress

By default, there are two DNSserver addresses configured(including two private DNSserver addresses or one privateDNS server address and onepublic DNS server address. Aprivate DNS server addresstakes precedence over a publicDNS server address). In thisway, services in the VPC canaccess cloud services throughthe private DNS serveraddress, reducing the latency.If you want to use other publicDNS servers for resolution, youcan change the default DNSserver addresses.

100.125.x.x

Tag Specifies the subnet tag, whichconsists of a key and valuepair. You can add a maximumof ten tags to each subnet.The tag key and value mustmeet the requirements listedin Table 2-4.

● Key: subnet_key1● Value: subnet-01



Table 2-3 VPC tag key and value requirements

Parameter Requirements ExampleValue

Key ● Cannot be left blank.● Must be unique for the same VPC and can be

the same for different VPCs.● Can contain a maximum of 36 characters.● Can contain letters, digits, underscores (_),

hyphens (-), and Chinese characters.

vpc_key1

Value ● Can contain a maximum of 43 characters.● Can contain letters, digits, underscores (_),

periods (.), and hyphens (-).

vpc-01

Table 2-4 Subnet tag key and value requirements

Parameter Requirements Example Value

Key ● Cannot be left blank.● Must be unique for each subnet.● Can contain a maximum of 36

characters.● Can contain letters, digits,

underscores (_), hyphens (-), andChinese characters.

subnet_key1

Value ● Can contain a maximum of 43characters.

● Can contain letters, digits,underscores (_), periods (.), andhyphens (-).

subnet-01

During VPC creation, a default subnet will be created. You can also click AddSubnet to create more subnets for the VPC. In this example, only one subnetis created.You can set Advanced Settings to Custom to configure advanced subnetparameters. In this example, Advanced Settings is set to Custom.

6. Click Create Now.

Step 2: Buy an ECS

On the management console, under Computing, click Elastic Cloud Server, andthen click Buy ECS. For details, see Elastic Cloud Server User Guide.



https://support.huaweicloud.com/en-us/qs-ecs/en-us_topic_0021831611.html

Configure the network as follows:

Figure 2-3 Network configuration

● Network: Select the created VPC vpc-test and subnet subnet-01.● Security Group: Select the default security group Sys-default. Table 2-5

describes the default rules for a default security group. You can also create asecurity group and add rules to the security group. For details, see Creating aSecurity Group and Adding a Security Group Rule.

Table 2-5 Default security group rules

Direction

Protocol

Port/Range

Source/Destination Description

Outbound

All All Destination: 0.0.0.0/0 Allow all outbound traffic.

Inbound

All All Source: ID of thecurrent security group(for example, sg-xxxxx)

Allow communication amongECSs within the security groupand deny all inbound traffic(incoming data packets).

Inbound

TCP 22 Source: 0.0.0.0/0 Allow all IP addresses to accessLinux ECSs over SSH.

Inbound

TCP 3389

Source: 0.0.0.0/0 Allow all IP addresses to accessWindows ECSs over RDP.

● EIP: Select Not required.

Step 3: Buy an EIP and Bind It to an ECS

The EIP service provides independent public IP addresses and bandwidth forInternet access. You can buy an EIP and bind it to an ECS to allow the ECS toaccess the Internet.

If you already have an EIP that has not been bound to an ECS, you can directlybind the EIP to the ECS.



https://support.huaweicloud.com/en-us/usermanual-vpc/en-us_topic_0013748715.html



Buying an EIP


2. Click in the upper left corner and select the desired region and project.3. On the console homepage, under Network, click Virtual Private Cloud.4. In the navigation pane on the left, choose Elastic IP and Bandwidth > EIPs.5. Click Buy EIP.6. Set parameters as prompted.

Figure 2-4 Buying an EIP

Table 2-6 Parameter description


Billing Mode The following billing modes areavailable:● Yearly/Monthly● Pay-per-use

Pay-per-use




Region Specifies the desired region.Regions are geographic areasthat are physically isolated fromeach other. The networks insidedifferent regions are notconnected to each other, soresources cannot be sharedacross different regions. For lownetwork latency and quickresource access, select thenearest region.

CN North-Beijing1

EIP Type ● Dynamic BGP: Whenchanges occur on a networkusing dynamic BGP, routingprotocols provide automatic,real-time optimization ofnetwork configurations,ensuring network stabilityand improving userexperience.

● Static BGP: Static BGP offersmore routing control andprotects against routeflapping, but an optimalpath cannot be selected inreal time when a networkconnection fails.

Dynamic BGP

Bandwidth Type The following bandwidth typesare available:● Dedicated: The bandwidth

can be used by only one EIP.● Shared: The bandwidth can

be allocated to multiple EIPs.These EIPs can share thebandwidth.

Dedicated

Billed By Specifies whether the billing isby bandwidth size or by traffic.

Bandwidth

Bandwidth Specifies the bandwidth size inMbit/s.

5

Bandwidth Name Specifies the name of thebandwidth.

bandwidth-test

Required Duration You must specify the requiredduration if Billing Mode is setto Yearly/Monthly.

1 month




Quantity Specifies the number of EIPs tobe assigned.You can set the number of EIPsto be assigned only whenBilling Mode is set to Pay-per-use.

1

Tag Specifies the EIP tag thatconsists of a key and value pair.The tag key and value mustmeet the requirements listed inTable 2-7.

● Key:Ipv4_key1

● Value:192.168.12.10

Enterprise Project When assigning an EIP, you canadd the EIP to an enabledenterprise project.An enterprise project facilitatesproject-level management andgrouping of cloud resources andusers. The name of the defaultproject is default.For details about creating andmanaging enterprise projects,see the EnterpriseManagement User Guide.

default

Table 2-7 EIP tag requirements

Parameter Requirement Example Value

Key ● Cannot be left blank.● Must be unique for each EIP.● Can contain a maximum of 36


underscores (_), and hyphens (-).

Ipv4_key1



192.168.12.10

7. Click Buy Now.

Binding an EIP





1. In the EIP list, locate the target EIP and click Bind.

Figure 2-5 Bind

2. Select an ECS.

Figure 2-6 Bind EIP

3. Click OK.

Verifying the Result

If an EIP was successfully bound to an ECS, you can access the ECS from theInternet. You can use SSH or RDP to connect to the ECS through the EIP, or pingthe EIP of the ECS to test that the ECS can be accessed from the Internet.

Ensure that the security group of the ECS allows the ICMP traffic (ping) and the accessfrom specific ports, such as port 22 (SSH) and port 3389 (RDP). For details, see SecurityGroup Configuration Examples and Adding a Security Group Rule.






3 Setting Up an IPv6 Network (OBT)

This topic describes how to set up a VPC with IPv6 CIDR block and create an ECSwith an IPv6 address in the VPC, so that the ECS can access the Internet. Figure3-1 shows the configuration procedure.

Figure 3-1 Setting up an IPv6 network

If you already have shared bandwidth, you can configure IPv6 address to access the Internetwhen purchasing an ECS.

Prerequisites

Currently, the IPv6 function is in open beta test only in regions CN North-Beijing4and CN East-Shanghai1. You can try this function only after you request to obtainthe OBT permissions. For details, see IPv4 and IPv6 Dual-Stack Network (OBT).

Virtual Private CloudQuick Start 3 Setting Up an IPv6 Network (OBT)



Step 1: Create a VPC

Before creating your VPCs, determine how many VPCs, the number of subnets,and what IP address ranges you will need. For details, see Network Planning.

Perform the following operations to create a VPC named vpc-ipv6 and its defaultsubnet named subnet-ipv6.



3. Under Network, click Virtual Private Cloud.

4. Click Create VPC.

5. Set the VPC and subnet parameters as prompted.

When configuring a subnet, select Enable for IPv6 CIDR Block toautomatically allocate an IPv6 CIDR block to the subnet. IPv6 cannot bedisabled after the subnet is created. Currently, you are not allowed to specifya custom IPv6 CIDR block.

Table 3-1 VPC parameter description


Region Specifies the desired region.Regions are geographic areasthat are physically isolatedfrom each other. The networksinside different regions are notconnected to each other, soresources cannot be sharedacross different regions. Forlower network latency andfaster access to your resources,select the region nearest you.

CN North-Beijing4

Name Specifies the VPC name. vpc-ipv6

IPv4 CIDRBlock

Specifies the Classless Inter-Domain Routing (CIDR) blockof the VPC. The CIDR block ofa subnet can be the same asthe CIDR block for the VPC(for a single subnet in theVPC) or a subset (for multiplesubnets in the VPC).The following CIDR blocks aresupported:10.0.0.0/8–24172.16.0.0/12–24192.168.0.0/16–24

192.168.0.0/16





EnterpriseProject

When creating a VPC, you canadd the VPC to an enabledenterprise project.An enterprise projectfacilitates project-levelmanagement and grouping ofcloud resources and users. Thename of the default project isdefault.For details about creating andmanaging enterprise projects,see the EnterpriseManagement User Guide.

default

Tag Specifies the VPC tag, whichconsists of a key and valuepair. You can add a maximumof ten tags to each VPC.The tag key and value mustmeet the requirements listedin Table 3-3.

● Key: vpc_key1● Value: vpc-01

Table 3-2 Subnet parameter description


AZ An AZ is a geographic locationwith independent powersupply and network facilitiesin a region. AZs are physicallyisolated, and AZs in the sameVPC are interconnectedthrough an internal network.

AZ2

Name Specifies the subnet name. subnet-ipv6

IPv4 CIDRBlock

Specifies the IPv4 CIDR blockfor the subnet. This value mustbe within the VPC CIDR block.

192.168.0.0/24

IPv6 CIDRBlock

Select Enable for IPv6 CIDRBlock. An IPv6 CIDR block willbe automatically assigned tothe subnet. IPv6 cannot bedisabled after the subnet iscreated. Currently, you are notallowed to specify a customIPv6 CIDR block.

-






AdvancedSettings

Two options are available,Default and Custom. You canset Advanced Settings toCustom to configure advancedsubnet parameters.

Default

Gateway Specifies the gateway addressof the subnet.This IP address is used tocommunicate with othersubnets.

192.168.0.1

DNS ServerAddress

By default, two DNS serveraddresses are configured. Youcan change them as required.Multiple IP addresses must beseparated using commas (,).

100.125.x.x

Tag Specifies the subnet tag, whichconsists of a key and valuepair. You can add a maximumof ten tags to each subnet.The tag key and value mustmeet the requirements listedin Table 3-4.

● Key: subnet_key1● Value: subnet-01

Table 3-3 VPC tag key and value requirements

Parameter Requirements ExampleValue

Key ● Cannot be left blank.● Must be unique for the same VPC and can be

the same for different VPCs.● Can contain a maximum of 36 characters.● Can contain letters, digits, underscores (_),

hyphens (-), and Chinese characters.

vpc_key1

Value ● Can contain a maximum of 43 characters.● Can contain letters, digits, underscores (_),

periods (.), and hyphens (-).

vpc-01



Table 3-4 Subnet tag key and value requirements

Parameter Requirements Example Value

Key ● Cannot be left blank.● Must be unique for each subnet.● Can contain a maximum of 36


underscores (_), hyphens (-), andChinese characters.

subnet_key1



subnet-01

6. Click Create Now.

Step 2: Buy an ECS

Restrictions

During the OBT, you can experience the IPv6 dual stack only when you select ECSsconfigured with specific flavors in the following regions.● SN3 ECSs in AZ2 of region CN North-Beijng4● C3 and M3 ECSs in AZ1 of region CN East-Shanghai1, and C3 ECSs in AZ2 of

region CN East-Shanghai1

Buying an ECS

On the management console, under Computing, click Elastic Cloud Server, andthen click Buy ECS. For details, see Elastic Cloud Server User Guide.

Configure the network as follows:

Figure 3-2 Network configuration

● Network:



https://support.huaweicloud.com/en-us/qs-ecs/en-us_topic_0021831611.html

– Select the created VPC vpc-ipv6.

– Select the created subnet subnet-ipv6.

– Select Self-assigned IPv6 address.

– Shared Bandwidth

▪ If you select Do not configure, only IPv6 communication in a VPC issupported. If you want to enable Internet access, you need toperform operations in (Optional) Step 3: Buy a Shared Bandwidthand Add an IPv6 Address to It.

▪ If you assign a shared bandwidth or select an existing sharedbandwidth, IPv6 address can access the Internet after theconfiguration is complete.

● Security Group: Select the default security group Sys-default. The defaultsecurity group rule allows all outgoing IPv4 and IPv6 data packets and deniesall inbound data packets. ECSs in a security group can access each otherwithout the need to add rules. You can also create a security group and addrules to the security group. For details, see Creating a Security Group andAdding a Security Group Rule.

● EIP: Select Not required.

After an ECS is created successfully, you can view the automatically assigned IPv6address on the ECS details page.

(Optional) Dynamically Assigning IPv6 Addresses

If an IPv6 address fails to be automatically assigned or the selected image cannotobtain an IPv6 address automatically, manually obtain the IPv6 address byreferring to Dynamically Assigning IPv6 Addresses.

(Optional) Step 3: Buy a Shared Bandwidth and Add an IPv6 Address to It

By default, the IPv6 address can only be used for private network communication.If you want to use this IPv6 address to access the Internet or be accessed by IPv6clients on the Internet, you need to buy a shared bandwidth and add the IPv6address to it.

If you already have a shared bandwidth, you can add the IPv6 address to theshared bandwidth without purchasing one.

Buying a Shared Bandwidth



3. On the console homepage, under Network, click Virtual Private Cloud.

4. In the navigation pane on the left, choose Elastic IP and Bandwidth >Shared Bandwidths.

5. In the upper right corner, click Buy Shared Bandwidth. On the displayedpage, configure parameters as prompted.





https://support.huaweicloud.com/en-us/usermanual-ecs/ecs_03_0508.html

Table 3-5 Parameter description


Billing Mode Specifies the billing mode of a sharedbandwidth. The billing mode can be:● Yearly/Monthly: You pay for the

bandwidth by year or month beforeusing it. No charges will be incurredfor the bandwidth during its validityperiod.

● Pay-per-use: You pay for thebandwidth based on the amount oftime you use the bandwidth.

Yearly/Monthly

Region Specifies the desired region. Regions aregeographic areas that are physicallyisolated from each other. The networksinside different regions are notconnected to each other, so resourcescannot be shared across differentregions. For lower network latency andfaster access to your resources, select theregion nearest you.

CN North-Beijing4

BandwidthName

Specifies the name of the sharedbandwidth.

Bandwidth-001

Billed By Specifies the shared bandwidth billingmethod. The shared bandwidth can bebilled by bandwidth or 95th percentilebandwidth (enhanced).NOTE

● 95th percentile bandwidth (enhanced) canbe selected only when Billing Mode is setto Pay-per-use.

● Only customers with a level of V4 orhigher can use the enhanced 95thpercentile bandwidth billing. Enhanced95th percentile bandwidth billing is basedon average monthly bandwidth usageexcluding peak traffic values. The chargeswill be deducted from your accountbalance on a monthly basis. You canspecify the guaranteed minimumbandwidth by setting the bandwidth sizeand the minimum bandwidth percentage.If the monthly peak bandwidth is lessthan or equal to the guaranteed minimumbandwidth, you will be billed based on theguaranteed minimum bandwidth. If themonthly peak bandwidth is greater thanthe guaranteed minimum bandwidth, youwill be billed based on the monthly peakbandwidth.

Bandwidth




Bandwidth Specifies the shared bandwidth size inMbit/s. The minimum bandwidth thatcan be purchased is 5 Mbit/s.

10

EnterpriseProject

When assigning the shared bandwidth,you can add the shared bandwidth to anenabled enterprise project.An enterprise project facilitates project-level management and grouping ofcloud resources and users. The name ofthe default project is default.For details about creating and managingenterprise projects, see the EnterpriseManagement User Guide.

default

RequiredDuration

Specifies the required duration of theshared bandwidth to be purchased. Youneed to specify this parameter only inyearly/monthly billing mode.

2 months

6. Click Next.

Adding an IPv6 Address to a Shared Bandwidth

1. On the Shared Bandwidths page, click Add Public IP Address in theOperation column.

Figure 3-3 Adding an IPv6 address to a shared bandwidth

2. Add the IPv6 address to the shared bandwidth.





Figure 3-4 Adding a dual-stack NIC IPv6 address

3. Click OK.

Verifying the Result

Log in to an ECS and ping an IPv6 address on the Internet to verify theconnectivity. ping6 ipv6.baidu.com is used as an example here. The executionresult is displayed in Figure 3-5.

Figure 3-5 Verification



Quick Start · The purchased products, services and features are stipulated by the contract made...

Documents

Transcript of Quick Start · The purchased products, services and features are stipulated by the contract made...