How Do I Enable Internet Access on Other Cloud Service Pages?

Scenarios

After you purchase a cloud desktop, the cloud desktop is in the VPC subnet by default and cannot access the Internet. You need to configure the NAT gateway to share an EIP so that the cloud desktop can access the Internet. You can use the quick entry on Workspace to enable the Internet, or access the NAT and EIP consoles to purchase services.

This section describes how to purchase NAT and EIP services to enable Internet access for cloud desktops. You can use the quick entry on Workspace to purchase NAT and EIP services to enable the Internet. For details, see Configuring Cloud Desktops to Access the Internet.

Prerequisites

• You have obtained the region, project, VPC, and subnet information of the desktop that needs to access the Internet.
• You have the permission for performing operations on the NAT and EIP services.
  

  • By default, self-registered Huawei accounts have the operation permissions of all services on Huawei Cloud.
  • To use NAT and EIP, the IAM account created under the Huawei account must be added to the admin user group or a user group with NAT and EIP operation permissions. You can go to the IAM page to check whether the account belongs to the admin user group. If the user group is not an admin user group, grant the IAM account the permission to use the NAT and EIP services. For details, see Granting NAT Gateway Permissions and Granting EIP Permissions.

Procedure (Not Interconnecting with Windows AD)

Creating an EIP

1. Log in to the console as an administrator.
2. Click in the upper left corner and select the region and project of the desktop that needs to access the public network.
3. Click and choose Networking > Elastic IP in the service list.
4. On the page displayed, click Buy EIP.
5. Configure the parameters by referring to Assigning an EIP.
   

   Select the region and project of the desktop that needs to access the public network.

6. Click Next.
7. Confirm the configuration and click Submit.

Buying a public NAT gateway

8. Click and choose Networking > NAT Gateway in the service list.
9. Click Buy Public NAT Gateway.
10. Configure the parameters by referring to Purchasing a Public NAT Gateway.
    

    Select the VPC and subnet of the desktop that needs to access the public network.

11. Click Next.
12. Confirm the configuration and click Submit.
13. On the page for adding a rule, click Cancel.

Checking whether the VPC has a route to the NAT gateway

14. Click and choose Business Applications > Workspace in the service list.
15. Click Tenant Configuration.
16. Click the VPC name of the tenant to go to its basic information page.
17. In the Networking Components area on the right of the page, click the number next to Route Tables to go to the route table list page of the VPC.
18. Click the target route table name to view the basic information list.
19. Check whether there is a route whose next hop is the NAT gateway in the route list.

    The NAT gateway automatically creates a route 0.0.0.0/0 from the VPC to the NAT gateway to allow traffic from the VPC to the NAT gateway, as shown in Figure 1.

    Figure 1 Route to the NAT gateway
    
    • If the route shown in Figure 1 exists, go to 20.
    • If the route shown in Figure 1 does not exist, add such a route and go to 20.

Adding an SNAT rule

20. Click and choose Networking > NAT Gateway in the service list.
21. On the displayed page, locate the NAT gateway created in 12 and click Configure Rules in the Operation column.
22. On the SNAT Rules tab page, click Add SNAT Rule.
23. Configure the parameters by referring to Adding an SNAT Rule.
    

    Set Scenario to VPC, Subnet to Existing, and EIP to the EIP purchased in 7.

24. Click OK.

    If the added SNAT rule is in the Running status, the rule has been added.

Verifying whether the desktop can access the public network through the NAT gateway

25. Use a terminal user account and password to log in to the desktop from the client to check whether the desktop can access the public network.

Procedure (Interconnecting with Windows AD)

Creating an EIP

1. Log in to the console as an administrator.
2. Click in the upper left corner and select the region and project of the desktop that needs to access the public network.
3. Click and choose Networking > Elastic IP in the service list.
4. On the page displayed, click Buy EIP.
5. Configure the parameters by referring to Assigning an EIP.
   

   Select the region and project of the desktop that needs to access the public network.

6. Click Next.
7. Confirm the configuration and click Submit.

Buying a public NAT gateway

8. Click and choose Networking > NAT Gateway in the service list.
9. Click Buy Public NAT Gateway to go to the Buy Public NAT Gateway page.
10. Configure the parameters by referring to Purchasing a Public NAT Gateway.
    

    Select the VPC and subnet of the desktop that needs to access the public network.

11. Click Next.
12. Confirm the configuration and click Submit.
13. On the page for adding a rule, click Cancel.

Checking whether the VPC has a route to the NAT gateway

14. Click and choose Business Applications > Workspace in the service list.
15. Click Tenant Configuration.
16. Click the VPC name of the tenant to go to its basic information page.
17. In the Networking Components area on the right of the page, click the number next to Route Tables to go to the route table list page of the VPC.
18. Click the target route table name to view the basic information list.
19. Check whether there is a route whose next hop is the NAT gateway in the route list.

    The NAT gateway automatically creates a route 0.0.0.0/0 from the VPC to the NAT gateway to allow traffic from the VPC to the NAT gateway, as shown in Figure 1.

    Figure 2 Route to the NAT gateway
    
    • If the route shown in Figure 1 exists, go to 20.
    • If the route shown in Figure 1 does not exist, add such a route and go to 20.

Adding an SNAT rule

20. Click and choose Networking > NAT Gateway in the service list.
21. On the displayed page, locate the NAT gateway created in 12 and click Configure Rules in the Operation column.
22. On the SNAT Rules tab page, click Add SNAT Rule.
23. Configure the parameters by referring to Adding an SNAT Rule.
    

    Set Scenario to VPC, Subnet to Existing, and EIP to the EIP purchased in 7.

24. Click OK.

    If the added SNAT rule is in the Running status, the rule has been added.

Configuring DNS forwarding

25. Log in to the DNS server as an administrator.
26. On the taskbar in the lower left corner, click .
27. Click on the right of the Start menu.
28. The Server Manager window is displayed.
29. In the navigation pane on the left, click DNS.
30. In the SERVERS area, right-click a Server name and choose DNS Manager from the shortcut menu.
31. The DNS Manager dialog box is displayed.
32. Expand DNS. Right-click the computer name, and choose Properties from the shortcut menu.
33. On the Advanced tab page, deselect Disable recursion (also disable forwarders) and click Apply.
34. On the Forwarder tab page, click Edit, enter the default DNS server IP address of the desktop region in the text box, and click OK.
    

    Obtain the default DNS server IP address of the desktop region from What Are Huawei Cloud Private DNS Server Addresses?

Verifying whether the desktop can access the public network through the NAT gateway

35. Use a terminal user account and password to log in to the desktop from the client to check whether the desktop can access the public network.