Network configuration

Procedure

1. Log on to the SAG console.
2. In the left-side navigation pane, choose Smart Access Gateway App > SAG App Instances.

3. In the top navigation bar, select the region.

4. On the SAG App Instances page, find the target instance.

   • If Quick Configuration was not used:

     In the CCN Instance ID/Name column, click Network Configuration.

   • If Quick Configuration was used:

     In the Operation column, click Network Configuration.

5. Configure the following parameters.

   Parameter	Description
   Instance Name/ID	The name and ID of the Smart Access Gateway App instance.
   Resource Group	The resource group to which the Cloud Connect Network (CCN) instance belongs. This resource group is created in Resource Management under your Alibaba Cloud account. For more information, see Create a resource group. Note This parameter appears only when Quick Configuration is not used.
   CCN	Select or create the Cloud Connect Network (CCN) instance to attach. CCN is an important component of Smart Access Gateway (SAG). After you attach a Smart Access Gateway App instance to a CCN instance, its clients can communicate with other gateway devices on the same CCN instance. For more information, see Introduction to Cloud Connect Network. You can select a CCN instance in one of the following ways: Select existing CCN: Select an existing CCN instance. Create CCN: Enter a name to create a new CCN instance. The system automatically creates and attaches the instance.
   Standby and Active DNS	Optional. Specify the primary and secondary DNS servers that clients use for private network connections. When you use custom DNS servers, take note of the following: The system pushes this DNS configuration to all clients, and all client traffic is resolved through these servers. If your clients require public network access, ensure that your DNS servers can resolve public domain names. To use PrivateZone when clients connect to Alibaba Cloud, set the DNS IP addresses to 100.100.2.136 and 100.100.2.138. For more information about PrivateZone, see What is PrivateZone. This feature is supported only on Android clients V2.1.1 or later and macOS clients V2.1.1 or later. For information about how to download a client, see Install the client. Note On iOS 13, the system might retain its default DNS configuration, preventing your custom settings from taking effect. If this occurs, exit the client and reconnect to Alibaba Cloud. On macOS, to allow the client to write the DNS configuration to your system, go to System Preferences > Security & Privacy and clear the Require an administrator password to access system-wide preferences check box.
   Private CIDR Block	This is the private CIDR block that clients use to connect to Alibaba Cloud. When a client connects, the system automatically assigns it an available IP address from this CIDR block. The private CIDR blocks must not overlap. Click Add Private CIDR Block to add more CIDR blocks. You can add up to 11 private CIDR blocks.

6. Click OK.