Creating a private connection
Note
You need the cic.editor role to run this operation.
-
In the management console, click or in the top panel and select the folder.
-
Navigate to Cloud Interconnect.
-
In the left-hand panel, select Private connections and click Create private connection. In the window that opens:
-
Place your cursor in the Trunk connection ID field and select the trunk where you want to create a private connection.
Click Create to create a new trunk, if required.
-
In the VLAN ID field, specify a
VLAN IDof your choice for the private connection in the 802.1Q trunk, e.g.,123.This value must be different from the
VLAN-IDvalues of other private connections in this trunk. -
In the Peering subnet field, specify the CIDR of the point-to-point subnet for BGP peering, e.g.,
192.168.1.0/31. For more information, see Point-to-point subnet. -
In the Peer IP field, specify the customer endpoint IP address on the point-to-point peering subnet, e.g.,
192.168.1.0. -
In the Cloud IP field, specify the Yandex Cloud endpoint IP address on the point-to-point peering subnet, e.g.,
192.168.1.1. -
In the BGP ASN, specify the customer endpoint BGP ASN in ASPlain format, e.g.,
64513. For more information, see BGP ASN. -
Optionally, in the BGP Key field, specify the encrypted BGP session key value.
-
In the IPv4 StaticRoute prefix, click Add prefix for your private connection to include the destination CIDR prefix of the static route that will be announced in the network on the side of the customer's infrastructure.
You can announce multiple static routes in a single private connection. To do this, click Add prefix again, as many times as you need.
-
Optionally, under General information, specify the following for the new connection:
-
Name. The naming requirements are as follows:
- Length: between 3 and 63 characters.
- It can only contain lowercase Latin letters, numbers, and hyphens.
- It must start with a letter and cannot end with a hyphen.
If you do not specify a name, the private connection name will be identical to its ID.
-
Any Description for the connection
-
Labels to assign to the connection
-
-
Click Create.
-
-
View the description of the CLI command to create a private connection:
yc cic private-connection create --help -
Create a private connection:
yc cic private-connection create \ --name prc-pop1 \ --description "Private connection #1 via POP-1" \ --trunk-id cf3dcodot14p******** \ --vlan-id 125 \ --ipv4-peering peering-subnet=192.168.10.0/30,peer-ip=192.168.10.1,cloud-ip=192.168.10.2,peer-bgp-asn=65202 \ --asyncNote
By default, the private connection will be created in the same folder as the trunk. To simplify maintenance, it is best not create trunks and private connections in different folders.
Expected result:
id: bd6g2l17c8sv******** description: private connection create created_at: "2025-03-20T08:25:33.106772882Z" created_by: ajeol2afu1js******** modified_at: "2025-03-20T08:25:33.106772882Z" metadata: '@type': type.googleapis.com/yandex.cloud.cic.v1.CreatePrivateConnectionMetadata private_connection_id: cf3r5ke20fo0******** -
Wait for the operation to complete and get information about the new private connection:
yc cic private-connection get cf3r5ke20fo0********
What's next
To set up network connectivity between your infrastructure and cloud networks:
- Create a virtual router or select an existing one.
- Add the private connection to the virtual router.
- Add cloud networks and IP prefixes to announce to your infrastructure.
- Configure BGP on your network equipment and check the BGP session status.
- Test IP connectivity between your infrastructure and cloud resources.