amazon-web-services - 如何从 netmask/30 到 netmask/28 到达特定 IP 地址

Question

我正在通过控制台设置新的 Amazon VPC，但它仅限于/16 网络掩码和/28 网络掩码之间。

从另一端来看，客户端希望从网络掩码为/30 的内部网络在隧道末端获取 EC2 实例。

那么，如何创建一个能够在 CIDR block 172.30.228.184/30 上托管 EC2 实例的 VPC 呢？应如何配置该子网才能与/30 block 通信？

Answer 1

AWS 在每个子网上保留 4 个 IP 用于此目的，因此您无法创建/30 子网。请参阅This .

The first four IP addresses and the last IP address in each subnet CIDR block are not available for you to use, and cannot be assigned to an instance. For example, in a subnet with CIDR block 10.0.0.0/24, the following five IP addresses are reserved:

10.0.0.0: Network address.

10.0.0.1: Reserved by AWS for the VPC router.

10.0.0.2: Reserved by AWS. The IP address of the DNS server is always the base of the VPC network range plus two; however, we also reserve the base of each subnet range plus two. For VPCs with multiple CIDR blocks, the IP address of the DNS server is located in the primary CIDR. For more information, see Amazon DNS Server.

10.0.0.3: Reserved by AWS for future use.

10.0.0.255: Network broadcast address. We do not support broadcast in a VPC, therefore we reserve this address.