Create VPN Gateway

A VPN Gateway provides a secure way to access your data center, protecting your network and sensitive information.

To create a VPN Gateway, follow these steps:

1. In the DCD, go to Menu > Network > VPN Gateway under Connectivity.

2. Click Create VPN Gateway from the VPN Gateways page.

3. Enter the following details to configure your VPN Gateway:

• Define Properties

• Define Tier

• Define Protocol

• Define LAN Connections

4. Click Save to create the VPN gateway.

Define Properties

To define VPN Gateway properties, specify the following:

1. Name: Enter a name for the VPN Gateway.

2. Description: (Optional). You can add additional information about the VPN Gateway.

3. Location: Select a location of your preference from the drop-down list.

4. IP Address: Select the IP Address from the drop-down list.

Define Tier

The number of LANs and tunnels or peers differ for each tier. You can couple a tier with high availability to configure an active-passive mode for an uninterrupted connection during a failover.

When you enable High Availability for the chosen tier, the virtual machines operate in an active-passive mode to minimize the downtime during a failover.

1. Based on your needs, you can choose a tier from the following:

2. High Availability: Select the checkbox to ensure high availability and redundancy for the VPN connections so that the downtime is minimal in case of failures. Redundant VPN tunnels automatically take over during failures.

Define Protocol

You can create VPN Gateways using either the IPSec or WireGuard® protocols.

Each protocol offers different features and requires distinct configuration steps:

IPSecWireGuard®

For IPSec, the Version is set to IKEv2, by default.

Enter the following details:

• Private Key: Enter the Private Key. For more information about generating a private key, see FAQs.

• Interface IPv4 IP: Mandatory if IPv6 is not provided.

• Interface IPv6 IP: Mandatory if IPv4 is not provided.

• Listen Port (optional): Specifies the UDP port on which a WireGuard interface will listen for incoming encrypted VPN packets.

Define LAN Connections

You can specify the LANs you want to connect to the data center in the VDC. You can add new ones, delete, or edit existing ones.

1. Datacenter: Select a data center from the drop-down list to associate it with the VPN Gateway. The available data centers in the drop-down list vary according to the chosen Location.

2. Connections: Select Add LAN Connection to choose a LAN for the data center. You can select an IPv4 CIDR (and an IPv6 CIDR, which is optional) for your LAN connection.

The DCD offers a visual representation of the LANs that are connected to the VPN Gateway.

Schedule VPN Gateway maintenance

Your chosen start time (UTC) plus four hours is the maintenance time.

1. DAY: Select a day from the drop-down list to set a day for maintenance.

2. TIME: Enter a time using the pre-defined format (hh:mm:ss) to schedule the maintenance task. You can also click the icon to set a time.