Creating a VPN Tunnel

Requirement

To create the first VPN Tunnel, you must have an Elastic IP in Not in use status in the same region and associated with the same project as the VPC Network. This IP address will also be used for subsequent VPN Tunnels.

Creating the first VPN Tunnel

  • Go to the details page of the VPC Network you want to connect;
  • scroll down and select the VPN Tunnel tab;
  • click + Create new VPN Tunnel;
  • the creation process requires the following:
    • 1. Details
      • assign a name to the VPN Tunnel (naming rules);
      • you can associate one or more tags with the VPN Tunnel (tagging rules);
      • click Continue;
    • 2. Configuration
      • Select one of the listed Elastic IPs (not in use);
      • enter your public IP address;
      • IKE Group: you can customize the security parameters or keep the proposed defaults;
      • Autentication during IKEv2 negotiation: Aruba Cloud will present itself with PSK ID Aruba Side, you with PSK ID Customer Side, and both will use PSK Secret to confirm the connection is authorized;
        • PSK ID Aruba Side: Aruba Cloud's identifier in the VPN connection;
        • PSK ID Customer Side: your identifier in the VPN connection;
           
          If you are using a Fortinet firewall, enter your Peer Client Public IP: the public IP address the firewall uses on the Internet.
        • PSK Secret: the pre-shared secret key used to authenticate both sides of the VPN tunnel during negotiation;
      • ESP Group: you can customize the security parameters or keep the proposed defaults;
        • DPD (Dead Peer Detection) is a mechanism to check the VPN status; you must specify:
          • DPD Action - what to do if the VPN does not respond;
          • DPD Interval - how many seconds between status checks;
          • DPD Timeout - after how many seconds without a response to take action;
      • click Continue;
    • 3. Subnet
    • 4. Billing frequency
      • choose the service billing type;
      • click Continue;
    • click Confirm on the right side of the sticky bar to complete the VPN Tunnel configuration.
       
      For the VPN Tunnel to work correctly, you must configure at least one VPN Route: without it, traffic between networks will not be routed through the tunnel.

Create additional VPN Tunnels in the same VPC Network

When creating additional VPN Tunnels, you will not need to specify the Elastic IP or the subnet; these values will already be configured.

What to do after creating a VPN Tunnel

After creating a VPN Tunnel, you must create a VPN Route.