Requirement
To create the first VPN Tunnel, you must have an Elastic IP in
Not in use status in the same
region and associated with the same
project as the
VPC Network. This IP address will also be used for subsequent VPN Tunnels.
Creating the first VPN Tunnel
- Go to the details page of the VPC Network you want to connect;
- scroll down and select the VPN Tunnel tab;
- click + Create new VPN Tunnel;
- the creation process requires the following:
-
- 1. Details
-
- assign a name to the VPN Tunnel (naming rules);
- you can associate one or more tags with the VPN Tunnel (tagging rules);
- click Continue;
- 2. Configuration
-
- Select one of the listed Elastic IPs (not in use);
- enter your public IP address;
- IKE Group: you can customize the security parameters or keep the proposed defaults;
- Autentication during IKEv2 negotiation: Aruba Cloud will present itself with PSK ID Aruba Side, you with PSK ID Customer Side, and both will use PSK Secret to confirm the connection is authorized;
- ESP Group: you can customize the security parameters or keep the proposed defaults;
- DPD (Dead Peer Detection) is a mechanism to check the VPN status; you must specify:
- DPD Action - what to do if the VPN does not respond;
- DPD Interval - how many seconds between status checks;
- DPD Timeout - after how many seconds without a response to take action;
- click Continue;
- 3. Subnet
- 4. Billing frequency
- choose the service billing type;
- click Continue;
- click Confirm on the right side of the sticky bar to complete the VPN Tunnel configuration.
Create additional VPN Tunnels in the same VPC Network
When creating additional VPN Tunnels, you will not need to specify the Elastic IP or the subnet; these values will already be configured.
What to do after creating a VPN Tunnel