检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. On the Server tab page of the VPN gateway, click Replace. In the displayed dialog box, click Upload in the drop-down list box. Upload the new server certificate to CCM.
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. On the Server tab page, view the issuer information of the client CA certificate.
Click the P2C VPN Gateways tab, locate the target VPN gateway, and click View Server in the Operation column. On the Server tab page, view the server ID in the Basic Information area, and view the server port and protocol in the Advanced Settings area.
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. Upload CA certificates.
The Client Log Contains "Error message: ovpnagent:request error" Applicable Client Windows OpenVPN Connect Symptom A client cannot connect to a P2C VPN gateway, and the log contains the following error information: Error message: ovpnagent:request error Possible Causes The OpenVPN
The Client Log Contains "X509::parse_pem: error in cert::error:0480006C:PEM routines::no start line" Applicable Client Linux Windows OpenVPN GUI Symptom A client cannot connect to a P2C VPN gateway, and the log contains the following error information: X509::parse_pem: error in cert
The Client Log Contains "certReadError" Applicable Client Linux Windows OpenVPN GUI Symptom A client cannot connect to a P2C VPN gateway, and the log contains the following error information: certReadError Possible Causes In certificate authentication mode, the client configuration
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. On the Server tab page, view the encryption algorithm and authentication algorithm of the server in the Advanced Settings area.
The Client Log Contains "Unrecognized option or missing or extra parameter(s) in xxx.ovpn:108: data-ciphers (2.4.12)" Applicable Client Linux Symptom A client cannot connect to the VPN gateway, and the client log contains the following error message: Unrecognized option or missing
CN North-Beijing4 Name Name of a VPN connection. vpn-001 VPN Gateway Name of the VPN gateway for which the VPN connection is created. vpcgw-001 Local Subnet VPC subnets that will access your on-premises network through a VPN.
The PSK is configured on a VPN gateway, and a connection will be established after VPN negotiation is complete. Therefore, no username or password is required for creating an IPsec VPN connection.
When configuring a VPN, you need to perform the following operations on the gateway in your on-premises data center: Configure IKE and IPsec policies. Configure a VPN connection in static routing, BGP routing, or policy-based mode.
The PSK is configured on a VPN gateway, and a connection will be established after VPN negotiation is complete. Therefore, no username or password is required for creating an IPsec VPN connection.
The PSK is configured on a VPN gateway, and a connection will be established after VPN negotiation is complete. Therefore, no username or password is required for creating an IPsec VPN connection.
The PSK is configured on a VPN gateway, and a connection will be established after VPN negotiation is complete. Therefore, no username or password is required for creating an IPsec VPN connection.
When configuring a VPN, you need to perform the following operations on the gateway in your on-premises data center: Configure IKE and IPsec policies. Set the connection mode to route-based or policy-based.
Data Plan Table 1 Data plan Category Item Example Value for the Firewall Example Value for the Huawei Cloud Side VPC Subnet 172.16.0.0/24 192.168.0.0/24 VPN gateway Gateway IP address 1.1.1.1 Active EIP: 1.1.1.2 Standby EIP: 2.2.2.2 Interconnection subnet - 192.168.2.0/24 BGP ASN
By default, a VPN gateway uses two EIPs.
Create two VPN connections between the VPN gateway (active EIP and active EIP 2) and the customer gateway.
The same address of a VPN gateway cannot be repeatedly selected when you create VPN connections between the VPN gateway and the same customer gateway. 11.xx.xx.11 Customer Gateway of Connection 1 Select the customer gateway of connection 1.
