检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Identity Authentication and Access Control An S2C VPN connection supports authentication of a customer gateway using a pre-shared key (PSK).
The same address of a VPN gateway cannot be repeatedly selected when you create VPN connections between the VPN gateway and the same customer gateway. 11.xx.xx.11 Customer Gateway of Connection 1 Select the customer gateway of connection 1.
When you configure a VPN, perform the following operations on the on-premises gateway: Configure IKE and IPsec policies. Specify interesting traffic (ACL rules).
In Enterprise Edition VPN, EIPs can be used as VPN gateway IP addresses. The VPN service fee includes the EIP fee. An EIP can use a shared data package. Parent topic: Billing and Payments
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. On the Server tab page, view the issuer information of the client CA certificate.
The Client Log Contains "Options error: Unrecognized option or missing or extra parameter(s) in XXX: disable-dco" Applicable Client Linux Symptom A client cannot connect to a P2C VPN gateway, and the log contains the following error information: Options error: Unrecognized option
By default, a VPN gateway uses two EIPs.
This is recommended if the CIDR blocks requiring VPN communication are not in the VPC to which the VPN gateway belongs. For example, CIDR blocks (such as 0.0.0.0/0) that are connected using a VPC peering are not in the VPC to which the VPN gateway belongs.
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. Click the Connections tab, locate the target VPN connection, and click Tear Down in the Operation column.
In Enterprise Edition VPN, EIPs can be used as VPN gateway IP addresses. The VPN service fee includes the EIP fee. An EIP can use a shared data package. Parent topic: S2C Enterprise Edition VPN
A VPN connection consists of local subnets, remote subnets, remote gateway, pre-shared key, IKE negotiation policies, and IPsec negotiation policies.
To view the monitoring information, click in the Gateway IP Address column in the VPN gateway list.
To view the monitoring information, click in the Gateway IP Address column in the VPN gateway list.
To view the monitoring information, click in the Gateway IP Address column in the VPN gateway list.
To view the monitoring information, click in the Gateway IP Address column in the VPN gateway list.
You can obtain the VPN gateway ID by querying the VPN gateway list. vgw_ip String Yes Function description: When network_type of the VPN gateway is set to public, set vgw_ip to the EIP IDs of the VPN gateway.
Create a total of two VPN connections between the active and standby EIPs of the VPN gateway and the customer gateways.
By default, a VPN gateway uses two EIPs.
Active/Standby mode: In normal cases, a VPN gateway communicates with a customer gateway through the active connection. If the active connection fails, traffic is automatically switched to the standby VPN connection.
Table 1 P2C VPN billing items Billing Item Description Billing Mode Billing Formula * VPN gateway The unit price varies according to the specification of the gateway instance.
