检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
To purchase an S2C VPN gateway, click Buy Now.
The IP address is the local gateway address of the created VPN. When configuring the remote tunnel in your data center, you must set the remote gateway address to this IP address.
The IP address is the local gateway address of the created VPN. When configuring the remote tunnel in your data center, you must set the remote gateway address to this IP address.
To ensure consistent tunnel states at the two ends, it is recommended that you enable DPD on your on-premises gateway to detect the IKE process state of the VPN service. Deleting the tunnel in the case of DPD detection failures will not affect service stability.
The P2C VPN gateway list is displayed. Click in the text box for selecting a property or entering a keyword, choose a tag key under Resource Tag, and select a tag value to search for the target VPN gateway. You can only select existing keys and values from the drop-down list.
To ensure consistent tunnel states at the two ends, it is recommended that you enable DPD on your on-premises gateway to detect the IKE process state of the VPN service. After DPD fails, the tunnel will be deleted without affecting service stability.
To ensure consistent tunnel states at the two ends, it is recommended that you enable DPD on your on-premises gateway to detect the IKE process state of the VPN service. After DPD fails, the tunnel will be deleted without affecting service stability.
The VPN gateway details page is displayed. Click the Tags tab, and add, delete, modify, or view tags of the VPN gateway. Add a tag. Click Add Tag. In the Add Tag dialog box, enter the key and value of a tag to be added, and click OK. Modify a tag.
Ensure that PFS is also enabled on the gateway device in your on-premises data center and the PFS settings on both ends are the same. Otherwise, the negotiation will fail.
In the P2C VPN gateway list, locate the target P2C VPN gateway, and click View Server in the Operation column. On the Server tab page, view the encryption algorithm and authentication algorithm of the server in the Advanced Settings area.
To obtain the IP address of an ECS, perform the following operations: On the P2C VPN Gateways page, click the name of the VPC to which the target VPN gateway belongs. On the Summary tab page, click the number of created ECSs in the VPC Resources area.
Figure 3 Inter-region interconnection between VPCs Enterprise Branch Interconnection A VPN gateway functions as a VPN hub to connect enterprise branches, as shown in Figure 4. This eliminates the need to configure VPN connections between every two branches.
Ensure that PFS is also enabled on the gateway device in your on-premises data center and the PFS settings on both ends are the same. Otherwise, the negotiation will fail.
What Will Happen If Traffic Exceeds the Bandwidth of a VPN Gateway? Is an IPsec VPN Connection Automatically Established? Why Cannot ECSs at the Two Ends of a Normal Cross-Region VPN Connection Ping Each Other?
Ensure that PFS is also enabled on the gateway device in your on-premises data center and the PFS settings on both ends are the same. Otherwise, the negotiation will fail.
The number of available IP addresses in the client CIDR block must be greater than four times the maximum number of gateway connections.
Figure 3 Data isolation As shown in the figure, a failure of customer A's VPN gateway has no impact on customer B's VPN gateway. Parent topic: Security
You can obtain the project ID by referring to Obtaining the Project ID. p2c_vgw_id String Yes Specifies the ID of a P2C VPN gateway instance.
On the P2C VPN Gateways page, locate the target VPN gateway, and click Download Client Configuration in the Operation column to download the configuration package. Decompress the package to obtain the client_config.conf, client_config.ovpn, and README.md files.
Assume that the subnets of the data center are 192.168.3.0/24 and 192.168.4.0/24, the subnets of the VPC are 192.168.1.0/24 and 192.168.2.0/24, and the public IP address of the IPsec tunnel egress in the VPC is 1.1.1.1, which can be obtained from the local gateway parameters of the
