检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Overview Scenario P2C VPN supports certificate authentication. A server uses a client CA certificate to verify the identity of a client. Networking Clients can use the certificates issued by a CA to connect to a VPN gateway for access to a VPC.
There are routes pointing to the local subnets in the VPC where the VPN gateway resides.
Configuring a Linux Client Ubuntu CentOS Debian Red Hat Enterprise Linux openSUSE Parent topic: P2C VPN Client Management
Can I Deploy an Application on the Cloud and a Database in an On-premises Data Center and Connect Them Through a VPN? Yes. A VPN connects a VPC and an on-premises data center. After a VPN is set up, service traffic can be transmitted between the VPC and on-premises data center.
In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways. Click the P2C VPN Gateways tab, and click Download Client Configuration in the Operation column of the target VPN gateway.
Can I Connect a Network with Two Egresses to a VPC Through Two VPN Connections? Yes. Parent topic: Networking and Application Scenarios
If one VPN connection fails, traffic can be quickly switched to the other VPN connection. Active-active VPN gateways can be deployed in different AZs to ensure AZ-level high availability.
Can I Deploy an Application on the Cloud and a Database in an On-premises Data Center and Connect Them Through a VPN Gateway? Yes. A VPN connects a VPC and an on-premises data center.
FAQs - S2C Enterprise Edition VPN Popular Questions General Consulting Networking and Application Scenarios Billing and Payments Operations on the Console VPN Negotiation and Interconnection Connection or Ping Failure Public Addresses Route Configurations Subnet Configurations VPN
What Are VPN Negotiation Parameters? What Are Their Default Values? Table 1 VPN negotiation parameters Protocol Parameter Value IKE Version v1 (v1 has low security.
In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways. Click the P2C VPN Gateways tab, and click Download Client Configuration in the Operation column of the target VPN gateway.
Step Description 1 Step 1: Creating a VPN Gateway Bind two EIPs to the VPN gateway.
How Do I Plan the CIDR Block of a VPC Accessed over a VPN Connection? The VPC CIDR block cannot conflict with the on-premises CIDR block.
How Do I Plan the CIDR Block of a VPC Accessed over a VPN Connection? The VPC CIDR block cannot conflict with the on-premises CIDR block.
Updating a Customer Gateway Function This API is used to update a customer gateway with a specified gateway ID. Only the gateway name and certificate can be updated. To modify other parameters, you need to create another customer gateway. Calling Method For details, see Calling APIs
Verifying a Client CA Certificate Function This API is used to verify the validity of a client CA certificate. Calling Method For details, see Calling APIs. URI POST /v5/{project_id}/p2c-vpn-gateways/vpn-servers/client-ca-certificates/check Table 1 Parameter description Parameter
Parent topic: VPN Negotiation and Interconnection
Which IKE Version Should I Select When I Create a VPN Connection? IKEv2 is recommended because IKEv1 is not secure.
Which IKE Version Should I Select When I Create a VPN Connection? IKEv2 is recommended because IKEv1 is not secure.
Create a VPN gateway and attach it to the enterprise router. On the VPN management console, create a VPN gateway. For details, see Creating a VPN Gateway. On the Enterprise Router console, view the VPN gateway attachment created for the enterprise router.
