Help Center> Virtual Private Network> FAQ> VPN Negotiation and Interconnection> Will an IPsec VPN Connection Be Established Automatically?

Will an IPsec VPN Connection Be Established Automatically?

After you complete the configurations on both ends of an IPsec VPN connection, the VPN connection will not be automatically established only after data flows between the two ends of the connection. If no data flows between the cloud and the on-premises data center, the VPN connection will always be in the down state. Any data generated by accessing or pinging between servers can trigger the establishment of a VPN connection.

The establishment of a VPN connection can be triggered either through the gateways of the VPN connection or by the traffic between servers on the cloud and in an on-premises data center.

However, automatic establishment of a VPN connection cannot be triggered by a VPN gateway on HUAWEI CLOUD. Verify that the establishment of your VPN connection can be triggered by the data flows between the two ends of the VPN connection. That is, check whether a VPN connection can be established after you ping a server on the cloud from a server in the on-premises data center, and whether a VPN connection can be established after you disconnect the connection and ping a server in the on-premises data center from a server on the cloud.

The source and destination addresses of the ping packets must be protected by the VPN.

Before a VPN connection is established, the gateway IP addresses of both ends can be pinged. However, pinging the gateway IP addresses does not trigger the establishment of the VPN connection.