1

The billing mode of a VPN gateway billed by traffic can be changed from pay-per-use to yearly/monthly.

• A pay-per-use VPN gateway billed by traffic can be changed to be billed by bandwidth.
• A pay-per-use VPN gateway billed by bandwidth can be changed to be billed by traffic.
• A VPN gateway billed by traffic can be changed from pay-per-use to yearly/monthly.

Commercial use

Billing

1

IKEv2

IKEv2:

The authentication algorithm, encryption algorithm, and DH algorithm need to be configured for the IKE policy (phase 1) when you create a VPN connection.

If IKEv1 is used:

• The authentication algorithm, encryption algorithm, and DH algorithm configured on the on-premises device must be the same as those on the cloud, respectively.

If IKEv2 is used:

• The encryption algorithm configured on the on-premises device must be the same as that on the cloud.
• The DH algorithm configured on the on-premises device must be same as that on the cloud.
• The Pseudo Random Function (PRF) algorithm configured on the on-premises device must be the same as the authentication algorithm configured on the cloud.
• The integrity algorithm configured on the on-premises device must be the same as the authentication algorithm configured on the cloud.

If IKEv2 is used, the integrity and PRF algorithm configured on the on-premises device must be the same as the authentication algorithm configured on the cloud.

Commercial use

-

1

Renewing a yearly/monthly VPN gateway

You can choose to enable the auto-renewal function when buying a yearly/monthly VPN gateway.

After auto-renew is enabled, the renewal rules are as follows:

• Monthly subscription: auto renews each month.
• Yearly subscription: auto renews each year.

Commercial use

-

1

VPN resource monitoring

VPN resource monitoring is available in the AF-Johannesburg region.

Commercial use

-

2

Changing the billing mode from pay-per-use to yearly/monthly

Frequently asked questions are displayed on the VPN console.

• Yearly/monthly: When you buy a yearly/monthly VPN gateway, the price includes the price of the VPN connections that can be created for the gateway.
• Pay-per-use: When buying a pay-per-use VPN gateway, you must buy a VPN connection together with the VPN gateway. A pay-per-use VPN gateway can be billed either by traffic or by bandwidth. Currently, only VPN gateways billed by bandwidth can be changed from pay-per-use to yearly/monthly.
• Auto-renew: The auto-renew function can be enabled in the Billing Center.

Commercial use

How Do I Change the Billing Mode of a VPN Gateway from Pay-per-use to Yearly/Monthly?

1

Guaranteed bandwidth

Guaranteed bandwidth is available in the AF-Johannesburg region.

Commercial use

-

1

Frequently asked questions

Problems and solutions encountered by users during the use of the VPN service are summarized and classified, including most frequently asked questions, billing, related operations on the console, networking and application scenarios, and connection failure.

Commercial use

Most Frequently Asked Questions

1

Yearly/monthly billing mode

When you buy a yearly/monthly VPN gateway, the price includes the gateway bandwidth price and the price of the VPN connections that can be created for the gateway.

Commercial use

Billing

2

Remote device configuration

• After you configure the VPN connection on HUAWEI CLOUD, you can choose Operation > Download Remote Config File in the VPN connection list.
• In the dialog box that is displayed, select the device vendor and device model to download the remote configurations.
• You can use this function to check whether the configuration of the on-premises gateway is correct, especially whether the ACL and algorithms are consistent with those required by the HUAWEI CLOUD VPN service.
  NOTE:

  If the downloaded configurations are different from the configurations on the on-premises devices, the configurations on the on-premises devices prevail.

Commercial use

Configuring the Remote Device

3

Disabling PFS

By default, perfect forward secrecy (PFS) is enabled for the IKE phase 2 negotiation on HUAWEI CLOUD. It is recommended that PFS is also enabled on the on-premises gateway for stronger security.

PFS is disabled by default on devices of some vendors. HUAWEI CLOUD VPN allows you to disable PFS.

You can choose VPN Connections > Modify and then click Advanced Settings to disable PFS.

Commercial use

Creating a VPN Connection