Help Center> Virtual Private Network> Administrator Guide> Interconnection with a Huawei AR Router (Active-Active Connections)> Static Routing Mode> Configuration on the Huawei Cloud Console
Updated on 2023-10-20 GMT+08:00
View PDF

Configuration on the Huawei Cloud Console

Prerequisites

  • A VPC and its subnets have been created on the management console.

Procedure

  1. Log in to the management console.
  2. Click Service List and choose Networking > Virtual Private Network.
  3. Create a VPN gateway.

    1. Choose Virtual Private Network > Enterprise – VPN Gateways, and click Buy VPN Gateway.
    2. Set parameters as prompted.

      Table 1 only describes the key parameters for creating a VPN gateway.

      Table 1 VPN gateway parameters

      Parameter

      Description

      Value

      Name

      Name of a VPN gateway.

      vpngw-001

      Associate With

      Select VPC.

      VPC

      Network Type
      • Public network: A VPN gateway communicates with a customer gateway in an on-premises data center through the Internet.
      • Private network: A VPN gateway communicates with a customer gateway in an on-premises data center through a private network.

      Public network

      VPC

      Huawei Cloud VPC that the on-premises data center needs to access.

      vpc-001(192.168.0.0/16)

      Local Subnet

      VPC subnets that the on-premises data center needs to access.

      192.168.0.0/24,192.168.1.0/24

      Interconnection Subnet

      Subnet used for communication between the VPN gateway and VPC. Ensure that the selected interconnection subnet has four or more assignable IP addresses.

      192.168.2.0/24

      BGP ASN

      BGP AS number.

      64512

      Active EIP

      Active EIP used by the VPN gateway to access the on-premises data center.

      1.1.1.2

      Standby EIP

      Standby EIP used by the VPN gateway to access the on-premises data center.

      2.2.2.2

  4. Create a customer gateway, that is, an AR router.

    1. Choose Virtual Private Network > Enterprise – Customer Gateways, and click Create Customer Gateway.
    2. Set parameters as prompted.

      Table 2 only describes the key parameters for creating a customer gateway.

      Table 2 Customer gateway parameters

      Parameter

      Description

      Value

      Name

      Name of a customer gateway.

      cgw-ar

      Routing Mode

      Select Static.

      Static

      Gateway IP Address

      Public IP address of the AR router.

      1.1.1.1

  5. Create VPN connections.

    1. Choose Virtual Private Network > Enterprise – VPN Connections, and click Buy VPN Connection.
    2. Create VPN connection 1.

      Table 3 only describes the key parameters for creating a VPN connection.

      Table 3 Parameter settings for VPN connection 1

      Parameter

      Description

      Value

      Name

      Name of a VPN connection.

      vpn-001

      VPN Gateway

      VPN gateway for which the VPN connection is created.

      vpngw-001

      Gateway IP Address

      Active EIP bound to the VPN gateway.

      1.1.1.2

      VPN Type

      Select Static routing.

      Static routing

      Customer Gateway

      Name of a customer gateway.

      cgw-ar

      Customer Subnet

      Subnet in the on-premises data center that needs to access the VPC on Huawei Cloud.

      172.16.0.0/16

      Interface IP Address Assignment
      • Manually specify

        In this example, select Manually specify.

      • Automatically assign

      Manually specify

      Local Interface IP Address

      Tunnel IP address of the VPN gateway.

      169.254.70.2/30

      Customer Interface IP Address

      Tunnel IP address of the AR router.

      169.254.70.1/30

      Routing Mode

      Select Static.

      Static

      Link Detection

      Whether to enable route reachability detection in multi-link scenarios. When NQA is enabled, ICMP packets are sent for detection and your device needs to respond to these ICMP packets.

      NOTE:

      When enabling this function, ensure that the customer gateway supports ICMP and is correctly configured with the customer interface IP address of the VPN connection. Otherwise, VPN traffic will fail to be forwarded.

      NQA enabled

      PSK, Confirm PSK

      The value must be the same as the PSK configured on the AR router.

      Test@123

      Policy Settings

      The policy settings must be the same as those on the AR router.

      Default
    3. Create VPN connection 2.

      For VPN connection 2, you are advised to use the same parameter settings as VPN connection 1, except the parameters listed in the following table.

      Table 4 Parameter settings for VPN connection 2

      Parameter

      Description

      Value

      Name

      Name of a VPN connection.

      vpn-002

      Gateway IP Address

      Standby EIP bound to the VPN gateway.

      2.2.2.2

      Local Interface IP Address

      Tunnel IP address of the VPN gateway.

      169.254.71.2/30

      Customer Interface IP Address

      Tunnel IP address of the AR router.

      169.254.71.1/30

Parent topic: Static Routing Mode