Help Center/ Virtual Private Network/ Getting Started/ Configuring Enterprise Edition VPN to Connect an On-premises Data Center and a VPC/ Step 1: Creating a VPN Gateway
Updated on 2023-10-20 GMT+08:00
View PDF

Step 1: Creating a VPN Gateway

Prerequisites

  • A VPC has been created. For details about how to create a VPC, see Creating a VPC and Subnet.
  • Security group rules have been configured for ECSs in the VPC, and allow the customer gateway in the on-premises data center to access VPC resources. For details about how to configure security group rules, see Security Group Rules.

Procedure

  1. Log in to the management console.
  2. Click Service List and choose Networking > Virtual Private Network.
  3. Choose Virtual Private Network > Enterprise – VPN Gateways, and click Buy VPN Gateway.
  4. Set parameters as prompted and click Next.

    The following describes only key parameters. For details about more parameters, see Creating a VPN Gateway.

    Table 1 Key VPN gateway parameters

    Parameter

    Description

    Example Value

    Billing Mode

    The options include Yearly/Monthly and Pay-per-use.

    Yearly/Monthly

    Region

    Select the region nearest to you.

    EU-Dublin

    Name

    Name a VPN gateway.

    vpngw-001

    Network Type
    • Public network: A VPN gateway communicates with a customer gateway in an on-premises data center through the Internet.
    • Private network: A VPN gateway communicates with a customer gateway in an on-premises data center through a private network.

    Public network

    Associate With

    Select VPC.

    VPC

    VPC

    Select the VPC that needs to access the on-premises data center.

    vpc-001(192.168.0.0/16)

    Local Subnet

    Specify the VPC subnet that needs to access the on-premises data center.

    You can manually enter a CIDR block or select a subnet from the drop-down list box.

    192.168.0.0/24

    Interconnection Subnet

    This subnet is used for communication between the VPN gateway and VPC. Ensure that the selected interconnection subnet has four or more assignable IP addresses.

    192.168.2.0/24

    HA Mode

    Select Active-active.

    Active-active

    Active EIP

    You can buy a new EIP or use an existing EIP.

    11.xx.xx.11

    Active EIP 2

    11.xx.xx.12

Verification

Check the created VPN gateway on the VPN Gateways page. The initial state of the VPN gateway is Creating. After about 2 minutes, the state changes to Normal, indicating that the VPN gateway is successfully created.