Help Center/ Virtual Private Network/ Best Practices/ Configuring Enterprise Edition P2C VPN to Connect Mobile Terminals to a VPC (Certificate Authentication)/ Planning Networks and Resources
Updated on 2024-07-23 GMT+08:00
View PDF

Planning Networks and Resources

Data Plan

Table 1 Data plan

Category

Item

Data

VPC

Subnet to be interconnected

192.168.0.0/16

VPN gateway

Interconnection subnet

This subnet is used for communication between the VPN gateway and VPC. Ensure that the selected interconnection subnet has three or more assignable IP addresses.

192.168.2.0/24

Connections (created/remaining)

0/10

EIP

An EIP is automatically generated when you buy it.

In this example, the EIP 11.xx.xx.11 is generated.

Server

Local CIDR block

192.168.0.0/24

Server certificate

cert-server (name of the server certificate hosted by the CCM)

Client

SSL parameters
  • Protocol: TCP
  • Port: 443
  • Encryption algorithm: AES-128-GCM
  • Authentication algorithm: SHA256
  • Compression: disabled

Client CIDR block

172.16.0.0/16

Client authentication mode
Select Certificate authentication and click Upload Client CA Certificate.
  • Name: ca-cert-client
  • Content:

    -----BEGIN CERTIFICATE-----

    od2VC7zXq7vmsVS5ZuyzeZA9CG+kzHsznZnmMjK+L9ddtRrLolRKIlE7VgWSVvn

    NCnGre6nQErWV688fsKJFIJ7xEBpt+S10zNuuk42OA36RsSauJWtLtebvhTav5df

    -----END CERTIFICATE-----