Overview
Scenario
VPN can be used to enable communication between an on-premises data center and ECSs in a VPC.
Networking
In this example, two VPN connections are set up between an on-premises data center and a VPC to ensure network reliability. If one VPN connection fails, traffic is automatically switched to the other VPN connection, ensuring service continuity.
Solution Advantages
- A VPN gateway provides two IP addresses to establish dual independent VPN connections with a customer gateway. If one VPN connection fails, traffic can be quickly switched to the other VPN connection.
- Active-active VPN gateways can be deployed in different AZs to ensure AZ-level high availability.
Notes and Constraints
- The local and customer subnets configured for the VPN gateway cannot be the same. That is, the VPC subnet and the data center subnet to be interconnected must be different.
- The IKE policy, IPsec policy, and PSK of the VPN gateway must be the same as those of the customer gateway.
- The security groups associated with ECSs in the VPC permit access from and to the on-premises data center.
- The customer gateway device needs to use a policy to connect to the VPN gateway.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot