Modifying a Server

Scenario

You can modify the server configuration.

• If you change the local or client CIDR block on the server, clients need to reconnect to the server.
• If you modify advanced settings such as the protocol and port, you need to download the new client configuration file and import it to the clients for the modification to take effect.

Precautions

• After the port or encryption algorithm is changed, clients are disconnected. You need to download the new client configuration file to reconnect them.
• Exercise caution when adding, deleting, or modifying the local CIDR block of a VPN gateway, client CIDR block of a VPN connection, client authentication type, and access policy, since these operations may interrupt the network.

Modifying a Server

1. Log in to the management console.
2. Click in the upper left corner and select the desired region and project.
3. Click in the upper left corner of the page, and choose Networking > Virtual Private Network.
4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
5. Click the P2C VPN Gateways tab. In the VPN gateway list, locate the target VPN gateway, and click View Server in the Operation column.
   • Click next to Basic Information to change the local or client CIDR block.
   • Click Replace in the Operation column of the server certificate to replace it.
   • Click on the right of Client Authentication Mode to change the client authentication mode.
   • Click next to Advanced Settings to modify the port, encryption algorithm, or domain name access configuration.
     

     After a DNS server address is changed, the new address takes effect when a client reconnects to the cloud.

6. Click OK.

Changing the Authentication Mode

1. Log in to the management console.
2. Click in the upper left corner and select the desired region and project.
3. Click in the upper left corner of the page, and choose Networking > Virtual Private Network.
4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
5. Click the P2C VPN Gateways tab. In the VPN gateway list, locate the target VPN gateway, and click View Server in the Operation column.
6. Change the client authentication mode in either of the following ways:
   • When Client Authentication Mode is set to Password authentication (local), click on the right of Password authentication (local). In the Modify Client Authentication Mode dialog box, change the value of Client Authentication Mode to Certificate authentication and click OK.

     Before changing the authentication mode to Certificate authentication, ensure that users, user groups, and policies have been deleted.

   • When Client Authentication Mode is set to Certificate authentication, click on the right of Certificate authentication. In the Modify Client Authentication Mode dialog box, change the value of Client Authentication Mode to Password authentication (local) and click OK.
     Before changing the authentication mode to Password authentication (local), ensure that CA certificates have been deleted.

     

     After the authentication mode is changed, the original connections are interrupted.