What's New

1

Dual connection configuration

S2C VPN allows you to create two independent VPN connections for a VPN gateway simultaneously.

Commercial use

Creating VPN Connections

2

BGP peer status monitoring and display

S2C VPN supports BGP peer status monitoring and display, helping users locate faults based on the BGP peer status.

Commercial use

Viewing a VPN Connection

1

IPsec negotiation failure logs

S2C VPN allows users to view IPsec negotiation failure logs.

Commercial use

The State of a VPN Connection Is Not connected

2

Gateways of the Professional 3 specification

In S2C VPN, the specification Professional 3 is supported. A VPN gateway of this specification supports a maximum of 5 Gbit/s bandwidth.

Commercial use

Product specifications

3

Specifying an IP address for a client

P2C VPN allows users to assign a virtual IP address to a specific client.

Commercial use

Creating a User and User Group

4

Login and access audit

P2C VPN allows users to query historical online and offline terminal information.

Commercial use

Viewing VPN Connection Logs

5

Connection management and proactive disconnection

P2C VPN allows users to manage and proactively disconnect connections.

Commercial use

Tearing Down a VPN Connection

1

Importing or deleting user accounts and initial passwords in batches

P2C VPN supports batch import and deletion of users.

Commercial use

--

2

DNS domain name access

P2C VPN supports the DNS function, allowing users to use domain names to access cloud services.

Commercial use

Product specifications

1

Commercial use of P2C VPN

• Multiple authentication modes are supported, including certificate authentication and password authentication.

• Terminals running different operating systems, including Windows, macOS, Linux, Android, and iOS, can access the cloud network.

Commercial use

--

2

Specification increase or decrease

The specification of an S2C VPN gateway can be increased or decreased.

Commercial use

Product Specifications

1

Upgrade from Classic VPN to Enterprise Edition VPN

Classic VPN can be upgraded to Enterprise Edition VPN, without modifying the configurations of the customer gateway.

Commercial use

Submit a service ticket to Huawei technical support for such an upgrade.

1

SDK interface invoking

Enterprise Edition VPN provides software development kits (SDKs) in Java, Python, Go, NodeJs, and PHP languages.

Commercial use

Software Development Kit SDK

2

Tags

Enterprise Edition VPN allows you to set tags for VPN gateways, customer gateways, and VPN connections to facilitate resource identification and management.

You can select predefined tags or customize tags.

Commercial use

Creating a VPN Gateway

Creating a Customer Gateway

Creating a VPN Connection

1

Specifying an IP address for a VPN gateway of the private network type

When creating an Enterprise Edition VPN gateway of the private network type, you can specify an IP address in the access subnet as the VPN gateway IP address.

Commercial use

Specifying an IP Address for a VPN Gateway of the Private Network Type

2

Access via non-fixed IP addresses

An Enterprise Edition VPN gateway can connect to a customer gateway that uses a non-fixed IP address.

Commercial use

Connecting an On-premises Data Center to a VPC on the Cloud Through VPN (Access via Non-fixed IP Addresses)

1

VPN gateway of the GM specification (supporting SM series cryptographic algorithms)

Enterprise Edition VPN gateways of the GM specification are supported, in compliance with the GB∕T 36968-2018 Information security technology —Technical specification for IPSec VPN.

Commercial use

Differences Between Enterprise Edition VPN and Classic VPN

2

Active/Standby mode

• An Enterprise Edition VPN gateway can establish active and standby connections with a customer gateway. In normal cases, the VPN gateway communicates with the customer gateway through the active connection. If the active connection fails, traffic is automatically switched to the standby VPN connection. After the fault is rectified, traffic is switched back to the active VPN connection.

• For open APIs of Enterprise Edition VPN gateways, the master_eip and slave_eip fields are replaced with eip1 and eip2. During July 2023 to January 2024, the four fields coexist. For details, see Change History.

Commercial use

Connecting an On-premises Data Center to a VPC on the Cloud Through VPN (Active/Standby Mode)

3

Shared bandwidth

An Enterprise Edition VPN gateway can be bound to EIPs that share bandwidth, reducing bandwidth costs.

Commercial use

Creating a VPN Gateway

1

User-defined bandwidth

The bandwidth can be adjusted when an EIP instance is created for an Enterprise Edition VPN gateway.

Commercial use

Creating a VPN Gateway

1

VPN gateway of the Basic specification

Enterprise Edition VPN gateways of the Basic specification are supported. Such a gateway supports a maximum bandwidth of 100 Mbit/s and 10 connection groups.

Commercial use

Differences Between Enterprise Edition VPN and Classic VPN

2

Gateway and connection traffic monitoring

Enterprise Edition VPN supports monitoring of network metrics (such as the packet receive rate and packet send rate) and connection metrics (such as the number of connections) on Cloud Eye.

Commercial use

Metrics

3

Increase or decrease in the connection quota for a yearly/monthly VPN gateway

The connection quota can be increased or decreased for yearly/monthly Enterprise Edition VPN gateways. The adjustment takes effect immediately.

Commercial use

Increasing or Decreasing the VPN Connection Group Quota of a Yearly/Monthly VPN Gateway

1

Private VPN gateways

Private Enterprise Edition VPN gateways are supported to encrypt traffic transmitted over Direct Connect connections, improving data transmission security.

Commercial use

Using VPN to Encrypt Data over Direct Connect Lines

2

Association with enterprise routers

• An Enterprise Edition VPN gateway can be associated with an enterprise router so that the on-premises data center can access multiple VPCs simultaneously.
• Enterprise Edition VPN gateways support backup between Direct Connect and VPN. When the Direct Connect connection fails, traffic is automatically switched to VPN connections, ensuring service continuity.

Commercial use

Allowing Direct Connect and VPN to Work in Active and Standby Mode to Link Data Center to Cloud

1

Enterprise VPN Commercial Use

• Supports tenant-exclusive gateways, dual connections, and active-active gateways to be deployed across AZs, ensuring high reliability.
• Supports the BGP route-based mode, and VPN hub function.
• Supports large-capacity gateways that offer up to 1 Gbit/s bandwidth and 50 subnets.

Commercial use

--

1

Enterprise VPN Open Beta Testing

• Supports tenant-exclusive gateways, dual connections, and active-active gateways to be deployed across AZs, ensuring high reliability.
• Supports the BGP route-based mode, and VPN hub function.
• Supports large-capacity gateways that offer up to 1 Gbit/s bandwidth and 50 subnets.

Open beta testing

--

1

The value of Remote Subnet can be 0.0.0.0/0.

The AF-Johannesburg region allows the value of Remote Subnet to be set to 0.0.0.0/0.

Commercial use

Buying a VPN Connection

1

Change between billing by traffic and by bandwidth.

• A pay-per-use VPN gateway billed by traffic can be changed to be billed by bandwidth.
• A pay-per-use VPN gateway billed by bandwidth can be changed to be billed by traffic.

Commercial use

Changing a Pay-Per-Use VPN Gateway from Being Billed by Bandwidth to Being Billed by Traffic or the Other Way Around

1

Customer gateways

Customers gateways are under OBT in the AP-Singapore region.

A VPN consists of a VPN gateway, a customer gateway, and VPN connections.

• A VPN gateway is the egress router of a VPC. VPN connections use VPN gateways to securely connect your data center to your VPC. To support VPN access, you must buy an EIP when creating the VPN gateway.
• A customer gateway provides information to the cloud about your on-premises gateway device.
• A VPN connection is an encrypted tunnel that transmit data over the Internet and connects your data center or network to a VPC. Currently, VPN connections use the IPsec protocol.

Open beta testing

-