Help Center/ Virtual Private Network/ User Guide (Kuala Lumpur Region)/ Management/ Enterprise Edition S2C VPN/ Customer Gateway Management of Enterprise Edition VPN/ Creating a Customer Gateway
Updated on 2025-09-17 GMT+08:00
View PDF
Share

Creating a Customer Gateway

Scenario

To connect your on-premises data center or private network to your ECSs in a VPC, you need to create a customer gateway before creating a VPN connection.

Notes and Constraints

  • Address groups cannot be used to configure the source and destination subnets in a policy on customer gateway devices.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select the desired region and project.
  3. Click in the upper left corner, and choose > .
  4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – Customer Gateways.
  5. On the Customer Gateways page, click Create Customer Gateway.
  6. Set parameters as prompted and click Create Now.

    Table 1 lists the customer gateway parameters.

    Table 1 Description of customer gateway parameters

    Parameter

    Description

    Example Value

    Name

    Name of a customer gateway. The value can contain only letters, digits, underscores (_), hyphens (-), and periods (.).

    cgw-001

    Identifier
    • IP Address: Specify the IP address of the customer gateway.

    Ensure that UDP port 4500 is permitted in a firewall rule on the customer gateway in your on-premises data center or private network.
    • IP Address, 1.2.3.4
    • FQDN, cgw-fqdn

    BGP ASN

    Enter the ASN of your on-premises data center or private network.

    The BGP ASN of the customer gateway must be different from that of the VPN gateway.

    65000
  7. (Optional) If there are two customer gateways, repeat the preceding operations to configure the other customer gateway with a different identifier.

Related Operations

You need to configure an IPsec VPN tunnel on the router or firewall in your on-premises data center.