Help Center/ Virtual Private Network/ User Guide/ P2C VPN/ P2C VPN Gateway Management/ Creating a VPN Gateway
Updated on 2024-12-04 GMT+08:00
View PDF
Share

Creating a VPN Gateway

Scenario

P2C VPN allows users to securely access applications and services deployed in a VPC from local terminals. To use P2C VPN, you need to create a VPN gateway first.

Limitations and Constraints

You can create a maximum of 50 VPN gateways.

Prerequisites

  • A VPC has been created. For details about how to create a VPC, see Creating a VPC and Subnet.
  • Security group rules have been configured for the VPC, and ECSs can communicate with other devices on the cloud. For details about how to configure security group rules, see Security Group Rules.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select the desired region and project.
  3. Click in the upper left corner of the page, and choose Networking > Virtual Private Network.
  4. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
  5. Click the P2C VPN Gateways tab, and then click Buy P2C VPN Gateway.
  6. Set parameters as prompted and click Buy Now.

    Table 1 describes the VPN gateway parameters.

    Table 1 Description of VPN gateway parameters

    Parameter

    Description

    Example Value

    Region

    For low network latency and fast resource access, select the region nearest to your target users.

    Resources cannot be shared across regions.

    Set this parameter based on the actual condition.

    Name

    Enter the name of a VPN gateway.

    p2c-vpngw-001

    VPC

    Select a VPC.

    vpc-001(192.168.0.0/16)

    Interconnection Subnet

    Specify the subnet used by the VPN gateway to access the VPC. Ensure that the selected interconnection subnet has three or more assignable IP addresses.

    192.168.66.0/24

    Specification

    Only Professional 1 is supported.

    • Maximum bandwidth: 300 Mbit/s
    • Maximum number of VPN connections: 500

    Professional 1

    AZ

    An availability zone (AZ) is a geographic location with independent power supply and network facilities in a region. AZs in the same VPC are interconnected through private networks and are physically isolated.

    • If two or more AZs are available, select two AZs.

      The VPN gateway deployed in two AZs has higher availability. You are advised to select the AZs where resources in the VPC are located.

    • If only one AZ is available, select this AZ.

    AZ1, AZ2

    Connections

    Ten VPN connections are included free of charge with the purchase of a VPN gateway. You can select or customize the number of required VPN connections.

    10

    EIP

    Set the EIP used by the VPN gateway to communicate with clients.

    • Create now: Buy a new EIP. The billing mode of a new EIP is yearly/monthly.
    • Use existing: Use an existing EIP. Only EIPs with dedicated bandwidth are supported.
      NOTE:

      If an existing EIP is used, its billing mode can be pay-per-use or yearly/monthly.

    Create now

    EIP Type

    This parameter is available only when a new EIP is created.

    Dynamic BGP: Dynamic BGP provides automatic failover and chooses the optimal path when a network connection fails.

    For more information about EIP types, see What Is an EIP?.

    Dynamic BGP

    Billed By

    This parameter is available only when a new EIP is created.

    Pay-per-use billing includes two modes: billed by bandwidth and billed by traffic.

    • Bandwidth: You need to specify a bandwidth limit and pay for the amount of time you use the bandwidth.
    • Traffic: You need to specify a bandwidth limit and pay for the outbound traffic sent from your VPC.

    Bandwidth

    Bandwidth (Mbit/s)

    This parameter is available only when a new EIP is created.

    Specify the bandwidth of the EIP.

    • All VPN connections created using the EIP share the bandwidth of the EIP. The total bandwidth consumed by all the VPN connections cannot exceed the bandwidth of the EIP.

      If network traffic exceeds the bandwidth of the EIP, network congestion may occur and VPN connections may be interrupted. As such, ensure that you configure enough bandwidth.

    • You can configure alarm rules on Cloud Eye to monitor the bandwidth.
    • You can customize the bandwidth within the allowed range.
    • Some regions support only 300 Mbit/s bandwidth by default. If higher bandwidth is required, select 300 Mbit/s bandwidth and then submit a service ticket for capacity expansion.

    20 Mbit/s

    Bandwidth Name

    This parameter is available only when a new EIP is created.

    Specify the name of the EIP bandwidth.

    p2c-vpngw-bandwidth1

    Advanced Settings > Tags
    • A tag identifies a VPN resource. It consists of a key and a value. A maximum of 20 tags can be added.
    • You can select predefined tags or customize tags.
    • To view predefined tags, click View predefined tags.

    -

    Usage Duration

    If your account balance is sufficient and you select Auto-renew, the system automatically renews your service when the required duration elapses.

    • Monthly subscription: Your service is automatically renewed on a per-month basis.
    • Yearly subscription: Your service is automatically renewed on a per-year basis.

    6