Help Center/ Virtual Private Network/ FAQs/ Classic VPN/ Networking and Application Scenarios/ What Are the Impacts of a VPN on an On-premises Network? What Are the Changes to the Route for Accessing an ECS?
Updated on 2024-07-23 GMT+08:00
View PDF
Share

What Are the Impacts of a VPN on an On-premises Network? What Are the Changes to the Route for Accessing an ECS?

When you configure a VPN, perform the following operations on the on-premises gateway:

  1. Configure IKE and IPsec policies.
  2. Specify the to-be-protected traffic (ACL rules).
  3. Check the route configuration on the gateway to ensure that traffic destined for a VPC can be routed to the correct outbound interface (interface having an IPsec policy bound).

After the VPN configuration is complete, only the traffic matching the ACL rules enters the VPN tunnel.

For example, before a VPN is created, on-premises users access the ECS through the EIP bound to the ECS. After a VPN is created, data flows matching the ACL rules access the private IP address of the ECS through the VPN tunnel.