tencent cloud

A VPN gateway is a VPN connection instance. Therefore, please create an IPsec VPN gateway before using a VPN connection to securely access the Tencent Cloud Virtual Private Cloud (VPC) from external networks. This document shows you how to create a VPN gateway in the console.

Prerequisites

To create a VPC-based VPN gateway, you need to create a VPC in the same region as the VPN gateway first. For more information, see Creating VPCs.

Directions

1. Log in to the VPC console.
2. Click VPN Connections > VPN Gateway in the left directory to enter the admin page.
3. Click +New.
4. Configure the following gateway parameters in the pop-up window.

   Note：

   • 200 Mbps, 500 Mbps and 1,000 Mbps bandwidths are currently only available in North China (Beijing), East China (Shanghai), South China (Guangzhou), Southwest China (Chengdu), Hong Kong, Macao and Taiwan regions of China(Hong Kong, China), East China (Nanjing) and other availability zones. To use them, please submit a ticket.
   • Only new gateways but not existing gateways are supported on 200 Mbps, 500 Mbps and 1,000 Mbps bandwidths.
   • If the VPN gateway uses 200 Mbps, 500 Mbps, or 1,000 Mbps bandwidths, AES128+MD5 is recommended for VPN tunnel encryption.

   Parameter Name	Configuration
   Gateway Name	Enter the VPN gateway name (up to 60 characters)
   Region	Display the region of the VPN gateway
   AZ	Select the availability zone of the current gateway
   Protocol Type	IPSec and SSL protocols are supported.
   Associated Network	This parameter indicates whether you create a CCN-based VPN/VPN gateway or a VPC-based VPN/VPN gateway. If you want to use a VPN connection to implement the interconnection with multiple VPCs or other Direct Connect networks, please create the CCN based VPN. Note You cannot associate the CCN-based VPN gateway with a CCN instance during its creation. You can associate a created VPN gateway to a CCN instance in the gateway details page. If you create a policy-based VPN tunnel, you also need to enable the route published to the CCN in the IDC IP range of the VPN gateway. If you want to communicate with a single VPC through a VPN connection, please create a VPC based VPN.
   Network	Specify the VPC to be associated with the VPN gateway only when the associated network is VPC.
   Bandwidth cap	Set a reasonable bandwidth cap for the VPN gateway according to the actual application scenarios.
   Tag	Tags mark VPN gateway resources so that these resources can be queried and managed efficiently. Tag is not a required configuration. You can decide whether to configure it according to your demand.
   Billing Mode	Bill-by-traffic mode is supported. This billing mode is applicable to scenarios with significant bandwidth fluctuations.

5. After completing the gateway parameter settings, click Create, and the Status of the gateway is Creating. In 1 to 2 minutes after the gateway is successfully created, the status turns to Running, and the system assigns a public IP to the VPN gateway.