Site VPN

Users can create a Site VPN service of Cloud WAN through the Samsung Cloud Platform Console.

Create Site VPN

You can create and use a Site VPN from the Samsung Cloud Platform Console.

To create a Site VPN, follow these steps.

1. Click the All Services > Networking > Cloud WAN menu. 1. Navigate to the Service Home page of Cloud WAN.
2. On the Service Home page, click the Create Site VPN button. 2. Create Site VPN page.
3. Site VPN creation On the page, input the information required to create the service and select detailed options.

   • Enter or select the required information in the Service Information Input area.

     Category	Required status	Detailed description
     Attachment name	Required	Select the Attachment to use Attachment among which only items created as Site VPN and in Active status are displayed in the list A maximum of 5 Site VPNs can be created per Attachment
     Site VPN name	Required	Enter the Site VPN name to create Enter using English letters (uppercase and lowercase) and numbers, 3-20 characters
     Customer Site equipment redundancy	Required	After selecting Use for redundancy of the customer’s site VPN gateway equipment, enter the Peer VPN GW IP When Use is selected, a total of four VPN tunnels are configured, and the Peer VPN GW IP (Secondary) must be entered Enter the VPN gateway IP address of the external network to connect
     Pre-shared Key	Required	Enter the shared key to be used for IKE mutual authentication between VPN gateways Enter 8‑64 characters, 32‑character alphanumeric combination recommended
     description	Selection	Enter resource description

     Table. Site VPN Service Information Input Items

   • Enter or select the required information in the Tunnel Detailed Settings area.

     Category	Required status	Detailed description
     IKE Settings > IKE version	Required	Select between IKE v1/IKE v2
     IKE Settings > Algorithm Settings	Required	Set the algorithms to use After selecting an item from the Encryption Algorithm list, select the item to use from the Digest Algorithm list and click the Add button When an item is added, the added item appears at the bottom, and up to 10 items can be added
     IKE Settings > Diffie-Hellman	Required	Select algorithm type(s) for key exchange Select up to 3 items
     IKE Settings > SA Lifetime	Required	Enter the session expiration time for SA (Security Association) Enter a value between 120 seconds and 172,800 seconds
     IPSec Settings > Algorithm Settings	Required	Configure algorithms to use After selecting an item from the Encryption Algorithm list, select the item to use from the Digest Algorithm list and click the Add button When an item is added, the added item is displayed at the bottom, and up to 10 items can be added
     IPSec Settings > Perfect Forward Secrecy (PFS)	Required	Enable Perfect Forward Secrecy Enable when configuring you can select up to 3 Diffie-Hellman algorithm types to use for key exchange
     IPSec Settings > SA Lifetime	Required	Enter the session expiration time for SA (Security Association) Manually enter a value between 120 seconds and 172,800 seconds

     Table. Site VPN Tunnel detailed configuration items

   • Enter or select the required information in the BGP routing configuration area.

     Category	Required status	Detailed description
     BGP ASN	Required	Enter BGP ASN (Border Gateway Protocol Autonomous System Number) Enter a value between 1-65534, excluding 65001
     MD5 Key	Required	Enter MD5 Key letters, numbers, special characters_-!#@) Use at least two of them and enter 8-32 characters
     Remote Subnet(CIDR)	Required	Enter the subnet IP range of the connected remote site After entering the IP range, click the Add button Up to 20 IPs can be added
     Routing propagation method (Default Only)	Selection	Select routing propagation method If Use is not selected, apply Full routing table propagation method When Use is selected, apply propagation method only for the Default Gateway Click the Delete All button in the list to remove all added items
     Routing provision scope	Required	Select routing scope Hub Only: Propagate Site VPN routing within the same attachment Same Region: Propagate Site VPN routing within the same region Selected Region: Block propagation of Site VPN routing to the selected other region, multiple regions can be configured from the list when selecting items

     Table. Site VPN BGP routing configuration items

   • Additional Information Input area, please enter or select the required information.

     Category	whether required	Detailed description
     tag	Selection	Add tags Up to 50 tags can be added per resource

     Table. Site VPN additional information input fields

4. In the summary panel, verify the service information and estimated billing amount, then click the Create button.
   • When creation is complete, check the created resources on the Site VPN List page.

Check Site VPN detailed information

The Site VPN service can be viewed and edited for the full resource list and detailed information in the Site VPN menu. Site VPN Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the Site VPN, follow these steps.

1. Click the All Services > Networking > Cloud WAN menu. 1. Navigate to the Service Home page of Cloud WAN.
2. On the Service Home page, click the Site VPN menu. 2. Navigate to the Site VPN List page.
3. On the Site VPN List page, click the resource to view detailed information. 3. Go to the Site VPN Details page.
   • The Site VPN Details page displays status information and additional feature information, and consists of the Details, Tags, Activity Log tabs.

     Category	Detailed description
     status	Current service status Creating: Service creation in progress Active: Service operating normally Editing: Service modification being applied Deleting: Service termination request in progress Failed: Service failed state
     Delete Site VPN	Cancel Service button

     Table. Site VPN status information and additional feature items

Detailed Information

Detailed Information tab allows you to view the detailed information of the selected Site VPN.

Tag

In the Tag tab, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

Job History tab allows you to view the job history of the selected resource.

Delete Site VPN

Deleting unused Site VPNs can reduce operating costs.

To delete a Site VPN, follow these steps.

1. Click the All Services > Networking > Cloud WAN menu. 1. Navigate to the Service Home page of Cloud WAN.
2. On the Service Home page, click the Site VPN menu. 2. Site VPN List Navigate to the page.
3. Site VPN List Click the resource to delete on the page. 3. Go to the Site VPN Details page.
4. On the Site VPN Details page, click the Delete Site VPN button.
   • On the list page, you can delete the selected Site VPN by clicking Delete on the right of the item to be removed.
5. When deletion is complete, check whether the resource has been deleted in the Site VPN list.