VPN

• 1: Overview
• 2: How-to guides
• 2.1: VPN Tunnel
• 3: API Reference
• 4: CLI Reference
• 5: Release Note

1 - Overview

Service Overview

VPN (Virtual Private Network) is a service that connects the customer network and Samsung Cloud Platform through an encrypted virtual private network.

Features

• Rapid Service Provision You can set up automated services through the web-based Console, and you can use the VPN service immediately without any waiting time after creating the service.

• Secure Access You can safely access your internal network built on the Samsung Cloud Platform from your customer’s network outside through encrypted virtual tunneling using a performance and stability verified IPsec VPN.

• Easy Operation Environment You can easily and quickly manage web-based deployment, capacity provisioning, and service updates without the complex network environment configuration.

• Efficient Service Use It is possible to manage costs efficiently because you can pay only for the amount of service used without any separate installation costs.

Provided Features

VPN provides the following functions.

• Providing virtual tunneling encrypted with IPsec
  • Compatible VPN: Secui – Bluemax (TG360),Paloalto,Axgate,Cisco-router/ASA/Meraki, Checkpoint,AWS,Azure,Vmware NSX-T
• Create Virtual Private Gateway
  • Create a Gateway to connect the customer’s network to a private network that cannot be accessed from the outside
• VPN Tunnel Creation
  • Select IPsec VPN Gateway (The maximum number of VPN Tunnels per VPN Gateway is 5)
  • IPsec VPN Gateway redundancy configuration, when a failure occurs in the Active device, the Standby device operates automatically

Constraints

Region-based provision status

VPN is available in the following environments.

Preceding Service

2 - How-to guides

VPN creation

Samsung Cloud Platform Console where VPN services can be created and used.

To create a VPN, follow the following procedure.

1. All services > Networking > VPN menu, click. It moves to the Service Home page of VPN.
2. Service Home page, click the Create VPN button. It moves to the Create VPN page.
3. VPN creation page where you enter the information required for service creation and select detailed options.

• Service Information Input area, please enter the necessary information.

  Classification	Necessity	Detailed Description
  VPN Gateway name	required	Enter the VPN Gateway name Enter within 3-20 characters using English uppercase and lowercase letters, and numbers
  Connected VPC Name	Required	Select the VPC connected to the VPN Gateway
  Public IP	required	Select the IP to communicate with the remote site from the VPN Gateway

  Table. VPN service information input items

• Additional Information Input area, please enter or select the required information.

  Classification	Mandatory	Detailed Description
  Description	Selection	User Additional Description Up to 255 characters can be entered
  Tag	Select	Add Tag Up to 50 can be added per resource Click the Add Tag button and enter or select Key, Value

  Table. Additional Information Input Items for VPN Service

3. Summary panel where you created detailed information and estimated billing amount, and click the Complete button.

• Once creation is complete, check the created resource on the VPN list page.

VPN detailed information check

VPN service can check and modify the entire resource list and detailed information. The VPN details page consists of details, tags, operation history tabs.

To check the detailed information of the VPN service, follow the following procedure.

1. All services > Networking > VPN menu, click. It moves to the Service Home page of VPN.
2. Service Home page, click the VPN menu. It moves to the VPN list page.
3. VPN list page, click on the resource to check the detailed information. It moves to the VPN details page.

• VPC Details page displays status information and additional feature information, and consists of Details, Tags, Operation History tabs.

Detailed Information

VPN list page where you can check the operation history of the selected resource.

Tag

VPN List page where you can check the tag information of the selected resource, and add, change or delete it.

Work History

VPN details page where you can check the operation history of the selected resource.

VPN cancellation

You can cancel the unused VPC to reduce operating costs. However, when canceling the service, the operating service may be stopped immediately, so you should consider the impact of stopping the service sufficiently and proceed with the cancellation work.

To cancel the VPN, follow the following procedure.

1. All Services > Networking > VPN menu, click. It moves to the Service Home page of VPN.
2. Service Home page, click the VPN menu. It moves to the VPN list page.
3. VPN list page, select the resource to be canceled. It moves to the VPN details page.
4. VPN details page, click the cancel service button.
5. Once the cancellation is complete, check if the resource has been cancelled on the VPN list page.

2.1 - VPN Tunnel

VPN Tunnel creation

You can configure IPSec Tunning with a remote site in the VPN service on the Samsung Cloud Platform Console.

To create a VPN Tunnel, follow the following procedure.

1. All services > Networking > VPN menu, click. It moves to the Service Home page of VPN.
2. Service Home page, click the VPN Tunnel creation button. It moves to the VPN Tunnel creation page.
3. VPN Tunnel Creation page where you enter the information required for service creation and select detailed options.

• Service Information Input area, please enter the necessary information.

  Classification	Mandatory	Detailed Description
  VPN Tunnel name	required	Enter the VPN Tunnel name Use English uppercase and lowercase letters, numbers within 3-20 characters
  VPC Gateway name	required	VPN Gateway to be selected
  VPC name	default	Check VPC information connected to VPN Gateway
  Public IP	Basic	Check IP information for communication with the remote site from the VPN Gateway
  Peer VPN GW IP	required	enter the IP information of the remote VPN Example: 192.168.10.0
  Romote Subnet(CIDR)	required	enter the subnet address of the remote site to connect click the add button after entering the IP address, up to 10 can be added example: 20.0.0.0/24
  Pre-shared Key	required	Enter the shared key (PSK) to be used for IKE mutual authentication between VPN gateways Minimum 8 characters ~ Maximum 64 characters limited It is recommended to use a 32-character string of alphanumeric characters
  Description	Selection	User Additional Description Up to 255 characters can be entered

  Table. VPN Tunnel Service Configuration Items

• Tunnel settings area where you can enter or select the required information.

  Classification	Mandatory	Detailed Description
  IKE 설정 > IKE Version	required	IKE version selection
  IKE settings > Algorithm settings	required	Encryption Algorithm and Digest Algorithm are selected and the Add button is clicked
  IKE 설정 > Diffie-Hellman	required	Diffie-Hellman group selection
  IKE 설정 > SA LifeTime	required	VPN session (Security Association) valid time input
  IPSec settings > Algorithm settings	required	Select Encryption Algorithm and Digest Algorithm, and click the Add button
  IPSec settings > Perfect Forward Secrecy(PFS)	required	Select whether to use the PFS group
  IPSec settings > Diffie-Hellman	required	Select Diffie-Hellman group
  IPSec settings > SA LifeTime	required	Enter the valid time of the VPN session (Security Association)

  Table. VPN Tunnel Setup Items

• Additional Information Input area, please enter or select the required information.

  Classification	Mandatory	Detailed Description
  DPD additional settings > DPD probe interval	required	Enter the DPD inspection cycle Enter a value between 1-3,600 seconds
  Tag	Selection	Add Tag Up to 50 can be added per resource Click the Add Tag button and enter or select Key, Value

  Table. Security Group Additional Information Input Items

3. Summary panel where you created detailed information and estimated billing amount, and click the Complete button.

• Once creation is complete, check the created resource on the VPN Tunnel list page.

VPN Tunnel detailed information check

VPN Tunnel service can check and modify the entire resource list and detailed information. The VPN Tunnel details page consists of details, tags, and operation history tabs.

To check the VPN details, follow the following procedure.

1. All services > Networking > VPN menu, click. It moves to the Service Home page of VPN.
2. Service Home page, click the VPN Tunnel creation button. It moves to the VPN Tunnel list page.
3. VPN Tunnel list page, click on the resource to check the detailed information. It moves to the VPN Tunnel details page.

• VPN Tunnel details page displays status information and additional feature information, and consists of details, tags, operation history tabs.

Detailed Information

VPN Tunnel list page where you can check the detailed information of the selected resource and modify the information if necessary.

Tag

VPN Tunnel List page where you can check the tag information of the selected resource, and add, change or delete it.

Work History

VPN Tunnel list page where you can check the operation history of the selected resource.

VPN Tunnel deletion

You can delete unused VPC Tunnels to reduce operating costs. However, deleting a Tunnel can immediately stop services in operation, so you must consider the impact of service interruption before proceeding with the deletion work.

To cancel the VPN, follow the following procedure.

1. All services > Networking > VPN menu, click. It moves to the Service Home page of VPN.
2. Service Home page, click the VPN Tunnel creation button. It moves to the VPN Tunnel list page.
3. VPN Tunnel list page, click on the resource to check the detailed information. It moves to the VPN Tunnel details page.
4. VPN Tunnel deletion button should be clicked.
5. Once the cancellation is complete, please check if the resource has been deleted from the VPN Tunnel list page.

3 - API Reference

4 - CLI Reference

5 - Release Note

VPN