VPN

• 1: Overview
• 1.1: ServiceWatch Metrics
• 2: How-to guides
• 2.1: VPN Tunnel
• 3: API Reference
• 4: CLI Reference
• 5: Release Note

1 - Overview

Service Overview

VPN(Virtual Private Network) is a service that connects the customer’s network to the Samsung Cloud Platform through an encrypted virtual private network.

Features

• Rapid Service Delivery You can configure automated services through a web-based console, and after creating a service, you can use the VPN service immediately without any waiting time.

• Thorough secure connection You can securely connect from a customer’s external network to the customer’s internal network built on the Samsung Cloud Platform via encrypted virtual tunneling using a performance‑ and reliability‑validated IPsec VPN.

• Simple operating environment You can easily and quickly manage web-based deployment, capacity provisioning, and service updates without the need for a complex network environment setup.

• Efficient Service Use You can bear costs only for the amount you use the service without any separate installation fees, enabling efficient cost management.

Provided features

VPN provides the following features.

• Provide virtual tunneling encrypted with IPsec
  • Compatible VPN: Secui – Bluemax (TG360),Paloalto,Axgate,Cisco-router/ASA/Meraki, Checkpoint,AWS,Azure,Vmware NSX-T
• Virtual Private Gateway creation
  • Create a Gateway to connect the customer’s network to a private network that cannot be accessed externally.
• VPN Tunnel Creation
  • Select IPsec VPN Gateway (up to 5 VPN tunnels per VPN Gateway)
  • In an IPsec VPN Gateway redundancy configuration, the standby device automatically operates when a failure occurs on the active device.

Constraints

Provision status by region

VPN is available in the following environments.

Preceding Service

1.1 - ServiceWatch Metrics

VPN sends metrics to ServiceWatch. The metrics provided by default monitoring are data collected at a 1‑minute interval.

Basic Metrics

The following are the basic metrics for the VPN namespace.

The indicators whose names are displayed in bold below are the key indicators selected from the basic indicators provided by VPN. Key metrics are used to configure service dashboards that are automatically built for each service in ServiceWatch.

Each metric indicates, via the user guide, which statistical value is meaningful when viewing that metric, and among the meaningful statistics, the values shown in bold are the primary statistics. In the service dashboard, you can view key metrics using these primary statistical values.

2 - How-to guides

Create VPN

You can create and use a VPN service from the Samsung Cloud Platform Console.

To create a VPN, follow these steps.

1. Click the All Services > Networking > VPN menu. You will be taken to the VPN Service Home page.

2. On the Service Home page, click the Create VPN button. You will be taken to the Create VPN page.

3. On the VPN creation page, enter the information required to create the service and select detailed options.

   • Enter the required information in the Service Information Input area.

     Category	Required status	Detailed description
     VPN Gateway name	Required	Enter VPN Gateway name Enter using English letters and numbers, within 3 to 20 characters
     Connected VPC name	Required	Select the VPC connected to the VPN Gateway Click + New to create a VPC and then select it
     Public IP	Required	Select the IP for communicating with the remote site from the VPN Gateway.

     Table. VPN Service Information Input Items

   • Enter or select the required information in the Additional Information Input area.

     Category	Required status	Detailed description
     Explanation	Selection	User additional description
     tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, enter or select Key, Value values.

     Table. VPN service additional information input fields

4. Summary Check the detailed information and estimated billing amount generated in the panel, and click the Create button.

   • After creation is complete, check the created resources on the VPN List page.

Check VPN detailed information

The VPN service allows you to view and edit the full resource list and detailed information. VPN Details page consists of Details, Tags, Activity Log tabs.

To view detailed information about the VPN service, follow these steps.

1. Click the All Services > Networking > VPN menu. You will be taken to the VPN’s Service Home page.
2. On the Service Home page, click the VPN menu. You will be taken to the VPN List page.
3. On the VPN List page, click the resource to view detailed information. You will be taken to the VPN Details page.
   • VPC Details page displays status information and additional feature information, and consists of Details, Tags, Activity History tabs.

Detailed Information

On the VPN List page, you can view the operation history of the selected resource.

tag

On the VPN List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

On the VPN Details page, you can view the operation history of the selected resource.

Terminate VPN

You can terminate unused VPCs to reduce operating costs. However, terminating a service may cause the running service to stop immediately, so you should thoroughly consider the impact of service interruption before proceeding with the termination.

To cancel the VPN, follow these steps.

1. Click the All Services > Networking > VPN menu. Go to the VPN Service Home page.
2. From the Service Home page, click the VPN menu. You will be taken to the VPN List page.
3. On the VPN List page, select the resource to cancel. Navigate to the VPN Details page.
4. On the VPN Details page, click the Cancel Service button.
5. Once the termination is complete, check on the VPN List page whether the resource has been terminated.

2.1 - VPN Tunnel

Create VPN Tunnel

In the Samsung Cloud Platform Console, you can configure IPSec Tunning with remote sites in the VPN service.

To create a VPN Tunnel, follow these steps.

1. Click the All Services > Networking > VPN menu. 1. Navigate to the VPN Service Home page.

2. On the Service Home page, click the Create VPN Tunnel button. 2. Navigate to the Create VPN Tunnel page.

3. VPN Tunnel creation On the page, enter the information required to create the service, and select detailed options.

   • Enter the required information in the Service Information Input area.

     Category	required status	Detailed description
     VPN Tunnel name	Required	Enter VPN Tunnel name Enter using English letters and numbers, within 3 to 20 characters
     VPC name	Required	Select the VPN Gateway to connect
     VPC name	Default	Automatically input VPC information connected to the VPN Gateway
     Public IP	Default	Automatic entry of IP information for communicating with remote sites from the VPN Gateway
     Peer VPN GW IP	Required	Enter the remote VPN IP information Example: 192.168.10.0
     Romote Subnet(CIDR)	Required	Enter the subnet address of the remote site to connect After entering the IP address, click the Add button, up to 10 can be added Example: 20.0.0.0/24
     Pre-shared Key	Required	Enter the shared key (PSK) to be used for IKE mutual authentication between VPN gateways Enter within 8 - 64 characters It is recommended to use a 32-character alphanumeric string
     Explanation	Selection	User additional description

     Table. VPN Tunnel Service Information Input Items

   • Enter or select the required information in the Tunnel Settings area.

     Category	Required status	Detailed description
     IKE Settings > IKE Version	Required	Select IKE version
     IKE Settings > Algorithm Settings	Required	Select Encryption Algorithm and Digest Algorithm, then click the Add button.
     IKE Settings > Diffie-Hellman	Required	Diffie-Hellman group selection
     IKE Settings > SA Lifetime	Required	Enter VPN session (Security Association) validity period
     IPSec Settings > Algorithm Settings	Required	Select Encryption Algorithm and Digest Algorithm, then click the Add button.
     IPSec Settings > Perfect Forward Secrecy(PFS)	Required	Select whether to use the PFS group
     IPSec Settings > Diffie-Hellman	Required	Diffie-Hellman group selection
     IPSec Settings > SA Lifetime	Required	VPN session (Security Association) valid time input

     Table. VPN Tunnel configuration items

   • Enter the required information in the DPD Additional Settings area.

     Category	Required	Detailed description
     DPD additional settings > DPD probe interval	Required	Enter the DPD inspection interval Enter a value between 1 and 3,600 seconds

     Table. VPN Tunnel DPD Additional Configuration Input Items

   • In the Additional Information Input area, enter or select the required information.

     Category	required status	Detailed description
     tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, input or select Key, Value values

     Table. VPN Tunnel additional information input fields

4. Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.

   • When creation is complete, check the created resources on the VPN Tunnel list page.

Check VPN Tunnel detailed information

The VPN Tunnel service allows you to view and edit the full resource list and detailed information. The VPN Tunnel Details page is composed of Details, Tags, Activity History tabs.

To view detailed VPN information, follow these steps.

1. All Services > Networking > VPN Click the menu. 1. Navigate to the VPN’s Service Home page.
2. On the Service Home page, click the Create VPN Tunnel button. 2. Go to the VPN Tunnel List page.
3. On the VPN Tunnel List page, click the resource to view detailed information. 3. VPN Tunnel Details page.
   • VPN Tunnel Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.

Detailed Information

On the VPN Tunnel List page, you can view detailed information of the selected resource and edit the information if needed.

Tag

VPN Tunnel list page allows you to view the tag information of the selected resource, and you can add, modify, or delete it.

Job History

VPN Tunnel List page allows you to view the operation history of the selected resource.

Delete VPN Tunnel

You can reduce operating costs by deleting unused VPC tunnels. However, deleting a Tunnel may cause the running service to stop immediately, so you should proceed with the deletion only after fully considering the impact of service interruption.

To cancel the VPN, follow these steps.

1. Click the All Services > Networking > VPN menu. 1. Navigate to the VPN’s Service Home page.
2. On the Service Home page, click the Create VPN Tunnel button. 2. Navigate to the VPN Tunnel List page.
3. On the VPN Tunnel List page, click the resource to view detailed information. 3. Go to the VPN Tunnel Details page.
4. VPN Tunnel Delete button, click it.
5. When the termination is complete, check on the VPN Tunnel List page whether the resource has been deleted.

3 - API Reference

4 - CLI Reference

5 - Release Note

VPN