The page has been translated by Gen AI.

VPN Tunnel

Create VPN Tunnel

In the Samsung Cloud Platform Console, you can configure IPSec Tunning with remote sites in the VPN service.

안내

Samsung Cloud Platform VPN service operates in Passive Mode (Responder role).

Remote Peer VPN must be operated in Active mode.

To create a VPN Tunnel, follow these steps.

Click the All Services > Networking > VPN menu. 1. Navigate to the VPN Service Home page.
On the Service Home page, click the Create VPN Tunnel button. 2. Navigate to the Create VPN Tunnel page.

VPN Tunnel creation On the page, enter the information required to create the service, and select detailed options.

Enter the required information in the Service Information Input area.

Category	required status	Detailed description
VPN Tunnel name	Required	Enter VPN Tunnel name Enter using English letters and numbers, within 3 to 20 characters
VPC name	Required	Select the VPN Gateway to connect
VPC name	Default	Automatically input VPC information connected to the VPN Gateway
Public IP	Default	Automatic entry of IP information for communicating with remote sites from the VPN Gateway
Peer VPN GW IP	Required	Enter the remote VPN IP information Example: 192.168.10.0
Romote Subnet(CIDR)	Required	Enter the subnet address of the remote site to connect After entering the IP address, click the Add button, up to 10 can be added Example: 20.0.0.0/24
Pre-shared Key	Required	Enter the shared key (PSK) to be used for IKE mutual authentication between VPN gateways Enter within 8 - 64 characters It is recommended to use a 32-character alphanumeric string
Explanation	Selection	User additional description

Table. VPN Tunnel Service Information Input Items

Enter or select the required information in the Tunnel Settings area.

Category	Required status	Detailed description
IKE Settings > IKE Version	Required	Select IKE version
IKE Settings > Algorithm Settings	Required	Select Encryption Algorithm and Digest Algorithm, then click the Add button.
IKE Settings > Diffie-Hellman	Required	Diffie-Hellman group selection
IKE Settings > SA Lifetime	Required	Enter VPN session (Security Association) validity period
IPSec Settings > Algorithm Settings	Required	Select Encryption Algorithm and Digest Algorithm, then click the Add button.
IPSec Settings > Perfect Forward Secrecy(PFS)	Required	Select whether to use the PFS group
IPSec Settings > Diffie-Hellman	Required	Diffie-Hellman group selection
IPSec Settings > SA Lifetime	Required	VPN session (Security Association) valid time input

Table. VPN Tunnel configuration items

Enter the required information in the DPD Additional Settings area.
Category
Required
Detailed description
DPD additional settings > DPD probe interval Required Enter the DPD inspection interval
Enter a value between 1 and 3,600 seconds
Table. VPN Tunnel DPD Additional Configuration Input Items
In the Additional Information Input area, enter or select the required information.
Category
required status
Detailed description
tag Selection Add Tag
Up to 50 can be added per resource
After clicking the Add Tag button, input or select Key, Value values
Table. VPN Tunnel additional information input fields

Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
- When creation is complete, check the created resources on the VPN Tunnel list page.

Category	Required	Detailed description
DPD additional settings > DPD probe interval	Required	Enter the DPD inspection interval Enter a value between 1 and 3,600 seconds

Category	required status	Detailed description
tag	Selection	Add Tag Up to 50 can be added per resource After clicking the Add Tag button, input or select Key, Value values

Check VPN Tunnel detailed information

The VPN Tunnel service allows you to view and edit the full resource list and detailed information. The VPN Tunnel Details page is composed of Details, Tags, Activity History tabs.

To view detailed VPN information, follow these steps.

All Services > Networking > VPN Click the menu. 1. Navigate to the VPN’s Service Home page.
On the Service Home page, click the Create VPN Tunnel button. 2. Go to the VPN Tunnel List page.
On the VPN Tunnel List page, click the resource to view detailed information. 3. VPN Tunnel Details page.
- VPN Tunnel Details page displays status information and additional feature information, and consists of Details, Tags, Activity Log tabs.

Category	Detailed description
Status	Current status Active: Operating normally Creating: Creating Editing: Updating information Deleting: Deleting Error: Unable to determine current status If it persists, contact the registered administrator
Delete VPN Tunnel	VPN Tunnel Delete button

Detailed Information

On the VPN Tunnel List page, you can view detailed information of the selected resource and edit the information if needed.

Category	Detailed description
service	Service name
Resource Type	Resource Type
SRN	Unique resource ID in Samsung Cloud Platform
Resource Name	VPN resource name
Resource ID	Unique resource ID in the service
Constructor	User who created the service
Creation date and time	Service creation date and time
Editor	User who edited the service information
Modification date and time	Date and time the service information was modified
VPN Tunnel name	VPN Tunnel name
VPN Gateway name	VPN Gateway name
Public IP	Public IP information
Peer VPN GW IP	Peer VPN GW information Click the Edit icon to edit
Remote Subnet (CIDR)	Remote Sunet information Edit click the icon to edit
Pre-shared Key	Pre-shared Key information Edit Click the icon to edit
Tunneling connection status	Current tunneling service connection status
Explanation	VPN Tunnel additional description Click the Edit icon to modify
IKE	Edit button can be clicked to bulk edit the configuration information
IKE Version	IKE Version information
Encryption Algorithm/Digest Algorithm	Algorithm information
Diffie-Hellman	Diffie-Hellman information
SA LifeTime	SA LifeTime information
IPSec	Click the Edit button to bulk edit configuration information.
Encryption Algorithm/Digest Algorithm	Algorithm information
Diffie-Hellman	Diffie-Hellman information
SA LifeTime	SA LifeTime information
Perfect Forward Secrecy(PFS)	PFS configuration information
DPD	DPD probe interval information Edit Click the icon to edit

Table: VPN Tunnel Detailed Information Items

Category	Detailed description
Tag list	Tag list You can view the Key, Value information of the tag Up to 50 tags can be added per resource When entering tags, search the existing list of created Keys and Values and select

Job History

VPN Tunnel List page allows you to view the operation history of the selected resource.

Category	Detailed description
Task History List	Resource Change History Check operation date/time, resource name, operation details, operation result, and operator information

Table. VPN Tunnel operation history tab detailed information items

Delete VPN Tunnel

You can reduce operating costs by deleting unused VPC tunnels. However, deleting a Tunnel may cause the running service to stop immediately, so you should proceed with the deletion only after fully considering the impact of service interruption.

To cancel the VPN, follow these steps.

Click the All Services > Networking > VPN menu. 1. Navigate to the VPN’s Service Home page.
On the Service Home page, click the Create VPN Tunnel button. 2. Navigate to the VPN Tunnel List page.
On the VPN Tunnel List page, click the resource to view detailed information. 3. Go to the VPN Tunnel Details page.
VPN Tunnel Delete button, click it.
When the termination is complete, check on the VPN Tunnel List page whether the resource has been deleted.

How-to guides

Release Note