VPN Tunnel

Creating a VPN Tunnel

You can configure IPSec Tunneling with remote sites in the VPN service using the Samsung Cloud Platform Console.

To create a VPN Tunnel, follow these steps:

1. Click the All Services > Networking > VPN menu. You will be redirected to the VPN Service Home page.

2. On the Service Home page, click the Create VPN Tunnel button. You will be redirected to the Create VPN Tunnel page.

3. On the Create VPN Tunnel page, enter the required information for service creation and select detailed options.

   • Enter the required information in the Service Information section.

     Item	Required	Description
     VPN Tunnel Name	Required	Enter the VPN Tunnel name Enter 3 to 20 characters using alphanumeric characters
     VPC Gateway Name	Required	Select the VPN Gateway to connect
     VPC Name	Default	VPC information connected to VPN Gateway is automatically entered
     Public IP	Default	IP information for VPN Gateway to communicate with remote sites is automatically entered
     Peer VPN GW IP	Required	Enter the IP information of the remote VPN Example: 192.168.10.0
     Remote Subnet(CIDR)	Required	Enter the subnet address of the remote site to connect After entering the IP address, click the Add button, up to 10 can be added Example: 20.0.0.0/24
     Pre-shared Key	Required	Enter the shared key (PSK) to be used for IKE mutual authentication between VPN gateways Enter 8 to 64 characters Recommended to use a 32-character alphanumeric combination string
     Description	Optional	User additional description

     Table. VPN Tunnel Service Information Input Items

   • Enter or select the required information in the Tunnel Configuration section.

     Item	Required	Description
     IKE Configuration > IKE Version	Required	Select IKE version
     IKE Configuration > Algorithm Configuration	Required	Select Encryption Algorithm and Digest Algorithm, then click the Add button
     IKE Configuration > Diffie-Hellman	Required	Select Diffie-Hellman group
     IKE Configuration > SA LifeTime	Required	Enter the VPN session (Security Association) validity period
     IPSec Configuration > Algorithm Configuration	Required	Select Encryption Algorithm and Digest Algorithm, then click the Add button
     IPSec Configuration > Perfect Forward Secrecy(PFS)	Required	Select whether to use PFS group
     IPSec Configuration > Diffie-Hellman	Required	Select Diffie-Hellman group
     IPSec Configuration > SA LifeTime	Required	Enter the VPN session (Security Association) validity period

     Table. VPN Tunnel Configuration Items

   • Enter the required information in the DPD Additional Configuration section.

     Item	Required	Description
     DPD Additional Configuration > DPD probe interval	Required	Enter the DPD check interval Enter a value between 1 and 3,600 seconds

     Table. VPN Tunnel DPD Additional Configuration Input Items

   • Enter or select the required information in the Additional Information section.

     Item	Required	Description
     Tags	Optional	Add tags Add up to 50 tags per resource Click the Add Tag button and then enter or select Key and Value values

     Table. VPN Tunnel Additional Information Input Items

4. On the Summary panel, review the detailed information of creation and estimated charges, then click the Create button.

   • After creation is complete, verify the created resource on the VPN Tunnel List page.

Viewing VPN Tunnel Detailed Information

For VPN Tunnel services, you can view and modify the entire resource list and detailed information. The VPN Tunnel Detail page consists of Detailed Information, Tags, and Task History tabs.

To view VPN detailed information, follow these steps:

1. Click the All Services > Networking > VPN menu. You will be redirected to the VPN Service Home page.
2. On the Service Home page, click the Create VPN Tunnel button. You will be redirected to the VPN Tunnel List page.
3. On the VPN Tunnel List page, click the resource for which you want to view detailed information. You will be redirected to the VPN Tunnel Detail page.
   • The VPN Tunnel Detail page displays status information and additional feature information, and consists of Detailed Information, Tags, and Task History tabs.

Detailed Information

On the VPN Tunnel List page, you can view the detailed information of the selected resource and modify the information if necessary.

Tags

On the VPN Tunnel List page, you can view the tag information of the selected resource, and add, modify, or delete tags.

Task History

You can view the task history of the resource selected on the VPN Tunnel List page.

Deleting a VPN Tunnel

You can delete unused VPC Tunnels to reduce operating costs. However, since deleting a Tunnel can immediately stop operating services, you must fully consider the impact of service interruption before proceeding with deletion.

To delete a VPN, follow these steps:

1. Click the All Services > Networking > VPN menu. You will be redirected to the VPN Service Home page.
2. On the Service Home page, click the Create VPN Tunnel button. You will be redirected to the VPN Tunnel List page.
3. On the VPN Tunnel List page, click the resource for which you want to view detailed information. You will be redirected to the VPN Tunnel Detail page.
4. Click the VPN Tunnel Delete button.
5. After deletion is complete, verify that the resource has been deleted on the VPN Tunnel List page.