Secured VPN Construction Process Guide

To initiate the Secured VPN service, it is necessary to proceed with the installation of the branch VPN in the customer’s band and then perform the connection inspection work. However, if you have a directly operated VPN, you do not need to perform the connection inspection work. Please refer to the process below to apply for the Secured VPN service.

1. Samsung Cloud Platform Console work (MSP performance)

1. Apply for Direct Connect.
2. Create a connection target VPC and DCon-VPN connection.
3. Apply for Uplink line.

• Application purpose: This is a setup work for communication between the customer’s Office (On-premise) and the customer VPC within the Samsung Cloud Platform.
  • Application path: Console > Support Center > Service Request should be selected.
  • Service: Networking > Direct Connect
  • Work classification: Uplink line application
  • Please inquire about the construction period and Uplink line work schedule through Console > Support Center > Contact Us.

4. Set up routing, such as Firewall, Security Group, Direct Connect, etc.

2. Routing and Firewall Settings (Customer Implementation)

1. Set up routing between the customer’s Office internal subnet and branch VPN, and configure the customer’s firewall. Prior consultation is required for routing and firewall settings. (SDS → MSP → Customer Company)
2. Set up the Samsung Cloud Platform bandwidth and the customer’s Office bandwidth to allow for two-way communication.

3. Installation of customer’s VPN equipment and tunnel opening (MSP/SDS performance)

When installing VPM equipment for customer companies, you can use SDS equipment for rent or use your own equipment. Please check the process suitable for the situation.

Case 1) Using the branch VPN equipment as SECUI leased equipment provided by SDS

1. Check the specifications, quantity, schedule, and installation location of the leased VPN equipment.(MSP→SDS)
2. Request to create a pre-installation environment survey for VPN installation.(SDS → MSP)
3. Visit the customer’s site and install SECUI leased VPN equipment.(SDS)
4. Open a tunnel between the branch VPN and the center VPN.(SDS)

Case 2) When using the branch VPN equipment as the customer’s own equipment

1. Check the specifications and schedule of the branch VPN equipment.(MSP→SDS)
2. Request equipment compatibility, IPSec VPN license/equipment settings. (SDS → Customer/MSP)
3. Open a tunnel between the branch VPN and the center VPN.(Customer/SDS)

4. End-to-End test (MSP/SDS execution)

1. Check and share the test schedule after installing the branch VPN equipment (or setting up existing equipment) and share it. (SDS → MSP)
2. Check the communication between the branch VPN device and VPC (both directions).