tencent cloud


Creating a IPSec VPN Gateway

Last updated: 2024-01-10 17:25:33
    A VPN gateway is a VPN connection instance. Therefore, please create an IPsec VPN gateway before using a VPN connection to securely access the Tencent Cloud Virtual Private Cloud (VPC) from external networks. This document shows you how to create a VPN gateway in the console.


    To create a VPC-based VPN gateway, you need to create a VPC in the same region as the VPN gateway first. For more information, see Creating VPCs.


    1. Log in to the VPC console.
    2. Click VPN Connections > VPN Gateway in the left directory to enter the admin page.
    3. Click +New.
    4. Configure the following gateway parameters in the pop-up window.
    Only new gateways but not existing gateways are supported on 200 Mbps, 500 Mbps, 1,000 Mbps and 3,000 Mbps bandwidths.
    If the VPN gateway uses 200 Mbps, 500 Mbps, 1,000 Mbps or 3,000 Mbps bandwidths, AES128+MD5 is recommended for VPN tunnel encryption.
    Parameter Name
    Gateway Name
    Enter the VPN gateway name (up to 60 characters)
    Display the region of the VPN gateway
    Select the availability zone of the current gateway
    Protocol Type
    IPSec and SSL protocols are supported.
    Bandwidth cap
    Set a reasonable bandwidth cap for the VPN gateway according to the actual application scenarios.
    Associated Network
    This parameter indicates whether you create a CCN-based VPN/VPN gateway or a VPC-based VPN/VPN gateway.
    If you want to use a VPN connection to implement the interconnection with multiple VPCs or other Direct Connect networks, please create the CCN based VPN.
    You cannot associate the CCN-based VPN gateway with a CCN instance during its creation. You can associate a created VPN gateway to a CCN instance in the gateway details page. If you create a policy-based VPN tunnel, you also need to enable the route published to the CCN in the IDC IP range of the VPN gateway.
    If you want to communicate with a single VPC through a VPN connection, please create a VPC based VPN.
    Specify the VPC to be associated with the VPN gateway only when the associated network is VPC.
    Tags mark VPN gateway resources so that these resources can be queried and managed efficiently. Tag is not a required configuration. You can decide whether to configure it according to your demand.
    Billing Mode
    Bill-by-traffic mode is supported. This billing mode is applicable to scenarios with significant bandwidth fluctuations.
    5. After completing the gateway parameter settings, click Create, and the Status of the gateway is Creating. In 1 to 2 minutes after the gateway is successfully created, the status turns to Running, and the system assigns a public IP to the VPN gateway.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support