tencent cloud


Creating a VPN Gateway

Last updated: 2022-05-20 14:05:15

    A VPN gateway is a VPN connection instance. Therefore, please create an IPsec VPN gateway before using a VPN connection to securely access the Tencent Cloud Virtual Private Cloud (VPC) from external networks. This document shows you how to create a VPN gateway in the console.


    To create a VPC-based VPN gateway, you need to create a VPC in the same region as the VPN gateway first. For more information, see Creating VPCs.


    1. Log in to the VPC console.
    2. Click VPN Connections > VPN Gateway in the left directory to enter the admin page.
    3. Click +New.
    4. Configure the following gateway parameters in the pop-up window.

      • 200 Mbps, 500 Mbps and 1,000 Mbps bandwidths are currently only available in North China (Beijing), East China (Shanghai), South China (Guangzhou), Southwest China (Chengdu), Hong Kong, Macao and Taiwan regions of China(Hong Kong, China), East China (Nanjing) and other availability zones. To use them, please submit a ticket.
      • Only new gateways but not existing gateways are supported on 200 Mbps, 500 Mbps and 1,000 Mbps bandwidths.
      • If the VPN gateway uses 200 Mbps, 500 Mbps, or 1,000 Mbps bandwidths, AES128+MD5 is recommended for VPN tunnel encryption.
      Parameter Name Configuration
      Gateway Name Enter the VPN gateway name (up to 60 characters)
      Region Display the region of the VPN gateway
      AZ Select the availability zone of the current gateway
      Protocol Type IPSec and SSL protocols are supported.
      Associated Network This parameter indicates whether you create a CCN-based VPN/VPN gateway or a VPC-based VPN/VPN gateway.
      • If you want to use a VPN connection to implement the interconnection with multiple VPCs or other Direct Connect networks, please create the CCN based VPN.

        You cannot associate the CCN-based VPN gateway with a CCN instance during its creation. You can associate a created VPN gateway to a CCN instance in the gateway details page. If you create a policy-based VPN tunnel, you also need to enable the route published to the CCN in the IDC IP range of the VPN gateway.

      • If you want to communicate with a single VPC through a VPN connection, please create a VPC based VPN.
      Network Specify the VPC to be associated with the VPN gateway only when the associated network is VPC.
      Bandwidth cap Set a reasonable bandwidth cap for the VPN gateway according to the actual application scenarios.
      Tag Tags mark VPN gateway resources so that these resources can be queried and managed efficiently. Tag is not a required configuration. You can decide whether to configure it according to your demand.
      Billing Mode Bill-by-traffic mode is supported. This billing mode is applicable to scenarios with significant bandwidth fluctuations.
    5. After completing the gateway parameter settings, click Create, and the Status of the gateway is Creating. In 1 to 2 minutes after the gateway is successfully created, the status turns to Running, and the system assigns a public IP to the VPN gateway.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support