tencent cloud

This document describes how to create an SSL VPN server on Tencent Cloud to provide SSL services for clients.

Directions

1. Log in to the VPC console.
2. Select VPN Connections > SSL VPN Server in the left sidebar to enter the admin page.
3. Click +New.
4. Configure the following parameters in the pop-up window.

   Parameter	Configuration
   Name	Enter the SSL VPN server name (up to 60 characters).
   Region	Display the region of the SSL VPN server.
   VPN gateway	Select an existing VPN gateway.
   Server IP range	Specify the IP range on Tencent Cloud that the mobile client can access, that is, the IP range of your VPC.
   Client IP Range	Enter the IP range that is assigned to the mobile client for communication. The IP range must not conflict with the VPC CIDR block of Tencent or your local IP range.
   Protocol	Transmission protocol of the server.
   Port	Enter the SSL VPN server port used for data forwarding.
   Verification algorithm	Supported authentication algorithms: SHA1 and MD5.
   Encryption algorithm	Supported encryption algorithms: AES-128-CBC, AES-192-CBC, and AES-256-CBC.
   Compressed	No.
   Verification method	Certificate verification and Certificate verification+ Identity verification are available. In this example, certificate verification is used. Certificate verification: In this verification method, the SSL VPN server can be accessed through all SSL VPN client connections by default. Certificate verification + Identity verification: In this verification method, only connections that are allowed by the access control policy can be established. You can configure the access control policy for specific user groups or all users. If you select this option, you must select an EIAM application.

5. Click Create.