- Release Notes and Announcements
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practices
- IPsec VPN
- Hybrid Cloud Primary/Secondary Communication (DC and VPN)
- Connecting IDC to CCN
- Local Gateway Configurations
- Connecting IDC to a Single Tencent Cloud VPC for Primary/Secondary Disaster Recovery
- Establishing a VPN Connection between Tencent Cloud and Azure China
- Establishing Connection Between IDC and Cloud Resources (Dynamic BGP)
- SSL VPN
- IPsec VPN
- API Documentation
- FAQs
- Troubleshooting
- Service Agreement
- Contact Us
- Glossary
- Release Notes and Announcements
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practices
- IPsec VPN
- Hybrid Cloud Primary/Secondary Communication (DC and VPN)
- Connecting IDC to CCN
- Local Gateway Configurations
- Connecting IDC to a Single Tencent Cloud VPC for Primary/Secondary Disaster Recovery
- Establishing a VPN Connection between Tencent Cloud and Azure China
- Establishing Connection Between IDC and Cloud Resources (Dynamic BGP)
- SSL VPN
- IPsec VPN
- API Documentation
- FAQs
- Troubleshooting
- Service Agreement
- Contact Us
- Glossary
This document describes how to create an SSL VPN server on Tencent Cloud to provide SSL services for clients.
Directions
1. Log in to the VPC console.
2. Select VPN Connections > SSL VPN Server in the left sidebar to enter the admin page.
3. Click +New.
4. Configure the following parameters in the pop-up window.
Parameter | Configuration |
Name | Enter the SSL VPN server name (up to 60 characters). |
Region | Display the region of the SSL VPN server. |
VPN gateway | Select an existing VPN gateway. |
Server IP range | Specify the IP range on Tencent Cloud that the mobile client can access, that is, the IP range of your VPC. |
Client IP Range | Enter the IP range that is assigned to the mobile client for communication. The IP range must not conflict with the VPC CIDR block of Tencent or your local IP range. |
Protocol | Transmission protocol of the server. |
Port | Enter the SSL VPN server port used for data forwarding. |
Verification algorithm | Supported authentication algorithms: SHA1 and MD5. |
Encryption algorithm | Supported encryption algorithms: AES-128-CBC, AES-192-CBC, and AES-256-CBC. |
Compressed | No. |
Verification method | Certificate verification and Certificate verification + Identity verification are available. In this example, certificate verification is used. Certificate verification: In this verification method, the SSL VPN server can be accessed through all SSL VPN client connections by default. Certificate verification + Identity verification: In this verification method, only connections that are allowed by the access control policy can be established. You can configure the access control policy for specific user groups or all users. If you select this option, you must select an EIAM application. |
5. Click Create.
Yes
No
Was this page helpful?