tencent cloud

Prerequisites

• The local private IP range and the Tencent Cloud VPC cannot overlap.
• The client has connected to the public network.

Configuration

1. Create an SSL VPN gateway.
   Create a VPN gateway using the SSL protocol
2. Create an SSL VPN server.
   Specify the Tencent Cloud IP range and the client IP range to connect in the SSL VPN server.
3. Create an SSL VPN client.
   The client uses certificate and key to connect with the VPN gateway. The client and the server verify each other’s certificate. After verification, the server assigns an IP from the client IP address pool to the client for connecting with CVMs in VPC.
4. Configure a route within VPC.
   Configure the routing and forwarding policies for the mobile client to connect with Tencent Cloud VPC. Set an address of the client IP range as the destination, and VPN tunnel as the next hop type. Next hop to SSL VPN gateway.
5. Configure the client on the mobile device.
   Configure the SSL certificate on the mobile device.
6. Test the connectivity
   Use ping to verify the connectivity of SSL VPN connection after the above configurations.