Step 1: Creating a VPN Gateway

Prerequisites

• A VPC has been created. For details about how to create a VPC, see the Virtual Private Cloud User Guide.
• Security group rules have been configured for ECSs in the VPC, and allow the customer gateway in the on-premises data center to access VPC resources. For details about how to configure security group rules, see Security Group Rules.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the page, and choose Network > Virtual Private Network.
3. In the navigation pane on the left, choose Virtual Private Network > Enterprise – VPN Gateways.
4. Set parameters as prompted, click , and complete the payment.
5. The following describes only key parameters.

   Table 1 Key VPN gateway parameters

   Parameter	Description	Example Value
   Region	Select the region nearest to you.	eu-de
   Name	Name a VPN gateway.	vpngw-001
   Network Type	Select Public network.	Public network
   Associate With	Select VPC.	VPC
   VPC	Select the VPC that needs to access the on-premises data center.	vpc-001(192.168.0.0/16)
   Interconnection Subnet	This subnet is used for communication between the VPN gateway and VPC. Ensure that the selected interconnection subnet has four or more assignable IP addresses.	192.168.2.0/24
   Local Subnet	Specify the VPC subnet that needs to access the on-premises data center. You can manually enter a CIDR block or select a subnet from the drop-down list box.	192.168.0.0/24
   BGP ASN	BGP AS number.	64512
   Specification	Select Professional 1 and deselect Access via a non-fixed IP address.	Professional 1
   AZ	AZ1 and AZ2 are supported.	AZ1, AZ2
   Gateway IP Address	This parameter is available only when Network Type is set to Private network. Self-assigned IP address (default) An IP address on the access subnet will be automatically assigned to the VPN gateway. You can view the automatically assigned IP address on the VPN Gateways page. Manually-specified IP address Manually configure IP addresses on the access subnet for the VPN gateway.	Self-assigned IP address
   Advanced Settings > Tags	Configure Tags in Advanced Settings.	-
   HA Mode	Select Active-active.	Active-active
   Active EIP	You can buy a new EIP or use an existing EIP.	11.xx.xx.11
   Active EIP 2	You can buy a new EIP or use an existing EIP.	11.xx.xx.12

Verification

Check the created VPN gateway on the VPN Gateways page. The initial state of the VPN gateway is Creating. When the VPN gateway state changes to Normal, the VPN gateway is successfully created.