IPsec VPN quickstart

Available in Classic and VPC

You can easily create and operate VPN Gateways and tunnels in NAVER Cloud Platform's IPsec VPN. You can learn how to use IPsec VPN in Getting Started with IPsec VPN and Using IPsec VPN, but we recommend that you first review IPsec VPN use scenarios. By reading through the use scenarios first and then learning the instructions, you will be able to use IPsec VPN more efficiently. The overall sequence of using IPsec VPN and description of each sequence are as follows:

1. Set usage permissions
2. Preparations
3. Create IPsec VPN Gateway
4. Create IPsec VPN Tunnel
5. Follow-ups
6. Set user network VPN
7. Ping test
8. Check connection

1. Set usage permissions

Set the usage permissions for using IPsec VPN. IPsec VPN usage permissions are defined by mapping roles to sub accounts issued by NAVER Cloud Platform's Sub Account. Thus, you need to first create sub accounts other than your main account through Sub Account.

You can use sub accounts provided by Sub Account to configure admin permissions and user permissions of IPsec VPN. You can see the following user guides:

• IPsec VPN permissions management
• Sub Account user guides

2. Preparations

To use IPsec VPN, the following environment is required for each platform:

Set the required environment first according to the platform you are using. You can see the following user guides:

• VPC
  • Create VPC and subnet
  • Create VGW and VGWG
• Classic
  • Create Private Subnet

3. Create IPsec VPN Gateway

Create a VPN gateway from the NAVER Cloud Platform console. You can see the following user guides:

• VPC
  • Create IPsec VPN Gateway
• Classic
  • Create IPsec VPN Gateway

4. Create IPsec VPN Tunnel

Create a VPN tunnel to connect to the gateway you created. You can see the following user guides:

• VPC
  • Create IPsec VPN Tunnel
• Classic
  • Create IPsec VPN Tunnel

5. Follow-ups

After creating the VPN tunnel, the following steps are required for each platform:

Depending on the platform you are using, conduct necessary tasks. You can see the following user guides:

• VPC

  • Configure routing for Private Subnet
  • Create server

• Classic

  • Create server
  • Add network interface

6. Set user network VPN

Check your network configuration and create VPN gateways and tunnels.

• Check network configuration
  • It must not overlap with NAVER Cloud Platform's Private Subnet range.
  • Customer networks in use overlapping with 100.64.0.0/10 cannot be connected with IPsec VPN and Cloud Connect.
• Check VPN Gateway
  • The public IP of the customer's VPN Gateway must be the same as the Peer IP entered when setting up the NAVER Cloud Platform's IPsec VPN Tunnel.
• Create VPN Tunnel
  • The local network becomes the customer network, and the remote network becomes NAVER Cloud Platform's Private Subnet.
  • Peer IP becomes the public IP of NAVER Cloud Platform's IPsec VPN Gateway.
  • The set values for IKE should be the same as those of NAVER Cloud Platform's IPsec VPN Tunnel.
• Set host
  • Set the routing for NAVER Cloud Platform's Private Subnet.

The specific setting method differs depending on the manufacturer of the VPN Gateway device in use. You can see the following user guides:

• Classic
  • Cisco
  • Fortinet
  • Juniper
  • Paloalto

7. Ping test

Sends a ping or ssh command from the NAVER Cloud Platform server to a host in the customer's network to test whether they are connected to each other.

8. Check connection

Access the console and verify that the IPsec VPN Tunnel is displayed as Active. You can see the following user guides:

• VPC
  • View IPsec VPN tunnel list
• Classic
  • View IPsec VPN tunnel list