IPsec VPN Tunnel

Available in VPC

You can create and manage IPsec VPN Tunnels to enable tunneled communication with the created IPsec VPN Gateway.

View IPsec VPN Tunnel list

You can view information for each IPsec VPN Tunnel that has been created and is in operation. To view the list:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Networking > IPsec VPN.
2. Click the IPsec VPN Tunnel menu.
3. When the IPsec VPN tunnel list appears, view the summary or click an IPsec VPN tunnel to see the details.
   • IPsec VPN Gateway name: Name of the connected IPsec VPN Gateway
   • IPsec VPN Tunnel name: Name entered when creating the IPsec VPN Tunnel
   • Peer IP: Public IP of the customer VPN Gateway
   • Status: Current status of the IPsec VPN Gateway
     • Configuring: Status in which the IPsec VPN Gateway is being configured with the information you entered
     • Operating: Status in which the IPsec VPN Gateway has been created with the information you entered and is available for use
     • Returning: Status in which the system is deleting the IPsec VPN Gateway you created with the information you entered
   • VPN Tunnel Health Check: Connection status of the IPsec VPN Tunnel
     • UP: Tunnel is successfully connected and available for communication
     • DOWN: Tunnel is disconnected and unavailable for communication
     • UNKNOWN: First Tunnel is being created, or status is temporarily unavailable to capture
   • Virtual Private Gateway Group name: Name of the Virtual Private Gateway Group (VGWG) connected to the IPsec VPN Gateway
   • Creation date and time: Date and time the IPsec VPN Gateway was created
   • IPsec Policy: Encryption and authentication settings entered during creation
   • DPD: Whether the Dead Peer Detection feature to prevent tunnel deactivation due to absence of traffic is enabled
   • Local Network: Information about VGW and subnet communicating via the IPsec VPN Tunnel
   • Remote Network: Information about the client network communicating via the IPsec VPN Tunnel

IPsec VPN Tunnel configuration specifications

The following are the configuration values required to establish a tunnel when creating an IPsec VPN Tunnel:

Create IPsec VPN Tunnel

To create an IPsec VPN Tunnel in the NAVER Cloud Platform console:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Networking > IPsec VPN.
2. Click the IPsec VPN Tunnel menu.
3. Click [Create IPsec VPN Tunnel].
4. After entering the information in the Create IPsec VPN Gateway popup, click [Next].
   • IPsec VPN Gateway name: Select the IPsec VPN Gateway to create the Tunnel on.
   • IPsec VPN Tunnel name: Enter an identifiable name.
   • Peer IP: Enter the public IP of the customer VPN gateway.
   • Local Network: Enter the Virtual Private Gateway and subnet range to be connected by IPsec VPN.
   • Remote Network: Enter the customer network range you want to connect to. Up to 20 can be added.
   • IKE Version: Select VPN key exchange protocol version. The same values must be entered for the customer VPN gateway.
   • IKE Negotiation Mode: IPsec negotiation mode, which needs to be fixed to Main mode.
   • IKE Pre-sharedkey: Enter any pre-shared key. The same values must be entered for the customer VPN gateway.
   • IPsec Proposal: Set the encryption type used for tunneling. The same values must be entered for the customer VPN gateway.
     • Encryption: Select an algorithm to encrypt authentication information with a key exchange algorithm.
     • DH-Group: Select a symmetric key exchange algorithm that generates a key to encrypt authentication information.
     • Hash: Select an algorithm to prove data integrity when exchanging authentication information.
     • Lifetime: Enter the cycle for generating a new key. You can set a value between 120 and 172,800 seconds. Enter 0 to disable key regeneration.
   • Dead Peer Detection (DPD): Set to prevent tunnel deactivation due to absence of traffic.
     • Retry Interval: DPD execution cycle. You can enter from 0 to 10.
     • Retry Count: Number of DPD execution. You can enter from 0 to 10.
5. Click [OK].
   • The IPsec VPN Tunnel is added to the IPsec VPN Tunnel list, and its status changes from Configuring > Operating.

Edit IPsec VPN Tunnel

You can edit the information of the created IPsec VPN Tunnel. To edit an IPsec VPN Tunnel:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Networking > IPsec VPN.
2. Click the IPsec VPN Tunnel menu.
3. Select the item you want to edit from the IPsec VPN Tunnel list, then click [Edit IPsec VPN Tunnel].
4. Edit the necessary information in the Edit IPsec VPN Tunnel popup.
   • For more information about each item, see Create IPsec VPN Tunnel.
5. When you are done editing, click [Next].
6. Check the changes and click [OK].
   • In the list of IPsec VPN Tunnels, the status of the corresponding IPsec VPN Tunnel changes from Configuring > Operating.

Delete IPsec VPN Tunnel

To delete a created IPsec VPN Tunnel:

1. In the VPC environment of the NAVER Cloud Platform console, navigate to Menu > All Services > Networking > IPsec VPN.
2. Click the IPsec VPN Tunnel menu.
3. Click the IPsec VPN Tunnel to delete, then click [Delete IPsec VPN Tunnel].
4. When the Delete IPsec VPN Tunnel popup appears, click [Delete].
5. Click [OK].
   • In the IPsec VPN Tunnel list, the IPsec VPN Tunnel is initially displayed as Returning and then disappears.