--- title: "IPsec VPN Tunnel" slug: "ipsecvpn-tunnel-vpc" tags: ["IPsec VPN"] updated: 2026-10-08T06:56:29Z published: 2026-10-08T06:56:29Z canonical: "guide.ncloud-docs.com/ipsecvpn-tunnel-vpc" --- > ## Documentation Index > Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # IPsec VPN Tunnel Available in VPC You can create and manage IPsec VPN Tunnels to enable tunneled communication with the created IPsec VPN Gateway. ## View IPsec VPN Tunnel list You can view information for each IPsec VPN Tunnel that has been created and is in operation. To view the list: Note You can see the list if you have 1 or more IPsec VPN Tunnels in operation. If you don't have any IPsec VPN Tunnels created and in operation, the list is not displayed on the IPsec VPN Tunnel interface. 1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Networking** > **IPsec VPN**. 2. Click the **IPsec VPN Tunnel** menu. 3. When the IPsec VPN tunnel list appears, view the summary or click an IPsec VPN tunnel to see the details. - **IPsec VPN Gateway name**: Name of the connected IPsec VPN Gateway - **IPsec VPN Tunnel name**: Name entered when creating the IPsec VPN Tunnel - **Peer IP**: Public IP of the customer VPN Gateway - **Status**: Current status of the IPsec VPN Gateway - **Configuring**: Status in which the IPsec VPN Gateway is being configured with the information you entered - **Operating**: Status in which the IPsec VPN Gateway has been created with the information you entered and is available for use - **Returning**: Status in which the system is deleting the IPsec VPN Gateway you created with the information you entered - **VPN Tunnel Health Check**: Connection status of the IPsec VPN Tunnel - **UP**: Tunnel is successfully connected and available for communication - **DOWN**: Tunnel is disconnected and unavailable for communication - **UNKNOWN**: First Tunnel is being created, or status is temporarily unavailable to capture - **Virtual Private Gateway Group name**: Name of the Virtual Private Gateway Group (VGWG) connected to the IPsec VPN Gateway - **Creation date and time**: Date and time the IPsec VPN Gateway was created - **IPsec Policy**: Encryption and authentication settings entered during creation - **DPD**: Whether the Dead Peer Detection feature to prevent tunnel deactivation due to absence of traffic is enabled - **Local Network**: Information about VGW and subnet communicating via the IPsec VPN Tunnel - **Remote Network**: Information about the client network communicating via the IPsec VPN Tunnel Note As the Tunnel Health Check data is collected periodically, the retrieved information may differ from the latest status. ## IPsec VPN Tunnel configuration specifications The following are the configuration values required to establish a tunnel when creating an IPsec VPN Tunnel: | Item | Supported values | | --- | --- | | **IKE Version** | IKEv1, IKEv2 | | **Encryption** | DES, 3DES, AES-128, AES-192, AES-256 | | **DH-Group** | 1, 2, 5, 14, 19 | | **Hash** | MD5, SHA1, SHA256 | | **Lifetime (seconds)** | 120-172,800 | | **Pre-SharedKey** | Length: 8–64 characters Uppercase and lowercase letters (A-Z and a-z), numbers (0–9), and special characters (!@#$%^&*-_=+~)No spaces allowedCase-sensitiveThe special character "?" not allowed | Note You must use the same configuration values for Phase 1 and Phase 2. ## Create IPsec VPN Tunnel To create an IPsec VPN Tunnel in the NAVER Cloud Platform console: 1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Networking** > **IPsec VPN**. 2. Click the **IPsec VPN Tunnel** menu. 3. Click **[Create IPsec VPN Tunnel]**. 4. After entering the information in the Create IPsec VPN Gateway popup, click **[Next]**. - **IPsec VPN Gateway name**: Select the IPsec VPN Gateway to create the Tunnel on. - **IPsec VPN Tunnel name**: Enter an identifiable name. - **Peer IP**: Enter the public IP of the customer VPN gateway. - **Local Network**: Enter the Virtual Private Gateway and subnet range to be connected by IPsec VPN. - **Remote Network**: Enter the customer network range you want to connect to. Up to 20 can be added. - **IKE Version**: Select VPN key exchange protocol version. The same values must be entered for the customer VPN gateway. - **IKE Negotiation Mode**: IPsec negotiation mode, which needs to be fixed to Main mode. - **IKE Pre-sharedkey**: Enter any pre-shared key. The same values must be entered for the customer VPN gateway. - **IPsec Proposal**: Set the encryption type used for tunneling. The same values must be entered for the customer VPN gateway. - **Encryption**: Select an algorithm to encrypt authentication information with a key exchange algorithm. - **DH-Group**: Select a symmetric key exchange algorithm that generates a key to encrypt authentication information. - **Hash**: Select an algorithm to prove data integrity when exchanging authentication information. - **Lifetime**: Enter the cycle for generating a new key. You can set a value between 120 and 172,800 seconds. Enter 0 to disable key regeneration. - **Dead Peer Detection (DPD)**: Set to prevent tunnel deactivation due to absence of traffic. - **Retry Interval**: DPD execution cycle. You can enter from 0 to 10. - **Retry Count**: Number of DPD execution. You can enter from 0 to 10. 5. Click **[OK]**. - The IPsec VPN Tunnel is added to the IPsec VPN Tunnel list, and its status changes from **Configuring > Operating**. Note IPsec VPN Tunnel is disabled after 60 minutes of no communication. ## Edit IPsec VPN Tunnel You can edit the information of the created IPsec VPN Tunnel. To edit an IPsec VPN Tunnel: Note The edited value must also be applied to the customer VPN gateway in order to communicate normally. 1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Networking** > **IPsec VPN**. 2. Click the **IPsec VPN Tunnel** menu. 3. Select the item you want to edit from the IPsec VPN Tunnel list, then click **[Edit IPsec VPN Tunnel]**. 4. Edit the necessary information in the Edit IPsec VPN Tunnel popup. - For more information about each item, see [Create IPsec VPN Tunnel](/docs/en/ipsecvpn-tunnel-vpc#IPsecVPNTunnel%EC%83%9D%EC%84%B1). 5. When you are done editing, click **[Next]**. 6. Check the changes and click **[OK]**. - In the list of IPsec VPN Tunnels, the status of the corresponding IPsec VPN Tunnel changes from **Configuring > Operating**. ## Delete IPsec VPN Tunnel To delete a created IPsec VPN Tunnel: Caution Deleting an IPsec VPN Tunnel will break communication with the client network. 1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Networking** > **IPsec VPN**. 2. Click the **IPsec VPN Tunnel** menu. 3. Click the IPsec VPN Tunnel to delete, then click **[Delete IPsec VPN Tunnel]**. 4. When the Delete IPsec VPN Tunnel popup appears, click **[Delete]**. 5. Click **[OK]**. - In the IPsec VPN Tunnel list, the IPsec VPN Tunnel is initially displayed as **Returning** and then disappears.