IPSec VPN

IPSec VPN is used for creating a Virtual Private Network (VPN). In BILLmanager you can configure VPN between organization routers and between an organization network and a VPN-gateway. Navigate to Products/Services → Virtual DC → Routers → IPsec VPN → Add. 

Enter the following parameters:

• Tunnel name;
• Description; 
• Connection type — select a VPN-tunnel type:
  • To organization network — VPN between routers of one organization. In VMware it is called "a network in this organization"; 
  • To remote network — VPN between an organization and a remote VPN-gateway.  In VMware, it is called "a remote network". 

Connecting to an organization network

Enter the following parameters:

• Router — select an organization network router for which the VPN-tunnel will be created; 
• Local/External networks — select networks that will be included in the VPN; 
• Local/External connection point — set the IP-address of the local/external network routers;
• Encryption protocol; 
• Encryption key; 
• MTU — the size of the maximum transmission unit. 

Connecting to a remote network

Enter the following parameters:

• Local networks — select a local network connected to the router and used in VPN-connection; 
• External networks — select a network connected to the external VPN-gateway; 
• Local connection point — select a network to connect to the external VPN-gateway. Usually, the external network (Internet) is used;
• Local ID — VPN unique identifier in the local network; 
• External ID — VPN unique identifier in the public network  (Internet); 
• External IP address — enter an external IP address of the remote network router;
• Encryption protocol; 
• Encryption key; 
• MTU — the size of the maximum transmission unit.

Configuration rules

• you cannot create two VPN-channels with the same source and destination connection points; 
• local and external ID VPN must not repeat; 
• an external IP address must not match the external IP address of the load balancing server;
• VPN  external IP address must not be included in the source range of IP addresses of the DNAT rule.

VPN deletion rules: 

• deleting the VPN will automatically delete its connection to networks;
• "network-network" VPN connections are deleted as follows: deleting one VPN will automatically delete the second one.