Base de conhecimento  /  Nuvem privada de borda Lumen  /  Segurança
Base de conhecimento  /  Nuvem privada de borda Lumen  /  Segurança

Enable IPSec VPN on Edge Gateway Services

Atualizado por Anthony Hakim em ago 3, 2021
Código do artigo: kb/1158

Descrição

In this KB article, we walk through how to enable an IPSec VPN on Edge Gateway Services within the VMware Cloud Director (VCD) Web Console environment for Lumen Private Cloud on VMware Cloud Foundation™.

Pré-requisitos

You must configure at least one IPSec VPN site on the NSX Edge before enabling the IPSec VPN service.

  • Log in to your Lumen Private Cloud on VMware Cloud Foundation environment with an Org Admin Account.

    Faça login na Lumen Private Cloud na VMware Cloud Foundation

  • Once logged in, click Data Centers in the top menu, and then click the Virtual Data Center summary box.

Faça login na Lumen Private Cloud na VMware Cloud Foundation

  • Click on Edges in the panel on the left side.

  • Click your Edge Gateway. Take note of the (Public) IP Address for the Edge Gateway.

    IPSec VPN

  • Under Services, click IPSec VPN.

  • Click NEW.

    IPSec VPN

  • A new window will pop up. Follow the steps below:

  • Add IPsec VPN:

    • Ativado Click slider to enable
    • Enable perfect forward secrecy (PFS): default
    • Nome: Name your IPSec VPN
    • Local Id: Your Local Id
    • Local Endpoint: IP address of Edge Gateway
    • Local Subnets: Your Local Subnets
    • Peer Id: Your Peer Id
    • Peer Endpoint: IP address of Peer
    • Peer Subnets: Your Peer Subnets
    • Encryption Algorithm: Must match with peer
    • Authentication: Must match with peer
    • Change Shared Key:
    • Pre-Shared Key: Shared Key
    • Display Shared Key:
    • Diffie-Hellman Group: Must match with peer
    • Extension:

IPSec VPN

  • Click KEEP.
  • In the IPSec VPN Configuration page, select the Activation Status tab, and enable IPsec VPN Service Status.

IPSec VPN

  • Next, configure the Peer/Remote Site.
Powered by Translations.com GlobalLink OneLink SoftwarePowered By OneLink