Page Comparison

The platform enables you to create VPNs between virtual datacenter networks, and other entities. These VPNs use the IPsec framework.

To work with VPNs, go to Virtual datacenters → select a Virtual datacenter → Network → VPN

Image Removed

...

This feature is available in:

• Datacenters using VMware with NSX-V (and the NSX-NAT or NSX-gateway plugin)

• Datacenters using VMware with NSX-T (requires NAT IPs as endpoints).

• AWS

• Azure

To manage VPNs:

1. Go to MyCloud view → Virtual datacenters

2. Select a virtual datacenter

3. Go to Network → VPN

...

Support for VPNs is per VDC, which means you need to create a separate VPN site for each connected virtual datacenter. Both sites of a VPN must have the same encryption and authentication settings, and inverse local and remote network configurations.

The following table describes VPN functionality in the providers. You can further configure the NSX-T options using Abiquo configuration properties.

It may be helpful to complete this table to record your network values before you create your VPN:

...

NAT IP

...

For example:

...

NAT IP

...

• 192.168.0.0/24

...

• 192.168.200.0/24

...

To create the first VPN entity:

1. Go to Virtual datacenters → select a Virtual datacenter → Network → VPN
2. Click the + Add button and enter the VPN details

The platform will create the VPN entity.

...

To create the other side of the VPN in another VDC:

1. Select the Virtual datacenter
2. Add another VPN entity using the remote network configuration of the first VPN as the local values. 

So in this example, the local network endpoint for the second VPN entity would be 10.200.100.23 and the local network would be 192.168.200.0/24. The remote endpoint would be 10.200.100.8 and the remote network would be 192.168.0.0/24. 

...

Create a VPN

To connect private cloud with public cloud, define the VPN site in private cloud first. 

To create a VPN site in a virtual datacenter:

1. We recommend that you check that the private networks for your VPN sites (local and remote) have different IP address ranges. If necessary create a new private network, and you may also decide to make it the default network for the virtual datacenter. See Manage networks

2. In NSX-T, for the VPN endpoint, obtain a NAT IP for the virtual datacenter.
   You don’t need to create any NAT rules to create a VPN. Tip: check if your provider allows SNAT and DNAT traffic to VMs in the VDC from the internet or from IP/network addresses or NSX-T groups.
   For more details see Manage NAT for virtual datacenters

3. Create a firewall to allow traffic to the VMs in your VPN. See Manage firewalls

4. Obtain the values of the remote endpoint and network. They don’t need to exist when you create the VPN, but if you need to change them, you will need to delete the site and recreate it.

5. Go to myCloud view → Virtual datacenters and select a virtual datacenter

6. Go to Networks → VPN

7. To create the VPN site, click the + add button and enter the VPN details. For full details see the Create VPN reference table below

8. Go to your other VDC or provider and create the remote VPN site.

...

To create the VPN site for site2 in another VDC:

1. Select the virtual datacenter

2. Add another VPN site using the same encryption and authentication settings, and the remote network configuration of the first VPN site as the local values. 

To check the status of your VPN in a virtual datacenter:

1. Go to myCloud → Virtual datacenters → select the virtual datacenter

2. Go to Networks → VPN

3. Beside the VPN details, click Check

Create VPN reference table

This table describes all of the fields for creating a VPN.