Manage VPNs using the dashboard

Virtual Private Networks can be created in order to provide secured site to site connectivity.

1. Login to the dashboard.

2. Select the appropriate project from the drop down menu at the top left.

3. On the Project tab, open the Network tab and click VPN category.

Create an IKE policy

1. Select the IKE Policies tab, click Add IKE Policy

2. In the Add IKE Policy dialog box, enter the following values according to the VPN you are connecting to:

   • Name: A name for the IKE Policy
   • Description: A description for the IKE Policy
   • Authorization algorithm: Details as agreed with the remote VPN provider
   • Encryption algorithm Details as agreed with the remote VPN provider:
   • IKE version Details as agreed with the remote VPN provider:
   • Lifetime units for IKE keys Details as agreed with the remote VPN provider:
   • Lifetime values for IKE keys Details as agreed with the remote VPN provider:
   • Perfect Forward Secrecy Details as agreed with the remote VPN provider:
   • IKE Phase1 negotiation mode Details as agreed with the remote VPN provider:

3. Click Add.

   The dashboard shows the IKE Policy

Create an IPSEC Policy

1. Select the IPSEC Policies tab, click Add IPSEC Policy

2. In the Add IPSEC Policy dialog box, enter the following values according to the VPN you are connecting to:

   • Name: A name for the IPSEC Policy
   • Description: A description for the IPSEC Policy
   • Authorization algorithm: Details as agreed with the remote VPN provider:
   • Encapsulation mode: Details as agreed with the remote VPN provider:
   • Encryption algorithm: Details as agreed with the remote VPN provider:
   • Lifetime units: Details as agreed with the remote VPN provider:
   • Lifetime values for IKE keys: Details as agreed with the remote VPN provider:
   • Perfect Forward Secrecy: Details as agreed with the remote VPN provider:
   • Transform Protocol: Details as agreed with the remote VPN provider:

3. Click Add.

   The dashboard shows the IPSEC Policy

Create a VPN Service

1. Select the VPN Services tab, click Add VPN Service

2. In the Add VPN Service dialog box, enter the following values according to the VPN you are connecting to:

   • Name: The name of the VPN Service
   • Description: A description for the VPN Service
   • Router: Select the router to attach the VPN Service to
   • Subnet: Leave this blank

3. Click Add.

   The dashboard shows the VPN Service

Create Endpoint Groups

1. Select the Endpoint Groups tab, click Add Endpoint Group

2. In the Add Endpoint Group dialog box, enter the following details

   • Name: The name of the Endpoint Group
   • Description: A description for the Endpoint group
   • Type: The type of the Endpoint Group, (CIDR or Subnet)

   For the local networks, select ‘Subnet’ and select the local subnets you want routed over the VPN.

Repeat the process for the remote networks, using the ‘CIDR’ type, and entering the CIDR of the remote networks to route.

Create an IPSEC Site Connection

1. Select the IPSEC Site Connections tab, click Add IPSEC Site Connections

2. In the Add IPSEC Site Connections dialog box, enter the following values according to the VPN you are connecting to:

   • Name: The name of the IPSEC Site Connection
   • Description: A description for the IPSEC Site Connection
   • VPN Service associated with this connection: Select the VPN Service created above
   • Endpoint group for local subnet(s): Select the local Endpoint Group created above
   • IKE Policy associated with this connection: Select the IKE Policy created above
   • IPSEC Policy associated with this connection: Select the IPSEC Policy created above
   • Peer gateway public IPv4/IPv6 Address or FQDN: Enter the remote IP of the IPSEC Site Connection
   • Peer router identity for authentication (Peer ID): Enter the remote IP of the IPSEC Site Connection
   • Remote peer subnet(s): Leave this blank
   • Pre-Shared Key (PSK) string: Enter the password for the IPSEC Site Connection

3. Click Add.

   The dashboard shows the IPSEC Site Connection, its status should be Active.