VPN as a Service creates a private, encrypted link between your Gewape Cloud network and another network, such as your office. Traffic crosses the internet but is encrypted, so the two sides act as one private network. Manage it under Networking, then VPN as a Service.
1. Create the VPN service
On the router that connects your network, create a VPN service. This is the anchor for your tunnels.
2. Set the shared security settings
Create an IKE policy and an IPsec policy (the encryption settings). The defaults are sensible; whatever you choose here must match the other end exactly.
3. Create the connection
Add a site-to-site connection:
- Peer address: the public IP of the other side (your office firewall).
- Peer subnets: the address ranges on the far side you want to reach.
- Pre-shared key: a secret both sides share. Set the same value on the other end.
4. Configure the other end
On your office firewall or router, create a matching tunnel with the same policies, peer address (your cloud router's public IP), subnets, and pre-shared key.
Both ends must agree exactly for the tunnel to come up. If it will not connect or drops, confirm both peers are online and that the keys and policies still match. See VPN tunnel is down. Because the far end is equipment we do not control, this is one area where reaching support early can save time.