Menu

Lumen help

Configuring a site-to-site VPN for IPsec VPN sites

Use Lumen® Edge Private Cloud on VMware Cloud FoundationTM to configure a site-to-site VPN (virtual private network) for IPsec VPN sites. Use this VPN to connect Lumen Edge Private Cloud on VMware Cloud FoundationTM to your Lumen Cloud. After you configure this, you must configure your Lumen Cloud to finish the connection.

To configure a site-to-site VPN for IPsec VPN sites:

  1. Click Networking.

    The Lumen Edge Private Cloud on VMware Cloud Foundation™ portal shows the Networks screen.
Networking tab.
  1. Click Edge Gateways, then click the edge gateway you want to configure the site-to-site VPN for.

    The edge gateway details page appears.
  1. Click IPSec VPN.
Edge gateway details page.
  1. Click NEW.

    The Add IPSec VPN Tunnel window appears.
Add IPSec VPN Tunnel window
  1. In the General Settings section, complete the following fields:
Field Description
Name Type a name for the IPSec VPN tunnel.
Description Type a description for the IPSec VPN tunnel.
Security Profile Select the security profile for the IPSec VPN tunnel. To expand the profile details, click located next to the profile.
Status Turn this option on to enable the IPSec VPN tunnel.
Logging Turn this option on to enable logging of activity on the IPSec VPN tunnel.
  1. Click NEXT.
Add IPSec VPN Tunnel window
  1. In the Peer Authentication Mode section, complete the following fields:
Field Description
Authentication Mode

Select one of the following options:
 

  • Pre-Shared Key—Use a pre-shared key for authentication. The configuration of NAT (network address translation) determines the pre-shared key. If you configure NAT on the remote ID, enter the private IP address of the remote site. Otherwise, use the public IP address of the remote device.
  • Certificate—Use certificates for authentication. The remote ID must match the certificate SAN (Subject Alternative Name). If the certificate SAN is not available, the remote ID must match the distinguished name of the certificate used to secure the remote endpoint.
Pre-Shared Key If you are authenticating using a pre-shared key, type the pre-shared key for the IPSec VPN tunnel.
Server Certificate If you are authenticating using a certification, click Select, then select the sever certificate in the Use VMware Cloud Director Certificate section.
CA Certificate If you are authenticating using a certification, click Select, then select the CA (certificate authority) certificate in the Use VMware Cloud Director Certificate section.
  1. Click NEXT.
Add IPSec VPN Tunnel window
  1. In the Endpoint Configuration section, complete the following fields:
Field Description
IP Address Type the IP address of the local endpoint for the IPSec VPN tunnel.
Networks Type the network CIDRs, separated by commas, for the local endpoint that the IPSec VPN tunnel will use.
Logging Select this option to enable logging of activity on the IPSec VPN tunnel.
IP Address Type the IP address of the remote endpoint for the IPSec VPN tunnel.
Networks Type the network CIDRs, separate by commas, for the remote endpoint that the IPSec VPN tunnel will use.
Remote ID

Type the unique identifier for the remote endpoint. Тhis remote ID depends on the authentication mode selected for the tunnel. If you do not set it, the remote ID defaults to the remote IP address.
  1. Click NEXT.
Add IPSec VPN Tunnel window
  1. In the Ready to Complete section, review the configuration, then click FINISH.

    Lumen Edge Private Cloud on VMware Cloud FoundationTM configures the IPSec VPN tunnel.
  1. On the IPsec VPN Configuration page, click the Activation Status tab, and then toggle the IPsec VPN Service Status option to enable the IPsec VPN service.
Edge gateway IPsec VPN details
  1. Click Save changes.

    Lumen Edge Private Cloud on VMware Cloud FoundationTM activates the IPSec VPN tunnel and saves the changes.