Menu

Lumen help

Enabling IPSec VPN on Edge Gateway services

In this KB article, we walk through how to enable an IPSec VPN on Edge Gateway Services within the VMware Cloud Director (VCD) Web Console environment for Lumen Private Cloud on VMware Cloud Foundation™. You must configure at least one IPSec VPN site on the NSX Edge before enabling the IPSec VPN service.

To enabling IPSec VPN on Edge Gateway services:

  1. Click Data Centers.

    The Lumen Edge Private Cloud on VMware Cloud Foundation™ portal shows the Virtual Data Center dashboard.
Virtual Data Center tab.
  1. Click inside the Data Center summary box.
  1. On the left panel, click Edges.
Edge Gateways
  1. Click your Edge Gateway. Take note of the (public) IP address for the Edge Gateway.
  1. Under Services, click IPSec VPN.
  1. Click NEW.
Edge Gateway (showing detail for an edge gateway)
  1. In the window that appears, do the following:

    1. Enabled: Click slider to enable

    2. Enable perfect forward secrecy (PFS): default

    3. Name: Name your IPSec VPN

    4. Local Id: Your Local Id

    5. Local Endpoint: IP address of Edge Gateway

    6. Local Subnets: Your Local Subnets

    7. Peer Id: Your Peer Id

    8. Peer Endpoint: IP address of Peer

    9. Peer Subnets: Your Peer Subnets

    10. Encryption Algorithm: Must match with peer

    11. Authentication: Must match with peer

    12. Change Shared Key:

    13. Pre-Shared Key: Shared Key

    14. Display Shared Key:

    15. Diffie-Hellman Group: Must match with peer
Add IPSec VPN
  1. Click KEEP.
  1. In the IPSec VPN Configuration page, select the Activation Status tab, then enable IPsec VPN Service Status.
Edge Gateway
  1. Next, configure the peer/remote site.