You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/vmware-cloudsimple/high-availability-vpn-connection.md
+7-30Lines changed: 7 additions & 30 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,38 +16,15 @@ Network administrators can configure a high availability IPsec Site-to-Site VPN
16
16
17
17
This guide presents steps to configure an on-premises firewall for an IPsec Site-to-Site VPN high availability connection. The detailed steps are specific to the type of on-premises firewall. As examples, this guide presents steps for two types of firewalls: Cisco ASA and Palo Alto Networks.
18
18
19
-
## Default configuration for CloudSimple VPN gateways
20
-
21
-
By default, CloudSimple VPN gateways are configured in IKEv1 mode along with the following Phase 1 and Phase 2 attributes. If you want to use different VPN attributes or use IKEv2 instead of IKEV1, <ahref="https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/newsupportrequest"target="_blank">open a support request</a>.
22
-
23
-
### Phase 1
24
-
25
-
| Parameter | Value |
26
-
|-----------|-------|
27
-
| IKE Version | IKEv1 |
28
-
| Encryption | AES 256 |
29
-
| Hash Algorithm| SHA 256 |
30
-
| Diffie Hellman Group (DH Group) | 1 |
31
-
| Life Time | 86,400 seconds |
32
-
| Data Size | 4 GB |
33
-
34
-
### Phase 2
35
-
36
-
| Parameter | Value |
37
-
|-----------|-------|
38
-
| Encryption | AES 256 |
39
-
| Hash Algorithm| SHA 256 |
40
-
| Perfect Forward Secrecy Group (PFS Group) | None |
41
-
| Life Time | 28,800 seconds |
42
-
| Data Size | 4 GB |
43
-
44
19
## Before you begin
45
20
46
21
Complete the following tasks before you configure the on-premises firewall.
47
22
48
23
1. Verify that your organization has [provisioned](create-nodes.md) the required nodes and created at least one CloudSimple Private Cloud.
49
24
2.[Configure a Site-to-Site VPN gateway](vpn-gateway.md#set-up-a-site-to-site-vpn-gateway) between your on-premises network and your CloudSimple Private Cloud.
50
25
26
+
See [VPN gateways overview](cloudsimple-vpn-gateways.md) for supported phase 1 and phase 2 proposals.
27
+
51
28
## Configure on-premises Cisco ASA firewall
52
29
53
30
The instructions in this section apply to Cisco ASA version 8.4 and later. In the configuration example, Cisco Adaptive Security Appliance Software Version 9.10 is deployed and configured in IKEv1 mode.
Configure the transform set (TS), which must involve the keyword ```ikev1```. The encryption and hash attributes specified in the TS must match with the parameters listed in [Default configuration for CloudSimple VPN gateways](#default-configuration-for-cloudsimple-vpn-gateways).
95
+
Configure the transform set (TS), which must involve the keyword ```ikev1```. The encryption and hash attributes specified in the TS must match with the parameters listed in [Default configuration for CloudSimple VPN gateways](cloudsimple-vpn-gateways.md).
0 commit comments