Manage a VPN endpoint

Each VPN endpoint has its own page. You add its connections there, copy the settings for the device at the other site, and see whether each tunnel is up. VPN endpoints are in beta. To create one, see Create a VPN endpoint.

Open a VPN endpoint

1. In the side menu, open Infrastructure, then select VPN Endpoints under Networking.
2. Select the endpoint’s name. The VPN Endpoint page opens.

The top card shows its name, status and a summary, for example 2 connections · 1 active.

Read the properties

Properties lists the Name, Status, Router, Public Address, Local Networks and VPN Endpoint ID.

• Public Address is the router gateway’s address. The far end connects to it.
• Local Networks are your private networks that the far end can reach.

The status can be:

• Active: the tunnel is up and passes traffic.
• Pending: it is being set up, or waits for the far end.
• Down: the far end doesn’t answer.
• Error: the platform couldn’t set it up.

Read the connections

Connections lists each tunnel with its Connection name, Peer Address, Peer Networks, Security Policy and Status. Select a connection to see its settings in three groups: IKE (Phase 1), IPsec (Phase 2) and Tunnel.

A new connection stays Pending or Down until the device at the far end answers. That’s expected, not a fault.

Add a connection

1. Select Add Connection.
2. Fill in Connection Name, Peer Address, Peer Networks, Pre-Shared Key and Security Policy. Optionally, fill in Peer ID (Optional) and the Advanced Settings. Each field is explained in Create a VPN endpoint.
3. Select Add Connection.

You see Adding the connection., then a card such as toronto-office Was Added that reminds you to set up the far end. Select Dismiss to close it.

Set up the far end

Settings For The Far End lists every value to enter on the device at the other site, connection by connection. They include the address and networks on this side, the IKE and IPsec settings and the tunnel settings.

1. Select Copy All to copy every value, or copy one value at a time.
2. Enter them on the device at the other site, with the same pre-shared key. The pre-shared key isn’t shown here.

Edit a connection

1. Open the connection’s actions and select Edit Connection.
2. Change what you need. Leave New Pre-Shared Key (Optional) blank to keep the current key. A new key must also be set at the far end.
3. Select Save. You see Connection updated.

The security policy is fixed after creation. To change it, delete the connection and add it again. A connection can’t be changed while it’s pending.

Delete a connection

1. Open the connection’s actions and select Delete Connection.
2. Confirm. The tunnel to that site stops. This can’t be undone.

Rename or delete the VPN endpoint

• Rename VPN Endpoint changes its name. Select Save. You see VPN endpoint renamed.
• Delete VPN Endpoint removes it with all its connections. Type its name to confirm, for example office-vpn. You see Deleting office-vpn., then office-vpn is deleted. Tunnels to other sites stop, and this can’t be undone.

If something goes wrong

• A connection stays Down: check that the device at the other site is on and that its settings match the ones on this page.
• A connection in Error: delete it and add it again, or contact support.
• This VPN endpoint is busy with another change. Try again in a moment.
• For your security, the key was cleared after sending. Enter it again before you try again.
• If the page says the endpoint, or your account, has reached its limit of connections, delete a connection you don’t use. To raise the account limit, open a support ticket.
• You don’t have permission to manage VPN endpoints. Your account owner can give you access.
• VPN Endpoint Not Found means it was deleted, or the link is wrong. Go back to the list.
• Changes Are Switched Off means changes are paused for now. You can still read everything.