VPN gateway provision - Infrastructure

Help

VPN type

Select the type of VPN that you want to create. Learn more

Site-to-site VPN gateway

Securely extend your on-premises network to IBM Cloud.

IPsec secure tunnels
Customizable IKE phase 1 and phase 2 encryption
Appliance-level high availability

Client-to-site VPN server

Securely connect to your IBM Cloud resources from anywhere.

TLS 1.2/1.3-based secure, encrypted connection
Multi-factor client authentication
High availability spanning across zones

Location

Select the location where you want to create your VPN gateway.

Geography

Region

Details

VPN gateway name

Use lowercase alphanumeric characters and hyphens only (without spaces).

View all resource groups

Tags (optional)

If your user tags are billing related, consider writing tags as key:value pairs, such as costctr:124

Subnet

The VPN requires four IP addresses on the subnet that you select. Only resources in the same zone as the selected subnet can connect through this VPN gateway. Learn more

	Click to sort rows by Name header in ascending order	Click to sort rows by IP range header in ascending order	Click to sort rows by Location header in ascending order	Click to sort rows by Available IP addresses header in ascending order

No available subnets exist.The subnet list is empty. Click "Create" to get started.

Mode

Route-based

Determines which traffic goes through the VPN tunnel based on custom routes in a VPC egress routing table.

Policy-based

Determines which traffic goes through the VPN tunnel based on defined local and peer CIDR blocks.

VPN connection for VPC

A VPN connection is required to establish connectivity between this gateway and the network outside your VPN. You can also create a VPN connection after you provision the gateway.
Connection details
VPN connection name
Peer gateway address
Establish mode
Preshared key
Distribute traffic
Dead peer detection
Action
Interval (sec)
Timeout (sec)
Policies
IKE policy
IPsec policy
Advanced options
You can configure one local and one peer IKE identity. Learn more
Local IKE identities
Member 1
Type
Value
Member 2
Type
Value
Peer IKE identity
Type
Value

If you create a VPN for VPC (site-to-site VPN gateway) with a connection between your on-premises network and IBM Cloud, the following metrics are collected on a monthly basis:

Instance hours - Time your VPN gateway instance is up and running.

Connection hours - Time each of your VPN connections is created and enabled on the VPN gateway.

Charge metricCost

Instance hours

Connection hours

If you create a Client VPN for VPC (client-to-site VPN server) and connections between your users and IBM Cloud, the following metrics are collected on a monthly basis:

Instance hours - Time your VPN server instance is up and running.

Connection hours - Time your aggregated VPN connections are established and maintained on the VPN server.

Charge metricCost

Instance hours

Connection hours

Additional charges

Currently, a floating IP instance is provided at no charge.

Charge metricCost

Instance

Provided

You are charged for outbound public internet traffic billed at data transfer rates. Data transfer charges are for egress only and vary based on region. Inbound data transfers to IBM Cloud are free.

Charge metricCost

Data transfer within zone

Provided

Data transfer between zones in the same region

Provided

Data transmitted

You can also use the Global Catalog API to get pricing for valid service configurations and determine an estimated cost. Learn more
VPN for VPC service ID
VPN for VPC plan ID
Client VPN for VPC service ID
Client VPN for VPC plan ID
Floating IP service ID
Floating IP plan ID
VPC service ID
VPC plan ID

Summary

Select location

1VPN gatewayprovided

Please sign up to create or login before applying the promo code.

Total estimated cost
$0.00/mo

IBM Cloud

Help

VPN for VPC

Details

Subnet

VPN connection for VPC

Advanced options

Additional charges

Type

Provider

Category

Related links

Need help?

Summary

Site-to-site gateways

Features

Pricing

Summary