How-to guides

Before you begin

• Moving to HA VPN from Classic VPN

  Learn how to move from a Classic VPN to an HA VPN configuration.

• Generating a strong pre-shared key

  Use a pre-shared key (shared secret) to authenticate the Cloud VPN tunnel to your peer VPN gateway.

Creating high-availability VPNs

• Creating an HA VPN gateway to a peer VPN gateway

  Create a high availability VPN gateway, tunnel, and Cloud Router that connects to a peer VPN gateway.

• Creating an HA VPN between Google Cloud networks

  Create an HA VPN gateway, tunnel, and Cloud Router to another HA VPN gateway.

Creating Classic VPNs

• Creating a Classic VPN using dynamic routing (deprecated)

  Create a Classic VPN gateway and tunnel that uses the BGP routing protocol.

• Creating a Classic VPN using static routing

  Create a Classic VPN gateway and tunnel that uses static routes.

Completing a VPN configuration

• Using third-party VPNs with Cloud VPN

  Find Google-tested interoperability guides and vendor-specific notes for peer third-party VPN devices or services that you can use to connect to Cloud VPN.

• Configuring the peer VPN gateway

  Configure your peer VPN gateway by configuring VPN tunnels, BGP sessions, firewall rules, and IKE settings.

• Configuring firewall rules

  Configure firewall rules for Cloud VPN and peer VPN gateways.

• Checking VPN status

  Check VPN tunnel and gateway status, and ensure that your HA VPN configuration meets the requirements for the 99.99% availability SLA.

Maintaining VPNs

• Viewing logs and metrics

  View monitoring logs and metrics for Cloud VPN tunnels.

• Adding a VPN tunnel

  Add a VPN tunnel to a Cloud VPN gateway.

• Deleting a VPN tunnel

  Remove a VPN tunnel from a Cloud VPN gateway.

• Deleting a VPN gateway

  Delete a Cloud VPN gateway.

• Deleting an external peer VPN gateway

  Delete an external peer VPN gateway resource for an HA VPN gateway.