This page describes the strategy to move from Classic VPN to HA VPN.
Before you begin
Consider the following as you plan a migration to HA VPN:
The public IP address of your Cloud VPN gateway(s) cannot be preserved. Two new public IP addresses are created when you create an HA VPN gateway. GCP selects these IP from two different pools as part of the HA design.
You cannot migrate an existing Cloud VPN tunnel or tunnels on a Classic VPN gateway to an HA VPN gateway. Instead, you need to create new tunnels and delete the old ones.
Migrating to HA VPN means that you can only use features supported on HA VPN connections. For example, you cannot connect a Classic VPN gateway to a HA VPN gateway.
To move from Classic VPN to HA VPN gateways and tunnels, perform the following steps:
- Create a new HA VPN gateway, Cloud Router, and VPN tunnels to connect your Virtual Private Cloud network to your peer network. Follow the directions in Creating an HA VPN gateway to a Peer VPN gateway. The new HA VPN gateway you create will have two new external IP addresses.
- Verify that the new tunnels are working and check the configuration of your HA VPN gateway for high availability
- Delete the tunnel or tunnels connected to the Classic VPN gateway. if the previous VPN tunnel or tunnels were policy based or route based, remove any leftover custom static routes.
- Delete the Classic VPN gateway and release any static external IP addresses it used.
- Learn about the basic concepts of Cloud VPN
- See Advanced Configurations for information on high-availability, high-throughput scenarios, or multiple subnet scenarios.
- Create a custom Virtual Private Cloud network
- Set up different types of Cloud VPN
- View logs and monitoring metrics
- Get troubleshooting help