VPN Connect Condition
VPN Site to Site is a private connection to communicate between two or more private network through a secure connection and safety.
Between 2 sites, to create a valid VPN Connection, need to satisfy the below conditions. If not system will throw an error.
Condition:
1
Able to create a VPN if private CIDR 2 sites are different - not covert CIDR each other
(code 2017)
Overlapping CIDR in two sites
2
Able to create a Connection if Remote Private CIDR does not overlap with other Site private CIDR Networks that created before (case multi tunnel)
(code 2023) The newly created RemoteSite Subnet overlaps with a previously created RemoteSite Subnet.:
3
The Pre-Shared Key must not be empty if the user selects the checkbox "Used Your Pre-shared Key"
(code 2022) PSK cannot be empty
4
Private CIDR of the remote site must be in a valid format and must be a private network
(mã 2018, 2019) Remote VPN CIDR must be CIDR Private
5
IP Gateway of the site Remote must be public and correct format
(mã 2020, 2021) Remote VPN Gateway IP must be IP Public.
Example
[Code 2017] Overlapping CIDR in two sites
Not be able to create VPN connect above picture
On Site HCM03 has CIDR of VPC1 is 10.1.0.0/16.
On Site HAN01 has CIDR of VPC1 là 10.1.0.0/16.
2 CIDR of HCM03 and HAN01 are conflict each other.
-> Cannot create VPN connection
[Code 2023] The newly created RemoteSite Subnet overlaps with a previously created RemoteSite Subnet.:
Example
At Site HCM03 has CIDR of VPC1 is 10.1.0.0/16.
At Site HAN01 has CIDR of VPC1 is 172.16.0.0/16.
At site On Premise has CIDR is 172.16.0.0/16.
A Site-to-Site VPN was created from Site HCM03 to HAN01.
-> Cannot create Site-to-Site VPN between HCM03 and site On-Premise cause CIDR On-Premise is overlapping with HAN01 172.16.0.0/16.
Last updated