> For the complete documentation index, see [llms.txt](https://docs.neevcloud.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.neevcloud.com/neevcloud-products/networking/vpn/policies-and-gateways.md).

# Policies & Gateways

### Create IKE Policy

Navigate to **Networking > VPNs > IKE Policies > + Create IKE Policy**

| Field                   | Value     |
| ----------------------- | --------- |
| Name                    | ikepolicy |
| IKE Version             | v2        |
| Authorization Algorithm | sha256    |
| Encryption Algorithm    | aes-256   |
| Negotiation Mode        | main      |
| Perfect Forward Secrecy | group14   |
| Lifetime Value          | 3600      |

<figure><img src="/files/2jngQeczws6LQR1UvwI3" alt=""><figcaption></figcaption></figure>

***

### Create IPSec Policy

Navigate to **Networking > VPNs > IPSec Policies > + Create IPSec Policy**

| Field                   | Value       |
| ----------------------- | ----------- |
| Name                    | ipsecpolicy |
| Authorization Algorithm | sha256      |
| Encryption Algorithm    | aes-256     |
| Encapsulation Mode      | tunnel      |
| Transform Protocol      | esp         |
| Perfect Forward Secrecy | group14     |
| Lifetime Value          | 3600        |

<figure><img src="/files/3tGS98yFi7hWiUorM6bl" alt=""><figcaption></figcaption></figure>

***

### Create VPN Gateways

Navigate to **Networking > VPNs > VPN Gateways > + Create VPN Service**

Create one gateway per router:

**Gateway 1**

| Field    | Value         |
| -------- | ------------- |
| Name     | vpn1          |
| Router   | left-router   |
| Location | Central India |

**Gateway 2**

| Field    | Value         |
| -------- | ------------- |
| Name     | vpn2          |
| Router   | right-router  |
| Location | Central India |

<figure><img src="/files/DbkJGVHwCYpJvbDLWqYK" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/3zTUcplGJ4inMpY1mG4Z" alt=""><figcaption></figcaption></figure>

> **Note:** After creation, verify that **Admin State Up = true** and **Status = ACTIVE** on each gateway detail page before proceeding. If Admin State shows false, the gateway must be enabled before continuing.

***

### Create VPN Endpoint Groups

Navigate to **Networking > VPNs > VPN Endpoint Groups > + Create VPN Endpoint Group**

Create all four groups one by one:

| Group Name      | Type  | Value            |
| --------------- | ----- | ---------------- |
| left-peer-epg   | Local | network-1-subnet |
| right-local-epg | Peer  | 10.2.0.0/24      |
| left-local-epg  | Local | network-2-subnet |
| right-peer-epg  | Peer  | 10.1.0.0/24      |
|                 |       |                  |

<figure><img src="/files/ftnV2QNdD7bWF4bwtqdv" alt=""><figcaption></figcaption></figure>

> &#x20;**Note:** **Local** type requires selecting a subnet from the dropdown. **Peer** type requires entering the remote network CIDR manually.