Policies & Gateways

Create IKE Policy

Navigate to Networking > VPNs > IKE Policies > + Create IKE Policy

Field	Value
Name	ikepolicy
IKE Version	v2
Authorization Algorithm	sha256
Encryption Algorithm	aes-256
Negotiation Mode	main
Perfect Forward Secrecy	group14
Lifetime Value	3600

---

Create IPSec Policy

Navigate to Networking > VPNs > IPSec Policies > + Create IPSec Policy

Field	Value
Name	ipsecpolicy
Authorization Algorithm	sha256
Encryption Algorithm	aes-256
Encapsulation Mode	tunnel
Transform Protocol	esp
Perfect Forward Secrecy	group14
Lifetime Value	3600

---

Create VPN Gateways

Navigate to Networking > VPNs > VPN Gateways > + Create VPN Service

Create one gateway per router:

Gateway 1

Field	Value
Name	vpn1
Router	left-router
Location	Central India

Gateway 2

Field	Value
Name	vpn2
Router	right-router
Location	Central India

Note: After creation, verify that Admin State Up = true and Status = ACTIVE on each gateway detail page before proceeding. If Admin State shows false, the gateway must be enabled before continuing.

---

Create VPN Endpoint Groups

Navigate to Networking > VPNs > VPN Endpoint Groups > + Create VPN Endpoint Group

Create all four groups one by one:

Group Name	Type	Value
left-peer-epg	Local	network-1-subnet
right-local-epg	Peer	10.2.0.0/24
left-local-epg	Local	network-2-subnet
right-peer-epg	Peer	10.1.0.0/24

Note: Local type requires selecting a subnet from the dropdown. Peer type requires entering the remote network CIDR manually.