5.1

4 Click the VPN tab and click Add.
5 Type a name and optional description.
6 Select a network in this organization from the drop-down menu and select a peer network.
7 Review the tunnel settings and click OK.
vCloud Director configures both peer network endpoints.
Create a VPN Tunnel to a Remote Network
You can create a VPN tunnel between an organization vDC network and a remote network.
System administrators and organization administrators can create VPN tunnels.
If a firewall is between the tunnel endpoints, you must configure it to allow the following IP protocols and
UDP ports:
n
IP Protocol ID 50 (ESP)
n
IP Protocol ID 51 (AH)
n
UDP Port 500 (IKE)
n
UDP Port 4500
Prerequisites
n
A routed organization vDC network and a routed remote network that uses IPSec.
n
vShield Manager 5.1.
Procedure
1 Click the Manage & Monitor tab and click Organization vDCs in the left pane.
2 Double-click the organization vDC name to open the organization vDC.
3 Click the Org vDC Networks tab, right-click the organization vDC network name and select Configure
Services.
4 Click the VPN tab and click Add.
5 Type a name and optional description.
6 Select a remote network from the drop-down menu.
7 Type the peer settings.
8 Review the tunnel settings and click OK.
vCloud Director configures the organization peer network endpoint.
What to do next
Manually configure the remote peer network endpoint.
Enable Static Routing for an Organization vDC Network
You can configure certain organization vDC networks to provide static routing services. After you enable static
routing on an organization vDC network, you can add static routes to allow traffic between different vApp
networks routed to the organization vDC network.
Prerequisites
Verify that you have a routed organization vDC network.
vCloud Director Administrator's Guide
88 VMware, Inc.