5.5

Create a VPN Tunnel Within an Organization
You can create a VPN tunnel between two organization virtual datacenter networks in the same
organization.
Both system administrators and organization administrators can create VPN tunnels.
If a firewall is between the tunnel endpoints, you must configure it to allow the following IP protocols and
UDP ports:
n
IP Protocol ID 50 (ESP)
n
IP Protocol ID 51 (AH)
n
UDP Port 500 (IKE)
n
UDP Port 4500
Prerequisites
Verify that you have at least two routed organization virtual datacenter networks with non-overlapping IP
subnets and VPN enabled on both networks.
Procedure
1 Click the Manage & Monitor tab and click Organization VDCs in the left pane.
2 Double-click the organization virtual datacenter name to open the organization virtual datacenter.
3 Click the Org VDC Networks tab, right-click the organization virtual datacenter network name, and
select Configure Services.
4 Click the VPN tab and click Add.
5 Type a name and optional description.
6 Select a network in this organization from the drop-down menu and select a peer network.
7 Review the tunnel settings and click OK.
vCloud Director configures both peer network endpoints.
Create a VPN Tunnel to a Remote Network
You can create a VPN tunnel between an organization virtual datacenter network and a remote network.
System administrators and organization administrators can create VPN tunnels.
If a firewall is between the tunnel endpoints, you must configure it to allow the following IP protocols and
UDP ports:
n
IP Protocol ID 50 (ESP)
n
IP Protocol ID 51 (AH)
n
UDP Port 500 (IKE)
n
UDP Port 4500
Prerequisites
Verify that you have a routed organization virtual datacenter network and a routed remote network that
uses IPSec.
Procedure
1 Click the Manage & Monitor tab and click Organization VDCs in the left pane.
vCloud Director Administrator's Guide
90 VMware, Inc.