After the IPsec connection is configured and the negotiation succeeds, you can download the IPsec connection configuration and configure the local gateway.


Make sure an IPsec-VPN connection is created. For more information, see Create an IPsec-VPN connection.


  1. Log on to the VPC console.
  2. In the left-side navigation pane, choose VPN > IPsec Connections.
  3. Select a region.
  4. On the IPsec Connections page, find the target IPsec-VPN connection, and click Download Configuration in the Actions column.
    Note The RemoteSubnet and LocalSubnet in the downloaded configuration are opposite to the local network and the remote network when you create an IPsec-VPN connection. From the perspective of VPN Gateway, the remote network is the on-premises data center and the local network is the VPC, whereas from the perspective of the on-premises data center, the remote network is the VPC and the local network is the on-premises data center.