This topic describes how to create a VPN gateway. You must create a VPN gateway before you can use the IPsec-VPN and SSL-VPN features. After you create a VPN gateway, a public IP address is assigned to the VPN gateway.


  1. Log on to the VPN Gateway console.
  2. On the VPN Gateways page, click Create VPN Gateway.
  3. On the buy page, set the following parameters, click Buy Now, and then complete the payment.
    Parameter Description
    Name Enter a name for the VPN gateway.

    The name must be 2 to 128 characters in length, and can contain digits, periods (.), underscores (_), and hyphens (-). It must start with a letter.

    Region Select the region where you want to create the VPN gateway.

    You can create IPsec-VPN connections on VPN gateways to connect a data center to a VPC or connect two VPCs. Make sure that the VPC and the VPN gateway associated with the VPC are deployed in the same region.

    VPC Select the VPC to be associated with the VPN gateway.
    Specify vSwitch Select whether to specify a vSwitch for the VPN gateway.
    • No: does not specify a vSwitch for the VPN gateway. The system attaches the VPN gateway to a random vSwitch in the VPC.
    • Yes: specifies a vSwitch for the VPN gateway. The VPN gateway is attached to the specified vSwitch.
    Peak Bandwidth Select a maximum bandwidth value for the VPN gateway. The bandwidth is used for data transfer over the Internet.
    Billing Method Select a billing method for the VPN gateway.

    VPN gateways support only the pay-by-data-transfer billing method.

    IPsec-VPN Specify whether to enable IPsec-VPN for the VPN gateway.

    After IPsec-VPN is enabled, you can create a secure IPsec tunnel to connect a data center to a VPC, or connect two VPCs.


    Specify whether to enable SSL-VPN.

    SSL-VPN connections are point-to-site connections. SSL-VPN allows you to connect a client to Alibaba Cloud without the need to configure a gateway for the client.

    SSL Connections Select the maximum number of concurrent SSL connections that the VPN gateway supports.
    Note This parameter is available only if you choose to enable SSL-VPN.
    Duration Specify the billing cycle.

    You can select only By Hour.