All Products
Search
Document Center

VPN Gateway:Modify VPN gateways

Last Updated:Mar 05, 2026

Upgrade or downgrade a VPN gateway to adjust its bandwidth without recreating the instance. Changes take effect immediately.

Billing

New specifications take effect immediately and remain valid until the instance expires. Propagation may take a few minutes due to network latency.

After you submit the order, billing starts based on the new configuration. For details, see Billing.

Upgrade a VPN gateway

Increase the bandwidth of a VPN gateway. The upgrade does not affect existing services.

Upgrade limits

  • If the bandwidth of a VPN gateway is 200 Mbps or less, you cannot upgrade it to 500 Mbps or 1000 Mbps. If the bandwidth is 500 Mbps, you can only upgrade it to 1000 Mbps.

    Note

    For VPN gateways that support dual-tunnel IPsec-VPN connections, you can contact your account manager to request the removal of bandwidth upgrade limits.

Note

To enable IPsec-VPN, enable SSL-VPN, or increase SSL-VPN connections, see the following topics:

Procedure

  1. Log on to the VPN Gateway console.

  2. In the top menu bar, select the region of the VPN gateway.

  3. On the VPN Gateways page, find the target VPN gateway and click Upgrade in the Bandwidth column.

  4. On the VPN Gateway | Upgrade/Downgrade page, set the Maximum Bandwidth to the desired value.

  5. In the Service Agreement section, read and select the service agreement, and then click Buy Now and complete the payment.

Downgrade a VPN gateway

Decrease the bandwidth, disable IPsec-VPN or SSL-VPN, or reduce SSL-VPN connections for a VPN gateway.

Important

During a bandwidth downgrade, if the traffic transmitted through the VPN gateway exceeds the new bandwidth specification, connections may be interrupted. We recommend that your backend applications have a reconnection mechanism. Similarly, when you decrease the maximum number of SSL-VPN connections, if the number of connected clients exceeds the new specification, connections may be interrupted.

Downgrade limits

  • If the bandwidth of a VPN gateway is 1000 Mbps, you can only downgrade it to 500 Mbps. If the bandwidth is 500 Mbps, you cannot downgrade it.

    Note

    For VPN gateways that support dual-tunnel IPsec-VPN connections, you can contact your account manager to request the removal of bandwidth downgrade limits.

Prerequisites

Before you begin, ensure that you have:

Downgrade options

  • Bandwidth

  • IPsec-VPN feature (disable)

  • SSL-VPN feature (disable)

  • Maximum number of SSL-VPN connections (decrease)

Procedure

  1. Log on to the VPN Gateway console.

  2. In the top menu bar, select the region of the VPN gateway.

  3. On the VPN Gateways page, find the target VPN gateway and click Downgrade in the Bandwidth column.

  4. On the VPN Gateway | Downgrade page, modify the configuration as needed. Available changes include decreasing the Maximum Bandwidth, disabling IPsec-VPN or SSL-VPN, and decreasing SSL-VPN connections.

  5. In the Service Agreement section, read and select the service agreement, and then click Buy Now and complete the payment.

References