Creating IPsec Parameters

This page explains the IPsec Parameter creation function on the OCX Portal.

• Only one IPsec Parameter can be configured per resource.

Preparation

Please check the following before creating IPsec Parameters:

• Your User Role must be either admin or user.
• The target XaaS Connection resource must be in either the available or attached status.

Procedure for Creating IPsec Parameters

1. Log in to the OCX Portal.

2. Click [XaaS Connections] from the left navigation bar.

3. From the XaaS Connections list page, click on the corresponding XaaS Connection resource.

4. Click the IPsec Parameters tab at the bottom of the OCX Portal screen, then click [+] Create IPsec Parameter.

5. The screen will switch to the IPsec Parameter creation step. Configure the input items as follows and click [Create].

   • Target XaaS
     • The target XaaS is displayed.
   • Pre-shared Key
     • Enter the Pre-shared Key configured in the target XaaS settings screen.
   • Remote ASN
     • Enter the AS number of the customer network you wish to connect to. 4-byte AS numbers are supported.
     • This must be a different value from the Local ASN entered during the XaaS Connection resource creation, as it operates as eBGP.
   • Primary IPsec Parameter
     • Enter the tunnel endpoint address issued by the target XaaS in IPv4 address format.
     • Enter the local address in IPv4 CIDR (IPv4/mask) format.
     • Enter the remote address in IPv4 CIDR (IPv4/mask) format.
   • Secondary IPsec Parameter
     • Enter the tunnel endpoint address issued by the target XaaS in IPv4 address format.
     • Enter the local address in IPv4 CIDR (IPv4/mask) format.
     • Enter the remote address in IPv4 CIDR (IPv4/mask) format.

6. A creation confirmation popup will appear. Check the settings and click [Create].

7. The created IPsec Parameter will be displayed in the IPsec Parameters section at the bottom of the screen.

This completes the creation of the IPsec Parameter.