CloudConnexa: Change CloudConnexa Region or Gateway IP for existing GCP IPsec tunnel

Description: This guide explains how to change an existing GCP IPsec tunnel to connect to a different CloudConnexa region or Gateway IP.

1. Sign in to the CloudConnexa Administration Portal and go to Networks.

2. Select your network, go to the Connectors tab, and select Add Connector.

3. Select the target CloudConnexa region. This example uses Tokyo.

   1. 

4. On the newly created Connector, select Configure to open the Configure Connector page.

5. Select GCP as the platform and copy the CloudConnexa public IP address. You’ll use this IP address to create a new IPsec tunnel in GCP.

   Note: Click the down arrow to view the list of CloudConnexa IP addresses for this region that you can use to establish an IPsec session.

6. Sign in to the GCP portal and go to Networking > Network Connectivity > VPN. Select Cloud VPN Gateway.

7. Select Create VPN Gateway, and then select Classic.

   • Google Computer Engine VPN Gateway

     • Name: Enter a name for the GCP VPN gateway.

     • Description (optional): Enter a short description of the VPN gateway.

     • Network: Select the network that the VPN gateway connects to.

     • Region: Select the region where the gateway for your resource network is located.

     • IP address: Create a public IP address to use as the peer IP address for CloudConnexa.

        

   • Tunnels

     • Name: Enter a name for the tunnel.

     • Description (optional): Enter a short description of the tunnel.

     • Remote peer IP address: Enter the CloudConnexa public IP address copied in Step 5.

     • IKE version: Select IKEv1 or IKEv2. Use the same IKE version configured in CloudConnexa.

     • IKE pre-shared key: Enter the pre-shared key for the tunnel. Use the same pre-shared key configured in CloudConnexa.

     • Routing option: Select Policy-Based.

     • Remote network IP ranges: Enter the CloudConnexa WPC and domain routing subnets, including any other CloudConnexa networks that need access to the GCP network. You can also find this network and subnet information under “Remote Network IP Ranges" on the CloudConnexa Connector IPsec setup page.

     • Local subnetworks: Select the networks or subnets that remote resources can access.

     • Select Create.

       Note: Ensure that the new VPN Gateway and Tunnel replicates the same configuration and settings as the current active IPsec tunnel.

8. Return to the CloudConnexa setup process and continue with Step 2, entering the required details from the new GCP tunnel.

   1. Google Compute Engine VPN Gateway IP: Enter the GCP public IP address created in Step 7 under Google Compute Engine VPN Gateway.

   2. Pre-Shared Key: Enter the pre-shared key created in Step 7 under Tunnels.

9. Select Finish.

10. Once the New Connector is Online and working, proceed to delete the Old Connector on CloudConnexa Portal and corresponding Old VPN Gateway on GCP Portal.