...

1. In the Armor Management Portal (AMP), in the left-side navigation, click Infrastructure.
2. Click L2L VPN.
3. In the top menu, in the drop-down menu, select the data center where the virtual machine lives. 
4. Click the plus ( + ) icon. 
   • If you do not have any tunnels in that data center, then click Create an L2L tunnel.
5. In Tunnel Name, enter a descriptive name. 
6. Use the slider to enable or disable the tunnel. 
7. In Pre-Shared Key, enter a secure password. 
   
   • You will use this key to securely connect to your local endpoint. 
   • You can click Generate New Key to generate a password.
     
   • You can also create your own key. If you create your own key, the key must contain the following requirements:
     • 16 to 96 characters
     • One lower-case letter
     • One upper-case letter
     • One number
8. In Encryption Mode, select an encryption mode:

   • Advanced Encryption Standard (AES-128) or (AES-256-CBC). 

     Note
     AES-256-GCM is not compatible.

9. Mark a Diffie-Hellman Group option: 
   
   • DH-2
     • MODP with a 1024-bit modulus
   • DH-5
     • MODP with a 1536-bit modulus
   • DH-14
   • DH-15
   • DH-16
10. Enable or disable Perfect Forward Secrecy (PFD).
11. In Remote Peer IP Address, enter your VPN peer IP address. 
12. In Remote Host/Networks (CIDR), enter your LAN encryption domain, and then click the plus ( + ) sign. 
13. In Local Host/Networks (CIDR), enter the Armor LAN encryption domain, and then click the plus ( + ) sign. 
    • This information is the same as your secure cloud server IP address at Armor. 
14. Click Save Changes. 

...

Anchor
Edit a L2L VPN tunnel Edit a L2L VPN tunnel

Edit an L2L VPN tunnel

...