It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

IPsec VPN Tunnels

  • Last updated on

The IPsec VPN protocol is the industry-standard VPN protocol and allows you to create site-to-site VPN tunnels to third-party VPN gateways. The Barracuda CloudGen Firewall supports both IKEv1 and IKEv2 site-to-site tunnels. To improve connectivity with third-party IPsec implementations, Barracuda Networks is part of the Virtual Private Network Consortium (vpnc.org). There, you can find IKEv1 IPsec profiles tested specifically for interoperability.

IKEv1 VPN Tunnels

IPsec IKEv1 Site-to-Site VPN Tunnel Configuration

The CloudGen Firewall can establish IPsec VPN tunnels to any standard compliant third-party IKEv1 IPsec VPN gateway. The site-to-site IPsec VPN tunnel must be configured with identical settings on both the CloudGen Firewall and the third-party IPsec gateway.

For more information, see How to Create a site-to-site IPsec VPN Tunnel.

IPsec IKEv1 Site-to-Site VPN Tunnel to AWS VPN Gateway

The Amazon AWS gateway uses two IPsec tunnels and BGP routing to connect your on-premises CloudGen Firewall to your Virtual Private Cloud in Amazon AWS.

For more information, see How to Configure an IKEv1 IPsec VPN to an AWS VPN Gateway with BGP.

IPsec IKEv1 Tunnel Settings

To find out what a specific parameter in the IPsec configuration is for, and the possible configuration values, see the IPsec Tunnel Settings list.

For more information, see IPsec IKEv1 Tunnel Settings.

IKEv2 VPN Tunnels

IKEv2 IPsec Site-to-Site VPN Tunnel Configuration

The CloudGen Firewall can establish IPsec VPN tunnels to any standard-compliant third-party IKEv2 IPsec VPN gateway. The site-to-site IPsec VPN tunnel must be configured with identical settings on both the CloudGen Firewall and the third-party IPsec gateway.

For more information, see How to Configure a Site-to-Site IPsec IKEv2 VPN Tunnel.

IPsec Site-to-Site VPN Tunnel to Azure VPN Gateway

You can connect to the Azure VPN Gateway with a statically routed configuration using IKEv1 to use the static Azure VPN Gateway mode.

For more information, see How to Configure an IPsec site-to-site VPN to a Microsoft Azure VPN Gateway.