<p>This article describes common concepts used in creating a VPN gateway on Ping An Cloud.</p> <table border="1" cellpadding="0" cellspacing="0" style="width:0px"> <tbody> <tr> <td style="background-color:#ededed; width:181px"> <p><strong>Concept</strong></p> </td> <td style="background-color:#ededed; width:602px"> <p><strong>Description</strong></p> </td> </tr> <tr> <td style="width:181px"> <p>VPN Connection</p> </td> <td style="width:602px"> <p>It refers to the connection between VPN gateways using the IPsec encryption technology. It creates a reliable and encrypted communication channel between VPN gateways of the VPC of Ping An Cloud and of the tenant local data center.</p> <p>VPN Connection uses IPsec and IKE protocols to encrypt transmission data, so as to ensure secure and reliable communication.</p> </td> </tr> <tr> <td style="width:181px"> <p>Remote Gateway</p> </td> <td style="width:602px"> <p>VPN gateways of the tenant local data center and of the VPC of Ping An Cloud can realize communication by establishing VPN connections between them.</p> </td> </tr> <tr> <td style="width:181px"> <p>IPsec VPN</p> </td> <td style="width:602px"> <p>Internet Protocol Security (IPsec) is an Internet security protocol and ensures communication security by establishing encryption and authentication security mechanisms. IPsec VPN provides secure communication channel between the tenant local data center and the VPC of Ping An Cloud. It enables remote access with IPsec, and ensures secure connection with encryption channel.</p> </td> </tr> <tr> <td style="width:181px"> <p>IKE</p> </td> <td style="width:602px"> <p>Internet Key Exchange (IKE) is an Internet key exchange protocol for management and exchange of encryption keys used in VPN, and provides a secure method to create or update shared keys. It can connect to IPsec to improve the security of VPN connection.</p> </td> </tr> </tbody> </table>