Cisco Multicloud Defense User Guide

PDF

Cisco Multicloud Defense User Guide

Enable VPN within the gateway

Updated: July 8, 2026

Want to summarize with AI?

Log in

Enable VPN support on a Cisco Multicloud Defense gateway and assign a BGP profile before creating a site-to-site tunnel connection.

Follow these steps to configure VPN:

Before you begin

Before you can establish a VPN connection using Multicloud Defense, you must enable the gateway to use a BGP profile. For the complete list of prerequisites for creating and deploying a gateway, refer to Prerequisites and limitations for Site-to-Site VPN tunnels.

Note

If you choose to use a BGP profile, it runs over the IPsec tunnel with the remote peer.

Procedure

  1. Navigate to Infrastructure > Gateways > Gateways.

  2. Click Add Gateway to create a new gateway, or select an existing gateway and choose Edit in the Actions drop-down menu. For information about how to configure a gateway, refer to Configure Your Gateway.

    For Azure VPN, use a Dsv3-Series V3 instance type instead of a Dsv5-Series V5 instance.

  3. When you create or edit the gateway, select BGP profile from the drop-down menu when prompted.

  4. Locate the VPN Connection options under Advanced Settings. Check the Enable VPN option to activate the VPN tunnel connection.

  5. Expand the BGP Profile drop-down menu, and select a profile that has already been created.

The gateway is configured for VPN support and is ready to establish a site-to-site connection.

What to do next

Proceed to Create a site-to-site tunnel connection after configuration.