blob: 4b76ef99fdca203b3995dd1a8197f500d9e54e17 [file] [log] [blame]
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
#
msgid ""
msgstr ""
"Project-Id-Version: Apache CloudStack Administration Documentation 4.8\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2016-08-22 13:55+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.3.4\n"
#: ../../networking/site_to_site_vpn.rst:4
msgid "Setting Up a Site-to-Site VPN Connection"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:6
msgid ""
"A Site-to-Site VPN connection helps you establish a secure connection "
"from an enterprise datacenter to the cloud infrastructure. This allows "
"users to access the guest VMs by establishing a VPN connection to the "
"virtual router of the account from a device in the datacenter of the "
"enterprise. You can also establish a secure connection between two VPC "
"setups or high availability zones in your environment. Having this "
"facility eliminates the need to establish VPN connections to individual "
"VMs."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:15
msgid ""
"The difference from Remote VPN is that Site-to-site VPNs connects entire "
"networks to each other, for example, connecting a branch office network "
"to a company headquarters network. In a site-to-site VPN, hosts do not "
"have VPN client software; they send and receive normal TCP/IP traffic "
"through a VPN gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:21
msgid "The supported endpoints on the remote datacenters are:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:23
msgid "Cisco ISR with IOS 12.4 or later"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:25
msgid "Juniper J-Series routers with JunOS 9.5 or later"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:27
msgid "CloudStack virtual routers"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:30
msgid ""
"In addition to the specific Cisco and Juniper devices listed above, the "
"expectation is that any Cisco or Juniper device running on the supported "
"operating systems are able to establish VPN connections."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:34
msgid "To set up a Site-to-Site VPN connection, perform the following:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:36
msgid "Create a Virtual Private Cloud (VPC)."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:38
msgid "See \":ref:`configuring-vpc`\"."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:40
msgid "Create a VPN Customer Gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:42
msgid "Create a VPN gateway for the VPC that you created."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:44
msgid ""
"Create VPN connection from the VPC VPN gateway to the customer VPN "
"gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:49
msgid "Creating and Updating a VPN Customer Gateway"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:52
msgid "A VPN customer gateway can be connected to only one VPN gateway at a time."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:54
msgid "To add a VPN Customer Gateway:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:56
#: ../../networking/site_to_site_vpn.rst:166
#: ../../networking/site_to_site_vpn.rst:186
#: ../../networking/site_to_site_vpn.rst:248
#: ../../networking/site_to_site_vpn.rst:379
msgid "Log in to the CloudStack UI as an administrator or end user."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:58
#: ../../networking/site_to_site_vpn.rst:168
#: ../../networking/site_to_site_vpn.rst:188
#: ../../networking/site_to_site_vpn.rst:250
#: ../../networking/site_to_site_vpn.rst:381
msgid "In the left navigation, choose Network."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:60
#: ../../networking/site_to_site_vpn.rst:170
msgid "In the Select view, select VPN Customer Gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:62
msgid "Click Add VPN Customer Gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:64
msgid "|addvpncustomergateway.png|"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:66
msgid "Provide the following information:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:68
msgid "**Name**: A unique name for the VPN customer gateway you create."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:70
msgid "**Gateway**: The IP address for the remote gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:72
msgid ""
"**CIDR list**: The guest CIDR list of the remote subnets. Enter a CIDR or"
" a comma-separated list of CIDRs. Ensure that a guest CIDR list is not "
"overlapped with the VPC's CIDR, or another guest CIDR. The CIDR must be "
"RFC1918-compliant."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:77
msgid ""
"**IPsec Preshared Key**: Preshared keying is a method where the endpoints"
" of the VPN share a secret key. This key value is used to authenticate "
"the customer gateway and the VPC VPN gateway to each other. The sequence "
"cannot contain a newline or double-quote."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:83
msgid ""
"The IKE peers (VPN end points) authenticate each other by computing and "
"sending a keyed hash of data that includes the Preshared key. If the "
"receiving peer is able to create the same hash independently by using its"
" Preshared key, it knows that both peers must share the same secret, thus"
" authenticating the customer gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:90
msgid ""
"**IKE Encryption**: The Internet Key Exchange (IKE) policy for phase-1. "
"The supported encryption algorithms are AES128, AES192, AES256, and 3DES."
" Authentication is accomplished through the Preshared Keys."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:96
msgid ""
"The phase-1 is the first phase in the IKE process. In this initial "
"negotiation phase, the two VPN endpoints agree on the methods to be used "
"to provide security for the underlying IP traffic. The phase-1 "
"authenticates the two VPN gateways to each other, by confirming that the "
"remote gateway has a matching Preshared Key."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:102
msgid ""
"**IKE Hash**: The IKE hash for phase-1. The supported hash algorithms are"
" SHA1 and MD5."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:105
msgid ""
"**IKE DH**: A public-key cryptography protocol which allows two parties "
"to establish a shared secret over an insecure communications channel. The"
" 1536-bit Diffie-Hellman group is used within IKE to establish session "
"keys. The supported options are None, Group-5 (1536-bit) and Group-2 "
"(1024-bit)."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:111
msgid ""
"**ESP Encryption**: Encapsulating Security Payload (ESP) algorithm within"
" phase-2. The supported encryption algorithms are AES128, AES192, AES256,"
" and 3DES."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:116
msgid ""
"The phase-2 is the second phase in the IKE process. The purpose of IKE "
"phase-2 is to negotiate IPSec security associations (SA) to set up the "
"IPSec tunnel. In phase-2, new keying material is extracted from the "
"Diffie-Hellman key exchange in phase-1, to provide session keys to use in"
" protecting the VPN data flow."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:122
msgid ""
"**ESP Hash**: Encapsulating Security Payload (ESP) hash for phase-2. "
"Supported hash algorithms are SHA1 and MD5."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:125
msgid ""
"**Perfect Forward Secrecy**: Perfect Forward Secrecy (or PFS) is the "
"property that ensures that a session key derived from a set of long-term "
"public and private keys will not be compromised. This property enforces a"
" new Diffie-Hellman key exchange. It provides the keying material that "
"has greater key material life and thereby greater resistance to "
"cryptographic attacks. The available options are None, Group-5 (1536-bit)"
" and Group-2 (1024-bit). The security of the key exchanges increase as "
"the DH groups grow larger, as does the time of the exchanges."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:136
msgid ""
"When PFS is turned on, for every negotiation of a new phase-2 SA the two "
"gateways must generate a new set of phase-1 keys. This adds an extra "
"layer of protection that PFS adds, which ensures if the phase-2 SA's have"
" expired, the keys used for new phase-2 SA's have not been generated from"
" the current phase-1 keying material."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:142
msgid ""
"**IKE Lifetime (seconds)**: The phase-1 lifetime of the security "
"association in seconds. Default is 86400 seconds (1 day). Whenever the "
"time expires, a new phase-1 exchange is performed."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:146
msgid ""
"**ESP Lifetime (seconds)**: The phase-2 lifetime of the security "
"association in seconds. Default is 3600 seconds (1 hour). Whenever the "
"value is exceeded, a re-key is initiated to provide a new IPsec "
"encryption and authentication session keys."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:151
msgid ""
"**Dead Peer Detection**: A method to detect an unavailable Internet Key "
"Exchange (IKE) peer. Select this option if you want the virtual router to"
" query the liveliness of its IKE peer at regular intervals. It's "
"recommended to have the same configuration of DPD on both side of VPN "
"connection."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:157
#: ../../networking/site_to_site_vpn.rst:180
msgid "Click OK."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:161
msgid "Updating and Removing a VPN Customer Gateway"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:163
msgid ""
"You can update a customer gateway either with no VPN connection, or "
"related VPN connection is in error state."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:172
msgid "Select the VPN customer gateway you want to work with."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:174
msgid ""
"To modify the required parameters, click the Edit VPN Customer Gateway "
"button |vpn-edit-icon.png|"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:177
msgid ""
"To remove the VPN customer gateway, click the Delete VPN Customer Gateway"
" button |delete.png|"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:184
msgid "Creating a VPN gateway for the VPC"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:190
#: ../../networking/site_to_site_vpn.rst:252
#: ../../networking/site_to_site_vpn.rst:383
msgid "In the Select view, select VPC."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:192
#: ../../networking/site_to_site_vpn.rst:385
msgid "All the VPCs that you have created for the account is listed in the page."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:195
#: ../../networking/site_to_site_vpn.rst:256
#: ../../networking/site_to_site_vpn.rst:388
msgid "Click the Configure button of the VPC to which you want to deploy the VMs."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:198
#: ../../networking/site_to_site_vpn.rst:259
#: ../../networking/site_to_site_vpn.rst:391
msgid ""
"The VPC page is displayed where all the tiers you created are listed in a"
" diagram."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:201
#: ../../networking/site_to_site_vpn.rst:264
#: ../../networking/site_to_site_vpn.rst:396
msgid "For each tier, the following options are displayed:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:203
#: ../../networking/site_to_site_vpn.rst:266
#: ../../networking/site_to_site_vpn.rst:398
msgid "Internal LB"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:205
#: ../../networking/site_to_site_vpn.rst:268
#: ../../networking/site_to_site_vpn.rst:400
msgid "Public LB IP"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:207
#: ../../networking/site_to_site_vpn.rst:270
#: ../../networking/site_to_site_vpn.rst:402
msgid "Static NAT"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:209
#: ../../networking/site_to_site_vpn.rst:272
#: ../../networking/site_to_site_vpn.rst:404
msgid "Virtual Machines"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:211
#: ../../networking/site_to_site_vpn.rst:274
#: ../../networking/site_to_site_vpn.rst:406
msgid "CIDR"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:213
#: ../../networking/site_to_site_vpn.rst:276
#: ../../networking/site_to_site_vpn.rst:408
msgid "The following router information is displayed:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:215
#: ../../networking/site_to_site_vpn.rst:278
#: ../../networking/site_to_site_vpn.rst:410
msgid "Private Gateways"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:217
#: ../../networking/site_to_site_vpn.rst:280
#: ../../networking/site_to_site_vpn.rst:412
msgid "Public IP Addresses"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:219
#: ../../networking/site_to_site_vpn.rst:282
#: ../../networking/site_to_site_vpn.rst:414
msgid "Site-to-Site VPNs"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:221
#: ../../networking/site_to_site_vpn.rst:284
#: ../../networking/site_to_site_vpn.rst:416
msgid "Network ACL Lists"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:223
#: ../../networking/site_to_site_vpn.rst:286
#: ../../networking/site_to_site_vpn.rst:418
msgid "Select Site-to-Site VPN."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:225
msgid ""
"If you are creating the VPN gateway for the first time, selecting Site-"
"to-Site VPN prompts you to create a VPN gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:228
msgid "In the confirmation dialog, click Yes to confirm."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:230
msgid ""
"Within a few moments, the VPN gateway is created. You will be prompted to"
" view the details of the VPN gateway you have created. Click Yes to "
"confirm."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:234
msgid "The following details are displayed in the VPN Gateway page:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:236
#: ../../networking/site_to_site_vpn.rst:316
msgid "IP Address"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:238
msgid "Account"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:240
msgid "Domain"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:244
msgid "Creating a VPN Connection"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:246
msgid "CloudStack supports creating up to 8 VPN connections."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:254
msgid "All the VPCs that you create for the account are listed in the page."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:262
#: ../../networking/site_to_site_vpn.rst:394
msgid "Click the Settings icon."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:288
#: ../../networking/site_to_site_vpn.rst:420
msgid "The Site-to-Site VPN page is displayed."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:290
#: ../../networking/site_to_site_vpn.rst:422
msgid "From the Select View drop-down, ensure that VPN Connection is selected."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:293
msgid "Click Create VPN Connection."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:295
msgid "The Create VPN Connection dialog is displayed:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:297
msgid "|createvpnconnection.png|"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:299
msgid "Select the desired customer gateway."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:301
msgid ""
"Select Passive if you want to establish a connection between two VPC "
"virtual routers."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:304
msgid ""
"If you want to establish a connection between two VPC virtual routers, "
"select Passive only on one of the VPC virtual routers, which waits for "
"the other VPC virtual router to initiate the connection. Do not select "
"Passive on the VPC virtual router that initiates the connection."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:310
msgid "Click OK to confirm."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:312
msgid "Within a few moments, the VPN Connection is displayed."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:314
msgid "The following information on the VPN connection is displayed:"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:318
msgid "Gateway"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:320
msgid "State"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:322
msgid "IPSec Preshared Key"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:324
msgid "IKE Policy"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:326
msgid "ESP Policy"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:330
msgid "Site-to-Site VPN Connection Between VPC Networks"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:332
msgid ""
"CloudStack provides you with the ability to establish a site-to-site VPN "
"connection between CloudStack virtual routers. To achieve that, add a "
"passive mode Site-to-Site VPN. With this functionality, users can deploy "
"applications in multiple Availability Zones or VPCs, which can "
"communicate with each other by using a secure Site-to-Site VPN Tunnel."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:338
msgid "This feature is supported on all the hypervisors."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:340
msgid "Create two VPCs. For example, VPC A and VPC B."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:342
msgid "For more information, see \":ref:`configuring-vpc`\"."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:344
msgid "Create VPN gateways on both the VPCs you created."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:346
msgid ""
"For more information, see `\"Creating a VPN gateway for the VPC\" "
"<#creating-a-vpn-gateway-for-the-vpc>`_."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:349
msgid "Create VPN customer gateway for both the VPCs."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:351
msgid ""
"For more information, see `\"Creating and Updating a VPN Customer "
"Gateway\" <#creating-and-updating-a-vpn-customer-gateway>`_."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:354
msgid "Enable a VPN connection on VPC A in passive mode."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:356
msgid ""
"For more information, see `\"Creating a VPN Connection\" <#creating-a"
"-vpn-connection>`_."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:359
msgid ""
"Ensure that the customer gateway is pointed to VPC B. The VPN connection "
"is shown in the Disconnected state."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:362
msgid "Enable a VPN connection on VPC B."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:364
msgid ""
"Ensure that the customer gateway is pointed to VPC A. Because virtual "
"router of VPC A, in this case, is in passive mode and is waiting for the "
"virtual router of VPC B to initiate the connection, VPC B virtual router "
"should not be in passive mode."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:369
msgid "The VPN connection is shown in the Disconnected state."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:371
msgid ""
"Creating VPN connection on both the VPCs initiates a VPN connection. Wait"
" for few seconds. The default is 30 seconds for both the VPN connections "
"to show the Connected state."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:377
msgid "Restarting and Removing a VPN Connection"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:425
msgid "All the VPN connections you created are displayed."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:427
msgid "Select the VPN connection you want to work with."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:429
msgid "The Details tab is displayed."
msgstr ""
#: ../../networking/site_to_site_vpn.rst:431
msgid ""
"To remove a VPN connection, click the Delete VPN connection button "
"|remove-vpn.png|"
msgstr ""
#: ../../networking/site_to_site_vpn.rst:434
msgid ""
"To restart a VPN connection, click the Reset VPN connection button "
"present in the Details tab. |reset-vpn.png|"
msgstr ""