HOWTO: Commission a Site-to-Site VPN Tunnel¶
The shipped hybrid-WAN reference topology uses site-to-site IPsec beneath its Hetzner, GCP, and recovery paths. This HOWTO commissions that transport layer: IKE policy, ESP transforms, peer authentication, tunnel validation, DPD monitoring, routed traffic, and the structured run record consumed by the edge blueprint.
What this covers:
- IKE phase 1 and phase 2 configuration with the reference cipher and DH group selections
- Tunnel bring-up validation: SA establishment, traffic test, and DPD keepalive confirmation
- Routing configuration over the tunnel and end-to-end path probe records