VPN gateway versions are constantly evolving and iterating. VPN gateways of the latest version support more features, provide optimized compatibility with third-party devices, and solve some issues that occur in VPN gateways of earlier versions. If you use a VPN gateway of an earlier version, risks may occur. We recommend that you upgrade your VPN gateway to the latest version to enjoy more features and more stable network performance.
Availability of upgrade
You can check whether your VPN gateway is of the latest version by viewing the Upgrade button on the details page of the VPN gateway in the VPN Gateway console.
If your VPN gateway is already upgraded to the latest version, the Upgrade button is dimmed. If you move the pointer over the Upgrade button, the console prompts that the VPN gateway is already upgraded to the latest version.
By default, newly created VPN gateways are of the latest version.
If the Upgrade button is not dimmed, you can click it to upgrade the VPN gateway.
Description
It takes about 10 minutes to upgrade a VPN gateway.
WarningA VPN gateway is unavailable during the upgrade. The existing connections are interrupted. We recommend that you upgrade a VPN gateway during a network maintenance window to prevent service interruptions.
You are not charged for upgrading a VPN gateway.
If no IPsec-VPN connection is associated with the VPN gateway, the configurations of the VPN gateway remain unchanged after you upgrade the VPN gateway. If an IPsec-VPN connection is associated with the VPN gateway, take note of the following limits:
If your VPN gateway was created before March 21, 2019, you must configure routes for the VPN gateway to ensure network connectivity of the IPsec-VPN connection after you upgrade the VPN gateway. Other configurations of the IPsec-VPN connection remain unchanged after you upgrade the VPN gateway.
NoteIf your VPN gateway was created before March 21, 2019, you do not need to configure routes and need to configure only protected data flows when you create an IPsec-VPN connection on the VPN gateway. However, if you create an IPsec-VPN connection on a VPN gateway of the latest version, you must configure routes. Therefore, you must configure routes after you upgrade your VPN gateway.
If your VPN gateway that was created before March 21, 2019, was upgraded and routes were configured for the VPN gateway after the upgrade, you do not need to configure routes after you upgrade the VPN gateway again.
If your VPN gateway was created after March 21, 2019, the configurations of the IPsec-VPN connection remain unchanged and you do not need to configure routes after you upgrade the VPN gateway.
Prerequisites
If your VPN gateway is associated with an IPsec-VPN connection that uses Internet Key Exchange (IKE) V1 and multiple CIDR blocks are specified for the IPsec-VPN connection, you must change IKE V1 to IKE V2 or create an IPsec-VPN connection for each of the CIDR blocks. Otherwise, the upgrade fails.
Procedure
- Log on to the VPN gateway console.
In the top navigation bar, select the region in which the VPN gateway resides.
On the VPN Gateways page, find the VPN gateway that you want to manage and click the ID of the VPN gateway.
On the details page of the VPN gateway, click Upgrade in the upper-right corner.
In the Upgrade VPN Gateway dialog box, read and accept the risks that may occur during the upgrade, and then click OK.
After you click OK, the system starts to upgrade the VPN gateway. Wait until the upgrade is complete.