Enable VPN Within the Gateway

Updated: July 8, 2026

Want to summarize with AI?

Enable VPN support on a Cisco Multicloud Defense gateway and assign a BGP profile before creating a site-to-site tunnel connection.

Use this procedure to enable the VPN for a gateway in the Multicloud Defense Controller dashboard:

Before you begin

Before you can establish a VPN connection between two devices using Multicloud Defense, you must enable the gateway to utilize a BGP profile. See Prerequisites and Limitations for Site-to-Site VPN Tunnels for the complete list of prerequisites for creating and deploying a gateway.

Note

If you opt to use a BGP profile, the BGP profile is run over the IPSEC tunnel with the remote peer.

Procedure

	1.	Navigate to Infrastructure > Gateways > Gateways.
	2.	Click Add Gateway to create a new gateway or select an existing gateway. Choose Edit it in the Actions drop-down menu. To configure a gateway, see Configure Your Gateway. For Azure VPN, we recommend that you use a Dsv3-Series V3 instance type instead of a Dsv5-Series V5 instance type, as the V5 instance type may not be compatible.
	3.	When you create or edit the gateway, scroll to the bottom of the window and select a BGP profile from the drop-down menu when prompted.
	4.	Locate the VPN Connection options under Advanced Settings. Check the Enable VPN option to opt into VPN tunnel connection.
	5.	Expand the BGP Profile drop-down menu and select a profile that has already been created.

What to do next

Create a site-to-site tunnel connection.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.