Connect to CloudRaya VPN on Windows

This guide explains how to connect a Windows device to CloudRaya VPN using the L2TP/IPsec protocol.

CloudRaya VPN allows you to securely access private resources inside your VPC, such as Virtual Machines using private IP addresses.

Before You Begin

Make sure you have the following information from the CloudRaya Control Panel:

• VPN Public IP
• Pre-Shared Key (PSK)
• VPN Username
• VPN Password

Prerequisites:

• At least one active Virtual Machine in the selected location
• VPN status is Enabled
• Windows 10 or Windows 11
• Internet connection

Supported VPN Configuration

CloudRaya VPN uses the following configuration:

• VPN Type: L2TP/IPsec with Pre-Shared Key
• Authentication: Username & Password
• Security Requirement: MS-CHAP v2 must be enabled

Step 1: Get VPN Details from CloudRaya

1. Open Dashboard → Network → VPN
2. Select the desired location / region
3. Locate the VPN profile
4. Note the VPN Public IP
5. Click Get Key to reveal the Pre-Shared Key
6. Make sure at least one VPN user exists

You will use these values in the next steps.

Step 2: Open VPN Settings in Windows

1. Open Settings
2. Go to Network & Internet
3. Select VPN
4. Click Add a VPN connection

Step 3: Add a New VPN Connection

Fill in the VPN configuration as follows:

VPN Provider: Windows (built-in)

Connection Name: Any name (example: CloudRaya-VPN)

Server Name or Address: VPN Public IP from CloudRaya

VPN Type: L2TP/IPsec with pre-shared key

Pre-shared Key: PSK from CloudRaya

Type of Sign-in Info: Username and password

Username: VPN username

Password: VPN password

Click Save.

Step 4: Enable MS-CHAP v2 (Required)

This step is mandatory for CloudRaya VPN to work on Windows.

1. Go to Control Panel
2. Open Network and Sharing Center
3. Click Change adapter settings
4. Right-click your VPN connection → Properties
5. Open the Security tab
6. Under Authentication, click Allow these protocols
7. Check Microsoft CHAP Version 2 (MS-CHAP v2)
8. Uncheck other authentication methods
9. Click OK

Step 5: Connect to the VPN

1. Go back to Settings → Network & Internet → VPN
2. Select your CloudRaya VPN connection
3. Click Connect

If successful, the VPN status will change to Connected.

Verifying the Connection

After connecting:

• You should be able to ping private IP addresses of your VMs
• Internal services inside the VPC should be accessible
• No public internet routing behavior is changed

Example test:

ping 10.50.0.12

Common Issues and Fixes

VPN Fails to Connect

• Verify PSK is correct
• Ensure MS-CHAP v2 is enabled
• Confirm VPN is enabled in the CloudRaya panel

Cannot Access Private IPs

• Make sure the VM is:
  • Running
  • In the same VPC
• Check ACL rules inside the VPC
• Verify the VM subnet allows internal traffic

VPN Profile Not Visible

• The VPC must have at least one active VM
• VPC router Public IP must exist

Important Notes

• VPN users can be reused across multiple VPCs
• VPN users cannot be used across different locations
• Disabling VPN will disconnect all active clients
• VPN access does not expose services publicly

Related Pages

📄 Manage VPN

📄 Connect to CloudRaya VPN on macOS

📄 Connect to CloudRaya VPN on Linux

📄 Virtual Private Cloud (VPC)