---
title: 'Tutorial: Secure All Internet Traffic by Configuring a Private Network as an Internet Gateway'
canonical: https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--secure-all-internet-traffic-by-configuring-a-private-network-as-an-internet-gateway/
product: CloudConnexa Docs
description: Learn how to securely route all internet traffic through CloudConnexa by configuring a private network as an internet gateway for centralized internet security and traffic control.
keywords: Internet gateway
---

# Tutorial: Secure All Internet Traffic by Configuring a Private Network as an Internet Gateway

## Overview

This tutorial shows how to securely route all internet traffic through CloudConnexa by configuring a private network as an internet gateway.

With this setup:

- User internet traffic is tunneled through CloudConnexa.
- Traffic exits to the internet from a trusted private network.
- Users can securely access the internet from untrusted locations such as hotels, airports, cafés, and public Wi-Fi networks.
- Organizations can apply additional security controls such as DNS filtering, monitoring, CASB, or IDS/IPS inspection.

This configuration is useful for organizations that want centralized control over internet-bound traffic without managing traditional VPN infrastructure.

## Before you begin

Before starting this tutorial, ensure you have:

- A [CloudConnexa account and Cloud ID](https://openvpn.net/cloud-docs/owner/get-started/create-a-cloudconnexa-account.md).
- A private network that can act as an internet gateway.
- A Linux system available for Connector deployment within the private network.
- Permission to install and configure a Connector on the server.
- OpenVPN Connect available for testing connectivity.

You should also be familiar with:

- Adding [Networks](https://openvpn.net/cloud-docs/owner/networks/networks---networks.md) in CloudConnexa.
- Installing [Connectors](https://openvpn.net/cloud-docs/owner/networks/networks---connectors.md).
- Configuring [internet access settings for User Groups](https://openvpn.net/cloud-docs/owner/users/users---groups/set-the-internet-access-method-for-a-user.md).

## Step 1: Create a Network to act as an internet gateway

Create a Network in CloudConnexa to serve as the internet gateway for outbound traffic.

To create the Network, follow these steps:

1. Sign in to your WPC's Administration portal at your **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Create a new Network. For reference: [Add a Network for secure internet access](https://openvpn.net/cloud-docs/owner/networks/networks---networks/add-a-network-for-secure-internet-access.md)
3. Ensure the **Internet Gateway** option is turned on during network creation.
4. Don't configure subnets if the network will only be used as an internet gateway.
5. Complete the setup.

Refer to:

- [Networks](https://openvpn.net/cloud-docs/owner/networks/networks---networks.md)
- [Make a Network act as an Internet Gateway](https://openvpn.net/cloud-docs/owner/networks/networks---networks/make-a-network-act-as-an-internet-gateway.md)

## Step 2: Deploy a Connector on the internet gateway network

Deploy a Connector on a server within the private network to route internet traffic from CloudConnexa to the internet.

We recommend using Linux for the Connector host.

To deploy the Connector, follow the steps below:

1. Prepare a server or virtual machine with:
   - Internet access.
   - A public IP address.
   - Routing enabled.
2. Install the Connector using the deployment instructions provided in the CloudConnexa Administration portal. Details found here: [Add a Connector to a Network](https://openvpn.net/cloud-docs/owner/networks/networks---connectors/add-a-connector-to-a-network.md).
3. Verify that the Connector successfully connects to CloudConnexa.
4. Confirm the Network status changes to online.

Refer to:

- [Tutorial: Connecting Networks to CloudConnexa Using Connectors](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/networking/tutorial--connecting-networks-to-cloudconnexa-using-connectors.md)

## Step 3: Configure internet access for user groups

Configure User Groups to route all internet traffic through CloudConnexa and the configured internet gateway.

To change the Internet Access setting, follow the steps below:

1. Navigate to **Access → Internet**.
2. On the **User Groups** tab, locate the user group you want to modify.
3. Click the edit () icon.
4. Set **Internet Access** to **Split Tunnel Off**.
5. Select the new network from the **Interne Gaeway (Egress)** drop-down.
6. Click **Update Internet Access**.

When Split Tunnel Off is enabled:

- All internet traffic is tunneled through CloudConnexa.
- Traffic exists through configured internet gateways instead of the user's local internet connection.

Refer to:

- [Change Internet Access for User Groups, Networks, and Hosts](https://openvpn.net/cloud-docs/owner/access/access---internet/change-internet-access-for-user-groups-networks-and-hosts.md)

> **Tip**
>
> With Split Tunnel Off configured, you can use Tunnel Bypass to route specific destinations directly to the local network gateway rather than through CloudConnexa. This is useful when users need access to locally reachable resources such as on-premises systems or intranet services while all other traffic remains securely tunneled. Tunnel Bypass is configured per User Group. Refer to [About Tunnel Bypass](https://openvpn.net/cloud-docs/owner/access/access---internet/about-tunnel-bypass.md).

## Step 4: Verify internet traffic routing

Verify that internet traffic is securly routed through the configured internet gaetway.

To verify the configuration, follow the steps below:

1. [Connect a device to CloudConnexa](https://openvpn.net/cloud-docs/owner/get-started/connect-to-your-wpc.md) using OpenVPN Connect.
2. Open a browser and visit a public IP lookup website.
3. Verify that the displayed public IP address matches the public IP address of the Connector host or internet gateway network.
   - If the displayed public IP address matches the internet gateway network, the configuration is working correctly.

Illustration of successful routing:

## Step 5: Add users and begin secure internet access

After verifying the configuration, add users to CloudConnexa and provide access.

To add users, follow these steps:

1. Navigate to **Users → Users** in the Administration portal.
2. Add users using their email address or your preferred authentication method.
3. Instruct users to connect using OpenVPN Connect.

Once connected:

- All internet traffic is securely routed through CloudConnexa.
- Traffic exits through the configured internet gateway.
- Additional security controls can be applied centrally.

Refer to:

- [Add a User](https://openvpn.net/cloud-docs/owner/users/users---users/add-a-user.md)
- [Connect to CloudConnexa](https://openvpn.net/cloud-docs/user/get-connected/connect-to-cloudconnexa.md)

## Related resources

### Related documents

- [About Internet Access Configuration](https://openvpn.net/cloud-docs/owner/access/access---internet/about-internet-access-configuration.md)
- [Change Internet Access for User Groups, Networks, and Hosts](https://openvpn.net/cloud-docs/owner/access/access---internet/change-internet-access-for-user-groups-networks-and-hosts.md)
- [Make a Network Act as an Internet Gateway](https://openvpn.net/cloud-docs/owner/networks/networks---networks/make-a-network-act-as-an-internet-gateway.md)
- [About Tunnel Bypass](https://openvpn.net/cloud-docs/owner/access/access---internet/about-tunnel-bypass.md)

### List of All Internet Security Tutorials

- [Tutorial: Use CloudConnexa for Secure Internet Access](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--use-cloudconnexa-for-secure-internet-access.md)
- [Tutorial: Use CloudConnexa to Secure DNS Traffic](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--use-cloudconnexa-to-secure-dns-traffic.md)
- [Tutorial: Block All Internet Traffic Except To Trusted Internet Destinations](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--block-all-internet-traffic-except-to-trusted-internet-destinations.md)
- [Tutorial: Learn About the Levels of Security Afforded by the Use of Various Internet Access Options](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--learn-about-the-levels-of-security-afforded-by-the-use-of-various-internet-access-options.md)
- [Tutorial: Protect Your Users From Malware and Other Cyber Threats](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--protect-your-users-from-malware-and-other-cyber-threats.md)
- [Tutorial: Secure All Internet Traffic by Configuring a Private Network as an Internet Gateway](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--secure-all-internet-traffic-by-configuring-a-private-network-as-an-internet-gateway.md)
- [Tutorial: Use Multiple Geographically Distributed Internet Gateways to Improve Internet Performance](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--use-multiple-geographically-distributed-internet-gateways-to-improve-internet-performance.md)
- [Tutorial: Steer Traffic To Specific Internet Destinations Through CloudConnexa](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--steer-traffic-to-specific-internet-destinations-through-cloudconnexa.md)

### List of All Internet Security Videos

- [Video: Use Cyber Shield Content Filtering to Block Malicious Content](https://openvpn.net/cloud-docs/videos/use-cases/video--use-cyber-shield-content-filtering-to-block-malicious-content.md)
- [Video: Use Cyber Shield IDS/IPS to Block Malicious Traffic](https://openvpn.net/cloud-docs/videos/use-cases/video--use-cyber-shield-ids-ips-to-block-malicious-traffic.md)
- [Video: Use CloudConnexa To Secure Traffic to the Internet](https://openvpn.net/cloud-docs/videos/use-cases/video--use-cloudconnexa-to-secure-traffic-to-the-internet.md)
- [Video: Use CloudConnexa for Zero Trust Network Access to a Public SaaS Application](https://openvpn.net/cloud-docs/videos/use-cases/video--use-cloudconnexa-for-zero-trust-network-access-to-a-public-saas-application.md)

---

Prev: [Tutorial: Use CloudConnexa for Secure Internet Access](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--use-cloudconnexa-for-secure-internet-access.md)
Next: [Tutorial: Use Multiple Geographically Distributed Internet Gateways to Improve Internet Performance](https://openvpn.net/cloud-docs/tutorials/use-case-tutorials/internet-security/tutorial--use-multiple-geographically-distributed-internet-gateways-to-improve-internet-performance.md)
Index: https://openvpn.net/cloud-docs/llms.txt