The high-level task flow for using VPNaaS API to configure a site-to-site Virtual Private Network is as follows:
The tenant creates a VPN service specifying the router and subnet.
The tenant creates an IKE Policy.
The tenant creates an IPsec Policy.
The tenant creates a VPN connection, specifying the VPN service, peer information, and IKE and IPsec policies.