Is there a way to disable a VPN connection instead of deleting it?

Question

So im configurating a Site-to-Site VPN, to use it only as a Backup VPN. 
Thas is because i have an EC2 Instance serving as a Backup Server...
My idea is to have the instance Stopped until i really need it.
That instance is accesible by a VPN.

Is there a way to mantain de VPN configurated but in "stand-by" or "disable" status?

Im going to use it in case my production Server or VPN fail.

By consequence, the client just have to point to my Backup VPN.
I dont want to create a new VPN in that moment, i just want to have it there...

Im being clear?

Best regards!
Eze.

Matt_E · Accepted Answer

There is no way to disable the VPN so it can be enabled later on, instead you can disable the tunnels on the on-prem side so the on-prem side can forward traffic over the primary, and enable the tunnels later when needed, but you'll still be charged for the VPN connection which is about $36 per month.

Or you can have both VPNs (primary and backup) configured and both are active, and through BGP attributes you can have one act as a primary and one as secondary, for that you would need to use dynamic VPN instead of static.

Brettski · Answer

As per the other answer, you can't put a VPN connection into a disabled state.

Something I created a few years ago was a Lambda function that would create a VPN connection when specific conditions were met - for example, when a network link goes down. It might be useful here: https://github.com/Brettles/NetworkBreakGlass

Is there a way to disable a VPN connection instead of deleting it?

Füge deine Antwort hinzu

Relevanter Inhalt