Al usar AWS re:Post, aceptas las AWS re:Post Términos de uso
AWS re:Postre:Post

AWS Site-to-Site VPN tunnel is available, put cant ping to ec2 instance

0

I spin up an EC2 instance in a public subnet on a /24. created a security group allowing SSH and ICMP from 0.0.0.0/0. Site-to-SIte VPN tunnel is up and running and using strongswan. However ping to the 169 address (inside tunnel) and to the ec2 instance does not work

Temas
Redes y entrega de contenido
Etiquetas
Red privada virtual (VPN) de AWS
Idioma
English
rePost-User-7944981
preguntada hace 2 años760 visualizaciones
1 Respuesta
1

Hello,

Have you tried disabling src/dst check on the Strongswan instance? refer below link:

Disable source/destination checks

profile pictureAWS
EXPERTO
Tushar_J
respondido hace 2 años
  • rePost-User-7944981
    hace 2 años

    Hello, Thank you for the response. The src/dst check has been disabled on the AWS ec2 instance. Need to that on Strongswan Instance as well. The Strongswan instance is an ubunto 20.04 linux vm that runs on-premises and does not have a gui.

  • Tushar_J EXPERTO
    hace 2 años

    What is the Flow for Example: Ubuntu (On-prem) ---S2S VPN--- VGW --- VPC (EC2 in public subnet)? See this KC article for troubleshooting steps: https://aws.amazon.com/premiumsupport/knowledge-center/vpn-cgw-vpg-traffic/

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas

Contenido relevante