How to filter routers on a TG for Private IP VPN

Question

I am implementing a new feature from AWS called Private IP VPN using Direct connect, My question is that how do i filter routes entering my P2P IPSec tunnel from the transit gateway towards onprem as i would like to receive all the routes that exist in the TG.

Answer

You can use 'Allowed prefix' feature on DirectConnectGateway for the routes that get advertised from AWS -> On-premises, more information on this topic at the below link:

https://docs.aws.amazon.com/directconnect/latest/UserGuide/allowed-to-prefixes.html

Also check out this [blog](https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/)

How to filter routers on a TG for Private IP VPN

Contenido relevante