Guidance Needed on VPN Configuration with Third Party Over AWS

Question

Hello,

I am currently coordinating a Site-to-Site VPN setup between our AWS account and a third-party company's network. The third-party company has asked us to provide certain VPN configuration details, and I need clarification since we are using AWS for our side of the VPN connection and the third-party company operates their own network infrastructure. The details they've requested are:

1. **VPN Gateway Peer Hostname:** Since we own the AWS account and are setting up the VPN on our end, should we be providing the hostname for the VPN gateway peer? I'm unsure if this is typically something the requester (the third-party company in this case) should already have or if it's up to us to define and provide it.
2. **VPN Gateway Peer IP Address:** For the IP address of the VPN gateway peer, is this also a detail we should provide from our AWS setup, or is it generally expected that the third-party company provides their IP address for us to connect to? 
3. **Client VPN IP Address (Host to be encrypted):** They have also requested the client VPN IP address.I assume this refers to an IP address range or specific hosts in our AWS VPC. Is my understanding correct?

Thank you for your help!

Answer

Hello.

AWS Site to Site VPN allows you to download a sample router configuration, so please download it and provide it to a third-party company.  
An engineer with some understanding of networks should be able to extract the necessary information from the sample configuration.  
https://repost.aws/knowledge-center/vpn-download-example-configuration-files

> VPN Gateway Peer Hostname

I don't think there was a specific host name.

> VPN Gateway Peer IP Address

This can be confirmed from the sample configuration or the AWS site to site VPN screen.

> Client VPN IP Address (Host to be encrypted)

I think it's better to check with a third-party company to see if the VPC CIDR is required.  
In context, I think it's probably the VPC's CIDR.

Guidance Needed on VPN Configuration with Third Party Over AWS

Contenido relevante