Site to site VPN connection

Question

After setting up two site-to-site VPN connections, the tunnel works fine on both the client portal and AWS side, but fails after an hour or more. In the VPN tunnel settings, I edit the tunnel, save without changing anything, and the tunnel comes back up and then falls down.

can you please help us in troubleshooting, or if there any changes we need to make from AWS side ?

Accepted Answer

When you mention a site-to-site VPN, could you provide more details about the device used on the customer's end?

Answer

I suggest to enable Site-to-Site VPN logs to understand what's happening, here is the link on how to enable the logs
https://docs.aws.amazon.com/vpn/latest/s2svpn/monitoring-logs.html#status-logs

It would be hard to understand what is the issue without checking the logs on either AWS side or the CGW side, however since you mentioned it's failing about an hour, then I would check PHASE 2 troubleshooting guide https://repost.aws/knowledge-center/vpn-tunnel-phase-2-ipsec

Site to site VPN connection

Contenuto pertinente