AWS Builder Center is the official home for builders on AWS. Share and read what others are working on, follow people who inspire you, explore training and workshops, and find tools to support what you're building.
How do I resolve KEv1 and IKEv2 errors for Site-to-Site VPN connections?
I want to resolve IKEv1 and IKEv2 errors for my AWS Site-to-Site VPN connection.
Resolution
Use the AWSSupport-TroubleshootVPN runbook to run automated checks for IKEv1 or IKEv2 error messages that are related to VPN tunnels in your Site-to-Site VPN connection.
Prerequisites:
- Activate Site-to-Site VPN logs.
- Confirm that your AWS Identity and Access Management (IAM) user or role has access to the runbook. For more information, see the Required IAM permissions section of AWSSupport-TroubleshootVPN.
Run the automation runbook
Note: The automation makes Amazon CloudWatch Logs Insights API calls on the CloudWatch log group that you configured for VPN logging. For CloudWatch Logs Insights pricing, see Amazon CloudWatch pricing.
Complete the following steps:
- Open the AWS Systems Manager console.
- In the navigation pane, choose Documents.
- In the search bar, enter AWSSupport-TroubleshootVPN.
- Choose AWSSupport-TroubleshootVPN.
- Choose Execute automation.
- Choose Execute.
- Review the Outputs section in the Systems Manager console for detailed results. The output lists each error with its resolution and the total number of unique errors.
Related information
Run an automation operation powered by AWS Systems Manager Automation
- Language
- English
Relevant content
asked 2 years ago
asked 4 years ago
asked 2 years ago
