Skip to content

Can I reuse BGP settings when migrating Direct Connect VIF to a new physical connection?

0

We're currently using an AWS Direct Connect connection (Connection ID: dxcon-x) at the ADNM location (Equinix, US East 2), with a Transit VIF configured and terminating on our on prem router port.

We're planning to cut over to a new Direct Connect Connection (Cologix, US East 2), and intend to use the same router port for the new physical connection.

My plan is as follows:

1.Disconnect the OLD connection from the router.

2.Connect the NEW circuit to the same port

3.Create a new TRANSIT VIF on the new connection.

4.Reuse the same BGP settings (ASN, BGP peer IPs, prefixes, etc.) from the old VIF.

My Questions: 1.Will AWS allow the creation of a new VIF with the same BGP settings on the new physical Direct Connect connection while the old VIF still exists?

2.If not, do I need to delete the existing VIF before creating the new one with identical settings?

Are there any concerns or best practices I should follow when performing this type of migration?

We are using a Direct Connect Gateway, and the VIF is attached to a TGW. Our goal is to minimize downtime during this cutover.

Any guidance or confirmation from AWS would be appreciated.

1 Answer
0
Accepted Answer

When migrating from one Direct Connect connection to another within the same region, you cannot directly reuse the same BGP settings while both VIFs exist simultaneously. This is because VLAN IDs must be unique, and having identical BGP configurations on two active VIFs would create conflicts.

For your migration plan, you have two options:

  1. Delete the old Transit VIF first, then create a new one with the same BGP settings on the new connection. This approach ensures no configuration conflicts but creates a period of downtime.

  2. Follow a more gradual migration approach with these best practices:

  • Create the new Transit VIF on the new connection with different VLAN ID but similar BGP configuration
  • Verify you're receiving the same set of routes on both old and new VIFs on your on-premises router
  • Test by advertising a small set of routes from on-premises on the new VIF to verify proper configuration
  • Advertise the same on-premises prefixes on both VIFs, but configure your on-premises router to prefer the new VIF (using BGP attributes like Local Preference)
  • Once traffic is flowing properly through the new connection, you can decommission the old VIF

Since you're using a Direct Connect Gateway attached to a Transit Gateway, the migration should be relatively straightforward as long as you follow these steps. The key is to ensure proper BGP configuration and routing preferences to maintain connectivity during the transition.

For minimal downtime, I recommend creating the new Transit VIF before disconnecting the old one, testing connectivity through the new path, and then performing the physical cutover. This approach allows you to validate the new configuration before making the physical switch.
Sources
Migrate an AWS Direct Connect virtual interface - AWS Direct Connect
Simplify global hybrid connectivity with AWS Cloud WAN and AWS Direct Connect integration | Networking & Content Delivery

answered a year ago

AWS
EXPERT

reviewed a year ago

  • We have received our Direct Connect connection from the DX partner on VLAN 101. While creating the new Virtual Interface (VIF) in AWS, should we:

    Use VLAN 101 (the same VLAN ID assigned by the partner), or

    Specify a different VLAN ID in the VIF configuration?

    Additionally, for the VIF BGP peering IPs, can we configure them using a private /29 subnet, or must it be a /30 subnet?

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.