Use Public IP for communication via AWS VPN tunnel.

Hi,

As I understand you are looking for a fixed/static public IP address. You can use an Elastic IP in this case and associate that to your NAT Gateway, so that your ISP always "witnesses" traffic coming from this specific IP.

We have a very detailed blog which should have the answers & examples you are looking for. I suggest you pls go through this once, try the configurations by adapting as per your use-case.

Please comment on this answer if you have further questions.

I hope this helps!

Thanks, Rama

Hey,

You can follow these steps:

1. Allocate an Elastic IP address if you haven't already. This will be the public IP address that the ISP will communicate with.
2. Associate the Elastic IP with the NAT Gateway that you've set up in your private subnet. This will ensure that outgoing traffic from instances in the private subnet appears to be coming from the Elastic IP address.
3. Ensure that your security group rules allow inbound and outbound traffic as needed. For outbound traffic, make sure that the NAT Gateway's security group allows outbound connections to the ISP.
4. Make sure your route tables are properly configured:

• The private route table should have a route to the NAT Gateway for internet-bound traffic (0.0.0.0/0).
• The public route table should have a route to the internet gateway for internet-bound traffic (0.0.0.0/0) and a route to the VPN Virtual Private Gateway for traffic destined to the ISP IP.

5. Verify that your VPN configuration is correctly set up to use the correct private IP range for your AWS resources and the ISP's IP range for the destination.
6. Finally, test the connectivity from your AWS instances to the ISP using the Elastic IP address. You can use tools like ping or traceroute to verify the traffic path.

Feel free to reach out if you have any questions or need further clarification.