Vpn site to site - change from dynamic routing to static routing



I have vpn site to site with dynamic routing. In the other side of the VPN (Cisco ASA) there is no support in dynamic routing. How can I change the routing to static in the VPN? I have put in the VPC routing table the destination ip to the virtual gateway (vgw) which connected to the vpn. Do static routes that point to vgw work in case the vpn is defined as dynamic routing?

Thank you.

1 Answer

Currently it is not possible to change the VPN routing option from BGP to static on the fly. At the moment you can either modify the VPN connection target or tunnel configuration parameters for specific tunnel (ex encryption algorithm ,dh group etc)



What the customer could do is create a new VPN connection on the same VGW with static routing option and migrate to the static connection after shutting down the BGP(and or IPSec) from the existing connection.

Note that in general AWS recommends that you use BGP-capable devices, when available, because the BGP protocol offers robust liveness detection checks that can assist failover to the second VPN tunnel if the first tunnel goes down. Devices that don't support BGP may also perform health checks to assist failover to the second tunnel when needed.

profile pictureAWS
answered 10 months ago
  • Thank you. We need to use the IP of the existing tunnel - the ipsec is already up, but the tunnel is down as one side is not supporting BGP. Any other option?

  • Unfortunately when you create a new VPN it will have new Outside IPs, there is no way to use the same Outside IPs as the previous VPN.

  • Is there a way to make the routing table of the vpc work? so if i configure the ip to the vgw it will be forward to the vpn destination side? maybe with transit gateway and not virtual gateway?

  • VPC routing is easy, either you put a Static route for the destination and point it to the VGW or simply enable 'Route Propagation' for VGW in the VPC route tables.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions