AWS Site-to-Site VPN tunnel is available, put cant ping to ec2 instance

I spin up an EC2 instance in a public subnet on a /24. created a security group allowing SSH and ICMP from 0.0.0.0/0. Site-to-SIte VPN tunnel is up and running and using strongswan. However ping to the 169 address (inside tunnel) and to the ec2 instance does not work

主題

網路與內容交付

標籤

AWS Virtual Private Network (VPN)

語言

English

rePost-User-7944981

已提問 2 年前檢視次數 760 次

1 個回答

最新
最多得票
最多評論

Hello,

Have you tried disabling src/dst check on the Strongswan instance? refer below link:

Disable source/destination checks

專家

Tushar_J

已回答 2 年前

rePost-User-7944981
2 年前
Hello, Thank you for the response. The src/dst check has been disabled on the AWS ec2 instance. Need to that on Strongswan Instance as well. The Strongswan instance is an ubunto 20.04 linux vm that runs on-premises and does not have a gui.
Tushar_J 專家
2 年前
What is the Flow for Example: Ubuntu (On-prem) ---S2S VPN--- VGW --- VPC (EC2 in public subnet)? See this KC article for troubleshooting steps: https://aws.amazon.com/premiumsupport/knowledge-center/vpn-cgw-vpg-traffic/

AWS Site-to-Site VPN tunnel is available, put cant ping to ec2 instance

相關內容