I can't get a Connection between Customer Gateway and Virtual Private Gateway

0

My VPC can get a Connection to my VGW and the Status of my VPN is UP but I can't get a connection to the external Server. Do I need a Transit Gateway or is it possible without? In most Tutorials, they don't configure one. Or any other Recommendation?

  • Are you using BGP? What is the status of the BGP peering?

Flo
已提問 4 個月前檢視次數 516 次
1 個回答
1

Your question is too vague to give a clear answer. If the VPN is showing that it has one or more tunnels up in the console, then it is likely that you have configured the VPN correctly.

On a high level, you now need to ensure that you have:

  1. Attached the VGW to the VPC in which your EC2 instance lies
  2. Ensure that you either enable route propagation into the route table being used by the subnet in which your AWS resource is, or create a static route that covers the local IP address prefix on your customers side as a destination to the VGW in the route-table used by your subnet.
  3. On the customer gateway side, you need to make sure that you have a route entry to the VPN that covers at least the prefix used by the subnet in AWS in which you have the resource you would like to reach
  4. Make sure that the security groups of the resource that you want to reach allows ingress traffic from the on premise network to the ports and protocols that you want to use. By default egress is allowed from ec2 resources - if you have changed that - you need to also cater to egress traffic back to on premise network.
AWS
專家
已回答 4 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南