Questions tagged [aws-site-to-site]

20 questions
2
votes
0 answers

Site-to-site vpn: Able to ping AWS from onprem but other way(AWS to on prem not working)

I set up site-to-site vpn to connect to my on-premises from the aws instance. The route table, network acl, sec group, etc. all looking good. I noticed that I am able to ping aws using aws private ip from my on-premises. But, I am unable to ping…
Peter
  • 85
  • 5
2
votes
0 answers

AWS site-to-site VPN connection redundancy

Currently, we are building a web service (on AWS) that uses a third-party service. That third-party service only allowed local VPN connection. So we connected that third-party application from our aws infrastructure via a site-to-site VPN like…
Hasan Hafiz Pasha
  • 1,402
  • 2
  • 17
  • 25
2
votes
1 answer

How to reach host behind site-to-site VPN connection through peering VPC connection

I actually have following situation: I successfully reach host C from Host A using VPN static routes. I need now to reach it from host B. I thought to create a route table from VPC B that forward request with ip/32 of host C through Peering…
1
vote
1 answer

AWS Site-to-Site VPN Configuration doesn't allow inbound traffic

I've been following the instructions here: https://aws.amazon.com/blogs/networking-and-content-delivery/simulating-site-to-site-vpn-customer-gateways-strongswan/ I can successfully get the VPN up and running, but I can't successfully ping internal…
1
vote
1 answer

How to connect to a private server from AWS Lambda with AWS site to site VPN connection?

I am trying to connect to a private server running on a windows machine from my AWS Lambda. The goal is to get some data from that server in the Lambda and work with it. I've created a site-to-site VPN connection with that private server and the…
0
votes
0 answers

when does nat_t_detected value comes as false in AWS site to site VPN tunnels logs

I am trying to set up a site-to-site VPN connection between AWS and Cisco ASA, but the tunnel status is shown as "Down," and under the details section, the message is "IPSEC IS DOWN." Please find below the tunnel logs: AWS tunnel is the IKE_SA…
0
votes
0 answers

AWS Site to Site VPN connection

In AWS N.Virginia Region, I have two VPNs VPN1 and VPN2 and I have created customer gateways for each of them CGW1 and CGW2 respectively. Both of the customer gateways have the same IP and that is 209.150.xx.xx My first VPN remain stable, but the…
0
votes
2 answers

Azure Data Factory - Site-to-Site VPN Connection

I have 2 cloud environments AWS and Azure. In AWS, I have a SQL Server instance inside a VPC (192.168.0.0/24). In Azure, I have a VNet (10.0.0.0/24). Both these 2 Virtual Network are connected through Site-2-Site VPN. I have tested connectivity to…
0
votes
0 answers

Unable to SSH into EC2 Instance once Openswan IPSEC is running

I am creating an IPsec tunnel between instances in one AWS VPC and another (different accounts). I am using a linux EC2 instance and openswan. Everything works well I can get the tunnel up, the only issue is when I am SSH into the Linux Instance…
Manny
  • 1
0
votes
1 answer

AWS VPN connection from customer`s checkpoint to AWS

I already searched through the Internet and read a lot of manuals but I cannot get a grip on the topic. I want to create a VPN connection from my customers checkpoint to my server that is located within my AWS VPC. The connection should be between,…
Bernd
  • 593
  • 2
  • 8
  • 31
0
votes
0 answers

AWS IPsec Site-to-Site VPN Certificate Authentication - Certificate Request signatures don't match

I am having issues with certificate authentication using AWS Site-to-Site VPN. I created a new VPN connection in AWS using the same configuration that worked for shared secret. However, when I inspect the traffic, the Certificate Request in the…
0
votes
1 answer

AWS Site-To-Site: able to ping from AWS to on-prem, but from on-prem to AWS not working

I haven't been able to solve this problem for a few days, I've followed millions of tutorials online but I couldn't find anything about it. I have an EC2 instance that has as private ip: 172.31.27.40. I have only one VPC (the default one, with 3…
Fabio
  • 21
  • 5
0
votes
0 answers

AWS Site to Site VPN. Same Region. Different Subnets. No Connection

I'm very new to AWS and we are moving our infrastructure to the cloud. I've setup a Site-2-Site VPN which works with 1 Subnet (Availability Group). But not the other 2. 3 Subnets: EU-West-1a, EU-West-1b, EU-West-1c (172.31.16.0/20, 172.31.32.0/20,…
Andrew Glass
  • 423
  • 2
  • 7
  • 18
0
votes
1 answer

How do I access on-prem HTTP services from my Lambda function?

I've created a javascript lambda function that is triggered by an API gateway request. I've tested it from my frontend and it works fine (hosted outside AWS). However, from my function I need to call an HTTP service from my on-prem network as an API…
0
votes
1 answer

How to view / monitor packets (incoming/outgoing) of AWS Site-to-Site VPN

I want to monitor not just the metrics from my Site-to-Site VPN via CloudWatch, I ether want to see the whole incoming and outgoing traffic with source and destination addresses and packet types i.e. 1.2.3.4 => 12.20.12.1 ICMP (Port 123) In Client…
1
2