I have a following scenario:
VPC 1:
- 10.100.0.0/16 instance with strongswan with ipsec tunnel to 192.168.0.0/24
- route to 192.168.0.0/24 through strongswan instance
VPC 2:
- 172.16.0.0/24
Transit gateway:
- VPC 1 attached
- VPC 2 attached
- Route to VPC1 through Attachment 1 (VPC1)
- Route to VPC2 through Attachment 1 (VPC2)
- Route to IPSEC network (192.168.0.0/24) through Attachment 1 (VPC1)
Added routing:
- VPC1 Route table has static route to VPC2 CIDR through transit gateway
- VPC2 Route table has static route to VPC1 CIDR through transit gateway
- VPC2 Route table has static route to IPSEC network (192.168.0.0/24) through transit gateway
Problem:
- Communication between VPC1 and VPC2 works perfect
- Communiaction from VPC1 to ipsec network (192.168.0.0/24) works perfect
- Communication from VPC2 to ipsec network (192.168.0.0/24) does not work
what can be wrong?