Questions tagged [aws-vpn]

AWS Virtual Private Network (AWS VPN) lets you establish a secure and private tunnel from your network or device to the AWS global network. AWS VPN is comprised of two services: AWS Site-to-Site VPN and AWS Client VPN. AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks.

Documentation: https://aws.amazon.com/vpn/faqs/

80 questions
2
votes
1 answer

Connecting an AWS EC2 to a Google Cloud SQL instance locally using VPN Gateway

I have an AWS account with an EC2 in it that I am trying to connect to a Cloud SQL Server (MySQL 5.6) inside of Google Cloud Platform. I have successfully set up a VPN between AWS and GCP and can echo a message over nc between an ec2 on AWS and a vm…
1
vote
1 answer

Cisco/AWS IKEv2/IPSEC Site-to-Site VPN: Received an IKE msg id outside supported window

I'm encountering an issue with an IKEv2 setup where the authentication exchange fails and I receive the error message: "Response is outside of window received 0x1, expect 0x2 <= mess_id < 0x2 : Received an IKE msg id outside supported window". I am…
1
vote
0 answers

How to suppress emails from being sent from vpn-xxxxxxxxx with VPN single-tunnel notification/VPN redundancy loss events

How to supress below emails as they are being recieved very frequently .. My client mentioned they were using cisco equipment.. which would not support dual tunnels, but supports only active/passive tunnels, Hence we would like to stop these alerts…
1
vote
2 answers

Can I use an AWS Client VPN endpoint to access more than three subnets in the same region?

My VPC is in eu-west-2. I have two subnets for an RDS instance, split across two different availability zones for reasons of high availability: eu-west-2a and eu-west-2b. I also have a Redshift cluster in its own subnet in eu-west-2c. With this…
Blair Nangle
  • 1,221
  • 12
  • 18
1
vote
1 answer

Docker container throws an error urllib.error.URLError: urlopen error [Errno -3] Temporary failure in name resolution with aws vpn connected

I am running my python Flask project inside of the docker container and all the requests work fine, when I turn on the aws vpn client in order to connect to an external service I get an error: urllib.error.URLError:
1
vote
1 answer

Site-to-Site VPN Static routes tab, which CIDR is used?

I'm using static routes in AWS Site-to-Site and there is a tab called "Static routes" (see below). My question is, should the CIDR range entered in this tab be my AWS private subnet range i.e. my AWS private subnet 10.5.0.0/17 or my clients, the…
MarkK
  • 968
  • 2
  • 14
  • 30
1
vote
0 answers

NAT logs in AWS for VPN users

I have users connecting to AWS via the AWS managed services VPN endpoint. I'm trying to see who logs on to one of my EC2 server by looking at /var/log/auth.log. I can see the SSH connection coming from an IP address (10.183.0.7) which would be the…
I Am Robot
  • 29
  • 2
1
vote
1 answer

AWS Site-to-Site VPN- Local/remote ipv4 cidr mandatory?

I am creating a site-to-site vpn to make a request from aws to my on premises. Here, is the screenshot(AWS Console) of a VPN connection that I created. My question is: Is it mandatory to assign local ipv4 and remote ipv4 network cidr or I can just…
Peter
  • 85
  • 5
1
vote
1 answer

AWS Site-to-Site VPN Configuration doesn't allow inbound traffic

I've been following the instructions here: https://aws.amazon.com/blogs/networking-and-content-delivery/simulating-site-to-site-vpn-customer-gateways-strongswan/ I can successfully get the VPN up and running, but I can't successfully ping internal…
1
vote
1 answer

How to configure OKTA + AWS Client VPN Endpoint + OpenVPN Client

I found this article that describes configuring to use the AWS VPN Client. https://aws.amazon.com/blogs/networking-and-content-delivery/authenticate-aws-client-vpn-users-with-saml/ Our team is currently configured using the OpenVPN Client and we…
jlo-gmail
  • 4,453
  • 3
  • 37
  • 64
1
vote
1 answer

Is there a way to make AWS VPN client work on Ubuntu 21.10?

I'm using the AWS VPN Client, it was working OK before upgrading to Ubuntu 21.10 (specifically Pop!_OS). When trying to connect using the AWS VPN client I'm getting a peculiar error - it can't open OpenVPN for some reason? Immediately after clicking…
Shay Nehmad
  • 1,103
  • 1
  • 12
  • 25
1
vote
1 answer

VPN Connection Between AWS and Linode

I want to make a private connection VPN between two clouds, AWS and Linode. I'm kinda new to this. Can someone please suggest or help me how can i do this?! Thanks in Advance.
Hassan
  • 39
  • 1
1
vote
1 answer

How to connect to a private server from AWS Lambda with AWS site to site VPN connection?

I am trying to connect to a private server running on a windows machine from my AWS Lambda. The goal is to get some data from that server in the Lambda and work with it. I've created a site-to-site VPN connection with that private server and the…
1
vote
0 answers

How to redirect aws vpn login success url to custom domain url

Trying to setup the aws vpn client endpoint with Okta saml authentication. After the VPN client connection getting the default success page(http://127.0.0.1:35001/). but my requirement is redirect to custom domain url(for example abc.com) instead of…
1
vote
3 answers

AWS: Public subnet + VPN gateway

Question Can we make a route table which has both igw-id (Internet gateway ID) and vgw-id (VPN gateway ID)? If we can't/shouldn't do it, why? Example 10.0.0.0/16 --> Local 172.16.0.0/12 --> vgw-id 0.0.0.0/0 --> igw-id…
dmjy
  • 1,183
  • 3
  • 10
  • 26