This article demonstrates how to establish IPsec VPN tunnel between Vigor Router and Amazon VPC.
1. Login to AWS >> VPC Dashboard >> Virtual Private Network (VPN) >> Site-to-Site VPN Connections
2. Select the VPN > Download Configuration > Generic. IT will download a .txt file containing the details required for the next steps.
3. Open the text file with WordPad and note down the Pre-Shared Key.
4. Note down the Virtual Gateway IP, which is the WAN IP of the AWS server.
1. Go to VPN and Remote Access >> LAN to LAN, click Profile index to edit a new profile:
2. Select AES with Authentication for IPsec Security Method and click the Advanced button to open the IKE advanced Settings.
3. In TCP/IP Network Settings, enter AWS’s Virtual LAN network IP and Mask in the Remote Network IP and Remote Network Mask then Apply the settings
4. Wait for 30 seconds, we shall be able to see the VPN tunnel is up in VPN and Remote Access >> Connection Management page. After VPN is up, Vigor Router will route packets to the VPN tunnel, however, it may not receive the reply because AWS blocks the VPN packets by its default policy. You will need to update your AWS’s routing table to include Vigor Router’s LAN network or add/update a security group to pass the traffic to the tunnel. For this step, please contact AWS support for further assistance.
1. Go to VPN and Remote Access >> VPN Profile >> IPsec , click Add to add a new profile. In the Basic tab:
2. In the Advanced tab, enable Perfect Forward Secrecy Status.
3.In the Proposal tab,
4. Wait for 30 seconds, we shall be able to see the VPN tunnel is up in VPN and Remote Access >> Connection Management page. After VPN is up, Vigor Router will route packets to the VPN tunnel; however, it may not receive the reply because AWS blocks the VPN packets by its default policy. You will need to update your AWS’s routing table to include Vigor Router’s LAN network or add/update a security group to pass the traffic to the tunnel. For this step, please contact AWS support for further assistance.
Published On: Apr 17, 2019
Was this helpful?