Site To Site VPN AWS

The setting up a site-to-site VPN (Virtual Private Network) in Amazon Web Services (AWS) involves using the Virtual Private Gateway (VGW) service. The VGW acts as a VPN concentrator on the AWS side and allows you to securely connect your on-premises network (site) to your Amazon VPC (Virtual Private Cloud).

Here’s a general overview of the steps to set up a site-to-site VPN in AWS:

1. Create a Virtual Private Gateway (VGW):
– Log in to your AWS Management Console.
– Navigate to the VPC Dashboard.
– Click on “Virtual Private Gateways” in the left-hand menu.
– Click “Create Virtual Private Gateway” and follow the prompts to create one.

2. Attach VGW to VPC:
– Select the newly created VGW and click “Attach to VPC.”
– Choose the target VPC to which the VGW should be attached.

3. Create a Customer Gateway (CGW):
– In the AWS Management Console, navigate to the VPC Dashboard.
– Click on “Customer Gateways” in the left-hand menu.
– Click “Create Customer Gateway” and follow the prompts to create one.
– You will need the public IP address of your on-premises VPN device and a preshared key for authentication.

4. Create a VPN Connection:
– In the AWS Management Console, navigate to the VPC Dashboard.
– Click on “VPN Connections” in the left-hand menu.
– Click “Create VPN Connection” and follow the prompts:
– Choose the VGW and CGW created earlier.
– Provide the appropriate routing information.
– Enter the preshared key used for authentication.

5. Update Route Tables:
– In the VPC Dashboard, navigate to “Route Tables.”
– Edit the route table associated with your VPC and add a route for your on-premises network via the VPN connection.

6. Configure Your On-Premises VPN Device:
– You will need to configure your on-premises VPN device with the details provided by AWS during the VPN Connection creation process. This includes the public IP address of the VGW, preshared key, and routing information.

7. Test Connectivity:
– Once the configurations are complete, test the connectivity between your on-premises network and AWS VPC.