Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two VPCs setup, one in Sydney and another Oregon.

From my datacenter I have a VPN connection into the Sydney VPC.

A routing rule exists in my Sydney VPC to route all traffic to the Oregon subnet via a VPN instance.

Between the Sydney and Oregon VPCs I have an IPSEC connection which is working correctly. (

I am now trying to route traffic to the subnet in Oregon via the Sydney VPC from the datacenter. The virtual private gateway is unable to route the traffic from the VPN connection to the subnet in Oregon.

Is there any way to get the virtual private gateway to route traffic to a subnet that is not part of the target VPC CIDR?

share|improve this question
Did you try BGP? – Guy Jan 3 '13 at 13:34

The purpose of VPG is to provide a link between IPsec commercial routers and a VPC, so clients can easily deploy hybrid cloud datacenters. It is not intended to work with VPGs in other VPCs.

Amazon as recently launched VPC peering for VPCs in the same region, so I think that multi-region VPC peering will be supported in the future.

In the mean time, the best way (IMHO) to provide a safe network link between VPCs is to deploy VPN instances in both VPCs,link them using standard VPN software (OpenVPN, L2TP/IPsec...), and then modify your route tables to redirect traffic through these instances.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.