Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When creating a VPN interface through the AWS Management Interface, the source and tunnel IP addresses are chosen by AWS (in this example to and

Is there a way to define these addresses, or change them after a VPC/VPN is created?

(Excerpts below from the VPN Configuration File)

! --------------------------------------------------------------------------------
! #3: Tunnel Interface Configuration
interface Tunnel1
  ip address
  ip virtual-reassembly
  tunnel source XXX.XXX.XXX.XXX
  tunnel destination XXX.XXX.XXX.XXX
  tunnel mode ipsec ipv4
  tunnel protection ipsec profile ipsec-vpn-89469497-0
  ! This option causes the router to reduce the Maximum Segment Size of
  ! TCP packets to prevent packet fragmentation.
  ip tcp adjust-mss 1387 
  no shutdown


! ----------------------------------------------------------------------------
! #4 Static Route Configuration
ip sla 100
   icmp-echo source-interface Tunnel1
   timeout 1000
   frequency 5
share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.