I'm trying to setup a site-to-site VPN connection in AWS. I control the AWS account but the remote firewall is for an external company and not under my control. As my network knowledge is slight I am assuming any problems are at my end.
Unfortunately, all the walk throughs I can find assume you have control over both ends of the connection and don't seem to help me.
As far as I can see the process is simple
- Create a Customer Gateway pointing to the remote firewall
- Create a Virtual Private Gateway connected to our VPC
- Create a Site-to-Site VPN connection to connect the above 2
- Set the route propagation fro the VPG to yes
However, when I look at the tunnel details in the AWS console they are always just DOWN and at least currently there are no details available. I have noted the IP addresses the system has given me and passed those onto our customer.
I have read through all the examples I have found and looked at the Network ACLs and security groups and there appears to be nothing blocking the connections in those.
When I set up the connection I have tried both 'Dynamic' and 'Static' Routing options. The problem with the 'Static' option is it is asking for IP Prefixes and I can't workout what I should use. The only other wrinkle is I apparently have to use ikev1 only.
At the moment, after much fiddling the remote firewall is apparently not getting any hits from us at all. Can anyone help, or point to a dummys guide for all this?