I'm having the following. In VPC 1, there are CSR 1000v and EC2 linux-based VM.

enter image description here

I would like to do static route in order that VM1 and CSR could connect to each other. I'm allowing all ICMP traffic in both security groups.

I started with CSR where I had ip route but I could not ping VM1 from CSR1

As well as from the VM1 route add -net netmask gw eth0. It did not work, though.

  • You should not need any routes for this these two devices to communicate. VPC assigns the IP address and mask, and default route, to each device via DHCP. Devices on different subnets reach each other via their default gateway -- the VPC's router -- and VPC network's router automatically has implicit routes already in place for each subnet in the VPC. – Michael - sqlbot Jan 12 '19 at 4:46
  • @Michael-sqlbot but I could not ping any of them. – Khalil Mebarkia Jan 12 '19 at 17:57
  • Did you change any of the VPC Network ACLs from their "allow all" defaults? And remove those routes you added? If you can access both of these devices, then they have their default routes, and if both SGs allow All ICMP from then you should be able to ping. – Michael - sqlbot Jan 12 '19 at 23:50
  • @Michael-sqlbot VPC Network ACLs has not been changed, it is 'ALL TRAFFIC'. I did not remove any routes from the route table. – Khalil Mebarkia Jan 14 '19 at 10:41
  • @Michael-sqlbot is it working now. I checked SGs and it was only the source IP address where the traffic can be sent. Thanks! – Khalil Mebarkia Jan 14 '19 at 11:08

The following Static Route rule ip route and disabling Source/Destination Check for the instance must be done.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.