search

edge-cloud / www.edge-cloud.net

On the edge of cloud computing
https://www.edge-cloud.net
0 stars 0 forks source link

2019/07/18/aws-site-2-site-vpn-with-strongswan-frrouting/ #34

Open utterances-bot opened 3 years ago

utterances-bot commented 3 years ago

AWS Site-to-Site VPN with IPSec VPN (Strongwan) and BGP (FRRouting) - Edge Cloud

Step-by-step guide to setup an AWS Site-to-Site VPN with Strongswan for IPSec VPN and FRRouting for BGP.

https://www.edge-cloud.net/2019/07/18/aws-site-2-site-vpn-with-strongswan-frrouting/

davxiao commented 3 years ago

Hi Christian,

Thanks so much for outlining this topic! Great article! Keep up the good work

lemoidului commented 1 year ago

Hi Christian, Thanks for your work. Maybe one small mistake, replace "bgp ebgp-requires-policy" by "no bgp ebgp-requires-policy" in frr setup.

chriselsen commented 1 year ago

@lemoidului Thanks for catching this. That's indeed a mistake. It's corrected now.

Gaitonde007 commented 4 months ago

Hi Christian, Thanks for the guide, having some trouble on AlmaLinux to Forigate. IPSEC status is up, and the ip -s tunnel show output for my vti interface shows the output as: vti100: ip/ip remote 192.168.30.1 local 192.168.20.1 ttl inherit key 100 RX: Packets Bytes Errors CsumErrs OutOfSeq Mcasts 0 0 0 0 0 0 TX: Packets Bytes Errors DeadLoop NoRoute NoBufs 0 0 315 0 315 0

But when i try to ping says host unreachable.

[root@AlmaLinux strongswan]# ip route show default via 192.168.29.1 dev eth0 proto static metric 100 10.18.56.0/22 dev dummy0 proto kernel scope link src 10.18.56.1 192.168.29.0/24 dev eth0 proto kernel scope link src 192.168.29.50 metric 100 192.168.30.1 dev vti100 proto kernel scope link src 192.168.20.1

Am i missing anything here?

Thanks.