How to setup an AWS Site-to-Site (S2S) VPN Connection

Lab Details

1. This lab walks you through the steps to set up a site to site VPN connection between your AWS Cloud and On-premise Network.

2. You will practice the lab using VPC and EC2.

3. Duration: 120 minutes

4. AWS Region: US East (N. Virginia) and Asia Pacific (Mumbai)

Introduction

What is AWS Site-to-Site VPN ?

• A VPN connection refers to the connection between your VPC and your own on-premises network. Site-to-Site VPN supports Internet Protocol security (IPsec) VPN connections.

• By default, instances that you launch into an Amazon VPC can't communicate with your own (remote/ on-premises) network.

• VPN connection: A secure connection between your on-premises equipment and your VPCs.

• VPN tunnel: An encrypted link where data can pass from the customer network to or from AWS.

• Customer gateway: An AWS resource which provides information to AWS about your customer gateway device.

• Customer gateway device: A physical device or software application on your side of the Site-to-Site VPN connection.

• Virtual private gateway: The VPN concentrator on the Amazon side of the Site-to-Site VPN connection. You use a virtual private gateway or a transit gateway as the gateway for the Amazon side of the Site-to-Site VPN connection.

• Transit gateway: A transit hub that can be used to interconnect your VPCs and on-premises networks. You use a transit gateway or virtual private gateway as the gateway for the Amazon side of the Site-to-Site VPN connection.

Architecture Diagram

Case study

In this lab, since we don’t have a (remote/ on-premises) network we will be simulating a corporate network in AWS itself. We will be creating a VPC in the Mumbai region and launch an EC2 instance with Openswan which will act as an Public Router of the on-premises network.

In N.Virginia Region we will create a VPC with an EC2 instance launched in Private subnet and will connect both networks using VPN site-to-site connection.

Mumbai Region (AP-south-1) : On-Premises / Corporate Network.

N.Virginia Region (US-east-1) : AWS Cloud.

Case study Diagram

Task Details

1. Launching Lab Environment.

2. Create a VPC in the Mumbai Region.

3. Create a Public subnet.

4. Create and attach an Internet Gateway.

5. Create a Public Route Table and associate it with the subnet.

6. Add the public Route in the Route table.

7. Launch an EC2 instance.

8. Create a VPC in N.Virginia Region.

9. Create a Private subnet.

10. Launch an EC2 instance.

11. Create a Customer Gateway in N.Virginia Region.

12. Create a Virtual Private Gateway in N.Virginia Region.

13. Create a Site-to-Site VPN connection.

14. Configure On-Premises Router.

15. Test the connectivity between two Networks.

16. Validation of the lab.