Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 1382 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BGP routing issue with AWS VPC

Eric Speake

We upgraded to V19 and I imported the XML file to create the STS VPN. The tunnels come up and the BGP routes are added to the routing table. The issue is with us working with a vendor on the VPM tunnel they have the same IP network setup on their side that we have on our side. I can narrow down the IP addresses on both sides of the tunnels in the FW rules, but it is still trying to route traffic to the tunnels and this creates connectivity issues to our devices.

I can give the example that we both have 172.30.0.0/16 networks. Their traffic is going from 172.30.5.148 to another network we have 192.168.0.9. But we have an office that has a device at 172.30.12.20. This device can reach everywhere, the return packets are looking for the IP address in the VPN tunnel. Is there a way to look at this routing issue as far as dealing with BGP?  Is there a way to NAT the IP addresses?

Thank you,



Edited TAGs
[edited by: Erick Jan at 4:44 AM (GMT -8) on 15 Nov 2022]
Parents
  • 0

    Vivek,

    Thank for the help. I have confirmed the settings. With this being V19 My vendor was able to provide the XML file from the AWS instance and I was able to import that to create the tunnels. I'm working NATing the inbound traffic since they will be calling an API on my network. Part of the issue I am running into is the traffic from one of my internal VLAN;s keeps trying to go out the XFRM port even though I have a route to specifically send that traffic to the vlan gateway.

    Thank you,

    Eric Speake

Reply
  • 0

    Vivek,

    Thank for the help. I have confirmed the settings. With this being V19 My vendor was able to provide the XML file from the AWS instance and I was able to import that to create the tunnels. I'm working NATing the inbound traffic since they will be calling an API on my network. Part of the issue I am running into is the traffic from one of my internal VLAN;s keeps trying to go out the XFRM port even though I have a route to specifically send that traffic to the vlan gateway.

    Thank you,

    Eric Speake

Children
Unfiltered HTML