Skip to main content

IPSec VPN in AWS

To configure IPSec VPN in AWS, follow these steps:


Step 1. Create a Virtual Private Gateway (VGW): The VGW is the AWS side of the VPN connection. To create a VGW, go to the VPC dashboard in the AWS console and select "Virtual Private Gateways" from the left-hand menu. Click on "Create Virtual Private Gateway" and follow the prompts to configure the VGW.


Step 2. Create a Customer Gateway (CGW): The CGW is the on-premises side of the VPN connection. To create a CGW, go to the VPC dashboard in the AWS console and select "Customer Gateways" from the left-hand menu. Click on "Create Customer Gateway" and follow the prompts to configure the CGW.


Step 3. Create a VPN Connection: Once you have created the VGW and CGW, you can create a VPN connection between them. To do this, go to the VPC dashboard in the AWS console and select "VPN Connections" from the left-hand menu. Click on "Create VPN Connection" and follow the prompts to configure the VPN connection.


Step 4. Configure the on-premises VPN device: You will need to configure your on-premises VPN device to establish the VPN connection with the VGW. The exact configuration steps will depend on the VPN device you are using.


Step 5. Test the VPN Connection: Once you have configured the VPN connection, you should test it to ensure that it is working properly. You can do this by pinging an instance in your VPC from your on-premises network, and vice versa.


That's it! You have successfully configured IPSec VPN in AWS.

Comments

Popular posts from this blog

How to Setup VPN PPTP Server in Mikrotik Router? (Tutorial)

PPTP Server is using for VPN. Its so easy to configure pptp server in Mikrotik. Now we can see how easily configure pptp server in Mikrotik router. Lets see the below diagram. Login to the Mikrotik Router via Winbox and click IP then Pool : Click on the “ + Symbol ” to add new pool, Name will be whatever you want like I named it VPN_Pool_20  add the address range ( 192.168.20.2-192.168.20.30 , in my case), then click  OK. Now go to the PPP Section and Click “ PPTP Server ” and check the Enabled : Now on the PPP  page, switch to the “ Profiles ” tab. Click on the + sign to create new profile, Name will be whatever you like (like I use VPN-POOL ), set the pool that we have created earlier for “Local Address” AND “Remote address“, then click  OK . Now click on  the “ Secrets ” tab of the PPP window. Click on the + sign to create new user, add the name(which act as username), password and service may be any or p...

How to Setup DHCP Server and IP Pool in Mikrotik Devices

DHCP( Dynamic Host Configuration Protocol),basically a network management protocol used to dynamically assign ip address to any network device. We will try to configure DHCP server in Mikrotik router in this tutorial. Consider following diagram we can see LAN gateway configure on ether1 interface.we will setup DHCP server for LAN 192.168.0.0/24. First, we have login Mikrotik with admin privilege.click IP tab and then click pool to create ip pool for dhcp server. In IP Pool window,click on Pools,  then click + symbol and then mention a pool name in Name here we use Local_Pool then mention range of ip address, we use 192.168.0.2-192.168.0.254  then click OK . But you can create ip range as you like and create multiple pool.Here Next pool is selected none but you can select another created pool in Next Pool if more ip requirements over existing pool. Then Local_Pool will create. Now click IP then click  DHCP Server to create ...

How to block Facebook, Youtube, any webpage and apps from Mikrotik effectively

 Steps 1: First of all we create a address list of local ip lan in IP Firewall Address List in Mikrotik Firewall or Router. Step 2: Then we can create a Firewall Raw rule for domain  .facebook.com  which can create a dynamic IP address list which can make a ip list for Facebook. here we have uses list name IP-Facebook. Similar way, we can use address list IP-Facebook in all raw rule for .facebook.net, .fbcdn.net, .fbsbx.com, .fb.com, .fb.gg, .messenger.com. Now we can create a Firewall raw rule for domain .facebook.com. First here, we can select chain prerouting in general tab. Then, in Raw advance tab, select IP-LAN address list which we have create earlier in src and dst address list as like as screenshot and select not ! sign in dst. address list. And in content option write .facebook.com similarly for .facebook.net, .fbcdn.net, .fbsbx.com, .fb.com, .fb.gg, .messenger.com. Then in action tab, we can select add dst to address list and in Address list we can ...