How to setup an AWS Site-to-Site (S2S) VPN Connection

Lab Details

This lab will walk you through how to establish a site-to-site VPN connection between your AWS Cloud Network and your On-premise Network.

The lab will be practiced using VPC or EC2.

Duration: 120 minutes

AWS Region: US East, N. Virginia, and Asia Pacific (Mumbai).

Introduction

What is AWS Site to-Site VPN?

VPN connections are the connection between your VPC (or your on-premises network) and your VPN server. Site-to-Site VPN supports Internet Protocol Security (IPsec VPN) connections.

Amazon VPC instances can't communicate with your remote/on-premises network by default.

VPN connection: Secure connection between your VPCs and your equipment on-premises.

VPN tunnel: A secure link that allows data to pass from the customer network into or out of AWS.

Customer gateway: AWS resource that provides information to AWS regarding your customer gateway device.

Customer gateway device: A device or software program that is connected to the Site-to–Site VPN connection.

Virtual private gateway: A VPN concentrator for the Amazon side. As the gateway to the Amazon side, you can use either a virtual private gateway (or a transit gateway).

Transit gateway: This is a transit hub that connects your VPCs to on-premises networks. As the gateway to the Amazon side of Site-to-Site VPN, you use a transit gateway.