FTDv and AWS Site to Site VPN

[djoseph18]

We are trying to setup a site to site VPN with AWS so we can connect both networks to speak to VM's in the cloud. AWS has a feature where it can generate the configs based on the type of firewall, however even though i have matched the phase 1 and 2 configs on the FTDv(version 7.1),

We tried using both Ikev1 and Ikev2, however the tunnel has not formed. In the logs or debugs i am not even seeing traffic passing, does anyone have any experience with this?

[Flavio Miranda]

I could not see the attachment. Did you properly serup the "VPN Traffic of Interest" on both sides and tried to ping to one side to another. sometimes the tunnel need traffic for force come up.

[djoseph18]

Correct, i had a continuous ping running from an endpoint on the FTDv side, however still no tunnel being formed. As i don't have full control over the AWS end i can't advise the vendor of what he can or cannot do.

[Sheraz.Salim]

Is the remote side is configured for vpn? could you share the logs what you see.

could you share the logs for the FTDv with us so it will give us to help you what issue could be occurring/causing.

[Jitendra Kumar]

check the below if it helps you.

There are multiple steps to perform from the AWS site if everyone thinks ok. FTD.

https://aws.amazon.com/premiumsupport/knowledge-center/vpn-tunnel-troubleshooting/

https://aws.amazon.com/premiumsupport/knowledge-center/vpn-tunnel-phase-1-ike/

https://www.youtube.com/watch?v=NtDt34_tXCI

Thanks,

Jitendra