AWS VPN Tunnel configuration on Cisco RV200W Router

[ops]

I have requirement for configuring the VPN tunnels between our office DC and the AWS VPC to extend our on prem DC to the cloud. I have managed to configure the tunnels ( active - passive ) and the status is UP at both ends. However when I tried to ping the host ( launched in AWS VPC ) from the our local network I am getting no route to the host.

As per the configuration notes I have downloaded from AWS after setting up the VPN , it says we should be adding a static route with next hop using a specific IP provided by them, however when I tried define a new static route on our local router basically I could not find any next hop option and also its asking me to enter the metric value ( which I have no idea how to determine the number of hops between source and destination ).

Any valuable inputs are highly appreciated. Thanks in advance !

[Georg Pauwen]

Hello,

the Gateway IP Address is supposed to be your next hop. Metric is only used when you have multiple routes to the same destination, the route with the lower metric is preferred. Since you only have one route, you can enter any value between 2 and 15.

Page 34 of attached admin guide:

http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv220w/administration/guide/rv220w_ag_78-19743.pdf

[ops]

Hi Georg, I have tried that option already but doesn't seem to work. Not sure if I am making any mistake here.

The document says:

#4: Static Routing Configuration:

To route traffic between your internal network and your VPC,
you will need a static route added to your router.

Static Route Configuration Options:

- Next hop : 169.X.X.X

You should add static routes towards your internal network on the VGW.
The VGW will then send traffic towards your internal network over
the tunnels.

Our internal network is 192.168.X.X

and the WAN Gateway is 202.X.X.X

[Georg Pauwen]

Hello,

your options with the RV200 are very limited. The AWS documentation is all geared towards IOS devices. Acccording to AWS, only the ISR and ASA is supported for static VPN routing.

So you might be out of luck...check with Amazon to be sure...