ASAv configuration with AWS NLB and ec2 based Nat instance

[sudsark]

Hi There, Could you please suggest me a good reference document where  my traffic will flow as " stringswan vpn --> AWS NLB-->AWS ec2 based NAT --> ASAv--> bacneknd network"  Trying to understand how the setup would be for this use case and if there is any reference document available please ?

[Enes Simnica]

hello @sudsark. yes check these resources: 

1. AWS hybrid vpn reference architecture: https://docs.aws.amazon.com/vpn/latest/s2svpn/VPC_VPN.html

2. Nlb + Ec2 nat setup: https://docs.aws.amazon.com/elasticloadbalancing/latest/network/load-balancer-target-groups.html

https://docs.aws.amazon.com/vpc/latest/userguide/VPC_NAT_Instance.html

3. ASAc in aws which is a Cisco guide: https://www.cisco.com/c/en/us/td/docs/security/asa/asa915/asav/getting-started/asav-915-gsg/m_asav-aws.html 

hope it helps.....

-Enes

[zayanhani]

I worked on a similar setup where traffic flowed through a VPN, NLB, NAT, and then ASAv. The tricky part was configuring routing tables and security groups correctly to allow traffic from the NAT instance to the ASAv. Cisco’s and AWS’s official docs combined with some trial and error helped me.