Questions tagged [aws]
Use this tag for any questions related to Amazon Web Services (as long as those questions are in scope of SE.NetworkEngineering)
26
questions
0
votes
0
answers
10
views
SSL certificate verification fails when setting up AWS Route53 as a secondary DNS provider (Cloudflare DNS is the main DNS provider) for a subdomain [closed]
We're using Cloudflare DNS for our domain (example.com). We want to set up AWS Route 53 as a secondary DNS provider for a subdomain (images.example.com), and we also want to create an ACM certificate ...
0
votes
1
answer
53
views
Is internal network traffic sent to private subnets via their NAT Server?
Similar to this question, I'm wondering how resources in my public subnets communicate with those in my private subnets - when there is a NAT service present.
My impression is that a self-managed NAT ...
- 103
0
votes
1
answer
61
views
How to configure IDr on Cisco ASA for AWS IPsec tunnels
I am currently facing an issue while attempting to establish IPsec tunnels between AWS and a Cisco ASA firewall. The AWS tunnel logs indicate that the Identity Resolution checks are failing, ...
0
votes
2
answers
103
views
Is there a plausible way to detect an IP address as being hosted on AWS using BYO-IP?
AWS publishes ip-ranges.json, and when a client connects to my system I can search the JSON file to determine if the client is coming from AWS or not.
If I don't need to know the AWS region, I could ...
- 103
0
votes
0
answers
46
views
How can an AWS Elastic IP address be used as a Juniper SRX's loopback interface?
I realize that Elastic IP addresses cannot be directly placed on actual AWS network interfaces (private addressing on them gets NAT'd to the Elastic public address assigned) of any device, much less ...
- 381
1
vote
0
answers
21
views
VPN conflicts from using 2 VPNs [closed]
My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
- 11
0
votes
1
answer
279
views
Inherent flaw in stateless firewalls?
I am but a lowly (software) developer dabbling with setting up a network in AWS and am having trouble understanding the fundamentals of stateless firewalls, or Network ACLs as they're also referred to ...
- 3
3
votes
1
answer
260
views
Juniper SRX Cluster and Switching with AWS Direct Connect
We have a setup of two SRXs (345) in cluster mode that connect to AWS Direct Connect, each SRX connects to one AWS Connection on a local interface. The SRX also functions as a switch for two Kemp Load ...
- 143
1
vote
1
answer
171
views
Cisco SD-WAN Cloud OnRamp Configuration
I'm configuring a user per the instructions https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/cloudonramp/ios-xe-17/cloud-onramp-book-xe/cloud-onramp-multi-cloud.html#...
- 111
1
vote
2
answers
62
views
Can I assign one of my publicly available IP address to my AWS instance? [closed]
I would like to be able to use one of my publicly accessible ip addresses directly with my aws cloud instance. Is there a way I can assign or transfer one of my ip address to aws? My ARIN registry ...
- 13
2
votes
0
answers
739
views
How to redistribute BGP routes learned from AWS in one VR into another BGP running in another VR in Palo Alto firewall?
I have about 1000+ prefixes I am learning from AWS on Palo Alto through a BGP. This is on the secondary VR. Main VR is where my core routing is situated along with another BGP instance pointing to ...
- 136
0
votes
0
answers
277
views
Unable to get NetFlow flow in Cisco CSR1000v on AWS
I'm trying to use NetFlow Traffic Analyzer of SolarWinds or any NetFlow Monitor in my Cisco CSR1000v routers which are deployed on AWS.
I am unable to see any NetFlow flows in the NetFlow Traffic ...
- 145
1
vote
1
answer
135
views
AWS connectivity UDP works but TCP times out
I have some issues here I have built an L2l VPN from my location to AWS London, I can see that the tunnel is up but when I attempt to connect our local domain controller here in our office to AWS ...
- 83
3
votes
1
answer
121
views
L2L ACL issue with Cisco ASA to AWS Cloud
Need help seeing what I am not seeing at the moment. I have built a l2l to the AWS cloud I run a packet trace outbound and that passes but when I run packet tracer outbound in I keep getting denied ...
- 83
1
vote
1
answer
306
views
Does CSR1000v on AWS support IPv6?
I'm trying to implement Segment Routing IPv6 (SRv6) in Cisco CSR1000v on AWS. I'm having issues with IPv6 which gave the impression that IPv6 data plane does not work.
Similarly, I configured a ...
- 145
1
vote
2
answers
310
views
How can AWS restrict access by private IP?
The official AWS docs state:
If you are connecting through an ISP or from behind your firewall
without a static IP address, you need to find out the range of IP
addresses used by client ...
- 113
0
votes
1
answer
3k
views
Unable to ping Google-AWS Fortigate firewall-SOLVED
Followed this guide:
https://cookbook.fortinet.com/create-routing-table-associate-subnets/
I have EC2 windows instance, also have EC2 FortiGate-FortiGate VM64-AWSONDEMAND
. Fortigate has 2 NIC:
192....
- 131
5
votes
1
answer
1k
views
AWS direct connect BGP issue
This is out current setup and everything working great!!! here, now i want backup link for AWS so i have request for one more secondary link and terminated on Cisco ASA on Port-channel1.8 interface.
...
- 4,371
0
votes
1
answer
377
views
AWS direct connect with Cisco ASA redendency
We have following scenario currently and BLUE link is active and running, now i am going to get second link for redendency which is right side of diagram.
As you can see currently i have VLAN 9 (...
- 4,371
1
vote
0
answers
326
views
Amazon AWS VPN Bidirectional Device Access
After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC.
However, both the EC2 ...
- 11
0
votes
2
answers
104
views
AWS private NAT
Here is the scenario I have two private subnets in two separate VPCs.
On ranges:
10.0.0.0/16
10.1.0.0/16
The 10.1 subnet is connected to a VPN gateway to a customer's VPN that all works fine. The ...
- 111
1
vote
1
answer
577
views
F5 on AWS BGP configuration
I have added BGP to routing domain 0 on the BIG IP GUI using the AWS cloud BIG IP. however i cannot find out where to add my routing peers.
imish does not work tmsh does not work zebos does not work
...
- 111
3
votes
1
answer
688
views
AWS VPC and Cisco ASA
I am trying to setup a VPN connection using AWS VPC. I have generated the VPN configuration files and have sent to the client. However the client is asking for the Blue highlighted info in the ...
- 131
3
votes
3
answers
146
views
How is it possible for AWS to offer the same private network address to different customers?
I've been studying subnetting and of course there's plenty I'm confused about. One issue is as follows: my company uses AWS. For our VPC let's say we have a private network address of 10.2.0.0 /16 ...
3
votes
1
answer
2k
views
Cisco ipsec tunnel with nat to aws customer gateway
I'm trying to configure an IPSec tunnel between a Cisco router (ISR) and AWS (Customer Gateway). The connection to the ISP here is a PPPoE connection with a static private IP (e.g. 10.100.1.1) which ...
- 221
1
vote
2
answers
507
views
PFSense on AWS with ASG
Have any of you had any experience using PFSense and Auto Scaling in AWS?
Does PFSense have support for a user-data field? [1]
Is there a way of running start-up custom scripts inside PFSense?
...
- 11