3 votes
Accepted

Is internal network traffic sent to private subnets via their NAT Server?

Is internal network traffic sent to private subnets via their NAT Server? Internal traffic should never be NATted. NAT is a necessary translation between incompatible addressing schemes like sending ...
Zac67's user avatar
  • 84.4k
3 votes
Accepted

Juniper SRX Cluster and Switching with AWS Direct Connect

Your config looks good - can you confirm that your swfab interfaces are connected to each other? Eg: 0/0/7 on node 0 is patched to 5/0/7 on node 1? show chassis cluster ethernet-switching interfaces ...
Benjamin Dale's user avatar
3 votes

How can AWS restrict access by private IP?

I read your linked documents and it seems to me pretty clear AWS is speaking of public IP addresses, as you imagine. I can't comment on your tests beyond saying they go against my experience and your ...
jonathanjo's user avatar
  • 16.2k
2 votes
Accepted

Inherent flaw in stateless firewalls?

Routing is stateless by design - each packet is routed on its own behalf, without knowledge of previous traffic. (An exception may be seen in NAT routing which is stateful (mostly), relying on a ...
Zac67's user avatar
  • 84.4k
2 votes

AWS direct connect BGP issue

I would check to see where return traffic from AWS is going. If having both links turned up causes traffic to stop flowing though your ASA then there is a good chance that you have asymmetric routing....
Trevor Butler's user avatar
2 votes
Accepted

AWS direct connect with Cisco ASA redendency

Creating another VLAN is a reasonable way to go. Yes, you should use BGP to detect when one side becomes unreachable.
Ron Trunk's user avatar
  • 67.5k
2 votes

AWS VPC and Cisco ASA

Your Third party VPN device should be the AWS Managed VPN, to get more information use the AWS CLI to interrogate the VPN Gateway see link https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/...
Ragna's user avatar
  • 53
2 votes

Can I assign one of my publicly available IP address to my AWS instance?

As a potential alternative to that, if you have some kind of connection to AWS from where you’re currently using your ARIN-assigned block, such as via a site-to-site tunnel or Direct Connect circuit, ...
Jesse P.'s user avatar
  • 4,690
2 votes
Accepted

Can I assign one of my publicly available IP address to my AWS instance?

AWS does support Bring Your Own IP. You need to establish authority over the address space using RPKI to do it. Once you've done so, you can complete the remaining steps using the AWS CLI / API.
Jeff Wheeler's user avatar
  • 5,469
2 votes
Accepted

L2L ACL issue with Cisco ASA to AWS Cloud

You can't use packet-tracer for outside-to-inside traffic when it comes to tunnels terminated directly on the ASA. Have you actually tested the tunnel both directions with real traffic? Also, you can'...
Jesse P.'s user avatar
  • 4,690
1 vote
Accepted

Is there a plausible way to detect an IP address as being hosted on AWS using BYO-IP?

AWS BYOIP documentation says that your prefix will be announced by Amazon ASNs 16509 and 14618 So, check the originating ASN of the prefix $ dig +short 0.0.33.13.origin.asn.cymru.com TXT "16509 | ...
exeral's user avatar
  • 244
1 vote

Is there a plausible way to detect an IP address as being hosted on AWS using BYO-IP?

Following the directions provided by AWS indicates that the customer should stop advertising the selected IP network (/24 or larger) before configuring it to be advertised by AWS (and after their ...
FrameHowitzer's user avatar
1 vote
Accepted

Does CSR1000v on AWS support IPv6?

When I was creating new VPCs, I didn't enable IPv6 addressing but I found out a way to do that. The VMs that run Linux-based was able to get IPv6 addresses. However, the CSRs which are already ...
Khalil Mebarkia's user avatar
1 vote
Accepted

How can AWS restrict access by private IP?

You can't be right about that. I read the documentation that you have provided and it clearly states: "The security group editor in the Amazon EC2 console can automatically detect the public IPv4 ...
Shōgun8's user avatar
  • 154
1 vote
Accepted

AWS connectivity UDP works but TCP times out

I know what the issue is but appreciate all that attempted to help so where is the problem. The subnet we are using for AWS is 10.20.0.0/24 now I was checking the routing on my firewall and finally ...
1 vote
Accepted

Unable to ping Google-AWS Fortigate firewall-SOLVED

It was metric !, was same for fortigate and windows (10) as you can see from picture above, just reduced default metric in fortigate for static route and all started working
Milister's user avatar
  • 131
1 vote

PFSense on AWS with ASG

I recently worked on replacing a bunch of sophos firewalls with pfSense ones. My first impression is that pfSense isn't yet ready to the cloud. As a cloud user, you would expect that you could ...
Filipe Felisbino's user avatar
1 vote
Accepted

AWS private NAT

I found the solution to my problem was to setup an nginx box in the 10.1 subnet with a simple config: worker_processes auto; error_log /var/log/nginx/error.log info; events { worker_connections ...
Kevin Holditch's user avatar
1 vote

F5 on AWS BGP configuration

The tmos in the prompt indicates that you are already inside the tmsh shell. No need to prefix commands with tmsh. You would only do this if you were in the bash shell (to get there from tmos, type ...
John K.'s user avatar
  • 969

Only top scored, non community-wiki answers of a minimum length are eligible