Site-to-Site VPN between AWS and Ubiquiti UniFi Dream Machine Pro Firewall

Подписаться 110

Просмотров 5 тыс.

50% 1

This 20 minute tutorial will walk you through the necessary steps to configure a site-to-site VPN connection between an AWS VPN Gateway and a Ubiquiti UniFi Dream Machine Pro firewall.
If you find this video helpful, please be sure to like and subscribe for more videos like this one.

Опубликовано:

28 сен 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 22

@chrisp1850 3 года назад

Thank you for posting this video. I am currently in process of setting up a site-to-site vpn for a small business and this is helpful. I am running into an issue with pinging the aws instance however. I have included inbound rules as you did at the AWS security group associated with my instance but still no luck with ping. I also found it interesting that I could not connect to my instance from the AWS connection manager either. Any suggestions?

@MrMoucmouc 2 года назад

merci

@vdemcak 2 года назад

Hey, is there a way to add all 3 of my VPC availability zones?

@StephenSadowski 2 года назад

Unfortunately doesn't work in June of 2022.

@Minerva___ 2 года назад

Unifi have apparently changed this in the newer version (to be expected) but now it doesn't seem to be as straightforward. Looks like they've moved the Site-to-Site VPN configuration out of the standard network setup but for some reason I just can't get it to work. Everything looks fine on the AWS side, my TGW is all set up with two VPCs with an EC2 instance in each of them, but I can't seem to ping them once I've got the site-to-site VPN configured. I'm missing something but can't find a log to start looking at. Have any of you configured this with the new Dashboard UI?

@VirtualizationGuy 2 года назад

Same problem here... currently troubleshooting. The tunnel is up, but I cant seem to get traffic to traverse (even added a static route on the DMP side to point to AWS)

@Minerva___ 2 года назад

@@VirtualizationGuy I ended up sorting this out by only changing the IKE DH group to 2 and leaving the ESP DH group at 14. I was following some other documentation that also had me configuring static routes but I found that connectivity was maintained, even if I paused the static routes so I’m not sure those are still necessary.

@vdemcak 2 года назад

Hey, do you know a way how I could add all 3 of my availability zones from my VPC?

@Minerva___ 2 года назад

@@vdemcak you should just be able to add them as attachments to the transit gateway. Just make sure you have your route tables configured as necessary.

@vdemcak 2 года назад

@@Minerva___ Hey, thanks for the suggestion. I'm pretty new to this stuff. Could you please explain how do I attach them to the transit gateway and configure the route tables? There was no transit gateway mentioned in the tutorial.

@Fantasillion 2 года назад

Does anyone know where I can find which IPsec settings are supported by the UDM Pro? I would have thought that this would be easy to find but it really isn't.

@JeremyJRutherford 3 года назад

Great video - good pacing and really clear instructions. Sadly I didn't implement as my wallet couldnt stand the monthly VPN connection cost of $0.05 per hour!