September 14, 2021 by Admin
You are configuring a VPN to AWS for your company. You have configured the VGW and CGW. You have created the VPN. You have also run the necessary commands on your router. You allowed all TCP and UDP traffic between your datacenter and your VPC. The tunnel still doesn’t come up. What is the most likely reason?
- You forgot to turn on route propagation in the route table.
- You do not have a public ASN.
- Your advertised subnet is too large.
- You haven’t added protocol 50 to your firewall.
You haven’t allowed protocol 50 through the firewall. Protocol 50 is different from UDP (17) and TCP (6) and requires a rule in your firewall for your VPN tunnel to come up.