AWS Transit VPC CloudFormation

BrianFyre — Thu, 01 Oct 2020 14:13:41 GMT

Can anyone assist with this CF Template? https://github.com/PaloAltoNetworks/aws-transit-vpc

It is outdated, and I can't figure out why it's getting hung up. First the AMI was old, so I updated that to 9.1, now it's created one PA in the transit VPC, but I can't login (password is wrong) so I'm guessing the bootstrap config (which I am just using the one in this git) is maybe not working for 9.1 as it says 8.0 in the xml.

Or I'm fine doing things manually, I just don't get the transit VPC portion. I had one setup with just a peer link and I could ping between the VPCs, but internet traffic would not flow through the Palo. What I found was it looks like that's not a supported model and you have to do IPSEC tunnels? I'm getting a bit turned around there, I just want my outbound traffic from a subscribing VPC to flow through the Palo for outbound traffic.

Re: AWS Transit VPC CloudFormation

BrianFyre — Thu, 01 Oct 2020 14:32:12 GMT

maybe I'm just being impatient. The 2nd firewall finally got deployed it looks like. No VPN tunnels yet, and still can't access either firewall incorrect username/pass using the defaults from the bootstrap.

Just going to give it some more time and see if hopefully it finishes everything. Still curious if there is something weird with the scripts because of the versions

Thanks

topic Re: AWS Transit VPC CloudFormation in VM-Series in the Public Cloud

AWS Transit VPC CloudFormation

Re: AWS Transit VPC CloudFormation