topic Re: VM-Series to TG for ECMP VPN on AWS in VM-Series in the Public Cloud

VM-Series to TG for ECMP VPN on AWS

Cdchamberlin — Sun, 10 Mar 2019 01:45:13 GMT

I'm looking at taking advantage of ECMP VPN to attach VM-SERIES to the Transit Gateway. I would like to use tunnel interfaces for this and would like egress/ingress traffic to go through the VM-SERIES appliances.

Can somone that has implemented this design provide some feedback, steps and things to keep in mind?

Thank you,

Re: VM-Series to TG for ECMP VPN on AWS

Cdchamberlin — Mon, 11 Mar 2019 20:13:51 GMT

Push.

Re: VM-Series to TG for ECMP VPN on AWS

hsong — Fri, 07 Jun 2019 03:23:26 GMT

You can build VPN attachments to TGW with VM-Series and enabling ECMP. However, you will have to configure SNAT on the VM-Series firewalls (endpoint source IP will be replaced with the firewalls IPs.

Regards.

Re: VM-Series to TG for ECMP VPN on AWS

Artman1000 — Sat, 27 Jul 2019 13:28:32 GMT

Hi,

Just curious if anyone has done this. I have transit gw with three route tables- security, spoke and Vpn. My VPNS are terminated in the TG with two customer gateways one for DC Vpn one for internet vpn. My issue is to get vpc spoke routes iinto my data center routes I i had to send them from my vpn route table. Traffic comes in from Data center via. e-w and leaks back via Transit GAtewat bypassing E-W day inspection

Re: VM-Series to TG for ECMP VPN on AWS

jperry1 — Tue, 30 Jul 2019 15:28:04 GMT

@Artman1000

Please start a new question for this as this is not related to the question in this post. Thanks