AWS VPN is it posible?

AndzejJ · October 14, 2024, 11:55am

Hello,

Yes, it is possible. You can create a VPN gateway and a site-to-site instance on AWS, then configure your RUT device for IPSec.

However, some changes will need to be made via the CLI/SSH. You can find instructions on how to access the CLI here: RutOS Command Line Interface (login using the username: root).

First, make sure that you are using the latest firmware available on your RUT device.

Then, configure IPSec. Here’s an example:
Tunnel1:

Advanced settings (tab):

Tunnel2:

Advanced settings (tab):

Access the router via CLI/SSH, and then edit the /etc/config/network file using the vi editor to make the necessary adjustments (vi /etc/config/network command).

/etc/config/network (replace IPs according to the AWS config - 169.254.x.x - Inside IPv4 IPs).

config rule 'ipsec_rule'
        option action_group 'lookup'
        option tos '0'
        option priority '220'
        option invert '0'
        option lookup '220'

config interface 'ipsec1'
        option mtu '1419'
        option tunlink 'loopback'
        option ifid '100'
        option proto 'xfrm'

config interface 'ipsec1_static'
        option proto 'static'
        option ipaddr '169.254.xxx.xxx'
        option netmask '255.255.255.252'
        option device '@ipsec1'
        option disabled '0'

config interface 'ipsec2'
        option mtu '1419'
        option tunlink 'loopback'
        option ifid '200'
        option proto 'xfrm'

config interface 'ipsec2_static'
        option proto 'static'
        option ipaddr '169.254.xxx.xxx'
        option netmask '255.255.255.252'
        option device '@ipsec2'
        option disabled '0'

Make sure to restart the network and IPSec:

/etc/init.d/network restart
/etc/init.d/ipsec restart

Results:

Hope this helps!

Kind Regards,