In this Lab, you will set up VPN connections with an Amazon Virtual Private Cloud (VPC) using dynamic routing as you make strides in migrating an on-premises application into the AWS cloud. You will configure the networking between your corporate network and an Amazon Virtual Private Cloud (VPC). The database (db) is hosted on-premises and the application is hosted in the cloud. As part of a real-world scenario, you will complete a design by fulfilling requirements.

Lab Objectives

Upon completion of this Lab you will be able to:

• Connect on-premises networks to Amazon VPCs using Internet Protocol Security (IPSec) virtual private network (VPN) tunnels
• Configure internal Border Gateway Protocol (BGP) on on-premises routers
• Configure on-premises routers to connect to Amazon VPCs using BGP
• Understand the differences between static and dynamic routing
• Gain experience with multi-homed instances and understand some reasons for using them

Lab Prerequisites

You should be familiar with the following:

• AWS networking concepts including VPCs, subnets, internet gateways, security groups, route tables, and Elastic IP addresses
• AWS compute concepts including EC2 instances
• Static routes in networks
• Knowledge of routing protocols is beneficial, but not required

Lab Environment

Before completing the Lab instructions, the environment will look as follows:

After completing the Lab instructions, the environment should look similar to:

Updates

November 3rd, 2024 - Resolved an issue causing the lab to fail to set up in some cases

October 10th, 2023 - Resolved Node.js issue

May 9th, 2023 - Resolved an issue that would cause the lab setup to not complete on rare occasions

March 6th, 2023 - Updated instructions to add clarity about EC2 SSH

April 26th, 2022 - Modified the lab to use a Cloud Academy-provided VyOS routing configuration template after AWS removed Vyatta (VyOS-compatible) configuration from their available router configurations

March 31st, 2022 - Added SSH instructions for Windows users

February 3rd, 2022 - Updated the instructions and screenshots to reflect the latest UI.

September 30th, 2020 - Addressed an issue preventing downloading of the VPN configuration

August 31st, 2020 - Updated screenshot to match the new EC2 user interface

July 30th, 2020 - Fixed an issue preventing students from completing the Lab, updated instruction and screenshot.

January 10th, 2019 - Added a validation Lab Step to check the work you perform in the Lab