ADVPN to connect all my IPsec VPNs to AWS?

[wamendoza]

hi team

Does anyone have any experience with IPsec VPNs between Fortigate and AWS?

I have a client that has IPs connected to two different peers in AWS

Now my client has a new IPs and wants to connect them to the same two peers in AWS, but AWS reports that now it needs a routing protocol like BGP for it...

Can I use ADVPN to connect all my IPsec VPNs to AWS?

[jdelafuente_FTNT]

Hello wamendoza,

If remote peers have public IP; yes it is possible, but commonly ADVPN deployments are so difficult, here is some community guides for it:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ADVPN-with-BGP-as-the-routing-protocol/ta-...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-ADVPN-and-analyzing-logs/ta-p/...

Also you can register for free in https://training.fortinet.com/ and enroll in NSE7 Enterprise, there is a dedicated chapter for ADVPN.

[wamendoza]

Hi Jonathan, so fact, i take the idea from Nse7 advpn, but, right now i not sure if this IS the best way....

Unfortly AWS, say me i need use BGP protocol, so, you have some another ide for this one? because also i need some redundancy in each tunnel...

and thanks for answer me

Yes, is a public ip

[wamendoza]

Hi Jonathan, so fact, i take the idea from Nse7 advpn, but, right now i not sure if this IS the best way....

Unfortly AWS, say me i need use BGP protocol, so, you have some another ide for this one? because also i need some redundancy in each tunnel...
and thanks for answer me

yes, is a public ip