Secure Mobile Access 12.5 Getting Started Guide for AWS

Technical Documentation>  Automated Installation of SMA 8200v-Standalone Using CloudFormation on AWS>  Step-by-Step Deployment
Table of Contents

Step-by-Step Deployment

To deploy the SMA 8200v using the CloudFormation template

  1. Sign in to the AWS Management Console and verify that the correct Region is selected.

  2. Open the one-click launch URL: https://console.aws.amazon.com/cloudformation/home#/stacks/new?stackName=Sma1000AwsReferenceDeployment&templateURL=https://sma1000-aws-reference-deployment.s3.amazonaws.com/template.yml

    Alternatively, navigate to CloudFormation > Create stack > With new resources (standard). Select Amazon S3 URL, and then paste the template URL.

  3. On the Specify stack details page, review or update the stack name. The default stack name is Sma1000AwsReferenceDeployment.

  4. Under Authentication, select EC2 key pair from the KeyPair drop-down list.

  5. Under Appliance VPC, review and update the VPC CIDR, subnet CIDR, RedirectAll, and IPv6 settings.

  6. Under Static Pool, review or update StaticPoolCidr.

    The static IP pool is a reserved range of private IP addresses that the SMA8200v appliance assigns to Connect Tunnel clients when they connect to the VPN. Ensure that StaticPoolCidr does not overlap with the VPC CIDR or any remote network CIDR. If IPv6 is enabled, also specify StaticPoolV6Cidr.

  7. Under Site-to-Site VPN, set SiteToSiteVpn to true if a VPN connection to a remote gateway is required. If you enable this setting, provide the following information:

    • Remote gateway public IP address
    • BGP ASN
    • Pre-shared key
    • Remote network CIDR

    When SiteToSiteVpn is set to true, the remote network CIDR specified in SiteToSiteRemoteCidr is automatically added as a network resource in the AMC. An access policy that grants tunnel users access to this network is also created. When Connect Tunnel clients connect, a route to the remote network is pushed to the client, providing access to the on-premises network through the site-to-site VPN.

  8. Click Next.

  9. On the Configure stack options page, no changes are required. Click Next.

  10. On the Review page, select the IAM acknowledgment checkbox, and then click Submit.

  11. On the Outputs tab of the parent stack, record the required output values.