- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
How can I configure a BGP Route based vpn between SonicWall and AWS ?
03/26/2020 
45 People found this article helpful
37,282 Views
Description
The following networks will be used for demonstration purposes during this article. Your networks may be different.
AWS Resources
- LAN subnet: 10.50.30.0/24
- Public IP: 13.237.76.27
SonicWall Resources
- LAN subnet: 10.13.1.0/24
- Public IP: 40.74.74.168
- BGP Local ASN 65000
- BGP REMOTE ASN 64512
- BGP PEER IP 169.254.116.78
- TUNNEL INTERFACE IP 169.254.116.77
Resolution
- Login to the AWS portal at https://aws.amazon.com.
- Create Virtual Private Gateway and associate it with the VPC .
- Create Customer Gateway with routing as Dynamic and remote end Public ip address .
- Create VPN connection and define Virtual Private gateway and Customer Gateway and (Download Configuration ) to be used on SonicWall.
SonicWall Configuration
- Login to the SonicWall firewall.
- Navigate to the VPN policy tab. We're using the latest SonicOS 6.5 firmware. Navigate to Manage | VPN | Base Settings. Click Add to create a new VPN policy.
- Give the VPN policy a name. We'll use the following settings.
- Policy Type: Tunnel Interface
- Authentication Method: IKE using Preshared Secret.
- Click the Proposals tab and use default IKEV2 proposals.
- Create Tunnel Interface, navigate to Network | Interfaces.
- Enable Advance routing Under Network | Routing | Settings, Configure BGP using CLI.
admin@0040103538F8> config tconfig(0040103538F8)# routing(config-routing)# bgpARS BGP>router bgp 65000neighbor 169.254.116.78 remote-as 64512network 10.13.1.0 mask 255.255.255.0
Related Articles
- DNS Resolution of Wildcard FQDN Address Objects
- All associated wildcard FQDN IP addresses do not display in the web browser
- How to Re-Install The Junk Store
Categories
- Firewalls > NSv Series > AWS
YES
NO