Secure Mobile Access 12.5 Getting Started Guide for AWS

Template Parameters

The following parameters are displayed in the AWS CloudFormation console during deployment.

Parameter Description Default Required When
KeyPair EC2 key pair for SSH access to the appliance. (none) Always
ApplianceVpcCidr IPv4 CIDR for the appliance VPC. 10.100.0.0/16 Always
ApplianceSubnetCidr IPv4 CIDR for the appliance subnet. 10.100.1.0/24 Always
RedirectAll Enable redirect-all tunnel mode via AWS NAT Gateway. Incompatible with Ipv6. false Optional
Ipv6 Enable IPv6. Incompatible with RedirectAll. false Optional
StaticPoolCidr IPv4 CIDR for Connect Tunnel static IP pool. Must not overlap VPC or remote CIDRs. 10.101.0.0/16 Always
StaticPoolV6Cidr IPv6 CIDR for static pool. Required when IPv6 is enabled. (none) If Ipv6=true
SiteToSiteVpn Create an IPsec site-to-site VPN to a remote gateway. false Optional
SiteToSiteRemoteGatewayPublicIp Public IP of the remote gateway (NSv or other). (none) If VPN=true
SiteToSiteRemoteGatewayBgpAsn BGP ASN of the remote gateway. 65000 If VPN=true
SiteToSitePreSharedKey IPsec pre-shared key. 8-64 alphanumeric characters, periods, underscores. Cannot start with zero. (none) If VPN=true
SiteToSiteRemoteCidr IPv4 CIDR of the remote network. Traffic to this CIDR routes through the VPN. (none) If VPN=true

RedirectAll and IPv6 cannot both be set to true in the same deployment.