Guides
ProductDeveloperPartnerPersonal
Guides
ProductDeveloperPartnerPersonal

(Unpublished) Configure Tunnels with AWS Native IPsec

Suggest Edits

❗️

INTERNAL DOCS TEAM NOTE

Unpublished this November 2022 because the SIGINT team discovered problems with this method. PM has decided it's not supported at this point. We can turn it back on if/when whatever work needs to be done gets completed.

Use the AWS native VPN gateway to establish tunnels to Umbrella. This configuration assumes that a VPC is already deployed.

1012

Table of Contents

Create the AWS Virtual Private Gateways

  1. Navigate to VPC > Virtual private network (VPN) > Virtual private gateways > Create virtual private gateway.
572
  1. Once configured, attach the Virtual private gateway to your VPC. Click the Actions drop-down and select Attach to VPC.
1012
  1. Select the VPC from the drop-down list.
1626

Create Customer Gateways

  1. Navigate to VPC > Virtual private network (VPN) > Customer gateway > Create customer gateway.
  2. Configure BGP ASN to be the Umbrella ASN 36692.
  3. Identify the nearest Umbrella DC IP address and enter the same in the IP address field.
572

Create AWS Site-to-Site VPN Connection

  1. Navigate to VPC > Virtual private network (VPN) > Site-to-Site VPN Connections > Create VPN connection.
572
  1. Once the VPN tunnel is configured, click Modify VPN tunnel options.
1012
  1. Select the egress IP address of the site-to-site VPN.
572


4. Copy the Pre-shared key and save it on your device.

572
  1. Configure the VPN parameters as shown below:
572 572
  1. Click Save Changes.

Update Route Tables

  1. Navigate to VPC > Virtual private cloud > Route tables.
  2. Click Add Route.
  3. Enter 0.0.0.0/0 in the Destination field.
  4. Select a Virtual Private Gateway from the dropdown list as created in the first section.
1012
  1. Click Save Changes.

Configure Umbrella Private Access Tunnel

  1. Navigate to Deployments > Network Tunnels.
  2. Click Add.
  3. Enter the tunnel details.
458
  1. Select the Service Type. Under Client Reachable Prefixes, enter all public and private address ranges used internally by your organization.
458
  1. Select IP Address/Network as the Authentication Method.
  2. Enter the Passphrase and confirm.
    Note: Passphrase is the Pre-shared key copied in step 4.
  3. Click Save.
458
  1. Navigate to Deployments > Core Identities > Network Tunnels to verify the tunnel status.
1194

Appendices

Configure Tunnels with Cisco Router in AWS < Configure Tunnels with AWS Native IPsec > Configure Tunnels with Azure IPsec

Updated over 1 year ago