Migrate your VPN connection to a transit gateway. To resolve this, do one of the following:Īdvertise a default route to route to AWS, or summarize the routes so that the number of routes received is fewer than 100. If the number of routes advertised over the BGP session is more than 100, then the BGP session goes to the idle state. You can advertise up to 100 routes over the BGP session. Verify the number of routes that you're advertising over the BGP session. Packet captures for traffic between the BGP peer IP addresses.Ĭheck if the BGP session is going from established to idle statesįor VPN on a virtual gateway, you might see the BGP session going from established to idle state.Note debugs and packet capturesĪfter verifying BGP configuration and BGP peer connectivity, note the following information from the customer gateway device for further troubleshooting:

Note: If your BGP session is flapping between active and connect states, then verify that TCP port 179 and other relevant ephemeral ports are not blocked. External BGP (EBGP) multi-hop is turned off on AWS. Be sure that the BGP peers are directly connected to each other.This verifies the connectivity between BGP peers. If the configuration settings are correct, then ping the remote BGP peer IP address from your local BGP peer IP address.The local and remote BGP Autonomous System Numbers (ASN) must be configured with the downloaded VPN configuration file from the Amazon VPC console.The local and remote BGP peer IP addresses must be configured with the downloaded VPN configuration file from the Amazon Virtual Private Cloud (Amazon VPC) console.How do I troubleshoot VPN tunnel inactivity or instability or tunnel down on my customer gateway device?Ĭheck the BGP configuration on your customer gateway device.Why is IPsec/Phase 2 for AWS Site-to-Site VPN failing to establish a connection?.Why is IKE (phase 1 of my VPN tunnel) failing in Amazon VPC?.If the VPN isn't coming up or it isn't stable, see the following:

If the VPN tunnel is down or flapping, then you experience issues when establishing the BGP session. To troubleshoot BGP connection issues over VPN, check the following: Check the underlying VPN connectionįor BGP-based VPN connections, the BGP session can be established only if the VPN tunnel is UP.

Check point route based vpn bpg