Hello, I have two different VPCs in my amazon account, my goal is to setup 2 different VPN Access servers, one for each VPC: Using this guide ([url]https://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/amazon-ec2-appliance-ami-quick-start-guide[/url]) I was able to setup the first one with ease and i'm able to connect to it and [color=#00BF00]access my private subnet on the first VPC[/color]. I then created a second VPN server in the other VPC and i'm able to connect to it but [color=#FF0000]can't access my private subnet on the second VPC[/color]. Both servers were created in the same way and I've triple checked all the routing / security groups configuration. Both VPCs were created from the same aws account if it makes any difference. Anyone can shed some light on this? what could possibly be problem? Thanks.

multiple VPN servers for multiple VPCs

paz

Hello,

I have two different VPCs in my amazon account, my goal is to setup 2 different VPN Access servers, one for each VPC:

Using this guide (https://docs.openvpn.net/how-to-tutorialsguides/virtual-platforms/amazon-ec2-appliance-ami-quick-start-guide) I was able to setup the first one with ease and i'm able to connect to it and access my private subnet on the first VPC.
I then created a second VPN server in the other VPC and i'm able to connect to it but can't access my private subnet on the second VPC.

Both servers were created in the same way and I've triple checked all the routing / security groups configuration.

Both VPCs were created from the same aws account if it makes any difference.

Anyone can shed some light on this? what could possibly be problem?

Thanks.

reinaldo.gomes

First off, you have to determine where the traffic is stopping. Is the traffic exiting the client's interface at all? Is it hitting the server's public IP? What about the lan interface? Do it step by step.

The Johan

Yeah, what reinaldo said; do a step by step check on where the traffic flows and where it stops.

You can use tcpdump on the Access Server to verify that ping packets are arriving from the VPN client to the Access Server, and are going out from the Access Server on to the network. You can also see if the packets are routed or are being translated (NAT translation). This may be important. You can install and run tcpdump with these commands on the Access Server;
(sudo) apt-get install tcpdump
(sudo) tcpdump -eni any icmp
Then start pinging stuff from the VPN client through the VPN tunnel.

Things to check on Amazon:
Source-checking needs to be set up or disabled to allow traffic from/to the VPN subnet to pass through normally.
Security groups on the instances may need adjustment to allow certain subnets to pass through.