AWS VPN Site-to-Site and Client connections

VPN
1

I have to create a VPN using AWS VPN Site-To-Site, and then connect to it through a client, here’s my question:

  1. Do I need to make another tunnel, or can I connect directly using an OpenVPN client.

  2. Once it is configured, can I connect to my Customer Gateway Device also using OpenVPN or its config file?

  3. Or do I need to make a new tunnel for allowing me to connect using the client to AWS?

2

OP responded to my comment and seems to have deleted it. But they clarified that it is a site-to-site tunnel which they’d also like to allow user VPN access to.

No additional configuration required except possibly some routing rules to ensure your OpenVPN users are able to route into the site-to-site tunnel. I just did a very similar deployment two weeks ago and I ended up using AWS Client VPN and I’ve been really happy with it: https://aws.amazon.com/vpn/client-vpn/

I’d strongly recommend using Client VPN if most of your data is in AWS in order to avoid data egress charges.

3

Site-to-site VPN is over an IPSec tunnel, so your second question doesn’t really make a lot of sense.

Which of the following are you trying to do:

  1. Connect an AWS VPC to another network
  2. Connect individual clients to a VPC
  3. A combination of the above
4

Thanks a lot, that’s the perfect response. That’s strange since I didn’t deleted my response, but well.

Is there an example config on my case? I’m searching site to site configs yet with that plus

5

I’m trying to make a Site-to-Site from my organization to AWS, and then need to connect to then using a client, both of them.