OpenSwan VPN on Amazon AWS

I am trying to create a custom VPN on an amazon VPC. I am doing this because the other end of the VPN tunnel does not support the VPN that amazon provides. I have setup linux server instance with OpenSwan installed and connected successfully to the VPN. I then need another (windows) server on the same VPC to be able to forward all traffic to a particular IP range through that VPN instead of over the internet (and receive traffic back). My model for this is: http://www.techsmog.com/index.php/2011/05/03/openswan-amazon-vpc-and-cisco-asa-putting-it-all-together/ . However, I think that some routing configurations have changed since this person posted this and that I am having problems with the routing. I believe the problem is on the return traffic but am not 100% sure. If anyone has done this before or has some ideas on how to proceed / isolate the problem, please advise. Thank you.

If this is not possible I would appreciate a solution that would allow a software VPN to run in a robust way on the windows server (although it seems less reliable than a dedicated linux instance for this purpose).
aseismanAsked:
Who is Participating?
 
ArneLoviusConnect With a Mentor Commented:
if I understand you correctly, you are trying to get secure traffic from an Amazon hosted VM to a location where you have an ASA firewall.

For a pure windows solution, I would suggest looking at L2TP over IPSec http://www.cisco.com/en/US/customer/products/ps6120/products_configuration_example09186a00807213a7.shtml 

You might also look into using OpenVPN on each node connecting back to an OpenVPN server at the main site.
0
 
aseismanAuthor Commented:
I've requested that this question be deleted for the following reason:

Project changed
0
 
ArneLoviusCommented:
Your project changing does not invalidate the answer.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.