Issue witth Site-To-Site VPN w/ PFSense

Hello All,

In my most recent attempt to traverse the AWS world, I am attempting to set up a site-to-site VPN between my AWS VPC and my on-prem network.

I followed the instructions here: Setup Site-to-Site VPN to AWS with pfSense | by Fusion | Medium

Nothing seems to be talking, however. I can’t ping anything internal from my EC2 instances or vice versa and the IPSec console in pfSense shows no traffic flowing

I have done the following to no avail:

  • Checked security groups-I have an inboud allow all rule from my local subnet
  • Checked route tables-route propogation is enabled, but routes are not propogating.
  • Checked the tunnel status from the console, and both tunnels show as up
  • Checked the IPSec firewall rule on pfSense to verify that traffic was allowed in/out to/from AWS.
  • Created a DHCP option set pointing name resolution to my on-prem DNS server and associated it to the VPC-I know this is a moot point to do while I have no traffic flowing across the VPN.

Nothing seems to be working, and my instances won’t connect to my on-prem DNS for resolution to resolve, and thus won’t reach the internet while the VPC is using the custom option set.

I realize how much of an idiot I sound like, and this is definitely not my first post on this forum asking for noob advice.

But I am trying to learn and would appreciate anyone that could help me out here.

Are your tunnels UP?

If they are, try the Reachability Analyzer

Since the tunnel is up, this is most likely a SG or routing issue. Make sure your VPC route tables include an entry for your premise network that routes to the tunnel.