Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Ole_Jakobsen
Contributor
Jump to solution

AWS deployment with VSX on-prem gateway

Hi,

 

I'm trying to do a deployment of CG in a AWS Transi VPC.

 

I have read the guides Transit VPC for AWS R80.10 Deployment Guide and CloudGuard for AWS - Transit VPC Architecture, I have watched the video Step by Step deployment of automated, multi hub Transit VPC.

 

One thing that is described in every guide is to make a VTI between the on-prem gateway via the Direct Connect (DC) to the gateways in the Transit VPC.

 

My challange is that the on-prem gateway that is used to connect to the DC is a VS on VSX where VTI is not supported. (See: VSX supported features on R75.40VS and above)

 

As I understand the VTI is primarily used with the BGP peering so the peers is directly connected.

 

Then my solution to the unsupported VTI on VSX is to use BGP multihop os I don't need the VTI.

 

Can any of you see any issues with this solution?

 

I'm looking forward to any reply to this question Smiley Happy

 

Cheers

Ole J

17 Replies
This widget could not be displayed.