Step 14: Testing VPN Connections
After configuring your router and disabling source/destination checking, you should verify that the VPN tunnel is working correctly.
Verify VPN Tunnel Status in AWS
- Navigate to VPC Dashboard and select VPN Connections.
- Select your VPN connection (My-Company-VPN).
- Click the Tunnel Details tab.
- Verify that at least one tunnel shows Status: UP.
Note: It may take a few minutes for the tunnel to establish after router configuration.
Verify VPN Status on Your Router
- Log in to your router's administration interface.
- Navigate to the VPN status page.
- Verify the tunnel shows as connected or established.
Test Connectivity from Local Network
- Open Command Prompt on any Windows computer in your local network.
- Test connectivity to your Public-Server:
_CODE_BLOCK_0_
- Test connectivity to your Private-Server:
_CODE_BLOCK_1_
- Verify you receive responses from both addresses.
Expected Results
| Test | Expected Result |
|---|---|
| Ping 10.0.1.100 | Replies from Public-Server |
| Ping 10.0.2.200 | Replies from Private-Server |
| AWS tunnel status | At least one tunnel UP |
| Router tunnel status | Connected/Established |
Test Remote Desktop Access
Once ping tests succeed, verify Remote Desktop connectivity:
- Open Remote Desktop Connection on a local computer.
- Connect to 10.0.1.100 (Public-Server).
- Verify you can log in successfully.
- From the Public-Server, connect to 10.0.2.200 (Private-Server).
Troubleshooting
| Issue | Possible Cause | Solution |
|---|---|---|
| Tunnel shows DOWN | Router not configured correctly | Review router VPN settings |
| Ping times out | Route tables not updated | Verify VPN routes in route tables |
| Intermittent connectivity | DPD settings issue | Adjust Dead Peer Detection timing |
| One-way traffic only | Source/Dest check enabled | Verify check is disabled on all instances |
Success Criteria
Your VPN configuration is complete when:
- [x] AWS VPN tunnel shows UP status
- [x] Router shows tunnel connected
- [x] You can ping EC2 instances from local network
- [x] You can RDP to EC2 instances from local network