Create Customer Gateway

Create Customer Gateway

  1. Navigate to the VPC Console

    • Select Customer Gateways
    • Click Create Customer Gateway

Create VPC

  1. In the Create Customer Gateway interface

    • In the Name tag field, enter Customer Gateway
    • BGP ASN: Keep default 65000 (for static routing)
    • In the IP address field, enter the Public IP of the EC2 Customer Gateway instance
    • Click Create Customer Gateway

    💡 Get Public IP: Access EC2 Console → Select Customer Gateway instance → Copy Public IPv4 address

Create VPC

Create VPC

  1. The Customer Gateway creation process will complete immediately

Create VPC

🏗️ Customer Gateway Role

Customer Gateway (CGW) - Represents On-Premises VPN Device
├── Public IP: x.x.x.x (EC2 Customer Gateway)
├── BGP ASN: 65000 (for routing)
└── Connects to: Virtual Private Gateway

ℹ️ Important Information:

  • In real architecture, Customer Gateway is typically a physical VPN device or software in on-premises data center
  • In this workshop, we simulate it using an EC2 instance with Libreswan
  • AWS only needs to know the Customer Gateway’s Public IP to establish VPN tunnel

💡 Concepts:

  • Customer Gateway (AWS Object): Logical object in AWS representing the VPN device
  • Customer Gateway Device: Actual VPN device (in lab: EC2 with Libreswan)
  • Public IP: Public address that AWS will connect to

✅ Completed: Customer Gateway has been created and is ready for VPN Connection!