mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-22 13:06:02 +03:00
Code Issues Projects Releases Wiki Activity
580678aed5
setup-ipsec-vpn/aws
History
hwdsl2 580678aed5 Update docs
2020-08-26 23:53:41 -05:00
..
cloudformation-launch-stack-button.png Update docs 2020-08-26 23:53:41 -05:00
cloudformation-template-ipsec Add AWS deployment template (#838) 2020-08-26 22:20:04 -05:00
confirm-iam.png Add AWS deployment template (#838) 2020-08-26 22:20:04 -05:00
README.md Update docs 2020-08-26 23:53:41 -05:00
show-key.png Add AWS deployment template (#838) 2020-08-26 22:20:04 -05:00
specify-parameters.png Add AWS deployment template (#838) 2020-08-26 22:20:04 -05:00
upload-the-template.png Add AWS deployment template (#838) 2020-08-26 22:20:04 -05:00

README.md

Deploy to Amazon EC2 using CloudFormation (Beta)

Note: This deployment template is still in BETA. You may encounter failures during deployment. In that case, please open a new issue.

This template will create a fully-working IPsec VPN server on Amazon Elastic Compute Cloud (Amazon EC2). Please make sure to check the EC2 pricing details before continuing. Using a t2.micro server instance for your deployment may qualify for the AWS Free Tier.

Available customization parameters:

  • Amazon EC2 instance type
  • OS for your VPN server (Ubuntu 20.04/18.04/16.04, Debian 10/9)

Note: Before using the Debian images on EC2, you need to first subscribe at the AWS Marketplace: Debian 10, Debian 9.

  • Your VPN username
  • Your VPN password
  • Your IPsec PSK (pre-shared key)

Note: When choosing your VPN username, password and PSK, DO NOT use these special characters: \ " '.

Make sure to do this with an AWS ROOT ACCOUNT or an IAM ACCOUNT with ADMINISTRATOR ACCESS.

Right-click this template link and save as a file on your computer. Then upload it as the template source in the stack creation wizard.

Upload the template

At step 4, make sure to confirm that this template may create IAM resources.

Confirm IAM

Click the icon below to start:

Deploy using CloudFormation

Make sure the deployment is successful before continuing to Next steps: Configure VPN Clients.

Note: You will need to wait at least 5 minutes after the stack shows CREATE_COMPLETE, before you can connect to the server with a VPN client. This is to allow time for the VPN setup to complete.

FAQs

How to connect to the server via SSH after deployment?

Amazon EC2 does not allow users to access the instances with an SSH password. Instead, users are instructed to create "key pairs", which are used as credentials to access the instances via SSH.

This template generates a key pair for you during deployment, which will be available as text in the Outputs section after the stack is successfully created.

You will need to save the private key from the Outputs section to a file on your computer, if you want to later access the VPN server via SSH.

Show key

Author

Copyright (C) 2020 S. X. Liang

Screenshots

Specify parameters