- Newest
- Most votes
- Most comments
Hi,
Simply put, the VPN tunnel is randomly chosen by AWS and is called the preferred tunnel. If your AWS VPN connection (static route type) has an active/active configuration (both tunnels are up), you cannot configure your preferred specific tunnel in AWS to send traffic.
But, for dynamic AWS VPN connections (Active/Active), you can set the customer gateway device to prefer one VPN tunnel over the other by leveraging the order of preference criteria:
- Advertising more specific prefix over preferred tunnel
- Advertising shorter ASPATH over the preferred tunnel
- Setting lower MED values over the preferred tunnel
Hope this helps
Hello,
See this Knowledge center article:
https://aws.amazon.com/premiumsupport/knowledge-center/vpn-configure-tunnel-preference/
Note also below from our documentation
We recommend that you use BGP-capable devices, when available, because the BGP protocol offers robust liveness detection checks that can assist failover to the second VPN tunnel if the first tunnel goes down. Devices that don't support BGP may also perform health checks to assist failover to the second tunnel when needed.
Relevant content
- asked a year ago
- Accepted Answerasked 2 years ago
- asked 3 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago
Are you using Static route based VPN or BGP based Dynamic VPN?