What address should be used to create the customer gateway resource?

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS The customer gateway device resides in a data center with a NAT gateway in front of it

What address should be used to create the customer gateway resource?
A . The private IP address of the customer gateway device
B . The MAC address of the NAT device in front of the customer gateway device
C . The public IP address of the customer gateway device
D . The public IP address of the NAT device in front of the customer gateway device

View Answer

Answer: D

Explanation:

When setting up an AWS managed VPN connection and creating a customer gateway resource, if the customer gateway device resides behind a NAT device, you should use the public IP address of the NAT device. This is because the VPN connection from AWS will be established to the public IP address that AWS can reach.

Identify the Public IP Address of the NAT Device:

Determine the public IP address assigned to the NAT device in front of the customer gateway.

Create Customer Gateway Resource:

Navigate to the VPC console in the AWS Management Console.

In the navigation pane, choose "Customer Gateways" and then click "Create Customer Gateway".

Enter a name for the customer gateway.

For the "IP Address", enter the public IP address of the NAT device.

Configure VPN Connection:

Create a VPN connection by navigating to the "VPN Connections" section and clicking "Create VPN Connection".

Select the created customer gateway and complete the VPN setup wizard.

Update Routing and Configuration:

Ensure that the routing configurations on both the AWS side and the on-premises side are updated to route traffic through the VPN connection.

Configure the customer gateway device (behind the NAT) to accept traffic from the NAT device and route it appropriately.

Reference: AWS Managed VPN Connections

Customer Gateway Resource