Firewalla Gold and AWS Site-To-Site VPN

Answered

Follow

Doug Hairfield

• August 21, 2022 19:48

Is it possible to connect a the Firewalla Gold (FWG) VPN to an AWS Site-To-Site VPN to establish an IPSec VPN tunnel? I like the benefits of FWG but have a hard requirement to be able to setup an IPSec Tunnel to AWS using Site-To-Site VPN to provide access for some home components to an EC2 instance in a VPC/Subnet in the region. I can't find anything that states this is 100% possible. I know there are other ways to establish a tunnel to AWS but I must use AWS Site-To-Site VPN as the far end.

https://docs.aws.amazon.com/vpn/latest/s2svpn/your-cgw.html

1

• 

  David Rothenberger

  • August 22, 2022 16:53

  Firewalla does not support IPSec tunnels. Also, it's site-to-site VPN only works with Firewalla boxes at both sites.

  As you said, you could probably establish a site-to-site tunnel with another VPN solution supported by Firewalla and some routes at both sites.

  1

  Comment actions Permalink
• 

  Doug Hairfield

  • August 22, 2022 17:10

  Thanks for the update. Bummer b/c I really like the Firewalla Gold but need to use IPSec to replicate another setup to test. Shout out to the feature request people on this one.

  0

  Comment actions Permalink
• 

  James Willhoite

  • September 04, 2022 13:25

  You can do IPSec but it requires you to set up and manage via command line.

  0

  Comment actions Permalink
• 

  Doug Hairfield

  • September 04, 2022 13:27

  Thanks, is there any documentation you could point me to that shows how to set the IPSec connection up via the command line?

  0

  Comment actions Permalink
• 

  James Willhoite

  • September 04, 2022 13:29

  I replied to this article you can look at.

  https://help.firewalla.com/hc/en-us/community/posts/9146254762387-Route-to-IP-that-is-not-an-interface-on-the-box?page=1#community_comment_9244350040083

  1

  Comment actions Permalink
• 

  Doug Hairfield

  • September 04, 2022 13:39

  I will, thanks James.

  0

  Comment actions Permalink
• 

  Parkerbradshaw88

  • January 13, 2025 00:15

  Did this ever change? Interested to setup site to site vpn with AWS.

  0

  Comment actions Permalink
• 

  Michael Bierman

  • September 11, 2025 19:10

  Parkerbradshaw88 yes! IPSEC now supported  https://help.firewalla.com/hc/en-us/articles/40317799446035-MSP-Release-2-8-Ask-FireAI-Import-Target-List-IPsec-Local-Flows#h_01JS03WTWSE9G997VTYF87B5E3

  0

  Comment actions Permalink

Please sign in to leave a comment.