You are configuring a VPN to AWS for your company. You have configured the VGW and CGW. You have created the VPN. You have also run the necessary commands on your router. You allowed all TCP and UDP traffic between your datacenter and your VPC. The tunnel still doesn't come up. What is the most likely reason?
A) You forgot to turn on route propagation in the route table.
B) You do not have a public ASN.
C) Your advertised subnet is too large.
D) You haven't added protocol 50 to your firewall.

Question

Quizplus · Accepted Answer

Protocol 50 (ESP) is required for IPsec VPNs, and if it's not allowed in the firewall, the VPN tunnel will not establish.

You Are Configuring a VPN to AWS for Your Company