pfSense ipsec as default gateway to AWS VPC
-
Hi All,
I need a little bit of help with pfSense routing and IPSEC.
I have a VPC in AWS with just one subnet 10.0.0.0/24. I also have a pfSense appliance running in my office with a subnet of 172.20.22.0/23. I have successfully established Site-To-Site IPSEC tunnel between AWS and pfSense. I am using Virtual Private Gateway. Everything works great. I can ping hosts between AWS and my corporate office. I am using static routing in AWS and I don't have route propagation enabled.
What I would like to accomplish is that I want to modify the route table in AWS so that all outbound traffic from my instances in AWS goes through pfSense and out to the internet. I have modified the route table in AWS and added 0.0.0.0/0 destination to route through the VPG.
With this setup, I can still ping my subnet in pfSense just fine, but my AWS instance can't talk to the internet through the IPSEC tunnel. What am I missing?