Open connection over peering VPC
I'm on aws and have 3 vpc connected in a so called "flying V" model https://docs.aws.amazon.com/en_us/vpc/latest/peering/peering-configurations-full-access.html#one-to-two-vpcs-full-access, 1 admin vpc (10.100.0.0/16) linked to 1 slave vpc (10.110.0.0/16) and 1 production vpc (10.120.0.0/16). very similar to https://www.whaletech.co/2014/10/02/reference-vpc-architecture.html
I need to use the admin vpc as a centralized access point and from there connect to the other two vpc.
I set up the peering connection from admin->slave and from admin->production and also set up the routes table to permit traffic trough vpc.
Now I can connect with putty on the public-layer admin nat-ec2 and from here I can:
ssh ec2-user@10.100.10.123 //private service layer
and connect to the admin-ec2 inside the service layer.
How can I connect from admin vpc to a slave-ec2 inside the slave vpc?
ssh ec2-user@10.110.10.321 //this dont work
[edit]
Here (inside the admin private layer server) I'm able to ping to another server, in another vpc private layer. What command line do I need to fire to switch to that server??
linux networking amazon-web-services
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
add a comment |
I'm on aws and have 3 vpc connected in a so called "flying V" model https://docs.aws.amazon.com/en_us/vpc/latest/peering/peering-configurations-full-access.html#one-to-two-vpcs-full-access, 1 admin vpc (10.100.0.0/16) linked to 1 slave vpc (10.110.0.0/16) and 1 production vpc (10.120.0.0/16). very similar to https://www.whaletech.co/2014/10/02/reference-vpc-architecture.html
I need to use the admin vpc as a centralized access point and from there connect to the other two vpc.
I set up the peering connection from admin->slave and from admin->production and also set up the routes table to permit traffic trough vpc.
Now I can connect with putty on the public-layer admin nat-ec2 and from here I can:
ssh ec2-user@10.100.10.123 //private service layer
and connect to the admin-ec2 inside the service layer.
How can I connect from admin vpc to a slave-ec2 inside the slave vpc?
ssh ec2-user@10.110.10.321 //this dont work
[edit]
Here (inside the admin private layer server) I'm able to ping to another server, in another vpc private layer. What command line do I need to fire to switch to that server??
linux networking amazon-web-services
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
I found that my route tables were not correctly set up. Now when I try to log to an instance on another vpc a have a "Permission denied: (publickey,gssapi-keyex,gssapi-with-mix)" error
– Mindexperiment
Jan 28 at 14:40
I found now that I can ping to the server in the other vpc, so now the question is, how can I access the command line of that server?
– Mindexperiment
Jan 28 at 15:45
add a comment |
I'm on aws and have 3 vpc connected in a so called "flying V" model https://docs.aws.amazon.com/en_us/vpc/latest/peering/peering-configurations-full-access.html#one-to-two-vpcs-full-access, 1 admin vpc (10.100.0.0/16) linked to 1 slave vpc (10.110.0.0/16) and 1 production vpc (10.120.0.0/16). very similar to https://www.whaletech.co/2014/10/02/reference-vpc-architecture.html
I need to use the admin vpc as a centralized access point and from there connect to the other two vpc.
I set up the peering connection from admin->slave and from admin->production and also set up the routes table to permit traffic trough vpc.
Now I can connect with putty on the public-layer admin nat-ec2 and from here I can:
ssh ec2-user@10.100.10.123 //private service layer
and connect to the admin-ec2 inside the service layer.
How can I connect from admin vpc to a slave-ec2 inside the slave vpc?
ssh ec2-user@10.110.10.321 //this dont work
[edit]
Here (inside the admin private layer server) I'm able to ping to another server, in another vpc private layer. What command line do I need to fire to switch to that server??
linux networking amazon-web-services
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
I'm on aws and have 3 vpc connected in a so called "flying V" model https://docs.aws.amazon.com/en_us/vpc/latest/peering/peering-configurations-full-access.html#one-to-two-vpcs-full-access, 1 admin vpc (10.100.0.0/16) linked to 1 slave vpc (10.110.0.0/16) and 1 production vpc (10.120.0.0/16). very similar to https://www.whaletech.co/2014/10/02/reference-vpc-architecture.html
I need to use the admin vpc as a centralized access point and from there connect to the other two vpc.
I set up the peering connection from admin->slave and from admin->production and also set up the routes table to permit traffic trough vpc.
Now I can connect with putty on the public-layer admin nat-ec2 and from here I can:
ssh ec2-user@10.100.10.123 //private service layer
and connect to the admin-ec2 inside the service layer.
How can I connect from admin vpc to a slave-ec2 inside the slave vpc?
ssh ec2-user@10.110.10.321 //this dont work
[edit]
Here (inside the admin private layer server) I'm able to ping to another server, in another vpc private layer. What command line do I need to fire to switch to that server??
linux networking amazon-web-services
linux networking amazon-web-services
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
edited Jan 29 at 13:25
Mindexperiment
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
asked Jan 28 at 11:01
MindexperimentMindexperiment
111
111
I found that my route tables were not correctly set up. Now when I try to log to an instance on another vpc a have a "Permission denied: (publickey,gssapi-keyex,gssapi-with-mix)" error
– Mindexperiment
Jan 28 at 14:40
I found now that I can ping to the server in the other vpc, so now the question is, how can I access the command line of that server?
– Mindexperiment
Jan 28 at 15:45
add a comment |
I found that my route tables were not correctly set up. Now when I try to log to an instance on another vpc a have a "Permission denied: (publickey,gssapi-keyex,gssapi-with-mix)" error
– Mindexperiment
Jan 28 at 14:40
I found now that I can ping to the server in the other vpc, so now the question is, how can I access the command line of that server?
– Mindexperiment
Jan 28 at 15:45
I found that my route tables were not correctly set up. Now when I try to log to an instance on another vpc a have a "Permission denied: (publickey,gssapi-keyex,gssapi-with-mix)" error
– Mindexperiment
Jan 28 at 14:40
I found that my route tables were not correctly set up. Now when I try to log to an instance on another vpc a have a "Permission denied: (publickey,gssapi-keyex,gssapi-with-mix)" error
– Mindexperiment
Jan 28 at 14:40
I found now that I can ping to the server in the other vpc, so now the question is, how can I access the command line of that server?
– Mindexperiment
Jan 28 at 15:45
I found now that I can ping to the server in the other vpc, so now the question is, how can I access the command line of that server?
– Mindexperiment
Jan 28 at 15:45
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1399199%2fopen-connection-over-peering-vpc%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1399199%2fopen-connection-over-peering-vpc%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I found that my route tables were not correctly set up. Now when I try to log to an instance on another vpc a have a "Permission denied: (publickey,gssapi-keyex,gssapi-with-mix)" error
– Mindexperiment
Jan 28 at 14:40
I found now that I can ping to the server in the other vpc, so now the question is, how can I access the command line of that server?
– Mindexperiment
Jan 28 at 15:45