部署 Transit Gateway

部署TransGateway和数据中心(模拟)路由器

现在,我们准备开始我们的网络链接和路由策略。运行CloudFormation 以部署Transit gateway,路由表和数据中心(模拟)路由器(StrongSwan)。

1.单击下面的CloudFormation启动链接.

https://console.aws.amazon.com/cloudformation/home?region=us-east-2#/stacks/create/review?stackName=tgw-strongswan&templateURL=https://aws-industry-solutions-workshop.s3.cn-northwest-1.amazonaws.com.cn/tgw-workshop/2.tgw-csr.yaml&param_ParentStack=tgw&param_RouterChoice=StrongSwan

2.对于“Specifiy stack details”,确保如下参数输入。

参数说明:

  • Stack name : tgw-strongswan
  • Parent Stack: tgw
  • KeyPair: 从下拉列表选择 - ee-default-keypair
  • RouteChoice: 选择 StrongSwan

3.勾选 I acknowledge that AWS CloudFormation might create IAM resources with custom names. 4.单击右下角的 Create Stack 按钮。创建资源。

5.等待堆栈显示 Create_Complete

  1. 等待 Stack 创建完成。

该 cloudformation 共创建如下资源

Resource ResouceID ResouceType
DefaultRouteRed tgw-rtb-05f87f6f7a99c317b_0.0.0.0/0 AWS::EC2::TransitGatewayRoute
InstanceProfile tgw-strongswan-InstanceProfile-L7KKXK2GHQA AWS::IAM::InstanceProfile
NP2PrivateDefaultRoute tgw-s-NP2Pr-1BGU48ASSR9UB AWS::EC2::Route
P1PrivateDefaultRoute tgw-s-P1Pri-1VDKCW1Y7BI9L AWS::EC2::Route
PrivateDefaultRoute tgw-s-Priva-1C0Y6QJDQ0FW1 AWS::EC2::Route
PropagateDCS1Blue tgw-attach-0572d757fa273f330_tgw-rtb-0ad3b9c51ce6e990b AWS::EC2::TransitGatewayRouteTablePropagation
PropagateDCS1Green tgw-attach-0572d757fa273f330_tgw-rtb-00aa8ce4e819ca193 AWS::EC2::TransitGatewayRouteTablePropagation
PropagateDCS1Red tgw-attach-0572d757fa273f330_tgw-rtb-05f87f6f7a99c317b AWS::EC2::TransitGatewayRouteTablePropagation
PropagateNP1Green tgw-attach-091d76281b20b0774_tgw-rtb-00aa8ce4e819ca193 AWS::EC2::TransitGatewayRouteTablePropagation
PropagateNP1Red tgw-attach-091d76281b20b0774_tgw-rtb-05f87f6f7a99c317b AWS::EC2::TransitGatewayRouteTablePropagation
PropagateNP2Green tgw-attach-03f25454faa427c7c_tgw-rtb-00aa8ce4e819ca193 AWS::EC2::TransitGatewayRouteTablePropagation
PropagateNP2Red tgw-attach-03f25454faa427c7c_tgw-rtb-05f87f6f7a99c317b AWS::EC2::TransitGatewayRouteTablePropagation
PropagateP1Blue tgw-attach-009868b622ae062da_tgw-rtb-0ad3b9c51ce6e990b AWS::EC2::TransitGatewayRouteTablePropagation
PropagateP1Green tgw-attach-009868b622ae062da_tgw-rtb-00aa8ce4e819ca193 AWS::EC2::TransitGatewayRouteTablePropagation
RouteTableBlue tgw-rtb-0ad3b9c51ce6e990b AWS::EC2::TransitGatewayRouteTable
RouteTableGreen tgw-rtb-00aa8ce4e819ca193 AWS::EC2::TransitGatewayRouteTable
RouteTableRed tgw-rtb-05f87f6f7a99c317b AWS::EC2::TransitGatewayRouteTable
ServerRole DC1-tgw-strongswan-SSMRole AWS::IAM::Role
SwanCustomerGateway cgw-0c89144af09b106bc AWS::EC2::CustomerGateway
SwanEIPAssoc eipassoc-0a5f96e594a803e2b AWS::EC2::EIPAssociation
SwanIP 18.188.59.21 AWS::EC2::EIP
SwanInstance i-022aff05b76a9ca86 AWS::EC2::Instance
SwanInterface eni-025ed7a4c3d7d8981 AWS::EC2::NetworkInterface
SwanPrivateDefaultRoute tgw-s-SwanP-J9L2LUX7L0EF AWS::EC2::Route
SwanSecGroup sg-0359bcd05bec8da70 AWS::EC2::SecurityGroup
TransitGateway tgw-02e0ac23367f15df9 AWS::EC2::TransitGateway

统计信息如下

Row Labels Count of Resource
AWS::EC2::CustomerGateway 1
AWS::EC2::EIP 1
AWS::EC2::EIPAssociation 1
AWS::EC2::Instance 1
AWS::EC2::NetworkInterface 1
AWS::EC2::Route 4
AWS::EC2::SecurityGroup 1
AWS::EC2::TransitGateway 1
AWS::EC2::TransitGatewayRoute 1
AWS::EC2::TransitGatewayRouteTable 3
AWS::EC2::TransitGatewayRouteTablePropagation 9
AWS::IAM::InstanceProfile 1
AWS::IAM::Role 1
Grand Total 26