If there's a device failure within AWS, your VPN connectionĪutomatically fails over to the second tunnel so that your access isn't interrupted. Lines between the customer gateway and virtual private gateway represent the tunnelsįor the VPN connection. The following diagram shows your network, the customer gateway device, and the VPNĬonnection that goes to the virtual private gateway that is attached to your VPC. Your network administrator must configure the device to work with the Site-to-Site VPN connection. You own or manage in your on-premises network (on your side of a Site-to-Site VPN connection). A customer gateway device is a physical or software appliance that