Skip to main content

Technical Forum

Ask any question related to cloud networking including AWS, Azure, GCP, OCI, and Aviatrix

332 Topics
B
Bharat_BatraCadet
Asked in General
L2 Extension to Cloud

IPs are hardcodes in applications and it would break the communication if we migrate it to the cloud. Need to extend the on-prem subnet to cloud. Can Aviatrix solve this issue?

1590
sevan_oranci.1
S
SilEYECadet
Asked in General
Multi-Cloud Network Infrastructure as Code Course - Lab 1

Hello, can anyone please help me with this part of Lab 1? (screenshot attached below)  I think it has to deal with the version setup. I tried so many steps but still having issues. I'm using a mac. Help, please. e.

580
S
O
Okey_ChimehCadet
Asked in Security
Security Integrations

Does Aviatrix have integration capability with WAFs (e.g. Impervia & Akamai) & Endpoint Security Solutions (e.g. Crowdstrike & Symantec) If yes, can a single set of instances in a Firenet serve VMs across multiple clouds If no, are they on the roadmap & is there a set timeline?

1040
Shahzad Ali
L
lokesh_karriCadet
posted in General
Aviatrix Community

good website

210
L
L
Lance_ArmahAbrahamCadet
Asked in Backbone
Aviatrix Transit Gateway: Error: [AVXERR-MAINTENANCE-004] Upgrade/Restore in progress

We are using the aviatrix terraform resource `"aviatrix_transit_gateway"`  to build a transit gateway but we are getting the following error.  failed to create Aviatrix Transit Gateway: rest API create_transit_gw Post failed: Error: [AVXERR-MAINTENANCE-004] Upgrade/Restore in progress. Please try again after maintenance action is finished. with aviatrix_transit_gateway.avx_build, on vpc.tf line 2, in resource "aviatrix_transit_gateway"   The following is the structure of our resource: resource "aviatrix_transit_gateway" "avx_build" { single_az_ha = true gw_name = "avx_build_gw" vpc_id = vpc.avx_build.id cloud_type = 1 vpc_reg = var.region connected_transit = true gw_size = "t3.medium" account_name = var.cloud_account_name subnet = aws_subnet.avx_build_subnet.cidr_block enable_advertise_transit_cidr = true bgp_manual_spoke_advertise_cidrs = "some-ip-addr-ranges-here" }   Is it due to an aviatrix maintenance or a possible error on our side?

1030
L
B
Brian_WindleCadet
Asked in General
CIS Benchmarks

Doing some reseaarch if the Aviatrix product has some CIS Benchmarks. There are a couple articles regarding VPN connectivity but not much else. Has anyone else searched this out?

410
J
PRAVEENKUMAR_RAJAGOPAL
PRAVEENKUMAR_RAJAGOPALCadet
Asked in General
Aviatrix Lab Setup

Hi Expert, I have recently completed the free ACE certification and now I am looking for hands-on on Aviatrix product, need your suggestion to setup lab by own. any videos or link ?   Thanks in advance

00
PRAVEENKUMAR_RAJAGOPAL
D
David_HofferCadet
Asked in General
What about On Prem?

I watched the 1 hour video.  I've got multiple customers that may be a fit for Aviatrix, but it isn't clear to me how well this fits with on prem?  Most of my customers are seeking tools that span both on prem and cloud.  Please advise?

230
B
D
Deja_SrivatjanapongCadet
Asked in General
S2C with Diversity to Two Routers

Hi, We are looking to implement S2C from Aviatrix TG to two network virtual appliances for diversity.  Is there a use-case for this at this time. We are looking for diversity not only dual tunnel to one on prem or NVA, but two or more. Thank you in advance. Deja dejas@solielcom.com

200
B
T
Trevor_Patch.1Cadet
Asked in General
Aviatrix Terraform Provider - resource 'aviatrix_spoke_transit_attachment'

Hello Aviatrix Community, I am experimenting with the Terraform provider. I cannot seem to get the aviatrix_spoke_transit_attachment to work. I keep getting the error below, and it appears to be a catch 22? It is requiring that activemesh be disabled, but activemesh doesn't appear to be capable of being disabled when provisioning a transit or spoke via those Terraform resources. I've attempted to explicitly set the activemesh to disabled, but it turns on anyways & taints that TF resource.  With that said, I can attach my terraform-generated gateways in the Controller GUI (version 6.6) without issue, and I can replicate those URL Encoded actions via Python Requests without issue. Does anyone know any workarounds or simply point out what I am doing wrong?   ╷ │ Error: couldn't disable Active Mode for Aviatrix Transit Gateway: rest API disable_gateway_activemesh Post failed: Valid action required: disable_gateway_activemesh │ │   with aviatrix_transit_gate

760
D
J
Jose_GarciaCadet
Asked in Backbone
Aviatrix Transit VPC - DXGW

Today, we are using Aviatrix as TGW orchestrator only. We have AWS Direct Connect connections to two TGWs in different regions connecting to AWS Direct Connect Gateway. If we decide to deploy Aviatrix Transit VPC, do we still need AWS TGW? If not, how will I connect my on-prem to the Aviatrix Transit VPC?

430
Mark_Noorman
S
SuranjanCadet
Asked in Backbone
Aviatrix Transit VPC - Global or Regional

Hi, Apologies if this basic question has been answered already but could not find any reference Is  the Aviatrix Transit GW a regional service or Global ? Will the Solution work if I have 1 VPC in US-West and another VPC in US-East with the  Aviatrix Transit VPC in any of these regions ? or is it that we need to deploy 2 Transit VPCs - one each of US-West  &  US-East and interconnect both these VPCs for reachability ?

330
Jeff_Kouzmanoff
A
Andrew_SandovalCadet
Asked in General
Lost Routes from HA Gateway to Spokes

Has anyone had the issue of losing the routes between their HA Transit Egress gateways and spokes? We encountered this issue and all it took to rectify the issue was un-attaching then reattaching the spokes but don't seem to have a reason for why they lost the routes in the first place. 

180
A
L
Leroy_Lim.1Cadet
Asked in General
Sandbox Transit Timeout SST

Trying to deploy in AWS using the Sandbox but encountered the following error:   Connection to aws-ue2-transit-gw.aviatrixnetwork.com timed out. (connect timeout=4)')) │ Note, your VPC DNS Resolution must be set to Yes Also check your ACL rules below: Outbound - 0.0.0.0/0 ALL - allow Outbound - 0.0.0.0/0 ALL - deny Inbound - 0.0.0.0/0 ALL - allow Inbound - 0.0.0.0/0 ALL - deny │ │ with aviatrix_transit_gateway.aws_transit_gw, │ on aviatrix_aws.tf line 28, in resource "aviatrix_transit_gateway" "aws_transit_gw": │ 28: resource "aviatrix_transit_gateway" "aws_transit_gw" { │ ╵ ╷ │ failed to create Aviatrix Spoke Gateway: rest API create_spoke_gw Post failed: [AVXERR-TRANSIT-0118] Gateway initilization failed: Copying /tmp/AWS-UE2-Spoke2-GW/localgateway_info.txt to gateway AWS-UE2-Spoke2-GW host AWS-UE2-Spoke2-GW.aviatrixnetwork.com failed: HTTPSConnectionPool(host='aws-ue2-spoke2-gw.aviatrixnetwork.com', port=443): Max retries exceeded with url: /upload.php (Caused by ConnectT

350
P
Akinbola_Fatoye_CISSP
Akinbola_Fatoye_CISSPCadet
posted in General
Aviatrix Physical Appliance

Is there a specification for the Aviatrix physical appliance. 

00
Sagar_Murme.1
T
Timothy_RuddCadet
Asked in General
Warning on Terraform during Infrastructure as Code certification labs

Is this something I should be worried about? Am I doing something wrong in the Lab (1) or has terraform undergone some changes since the course was written? Plan goes ahead anyway, these are just warnings. Is there a way I can fix them?

180
T
G
Gilbert_UliuCadet
posted in General
Terraform Gateway

Hello,   Maybe someone can help me as I have no clue were the problem can be. I have deployed successfully via terraform successfully a Aviatrix Controller and a Co-Pilot, after that I have set up via terraform again a service principal that can deploy configuration ins inside the controller. Now my task is to deploy a VPC and a transit gateway. I have use this script https://github.com/terraform-aviatrix-modules/terraform-aviatrix-mc-transit   How the strange part is that terraform is creating the VPC successfully but for the gateway is failing with the below error.   But in reality the gateway is deployed successfully   Maybe someone has encounter the same problem using this terraform script?   Best Regards Gilbert

230
D
A
Ashish_ShuklaCadet
Asked in General
VPC Gateway with Private Network

Hi, I am working on Aviatrix MCNA and due to cyber requirements cannot run gateways in VPCs with Public IPs. Is there a way to run gateways with a private network subnet? Gateways in Hub can be on public subnets.

90
V
E
Erjan_KenjegaleeCadet
Asked in General
aviatrix is focusing mostly on networking btw various clouds?

is my understanding correct that most challenge in multi cloud lies in networking, access, making sure clouds can send data, communicate to each other?   aviatrix is resolving this complexity?

210
E
E
Erjan_KenjegaleeCadet
Asked in General
Aviatrix and Alibaba Cloud?

aviatrix platform is working compatible with alibaba or not? alibaba is pretty big cloud too. 

220
Shahzad Ali
S
Shashank_ShanbhagCadet
Asked in General
Logging into Aviatrix gateways and controller

Hi, I'm looking to ssh into aviatrix gateways and controller launched as part of the labs/sandbox starter. I don't see a ec2 keys associated with these instances. Is there a way to specify ec2 ssh key when launching the controller/gateways during launch? I don't see the option in the UI. I suspect it's forbidden/disallowed for obvious reasons. But, just trying my luck.  Thanks! 

590
C
H
Hua_Jack_FangCadet
Asked in General
Auto Private S3 access question

In the scenario above, does customer need to have the Aviatrix physical appliance installed at the on-premises site?   Thanks JF

100
H
H
Hua_Jack_FangCadet
Asked in General
Aviatrix centralized stateful firewall question

Hi there, In the Feature Overview Part 2 of Aviatrix Certified Engineer - Multi-Cloud Network Associate Course, the instructor introduced centralized stateful firewall and said "It's best for single GW use cases supported by single GW HA". Can I ask the reason why? Thanks. JF

80
H
H
Hua_Jack_FangCadet
Asked in General
Advanced use case of SDWAN integration

Hi there, Can I please have more design information of the SDWAN integration with Aviatrix like the diagram being shown in the course? Thanks JF

160
H
H
Hua_Jack_FangCadet
Asked in General
VNet Peering data charge in Azure Transit Option 1/2 via ExpressRoute Edge Routers

Hi guys, In the Azure Networking 101 course/video, the instructor said doing Azure Transit via ExpressRoute Edge Routers can avoid VNet Peering data charge. I don't quite get it as there is data charge still on those two VNet Peering between Spoke VNets and Hub VNet that ExpressRoute terminates, isn't there? Or he actually meant avoiding the data charge of VNet Peering between Spoke VNets? But what is the actual difference from commercial prospective? Traversing two VNet Peering through Hub VNet V.S. traversing one direct VNet Peering between two Spoke VNets. Thanks   JF

350
H

Recently Awarded Badges

  • Aviatrix Certified Engineer
    iraguilahas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    heidihenry82has earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    yongkanghas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    John Angelo Lealhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    redlemonhas earned the badge Aviatrix Certified Engineer
Show all badges
Terms & Conditions