Skip to main content

​
Introduction

While an AWS Transit Gateway (TGW) carries thousands of routes in the TGW route table, a TGW VPN has the same 100 route limit as the VGW VPN.

​
Test Validation

In the following setup, we launch a Cisco CSR 1000v as the Customer Gateway and use it to attach a VPN connection to the TGW. The TGW and the CSR also run BGP between themselves. The detailed steps are here. tgw-route-limit After the VPN tunnel is created between TGW and CSR, run the following command at CSR to verify the BGP peer connection, where 169.254.11.233 is the TGW’s BGP ID:
Turn on BGP debug on CSR and then configure CSR to advertise 101 routes to TGW through BGP. CSR shows the following BGP debug messages:
The above messages show that when the TGW exceeds its route limit (100), it sends a BGP reset message to CSR. The BGP connection becomes idle after these messages.
This test indicates that TGW has the same BGP total prefix limitation (100) as a VGW.

​
Summary

TGW VPN has a total 100 BGP prefix. In addition, a TGW cannot summarize Spoke VPC routes.