Aviatrix Aviatrix Documentation
Resources
Terraform Support
Request Demo
Aviatrix Platform
Previous Versions
  • Aviatrix Platform
      • What’s New
        • What’s New in Controller?
        • What’s New in CoPilot?
      • Aviatrix Platform Overview
        • CoPilot Overview
        • Aviatrix CoPilot Features
        • Aviatrix Feature Modes
        • Metered AMI Pricing Book
        • Aviatrix Feature Availability by Controller Version
        • Multicloud Rosetta Stone
        • Aviatrix Glossary
        • General Glossary
      • Getting Started
        • AWS Getting Started Guide
          • Preparing for Your AWS Deployment
        • Planning Your Deployment
          • Planning Your Controller Deployment
          • Planning Your CoPilot Deployment
            • CoPilot Requirements
            • CoPilot Deployment Methods
              • CoPilot Simple Deployment
              • CoPilot Fault Tolerant Deployment
        • Deploying Your Controller
          • Azure Getting Started Guide
          • Google Cloud Getting Started Guide
          • Oracle Cloud Infrastructure (OCI) Getting Started Guide
        • Deploying Your CoPilot
          • Deploy CoPilot from your Controller UI (AWS Only)
          • Deploy CoPilot Using Terraform
          • Deploy CoPilot from the Marketplace
        • Post Deployment
          • Post-Deployment Tasks for the Controller
          • Post-Deployment Tasks for CoPilot
            • Initial Setup of CoPilot
            • CoPilot Settings to be Enabled in Controller
            • (Optional) Set Up SAML Login for CoPilot
            • Logging in to CoPilot
            • Verify the CoPilot Deployment and the Connectivity with Controller
            • (Optional) Enable CoPilot Add-on Features
            • Using Aviatrix CoPilot
              • CoPilot Navigation Menu
              • Setting CoPilot UI Preferences
          • Deleting a CoPilot instance
      • Accounts and Users
        • Managing Aviatrix Accounts
          • Managing Access Accounts
          • Admin Users and Duo Sign in
          • Role-Based Access Control (RBAC) or User Access Overview
        • Managing CSP-Specific Accounts
          • AWS IAM Overview
            • Account with Access Key for AWS China Accounts
          • Setting up Azure Account Credentials
          • Use Azure IAM Custom Role
          • Setting up Alibaba Cloud Account Credentials
          • GCP Account Onboarding
        • CoPilot User Account Administration
        • Logging in to CoPilot
        • Users and Permissions
        • Creating a Cloud Account
        • Auditing a Cloud Account
        • Deleting a Cloud Account
        • AWS IAM Overview
          • Account with Access Key for AWS China Accounts
      • Best Practices
        • Network Resiliency Best Practices Guide
      • Building Your Network
        • About Aviatrix Multicloud Transit Network
          • Aviatrix Multicloud Transit Network FAQ
          • Multicloud Transit Network Design Patterns
          • About Aviatrix Multicloud Transit Architecture for Azure
            • Azure Transit Network Design Patterns
          • About Aviatrix in the China Regions
          • About ActiveMesh
            • ActiveMesh Design Notes
          • About High-Performance Encryption
            • High Performance Encryption Performance Benchmarks
            • High Performance Encryption for GCP
          • About Gateway High Availability
            • Creating a Highly Available Transit Gateway Instance
            • Creating a Highly Available Spoke Gateway Instance
            • Deleting a Highly Available Gateway Instance
            • Changing a Gateway’s Instance Size
          • About Aviatrix Gateway Scaling
          • About Transit Network Segmentation
        • Working with Aviatrix Gateways
          • About Spoke Gateways
            • About Spoke Gateway Settings
            • Creating a Highly Available Spoke Gateway Instance
            • Managing Spoke Gateway Attachments
            • Enabling Spoke Gateway General Settings
          • About Transit Gateways
            • About Transit Gateway Settings
            • Creating a Highly Available Transit Gateway Instance
            • Enabling Transit Gateway General Settings
          • About UserVPN Gateways
            • Creating a GeoVPN Gateway
            • Creating a UserVPN Default Gateway
            • Editing VPN Gateways
            • Deleting a VPN Gateway
          • About Public Subnet Filtering Gateways
            • Creating a Public Subnet Filtering Gateway (AWS)
            • Editing a Public Subnet Filtering Gateway
            • Deleting a Public Subnet Filtering Gateway
            • About Public Subnet Filtering Gateway Settings
          • About Gateway NAT Settings
          • About Gateway BGP Connection Settings
            • Configuring BGP Connection Settings
          • About Gateway Routing Settings
            • Enabling Gateway Routing Features
          • About Gateway States
          • About Gateway Keepalive
          • Using VPC/VNet DNS Server
          • Enabling BGP Route Approval
          • Enabling GCP Global VPC Routing
          • Changing a Gateway’s Instance Size
        • Transit Network Deployment Workflows
          • Single-Region Multicloud Transit Network Workflow
          • Multi-Region Multicloud Transit Gateway Peering Workflow
          • Transit Gateway Peering with High Performance Encryption Workflow
          • Transit Gateway Peering over Private Network Workflow
        • Connecting the Transit Network to On-Premises
          • Overview of Transit Gateway to External Devices
          • About External Connection Settings
          • About External Connection BGP Settings
          • Multicloud Transit Integration with External Devices
            • Multicloud Transit to External Devices Workflow
            • Transit Gateway to Cisco Router over the Internet Workflow
            • Transit Gateway to Cisco ASA over the Internet Workflow
            • Transit Gateway to Palo Alto VM-Series Workflow
            • Transit Gateway to FortiGate over the Internet Workflow
            • Transit Gateway to JuniperSRX over the Internet Workflow
          • Multicloud Transit Integration with AWS VGW Workflow
          • Multicloud Transit Integration with Azure VNG Workflow
          • BGP-Enabled Spoke Gateway to External Devices
          • Transit GRE Tunneling in AWS Workflow
          • Transit BGP over LAN in AWS Workflow
          • Transit BGP over LAN in Azure Workflow
          • Transit Multi-Peer BGP over LAN with Azure Route Server Integration Workflow
          • Transit Multi-Peer BGP over LAN in GCP Workflow
          • Viewing External Connection Details
        • Extending Transit Network to Network Edge with Aviatrix Secure Edge
          • Aviatrix Secure Edge Overview
          • Aviatrix Secure Edge Use Cases
          • Aviatrix Secure Edge Design Patterns
          • About Aviatrix Edge Gateway High Availability
          • Edge Gateway WAN, LAN, VLAN, and Management Interface Support
          • Planning and Prerequisites for Aviatrix Secure Edge Deployment
            • Edge Gateway Requirements
            • Supported Edge Hardware for the Aviatrix Edge Platform
            • Prerequisites for Aviatrix Secure Edge Deployment for On-Premises
            • Prerequisites for Aviatrix Secure Edge Deployment for Equinix Network Edge
            • Prerequisites for Aviatrix Secure Edge Deployment on VMware ESXi and KVM
            • Setting up Accounts for Edge Platforms
            • Onboarding Edge Hardware for the Aviatrix Edge Platform
          • Deploying Aviatrix Secure Edge
            • About Edge Gateway Settings
            • Aviatrix Secure Edge on On-Premises Deployment Workflow
            • Aviatrix Secure Edge on Equinix Network Edge Deployment Workflow
            • Aviatrix Secure Edge on Customer Managed VMware ESXi and KVM Deployment Workflow
            • Troubleshooting Edge Gateway Connectivity
            • Aviatrix Edge Gateway Image Upgrade and Post-Upgrade Tasks
          • Extending VLAN Segmentation to the Cloud with Aviatrix Secure Edge
          • Configuring Local Internet Breakout at Network Edge
          • Extending Distributed Cloud Firewall to your Network Edge
          • Customized SNAT and DNAT on Edge Use Case
          • Configuring Transitive Routing with Edge Gateway
          • Configuring Transit Peering Over Public Network with Edge Gateway
          • Creating the Default RBAC Access Account for Edge
          • Understanding Aviatrix Secure Edge Routing
        • Connecting Remote Sites to Cloud
          • Overview of Aviatrix Site2Cloud
          • Site2Cloud Configuration Workflow
          • Site2Cloud Configuration with External Devices
            • Aviatrix Gateway to Aviatrix Gateway
            • Aviatrix Gateway to Azure VPN Gateway
            • Aviatrix Gateway to AWS Virtual Private Gateway (VGW)
            • Aviatrix Gateway to Oracle DRG
            • Aviatrix Gateway to Palo Alto Firewall
            • Aviatrix Gateway to Check Point(R77.30)
            • Aviatrix Gateway to Check Point (R80.10)
            • Aviatrix Gateway to Cisco ASA
            • Aviatrix Gateway to Cisco IOS Router
            • Aviatrix Gateway to Sonicwall
            • Aviatrix Gateway to FortiGate
            • Aviatrix Gateway to Juniper SRX
          • Site2Cloud Solution for Encryption over Direct Connect/ExpressRoute
          • Building Site to Site IPsec VPN Connection
          • Site2Cloud Certificate-Based Authentication
          • Troubleshooting IPsec VPN Connection with IKEv2
        • Connecting Networks with Overlapping CIDRs
          • Networks with Overlapping CIDRs Scenarios
          • Configuring Overlapping Networks with Network Mapped IPsec
          • Configuring Overlapping Networks with Customized SNAT and DNAT
            • Using Customized SNAT and DNAT on Spoke Gateway
            • Site2Cloud With Customized SNAT
            • Site2Cloud with NAT to fix Overlapping VPC Subnets
            • Site2Cloud to a Public IP Address
            • Connect Networks With Overlapping CIDRs
            • Connect Overlapping VPC/VNet to On-prem
            • Accessing a Virtual IP Address Instance via Aviatrix Transit Network
            • Using Aviatrix Site2Cloud Tunnels to Access VPC Endpoints in Different Regions
        • Creating AWS VPC Peering Connection
        • Creating Azure VNET Peering Connection
        • Aviatrix AWS Transit Gateway Orchestrator
          • Overview of AWS Transit Gateway Orchestrator Features
          • Aviatrix AWS Transit Gateway Orchestrator FAQ
          • TGW Design Patterns
          • Migrating a CSR Transit to AWS Transit Gateway (TGW)
          • Migrating a DIY TGW to Aviatrix Managed TGW Deployment
          • Creating TGW Connection Attachments
          • AWS Transit Gateway Route Limit Test Validation
        • Performance Improvement with Gateway Scaling
        • Troubleshooting Transit Gateway Connections
        • Visualizing Your Network
        • Understanding SmartGroups
          • Creating a SmartGroup
          • Deleting a SmartGroup
          • Modifying a SmartGroup
          • SmartGroups Readme
        • SmartGroups Reference
          • Working with SmartGroups
      • Distributed Cloud Firewall and Security
        • Distributed Cloud Firewall: inspection and enforcement throughout the cloud network
        • About Secured Networking and Security Services
        • Implementing Network Segmentation in an Aviatrix-Managed Network
        • Building a Zero Trust Cloud Network Architecture with Aviatrix
        • Implementing Distributed Cloud Firewall in an Aviatrix-Managed Network
          • Distributed Cloud Firewall Settings
          • Enabling the Distributed Cloud Firewall Feature
            • Enabling the Feature after Changing Licenses
          • Configuring Distributed Cloud Firewall
            • Creating Policies
            • About WebGroups
            • Understanding SmartGroups
            • Configuring the Polling Interval
          • Distributed Cloud Firewall Monitoring
            • Managing Monitor Views
          • Detected Intrusions for Distributed Cloud Firewall Rules
        • Enabling Security Group Orchestration
        • Planning Your Ingress Traffic Deployment
          • AWS Ingress Firewall Setup Solution
          • Azure Ingress Firewall Setup Solution
          • FireNet Ingress Traffic Inspection
          • Ingress Protection via Aviatrix Transit FireNet with Palo Alto in GCP
        • Implementing Egress in an Aviatrix-Managed Network
          • Using Distributed Cloud Firewall to Configure Egress
          • Egress FQDN Workflow (Legacy)
          • About FQDN Gateways
          • Public Subnet Filtering Gateway for Egress
          • Enabling Local Egress
          • Enabling Transit Egress (centralized)
          • Egress Traffic Overview
          • Egress Monitoring
        • FireNet Deployment Workflow
          • Add FireNet to a Transit Gateway
            • Minimum Gateway Instance Sizes for FireNet deployment
          • Editing a Transit FireNet
          • Removing Transit FireNet
          • Transit FireNet Settings
          • FireNet Design Patterns
            • Hybrid to On-Prem
            • Hybrid with High Performance Encryption Mode
            • FireNet in Multi-Regions
            • Two Firewall Networks
            • Distributed Egress in a Multi-Region Deployment
            • Ingress Protection via Aviatrix Transit FireNet
          • Launch and Attach a Firewall Using Bootstrap Configuration
          • Create or Modify Connection Policies
            • Azure Spoke Subnet Groups for Attached Spoke Gateways
          • Attach a Spoke to a Transit FireNet
          • Transit FireNet Route Tables
          • Transit FireNet Security Groups
          • Aviatrix Transit FireNet for AWS and Azure
          • AWS Ingress Firewall Setup Solution
        • Firewall Overview
          • Supported Firewall Versions
          • Firewall Interface Specifications
          • Aviatrix FireNet / AWS Transit Gateway Native Deployment Comparison
          • Subscribing to a Firewall Instance (AWS)
          • Launch and Attach a Firewall within a FireNet
          • Disassociating or Deleting a Firewall Association
          • Manage Firewall Attachments
          • Checking Firewall Health
          • Example Configuration for Palo Alto VM-Series in AWS
          • Example Configuration for Palo Alto VM-Series in Azure
          • Example Configuration for Palo Alto Network VM-Series in GCP
          • Example Configuration for Palo Alto Network VM-Series in OCI
          • Example Configuration for FortiGate VM in AWS
          • Example Configuration for FortiGate VM in Azure
          • Example Configuration for FortiGate VM in GCP
          • Example Configuration for Check Point VM in AWS
          • Example Configuration for Check Point VM in Azure
          • Managing VM-Series by Panorama
          • Deploying Check Point CloudGuard
          • Checking Firewall Health in Azure and GCP
        • Blocking Known Threat IP Traffic using ThreatIQ
          • Blocking Traffic from Countries using Geoblocking
        • Defining SmartGroups
        • Creating WebGroups
        • Detecting Network Anomalies using Network Behavior Analytics
        • Deploying a Public Subnet Filtering Gateway
        • Configuring an AWS Load Balancer with SSL in front of Aviatrix Controller
      • Monitoring and Troubleshooting
        • How CoPilot Helps You Monitor and Troubleshoot Your Network
        • Monitoring Costs in Your Network
          • Monitoring the Costs of Aviatrix Resources
            • Overview of Aviatrix Billing
            • Viewing Billing Plan Reports
            • Exploring Costs by CSP
            • Reviewing Costs by Cloud Account
            • Billing Item Descriptions
          • Monitoring the Costs of your Business Units
        • Gaining Visibility into Your Network Topology
          • Creating a Topology View (New Topology Experience)
            • Filtering Your Topology by Cloud Tags
          • Configuring Latency on the Topology Network View
          • Managing Topology Views
          • Classic Topology Experience
          • Visibility into Cloud Resources
          • Creating an Inventory Report of Managed Resources
        • Monitoring Traffic Flows
          • Gaining Visibility into Your Traffic Flows
            • Creating a Traffic Flow Filter
          • Monitoring Traffic Flows at the Network Level
          • Monitoring Traffic Flows at the Application Level
          • Monitoring Total Traffic Trends over a Day
          • Monitoring Egress Traffic
          • Monitoring Latencies
            • CoPilot Traffic & Latencies Page Reference
        • Monitoring System Health of Aviatrix-Managed Resources
          • Monitoring Inventory and Status of Managed Resources
          • CoPilot Dashboard Page Reference
          • Viewing Telemetry Data for Managed Resources
          • Monitoring Resource Utilization of Managed Resources
            • Managing Performance Views
          • Monitoring Gateway Performance and Scaling
          • Monitoring Health of Edge Devices
          • Creating a FlightCheck Report
          • Creating a Resource Utilization Report
        • Monitoring with Network Insights API
        • Troubleshooting with Diagnostic Tools
          • Aviatrix CoPilot FAQs
          • Troubleshooting Routing Issues in Your Aviatrix-Managed Network
          • Troubleshooting Application Connectivity Issues with AppIQ
          • Viewing Recent Changes Made to Your Network
          • Viewing Users that made Changes to Your Network
          • Aviatrix Gateway Diagnostics
            • Interpreting Gateway Diagnostic Results
          • Aviatrix Connectivity Diagnostics (for External/S2C Connections)
          • BGP Connection Diagnostics
          • Aviatrix Controller Diagnostics
          • UserVPN Diagnostics
        • Notifications (Alerts) about Network Events
          • CoPilot Notifications Page Reference
          • Metrics Monitored for Aviatrix Resources
          • Setting Up Email Channels for Sending Alert Notifications
          • Setting Up Webhook Channels for Sending Alert Notifications
          • Configuring SMTP Service for Controller-Generated Alert Emails
          • Metric Types for Triggering Alerts
          • Metric Threshold Comparators
          • Setting an Evaluation Period for an Alert
          • Setting a Minimum Entity Count for an Alert
          • Configuring Alerts for Gateway-Level and Interface-Level Monitoring
          • Configuring Alerts
          • Editing Alert Configurations
          • Deleting Alert Configurations
          • Viewing Alert Notifications
          • Resolving Alerts
          • Pausing Alerts
          • Global Control Plane Health Alert
          • Global Network Health Alert
          • Global Memory Swap Surge Alert
          • Underlay Connection Status Alert
          • Alerts Based on Gateway Status
        • Monitoring for Threats in your Network
        • Monitoring Your Network for TLS Vulnerabilities
        • Metrics Monitored for Aviatrix Resources
        • Using the Aviatrix CoPilot Audit Page
        • Aviatrix Reports Reference
          • Creating a FlightCheck Report
          • Creating an Inventory Report of Managed Resources
          • Creating a Resource Utilization Report
      • Aviatrix UserVPN
        • UserVPN Feature Description
        • UserVPN Client
        • UserVPN FAQ
        • UserVPN Settings
        • Aviatrix SAML-Based Authentication
          • Aviatrix SAML Authentication on Okta IdP
          • Aviatrix SAML Authentication on OneLogin IdP
          • Aviatrix SAML Authentication on Microsoft Entra ID IdP
          • Aviatrix LDAP-Based Authentication
          • Aviatrix VPN User Authentication with an Okta API Token
          • Aviatrix VPN User Authentication with Duo IdP
        • UserVPN Gateway Guide
          • Creating a UserVPN Default Gateway
          • Creating a UserVPN GeoVPN Gateway
          • Editing a UserVPN Gateway
          • Deleting a UserVPN Gateway
          • UserVPN Gateway Settings
        • UserVPN Users Tab
          • Creating a VPN User
          • Editing a VPN User
          • Deleting a VPN User
          • Importing UserVPN Users
          • Attaching a VPN User to a VPN Gateway
          • Detaching a VPN User from a VPN Gateway
          • Detach and Revoke Client Certificate
          • Reissue VPN User Client Certificate
        • UserVPN Profile Tab
          • Creating a VPN Profile
          • Editing a VPN Profile
          • Deleting a VPN Profile
          • Setting up Okta SAML with Profile Attribute
        • UserVPN User Accelerator
        • Customizing VPN Emails
        • Customizing VPN Notifications
        • UserVPN Setting Minimum Client Version
        • UserVPN Designs
        • UserVPN with AWS TGW
      • CoPilot System Administration
        • Migrate CoPilot to Appliance V3 (AWS)
          • Troubleshoot the CoPilot Migration
        • CoPilot Configuration Settings
          • CoPilot Controller Security Settings
          • CoPilot Certificate Management
        • CoPilot SAML Authentication
        • CoPilot Private Mode Configuration
        • CoPilot Proxy Server Management
        • CoPilot DNS Lookup Server Management
        • IPsec Tunnel Management
        • CoPilot Licensing and Add-On Feature Management
        • CoPilot User Account Administration
        • Configure CoPilot for the Aviatrix Platform
        • CoPilot Disk (Volume) Management
        • Re-encrypt Existing Controller and CoPilot Volumes Using a Custom Key
        • CoPilot Tuning and Performance
        • Starting and Stopping CoPilot Services
          • CoPilot Support Page Reference
        • Viewing Task Server Overview and History
        • CoPilot Backup and Restore
          • CoPilot Configuration Backup and Restore
          • CoPilot Index Data Backup and Restore
        • Manage Your CoPilot Index
        • Migrating CoPilot Data
        • Deleting a CoPilot Instance
        • Managing Cloud Resources
          • Creating a VPC/VNet using CoPilot
        • CoPilot Support and Troubleshooting
        • Debugging Tools in CoPilot
        • Creating a VPC/VNet using CoPilot
        • Installing Security Patches and Software Patches
          • FIPS 140-2 Module
      • Controller System Administration
        • Upgrade Aviatrix Controller and Gateways
        • Upgrading Gateway Image
        • Migrating Your Aviatrix Controller
        • Back Up and Restore Your Controller
          • Back Up and Restore Your Controller on Controller UI
          • Back Up and Restore Your Controller on CoPilot UI
        • Controller High Availability in AWS
        • Controller and Gateway Logging
          • Aviatrix Log Formats
          • AWS CloudWatch Integration
        • NetFlow Integration
        • Tuning For Sub-10 Seconds Failover Time in Overlapping Networks
        • Emails and Alert Configuration
        • Gateway Audit (for AWS)
        • Controller Passwords
        • Secure Controller Access
          • Controller Certificate Management
            • Controller Certificate Management: Generate CSR and Import Certificate
            • Controller Certificate Management: Import a Certificate with Key
          • Controller Security Group Management
          • Controller LDAP Authentication
          • Controller SAML Authentication
          • Controller Access: for AWS users with a large scale setup
        • Proxy Configuration
        • IP-based Whitelisting of Aviatrix Controller in AWS and Azure
        • Controller Private Mode
        • FIPS 140-2 Module
        • Error Messages
        • FlightPath in Controller
        • Diagnostics in Controller
          • Troubleshooting Your Multicloud Network
          • Troubleshooting Diagnostics Results
      • Upgrading Aviatrix
        • Overview of the Aviatrix Controller and Gateways Upgrade
          • Upgrade OpenVPN Users
          • Upgrade HA Gateways in An ActiveMesh Topology
        • Prepare for the Aviatrix Upgrade
          • Upgrade Checklist of the Controller and Gateways Upgrade
          • Pre-upgrade Tasks for Controller and Gateways
        • Procedures for Upgrading Aviatrix
          • Single-Version Upgrade for Controller and Gateways
            • Upgrade your Controller and Gateways via Controller UI
            • Upgrade your Controller and Gateways via CoPilot UI
              • Upgrade your Gateways in Groups
          • Multiple-Version Upgrade for Controller and Gateways
            • Upgrade your Gateway Image
            • Upgrade your Controller Image
          • Upgrade your Controller and Gateways to the Latest Aviatrix Supported Images(AWS Only)
            • Upgrade your Controller to the Latest Aviatrix Supported Images(AWS Only)
            • Upgrade Gateways for the Latest Aviatrix Supported Images (AWS Only)
        • Troubleshooting the Upgrade
        • Verify Your Upgrade Status
        • Rollback the Gateway Software
      • Security Updates
        • Security Update Policy
        • Security Patches
        • PSIRT Advisories
      • Release Notes
        • Aviatrix Controller and Gateway Software Release Notes
        • Aviatrix Controller and Gateway Image Release Notes
        • Aviatrix CoPilot Software Release Notes
        • Aviatrix CoPilot Image Release Notes
        • Field Notices
        • Aviatrix VPN Client
  • Aviatrix Platform
  • About Gateway Settings

About Gateway Settings

Topics

  • About Spoke Gateway Settings

  • About Transit Gateway Settings

  • About Public Subnet Filtering Gateway Settings

  • About Gateway NAT Settings

  • About Gateway BGP Connection Settings

  • About Gateway Routing Settings

  • Using VPC/VNet DNS Server

  • About Gateway States

  • About Gateway Keepalive

Aviatrix
  • Home
  • Docs
  • Support
  • Terms of Use
  • Legal Notice
  • Doc Feedback

Copyright © 2024 Aviatrix Systems, Inc 2901 Tasman Dr #109, Santa Clara, CA 95054