Upgrade a VPN Gateway

Upgrade check

To determine if your VPN Gateway needs an upgrade, check the status of the Upgrade button on the instance details page on the VPN Gateway console.

• If your VPN Gateway is already on the latest version, the Upgrade button is grayed out. When you hover over the Upgrade button, a tooltip indicates that no upgrade is required.

  By default, newly created VPN gateways use the latest version.

• If the Upgrade button is available, your VPN Gateway requires an upgrade.

Upgrade notes

• A VPN Gateway upgrade takes approximately 10 minutes.

  Warning

  The VPN Gateway is unavailable during the upgrade, and existing connections are disconnected. We recommend that you upgrade during a maintenance window to minimize business disruption.

• Upgrading a VPN Gateway is free of charge.

• If no IPsec-VPN connection is associated with the VPN Gateway, the configuration remains unchanged after the upgrade. If one or more IPsec-VPN connections are associated, review the following information:

  • If the Policy-based Route Table or Destination-based Route Table tab displays the prompt shown below, or if the instance was created before March 21, 2019 and has not been upgraded, you must configure routes for the VPN Gateway after the upgrade to ensure your IPsec-VPN connections function correctly. Other IPsec-VPN connection settings remain unchanged after the upgrade.

    The prompt reads: This feature is not supported by earlier vpn versions. An Upgrade option is also available on the right side of the page.

    Note

    For these older VPN Gateway instances, you previously only needed to configure interesting traffic for IPsec-VPN connections, not routes. The latest version requires route configuration, so you must add routes after the upgrade to keep your IPsec-VPN connections working.

  • For all other VPN Gateway instances, the existing IPsec-VPN connection configuration is preserved after the upgrade, and no new routes are required.

Procedure

See Upgrade a VPN Gateway.