Here is my situation,
In US-East I have two VPCS connected via Peering connections to a third Shared Services VPC. In the shared services VPC I have an AWS Directory Services domain which the computers are joined to. We have a VPN connected to our office where our local domain is and a Trust relationship connects the two domains. Using this setup any machine in the three VPCs in us-east can login using the credential in our local directory. I am not trying to extend this to other regions.
I setup A Sophos UTM and created a VPN to a VPC in eu-west. This was an easy process and using that tunnel I can join the instance in eu-west to the domain in us-east. I can't however login to the trusted domain as I can't ping the domain controller across the two VPN tunnels. I have tried adding all the routes I can think of but nothing so far has worked. Is this possible to work out, and if so what should I do? Do I need to create a VPN tunnel from our company office to eu-west?
See attached diagram for reference.
This thread was automatically locked due to age.
