Transit Network VPC (Cisco CSR)
Transit Network VPC (Cisco CSR)

Document Revisions

Date Change Location
July 2016 Initial publication
August 2016 Addition of AWS KMS service and updated diagram, information about the collection of anonymous data, and new procedure to manually configure permissions for multiple accounts. Corrected links to Cisco CSR products Changes throughout guide; addition of Appendix B and Appendix C
September 2016 Correction to IAM policy Appendix C
October 2016 Addition of information about spoke VPC VPN connection removal, BGP preferred path route manipulation, and guidance for integrating the transit VPC with AWS Direct Connect Changes throughout guide; addition of Appendix D
October 2016 Updates to support CSR version 16.3.1a, Asia Pacific (Seoul) Region and US East (Ohio) Region, and c4 instance types (which provide a 2x4.5Gbps option) Cost and Licenses; AWS CloudFormation parameters in Step 2
January 2017 Additional guidance about limiting resources in the transit VPC, and for testing spoke VPCs Architecture Overview, Step 3, Testing
February 2017 Added note about customer updates to CloudFormation stack Step 2
April 2017 Added information on new template that deploys CSRs in an existing VPC; clarification on software VPN Architecture Overview; AWS CloudFormation Templates; Appendix B
June 2017 Clarification on S3 prefix string; added recommendation to use unique BGP ASNs when integrating with AWS Direct Connect; added recommendation to use unique BGP ASNs when integrating with AWS Direct Connect Step 2, Appendix B, Appendix D
September 2017 Added information on new subnet AZ parameters, log level environment variables, and anonymous data Step 2, Amazon CloudWatch, Appendix E


This implementation guide is provided for informational purposes only. It represents AWS's current product offerings and practices as of the date of issue of this document, which are subject to change without notice. Customers are responsible for making their own independent assessment of the information in this document and any use of AWS's products or services, each of which is provided "as is" without warranty of any kind, whether express or implied. This document does not create any warranties, representations, contractual commitments, conditions or assurances from AWS, its affiliates, suppliers or licensors. The responsibilities and liabilities of AWS to its customers are controlled by AWS agreements, and this document is not part of, nor does it modify, any agreement between AWS and its customers.

The Transit Network VPC (Cisco CSR) solution is licensed under the terms of the Amazon Software License available at

On this page: