My Direct Connect public virtual interface is stuck in the "Verifying" state. How can I get it approved?

Last updated: 2022-08-15

When you create a public virtual interface, the following information is subject to approval by the Direct Connect team:

• The BGP Autonomous System Number (only if it's a public ASN)
• The Public peer IP addresses
• The Public prefixes that you plan to advertise over the virtual interface

Before approving this information, the Direct Connect team must verify your ownership of the public IP prefixes and BGP ASN. The team verifies ownership by confirming that the Regional registry information belongs to the organization listed in your AWS account.

If your public virtual interface is in the Verifying state for more than 72 hours, then check the root email address registered to your AWS account. Check to see if you received an email from the Direct Connect team stating that the owner of the BGP ASN or one of your public IP prefixes doesn't match your account details.

If the BGP ASN or an IP prefix doesn't match your account, then you have two options for resolving the mismatch. Refer to the most appropriate option for you, depending on whether you have an AWS Support plan. When the mismatch is resolved, your public virtual interface will be approved.

If you don't have an AWS Support plan

Ask the BGP ASN/IP prefix owner to email directconnect-requests@amazon.com stating that they authorize the use of the public IP prefixes or BGP ASN for the public virtual interface dxvif-xxx with your AWS account.

If you have an AWS Support plan

Ask the BGP ASN/IP prefix owner to send you a Letter of Authorization (LOA) written on company letterhead stating that they authorize the use of the public IP prefixes or BGP ASN for the public virtual interface dxvif-xxx with your AWS account. They can use the following LOA template:

[Company Letterhead]

                        LETTER OF AUTHORIZATION (LOA)
[Date]

To whom it may concern,

This letter serves as authorization for [AWS Account Name] with Account Number: [AWS Account Number for the Public VIF] 
to advertise the following IP address blocks over the AWS Public Virtual Interface [vif-xxxxx]:

[IP address/CIDR]

As a representative of [IP Owner Company Name], the owner of these subnets, I hereby declare that I'm authorized to represent and sign for this LOA.

From,
[Full Name]
[Designation]
[IP Owner Company Name]
[IP Owner email ID]

When you have the LOA:

1.    Open the Direct Connect console using the AWS account that owns the public virtual interface.

2.    In the navigation bar, choose Support, Support Center.

3.    If your Support plan is Basic, then choose Account and billing support. For Type, choose General Info and Getting Started. For Category, choose Using AWS & Services. For Severity, choose General Question.

If you have any other type of Support plan, then for Service, choose Direct Connect. For Category, choose Connection Issue. For Severity, choose General Guidance.

4.    Enter a Subject and Description. For Attachments, upload your LOA.

5.    Choose Submit.

Your case is forwarded to the Direct Connect team to complete the verification and approval process.