Route based VPN with Azure

RZomerman — Thu, 06 Feb 2020 05:27:48 GMT

Hi everyone,

On my demo device I've been trying to get a Route Based VPN running to Azure. But so far.. unsuccessful. I was hoping someone had a tutorial that shows me what/how to configure this from A-Z.

What I've done so far:

My setup:

internal network: 172.16.5.0/24 - NET_172.16.5.0_24 (eth4)
CP using PPPOE dial-up no eth2

Setup Azure - this works with other FW's so should be good (192.168.8.0/22) and GWIP 1.2.3.4

in CP SC:

Create a Network object (Azure_NET) with the address space 192.168.8.0/22

Create an Interoperable device (Azure_GW) with 1.2.3.4 and Azure_NET as the VPN Domain

Create a Star VPN community - CP is Center, Azure_GW is satellite

Set the IkeV2 only, set the encryption ; set the pre-shared key - one tunnel per GW pair

under Security Rules:

CP->AzureGW IKE ALLOW
AzureGW->CP IKE ALLOW

NET_172.16.5.0_24 -> Azure_NET - Any ALLOW
Azure_NET -> NET_172.16.5.0_24 - Any ALLOW

on CP object:
VPN-Link selection : selected external address

in WebUI:

Create a new VPN Tunnel interface, Unnumbered - physical == internal eth4 (my internal network NIC)

Create a new route: 192.168.8.0/22 --> vpnt1

Now I see the tunnel coming up, as in the logs I see: Child SA exchange: Created a child SA successfully, but after that 0 traffic over the tunnel itself..

Help?

Re: Route based VPN with Azure

G_W_Albrecht — Thu, 06 Feb 2020 10:01:14 GMT

I would involve TAC here - seems you are assuming how to set parameters but have no relevant documentation...

Re: Route based VPN with Azure

RZomerman — Thu, 06 Feb 2020 13:46:29 GMT

I dont have an active support contract, I'm just trying to learn/do something with CP..

Is there a way to involve TAC without a paid support contract?

topic Re: Route based VPN with Azure in Firewall and Security Management

Route based VPN with Azure

Re: Route based VPN with Azure

Re: Route based VPN with Azure