How to connect VPN gateway(point-on-site) to vm?

Sudesh Sharma 46

Hey guys,

I have created a vpn (point-on-site) for secure connection with vm. I have created a VM last year and hosted three websites on vm IIS webserver. Now I want to access Vm through VPN Gateway. Is it possible to connect existing vm to newly created Virtual Network and VPN gateway? If possible then how?

vipullag-MSFT 24,106 Reputation points Microsoft Employee

2020-07-27T08:12:57.317+00:00

@SudeshSharma-8729

Please 'Accept as answer' if the provided information is helpful, so that it can help others in the community looking for help on similar topics.

1 answer

Didier3001 971 Reputation points Microsoft Employee

2020-07-27T08:03:46.35+00:00
Hi @Sudesh Sharma

As long as your subnet where the VPN Gateway has been configured and your Subnet(s) where your are VM are located are in the same VNet, it should work. Make sure your NSG rules and the OS firewall allow the communication.

Configure a Point-to-Site VPN

Then depending how you will establish VPN connection you will have few more steps to configure the P2S VPN:

Create and install VPN client

OpenVPN

Please also be aware that you have another option to connect to your VM securely by using Azure Bastion. You can see this service like a managed jump box.

--I hope this helps and if it does, please don't forget to Accept it as an answer and "Up-Vote" the answer or message(s) that helped you so that it can help others in the community looking for help on similar topics

Regards,
Didier
Please sign in to rate this answer.

1 person found this answer helpful.
Sudesh Sharma 46 Reputation points

2020-07-27T08:32:32.207+00:00

Hi @Didier3001 sorry but mine vpn subnet and vm subnet is not same because I have created my vm last year and created vpm subnet yesterday with new vnet.

Didier3001 971 Reputation points Microsoft Employee

2020-08-03T09:32:46.307+00:00

Hi @Sudesh Sharma

Unless you have a very specific need to design what is called a Hub and Spoke network and keep these resources on different VNet, I would change that design and have them together on the same VNet.

If you want to keep them on different VNet, you can connect them together using VNet peering if they are in the same Azure region or Global VNet peering if they are in different Azure Region (there is a cost associated with this).

Cost

Again because this is important, if the Hub & Spoke Architecture is not required I would put them on the same VNet.

--I hope this helps. Please Accept it as an answer and "Up-Vote" the answer or message(s) that helped you so that it can help others in the community looking for help on similar topics

Regards,
Didier3001

Andreas Baumgarten 96,266 Reputation points MVP

2020-08-03T12:49:29.943+00:00

2 subnets (1 subnet for VPN Gateway and 1 subnet for VMs) are fine as log as the 2 subnets are in the same Virtual Network.

If you have 2 Virtual Networks with 1 Subnet in each Virtual Network you have to activate the peering between the 2 Virtual Networks.

Maybe this is helpful.

Regards

Andreas Baumgarten

(Please don't forget to Accept as answer if the reply is helpful)
Sign in to comment