Can't connect to Azure services through VPN Gateway
Hi, Since this morning, my team and I can't connect to the different Azure services we use, more specifically Azure Database and Azure Storage. We use a VPN Gateway to connect to our Azure Virtual Network in which the different services are connected.…
Site to Site VPN Connection
I have configured site to site VPN as per the Microsoft documentation. We have created: Vnet Vnet Gateway Local network gateway Connection We have configured with all the client's requirement. We are seeing connection status: Unknown We have also created…
Exploring Cost-Effective Solutions for Routing Traffic from an Azure Private Endpoint to a VPN Gateway
Greetings, I would appreciate assistance with a design to a solution I would like to implement on Azure. Below I summarized all the information and approaches I tried. Customer has a private endpoint on a "consumer" VNet, from which I…
Unable to resolve custom DNS name for virtual machines via VPN
Hi, I am trying to resolve to custom DNS name for virtual machines and SQL on VMs in my tenant; the structure is as follows: We have 2 subscriptions i.e. sub1 and sub2, the private DNS zone and VPN gateway are in sub1 whereas the VMs are in sub2. The…
azure vpn (linux) not returning valid resources
I used Azure VPN Linux preview 3 or 4 weeks ago and it was working as expected. Trying recently, I see that there is no valid resources. List of valid resources from app registration: .
Site-to-Site VPN connection over ExpressRoute private peering not valid
Hello, It seems this article is either outdated or wrong with what it is currently proposing - the requirements most likely need to change. We have the same issue as described here, we have full control of the firewall from on-prem and can…
Dynamic routing with VPN Gateway and with inspection by NVA
I'm searching for possibility to implement a topology like this: Spoke VNETs <====> NVA, for instance FortiGate <=====> VPN Gateway <=====> on-premises To implement this with static routing is pretty straightforward, but has irritating…
How to allow transit on vpn azure gateway on peered vnet?
I have already connected a vnet through a vpn gateway (site to site) with on premises resources. I created a new vnet in a different resource group. I've made a peer connectiong between the 2 vnet and allow the new one to use the gateway to redirect…
Azure site to site VPN to OPNSense VPN
I have an Azure Site to Site VPN to an OPNSense using IPsec. I have tried a multitude of configurations and its not quite working. When I manually start the VPN it states that it is up in OPNSense but no data is being transferred. If I use ssh on a…
Azure VPN disconnections with the following message >
Hi, all of a sudden some users Azure VPN gets disconnected with the following message > Your authentication with Microsoft Entra is expired. You need to re-authenticate in Entra to acquire a new token. Authentication timeout can be tuned by your…
How to connect Private-Link resource to a VPN gateway?
Greetings, I would appreciate assistance with a design to a solution I would like to implement on Azure. Below I summarized all the information and approaches I tried. Customer has a private endpoint on a "consumer" VNet, from which I…
Azure Virtual Desktop: Error: "Connection was refused because you tried to access a private endpoint resource without being connected to the private endpoint."
I am setting up Azure Virtual Desktop. Host Pool Type is Pooled, Application Group has only one application - just the "Session Desktop". When I enable "Private Link" and "Disable Public Access" (AVD workspace: Global &…
ACL's blocking traffic to A VPN Gateway
Hi, I've been working around a problem with a VPN Gateway i built a few days ago. It appears the traffic is blocked inbound to this gateway by an ACL that i cant edit, control or even see. The former architecture is a hub/spoke design connected with an…
Azure Virtual WAN S2S VPN to Skytap App
Hello Microsoft Azure Community , I've been created S2S VPn to our Virtual HUB from SaaS Skytap Application according to Skytap documentation. Both sides are same parameters (PSK etc) and all the time I have Connectivity status : Not Connected , any idea…
KeyChain Failed Mac for AzureVPN Client
Hi, I've been trying to set up the Azure VPN client for a customer but I'm being met with the following Error getKeyChainSecret: Failed to retrieve KeyChain secret. Status code -25300 16/04/2024 09:58:35 Warning removeClientAuthLoginCredentials: Failed…
How to troubleshoot Azure VPN client's frequent disconnections
Several users are claiming that VPN is signing out/disconnecting much more often than usual. I am getting reports that it is signing out at random while they are working (Not just while it is in sleep mode). Any ideas what could be causing this sudden…
Cannot connect to Azure VPN Gateway via Private IP Address
Hello, My goal is to connect to an Azure VPN Gateway through a private ip address. For this, I have an instance of Azure VPN Gateway and I in the Settings > Configuration menu I have enabled the Gateway Private IPs option. Now, in the Overview…
Why are we able to access public internet resources through our SSTP VPN in Azure but unable to connect to internal network resources? Could this be due to a configuration issue with NAT or routing settings?
We are currently utilizing an SSTP VPN hosted on a Windows Server in Azure. While NAT is configured to route traffic through the server's address, we are only able to access public internet resources while connected to the VPN, not internal Azure…
Issue with Virtual Network Gateway Site-to-Site VPN to pfSense on-Premise Using NAT Rules
Hello, I'm experiencing an issue with my Azure Virtual Network Gateway in a site-to-site VPN setup with pfSense on-premise. Below are the details of the setup: Azure Virtual Network Gateway: ipgateway1 Local Network (Azure): 192.168.1.0/24 …
VNG S2S NAT rules failing with Policy Based Traffic Selector disabled
I configured a virtual network gateway in Azure. Used custom IPSec/IKE policy to configured a S2S tunnel to an on-premises network. Set Policy Based Traffic Selector to disabled. The tunnel is established and IP traffic flows without problems. Then I…