Internet not working when i use Azure VPN (Point to Site)

Julie M 526

Dear All,

I configured a Azure Point to site vpn using Azure AD.

Whenever i access the VPN from my Laptop, internet is not working.

I unchecked use default gateway on remote network. Still not working.

Accepted answer

Jackson Martins 10,136 Reputation points MVP

2022-06-10T14:20:19.543+00:00

Possible troubleshooting:

1

On Azure portal, click on Reset (is the same as restarting the server)

2

Make a telnet test on google.com, like:

telnet google.com 443

3

Try test internet access in other browser

4

Make sure if sites with ipv4 or ipv6 are having problems, if ipv6, see gateway config on this protocol.

5

Remove auto dectect proxy from browser before conect to the vpn client.

6

Make sure route print don't have a custom route as your default gateway

Get in touch if you need more help with this issue.

--please don't forget to Accept as answer if the reply is helpful--
Please sign in to rate this answer.
Julie M 526 Reputation points

2022-06-10T15:20:37.93+00:00

I reset the Gateway and tried telnet but it fails, is it something to work with the DNS server?

Jackson Martins 10,136 Reputation points MVP

2022-06-10T15:23:17.553+00:00

No, if the Connection fails, it is because the packet was going out to another gateway probably.

Try tracert google.com

Jackson Martins 10,136 Reputation points MVP

2022-06-10T15:25:24.91+00:00

Jackson Martins 10,136 Reputation points MVP

2022-06-10T15:29:06.547+00:00

See if the first host is the on-premise gateway

Jackson Martins 10,136 Reputation points MVP

2022-06-10T17:30:45.71+00:00

to eliminate the possibility of dns, telnet the google ip that will resolve:

You can take the test with powershell and find witch interface is being to used:

Jackson Martins 10,136 Reputation points MVP

2022-06-10T17:51:06.93+00:00

When I Enable custom routes to block browsing, the powershell tests fail and return result:

Julie M 526 Reputation points

2022-06-11T12:42:17.717+00:00

Bit strange,

When i connected to VPN, Wifi status also connected, but now its connected but no network

Jackson Martins 10,136 Reputation points MVP

2022-06-11T12:46:53.327+00:00

Looks like your problem is DNS, are you using Azure private dns? try manually changing the DNS in the interface parameters.
Also do the Powershell test before and after connecting to the vpn, with google ip and DNS, like this:

Test-NetConnection www.google.com -port 443
Test-NetConnection 142.251.132.46 -port 443

Julie M 526 Reputation points

2022-06-11T13:04:38.22+00:00

You are really Great.

Thanks a lot for your fantastic effort. After Manual entry all looks good.

Marked as a answer too. Thanks again.

Syed Wasil Abidi 30 Reputation points

2023-03-21T15:23:04.59+00:00

Hi Julie,
I am also facing this same issue. What changes you made so it started working fine?
Sign in to comment

4 additional answers

Jackson Martins 10,136 Reputation points MVP

2022-06-03T10:06:40.997+00:00

Hi Julie!
Make sure there is no overlap ip with your local network. In the route print command what is the default gateway that appears?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Julie M 526 Reputation points

2022-06-03T10:47:54.23+00:00

Hello @Jackson Martins

I tried the above remove command which is not working with syntax error,

However I made sure no custom route in place

Still Internet is not working. and wifi status is not connected, when i disconnect the VPN, internet is working fine.
Please sign in to rate this answer.
Jackson Martins 10,136 Reputation points MVP

2022-06-03T11:13:01.897+00:00

You can manually add or change the routing in windows itself with route add or change VPN Custom routes to te VPN Client, make sure custom routes are not forcing forwarding traffic from VPN Tunnel
Reference : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes#forced-tunneling

Get in touch if you need more help with this issue.

Jackson Martins 10,136 Reputation points MVP

2022-06-03T13:39:08.173+00:00

Sorry Julie,
I didn't see the pictures
You cant try
Set-AzVirtualNetworkGateway -VirtualNetworkGateway $gw -CustomRoute @0

To remove all custom routes

Don't forget to declare variable $gw = Get-AzVirtualNetworkGateway -Name <name of gateway> -ResourceGroupName <name of resource group>

Jackson Martins 10,136 Reputation points MVP

2022-06-03T13:42:05.65+00:00

if possible send the print of your routes in the local environment with "route print" in the windows command line

Jackson Martins 10,136 Reputation points MVP

2022-06-08T01:30:45.523+00:00

Hi!!
Any update about this case?

There is a way to add or remove routes on the client vpn is by accessing the routes configuration file. The file is at:
%appdata%\Microsoft\Network\Connections\Cm

See my answers in other Q&A

https://docsp.microsoft.com/en-us/answers/questions/878314/restrict-internet-access-after-connecting-to-azure.html

Julie M 526 Reputation points

2022-06-10T05:02:02.297+00:00

@Jackson Martins Sorry for late reply. I was on Vacation, will try today and update you.

Julie M 526 Reputation points

2022-06-10T07:19:28.797+00:00

I dont see this Cm folder

Jackson Martins 10,136 Reputation points MVP

2022-06-10T09:32:51.703+00:00

Cm folder appears after client VPN installation

Jackson Martins 10,136 Reputation points MVP

2022-06-10T09:52:27.92+00:00

after installing the vpn client the folder will appear

and you can remove or add routes, just like:

Get in touch if you need more help with this issue.

--please don't forget to Accept as answer if the reply is helpful--

Julie M 526 Reputation points

2022-06-10T10:03:34.237+00:00

@Jackson Martins Please find the screenshot, i have VPN client installed

But still the cm folder is missing

Can you please advise

Jackson Martins 10,136 Reputation points MVP

2022-06-10T10:15:00.63+00:00

you are using ad authentication that uses another client, can you check in connection properties, vpn routes?

if you have routes 128.0.0.1/1 and 0.0.0.0/1 you need to remove it from the xml before installing the client, you can remove it manually with route del from windows, or you can remove it from the custom routes settings in the azure portal

Jackson Martins 10,136 Reputation points MVP

2022-06-10T10:20:49.797+00:00

Julie M 526 Reputation points

2022-06-10T10:37:50.09+00:00

Thanks i have client installed, stil l the folder is missing, let me redo from scratch.

Jackson Martins 10,136 Reputation points MVP

2022-06-10T10:40:23.593+00:00

Ok :)

Get in touch if you need more help with this issue.

--please don't forget to Accept as answer if the reply is helpful--

Julie M 526 Reputation points

2022-06-10T11:08:33.807+00:00

Thanks Martin.

I removed the route using Azure portal already, still something not correct.

Picture 01:

Remote the extra routes from VPN configuration and same is not visible in VPN client now.

But when i connected to VPN internet is still not working.

ROute info,

Jackson Martins 10,136 Reputation points MVP

2022-06-10T11:17:19.08+00:00

just for me to understand:

1 - after removing the route did you reinstall the client?

2 - You can ping google 8.8.8.8 after connect vpn? or only http access is blocked?

in your routing table it is not really declared vpn route

Jackson Martins 10,136 Reputation points MVP

2022-06-10T11:19:19.317+00:00

iIf ping works, maybe the vpn connection is changing your dns server

Julie M 526 Reputation points

2022-06-10T11:50:31.703+00:00

Hello,

Yeah I reinstalled the client and can ping 8.8.8.8

Julie M 526 Reputation points

2022-06-10T11:51:09.093+00:00

DNS servers here are my Azure VM based domain controllers.

Jackson Martins 10,136 Reputation points MVP

2022-06-10T11:52:59.733+00:00

If you can ping, the internet is working. if you ping google.com resolve to ip?

Julie M 526 Reputation points

2022-06-10T12:03:27.313+00:00

When I ping google.com

Jackson Martins 10,136 Reputation points MVP

2022-06-10T12:05:11.433+00:00

All the evidence shows that the internet is working, when you use the browser the website does not open? maybe it's the proxy settings

Julie M 526 Reputation points

2022-06-10T12:11:37.11+00:00

Thanks, but nothing configured here,

Jackson Martins 10,136 Reputation points MVP

2022-06-10T12:13:50.417+00:00

If the ping works (icmp request and reply) it is a sign that the internet is working. When you say the internet doesn't work, what error do you get?

Julie M 526 Reputation points

2022-06-10T12:24:33.617+00:00

This the error in browser

Jackson Martins 10,136 Reputation points MVP

2022-06-10T12:34:59.56+00:00

Try uncheck use default gateway from vpn adapter.

Julie M 526 Reputation points

2022-06-10T12:49:01.783+00:00

Yeah its already in place,

Jackson Martins 10,136 Reputation points MVP

2022-06-10T12:59:49.933+00:00

I will try to replicate your environment to troubleshoot:

and I will come back with the results

Julie M 526 Reputation points

2022-06-10T13:08:17.053+00:00

Thank you so much for your help so far.

Jackson Martins 10,136 Reputation points MVP

2022-06-10T13:24:50.567+00:00

I replicated the environment and the internet access worked, the only difference was the dns, it may be that the dns server is blocking browsing. bellow my envrionment:

Jackson Martins 10,136 Reputation points MVP

2022-06-10T13:56:05.397+00:00

I managed to replicate your problem, adding and removing the custom routes, apparently there was some cache in the settings, so I clicked on reset virtual gateway (same as restart)

If you want to buy the client's xml files, here goes my settings;
Sign in to comment
Jackson Martins 10,136 Reputation points MVP

2022-06-03T11:18:49.96+00:00

You can try disabele forced tunneling, using Azure PowerShell like:
$gw = Get-AzVirtualNetworkGateway -Name <name of gateway> -ResourceGroupName <name of resource group>
Remove-AzVirtualNetworkGateway -VirtualNetworkGateway $gw -CustomRoute 0.0.0.0/1 , 128.0.0.0/1

Kind regards
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
James C. Brewer 0 Reputation points

2024-06-17T18:40:23.8166667+00:00

I have the same issue, everything was working until recently and I can not see what's changed

We have remote users who connect via VPN to our Azure VM office share drive. Now when they enable the vpn, they are not able to access anything outside our network. No internet, no email, no ring central etc.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment