Azure VPN issue

Question

I have the following

VPN is up.

But BGP is not established, the following capture shows the BGP is initialized from SRX, but no response

From MS Docs:

Azure VPN gateway will internally add a route of your BGP peer IP address to the corresponding IPsec tunnel.

So my understanding is Azure knows how to send the packet back.

I do not know how troubleshoot on Azure side

Appreciate any insights !!

thanks !!

Answer 1

@Gongya Yu

Thank you for reaching out.

I understand you are facing issues with BGP connectivity on your Azure VPN Gateway

From the screenshot I see that you are using an APIPA IP address (169.254.21.6) as the BGP Peer IP addresses. In this case as your on-premises VPN devices uses APIPA address for BGP, you must select an address from the Azure-reserved APIPA address range for VPN, which is from 169.254.21.0 to 169.254.22.255.

This option should be available on the Configure BGP section on Azure Portal. You can find more details on the configure BGP section here

Hope this helps! Please let me know if you have any additional questions or if the issue still persists. Thank you!

---

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

In your highlighted in Red, should I fill in Azure APIPA or on Prem ? I am so confused on this.

Answer 3

I configured as follows this time,

Answer 4

My bgp is up.
Seems whether Custom Azure APIPA address is configured or not, Azure always fails over to use one IP from GatewaySubnet.
This time what I did differently is I configured APIPA address outside of MS range.

I will do some more tests.

thanks so much !!