Share via

Creating a VPN tunnel with a Sonicwall

Boe Dillard 666 Reputation points
2023-04-25T03:39:13.01+00:00

I'm trying to follow this article - https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-a-vpn-between-a-sonicwall-firewall-and-microsoft-azure/170505320011694/ It mentions the azure gateway subnet is 10.10.1.0/24.
The azure lan subnet is 10.10.2.0/24 Then it says set up the aVirtual network and add with an address space of 10.10.0.0/16 - is that some ip range MS pulled out of their <xxxx>? Where does that come from. Why is it a /16 The sonicwall side is straight forward - I can't figure out the MS side.

Azure VPN Gateway
Azure VPN Gateway

An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. KapilAnanth 49,876 Reputation points Moderator
    2023-04-25T07:24:39.71+00:00

    @Boe Dillard

    The document you are refering to is not from Microsoft and is from a third party. Microsoft did not create this documentation and we will not be able to guarantee the authenticity of the contents provided.

    With that said,

    Taking a look at the documentation, the subnet and Vnet address ranges are correct.

    • NOTE : Subnet and Vnet are not same. Subnet is a part of Vnet.
    • You are instructed to create a VNet with the range of "10.10.0.0/16" and name "VNET-01"
    • Now, in this VNet, you are instructed to create 2 subnets,
      • Gateway subnet: 10.10.1.0/24
      • LAN subnet: 10.10.2.0/24
    • Both the subnets' ranges "10.10.1.0/24" and "10.10.2.0/24" are a part of the VNet's address range "10.10.0.0/16"
    • Everything seems correct so far.
    • Refer : VNet concepts
    • User's image
    • Sonicwall has created all the above ranges for demonstration purposes only
    • In case you have a VNet with a different address range in Azure side, you must make sure you create the subnets according to the available address ranges in the VNet.

    To create a VPN Connection from Azure to any VPN Device, you can refer to this article. Create a site-to-site VPN connection in the Azure portal

    Thanks,

    Kapil

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.