P2S VPN not providing correct IP over WAN

James Pearce 1

I've been following the documenation here regarding P2S setups over a WAN. https://learn.microsoft.com/en-us/azure/virtual-wan/user-groups-create

I've created the WAN itself, alongside the user VPN connections and can connect into the address space but there is no segregation via the groups.

I've got two groups:

VPN_GROUP_1
- UserOne
- Associated address: 10.2.0.0/24
VPN_GROUP_2
- UserTwo
- Associated address: 10.3.0.0/24

No matter which user account I use to sign into the VPN, I always get the 10.2.0.0 range. Is this is a bug?

ChaitanyaNaykodi-MSFT 23,106 Reputation points Microsoft Employee

2022-10-29T04:16:33.157+00:00

@James Pearce ,
Welcome to the Microsoft Q&A forum
As documented here for every P2S VPN server configuration, one group must be selected as default. Users who present credentials that don't match any group settings are considered to be part of the default group.
Can you please let us know which is the default group in your case? and please validate if you are using the correct credentials. Thank you!
James Pearce 1 Reputation point

2022-10-30T15:33:58.693+00:00
@ChaitanyaNaykodi-MSFT

The default group is VPN_Group_1.

VPN_GROUP_1 - UserOne - Associated address: 10.2.0.0/24 VPN_GROUP_2 - UserTwo - Associated address: 10.3.0.0/24

However, when logging into the VPN with UserTwo who is apart of the VPN_GROUP_2 group, I do not get the correct IP address range.
ChaitanyaNaykodi-MSFT 23,106 Reputation points Microsoft Employee

2022-11-01T23:15:12.023+00:00

@James Pearce ,

Thank you for providing additional details above and apologies for the delayed response here. To help troubleshoot this issue further, can you please let me know which authentication type you have configured? is it AAD or Radius or Azure Certificate?
ChaitanyaNaykodi-MSFT 23,106 Reputation points Microsoft Employee

2022-11-04T17:11:25.927+00:00

@James Pearce ,
Just following up here to check if you were able to view my comment above. Thank you!