Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,739 questions
Configure s2s and p2s in the same Virtual Network Gateway
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 61%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Alireza Mansoori
1
Reputation point
I'm working on a project that uses traditional hub&spoke architecture and in the hub, there is a vnet gateway which has already a s2s connection but I want to configure a p2s vpn on it. The configuration has been done successfully but when I want to peer a spoke vnet using remote gateway, the s2s connection was lost and I faced a downtime and I have to rollback all the configuration in order to getting back the connection. The hub vnet has already tre vnet peering using virtual network gateway connection.
The vnet gateway has VpnGw1AZ generation1 Sku.
Azure VPN Gateway
{count} votes
-
msrini-MSFT 9,291 Reputation points Microsoft Employee2022-12-11T03:28:25.913+00:00 Hi,
Can you confirm that the address pool that you defined for P2S has no overlapping ip adress with on-prem and the peered vnet ?
If that is not the case, to comment further I need logs ,(Ike logs) during the eof issue.
Regards,
Karthik Srinivas -
GitaraniSharma-MSFT 49,911 Reputation points Microsoft Employee Moderator2022-12-12T14:54:54.96+00:00 Hello @Alireza Mansoori ,
Could you please confirm that the address pool that you defined for P2S VPN has no overlapping IP adresses with your on-premises or hub Vnet or the peered/spoke Vnet?
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal#addresspoolRegards,
Gita -
Alireza Mansoori 1 Reputation point
2022-12-12T16:51:24.47+00:00 Hi,
I have checked the ip addresses and it does't overlap with others. I have tre six spoks and tre of them using gateway transt and the three others don't. When I change the peering cofig of the first spoke I got downtime which I had to rollback that then I tried for the second time it worked witout any issue and then moved on to configure the two others. Spoke 2 worked fine but it faild with the last spoke.
-
GitaraniSharma-MSFT 49,911 Reputation points Microsoft Employee Moderator
2022-12-13T13:31:30.007+00:00 Hello @Alireza Mansoori ,
Thank you for the update.
Without more details, it would be difficult to troubleshoot this issue.
You mentioned that you were able to add 2 spokes without any issues and the last one failed.1) Could you please clarify what is the exact issue at the moment?
2) Is the P2S VPN working with the other 2 spokes?
3) Do you receive any error or just that the S2S connection is lost when you add the last spoke?
4) Have you checked the address ranges for all the 6 spoke Vnets, hub Vnet and your on-premises and made sure that they do not overlap with each other?
5) Could you please share the address range of the spoke Vnet which failed along with the address ranges of your hub vnet, P2S address pool and on-premises network?Regards,
Gita -
GitaraniSharma-MSFT 49,911 Reputation points Microsoft Employee Moderator
2022-12-16T18:07:43.577+00:00 Hello @Alireza Mansoori , Could you please provide an update on this post?
-
GitaraniSharma-MSFT 49,911 Reputation points Microsoft Employee Moderator
2022-12-19T14:59:54.173+00:00 Hello @Alireza Mansoori , Could you please provide an update on this post and share the requested details for further discussion on this issue?
Sign in to comment
Sign in to answer