Point to Site VPN: Unable to access resources from VNET1(P2S) to VNET2 Resources

Crister Palumpon 0 Reputation points
2023-01-25T15:01:23.02+00:00

Hello, i hope someone will help me. I cannot access resources from VNET1 which is configured as point to site and peered with VNET2 which is configured as site to site. Technically my topology is this. Vnet1 with VPN Gateway for point to site -> Vnet 1 is peered to Vnet 2 -> Vnet2 has its own VPN gateway for site to site. Is it possible to access resources from vnet1 using client p2s to vnet2 azure vm resources?

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,393 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,178 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. GitaraniSharma-MSFT 47,686 Reputation points Microsoft Employee
    2023-01-25T15:45:53.8766667+00:00

    Hello @Crister Palumpon ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    Point-to-site client connections to a virtual network gateway that is deployed in a VNet and is peered with other VNets can access other peered VNets as long as the peered VNets are using the UseRemoteGateway / AllowGatewayTransit features.

    Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq#can-i-configure-a-point-to-site-client-to-connect-to-multiple-virtual-networks-at-the-same-time

    https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit#to-add-a-peering-and-enable-transit

    However, in your case, both the Vnets have their own VPN gateways, so you cannot enable UseRemoteGateway / AllowGatewayTransit features.

    Traffic will transit a peered Vnet if only one of the VNet has VPN gateway deployed.

    You can configure the gateway in the peered virtual network as a transit point, but the virtual network that is using a remote gateway can't have its own gateway.

    Reference: https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview#gateways-and-on-premises-connectivity

    To resolve this issue, you have 2 options:

    Either:

    OR:

    Kindly let us know if the above helps or you need further assistance on this issue.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.