How to connect from Route Based VPN gateway on azure to Policy Based VPN gateway on AWS

Question

Hi, We have a Route Based VPN Gateway on Azure and we are trying to connect with our client who uses AWS VPN Peer they support only policy-based VPN Gateway with IKev 2.0 Protocol. I tried to set up VNet and created a new VPN Gateway which is policy-based, but Azure supports only IKev 1.0 for policy-based. So I deleted the policy-based VPN Gateway resource since it won't work for me. Now I am trying to look at options to make a Route-based VPN Gateway connect to a policy-based VPN Gateway. Also, they have mentioned they support only Diffie-Hellman Group 5 or above for site-to-site connections. Do you know if they are is a way to connect from a Route-based VPN Gateway to a Policy-based VPN Gateway? Regards, Surendra

Answer 1

@Surendra Koritala

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well. I understand that you would like to establish a S2S Connection from Azure Route Based connection to a 3rd Party Policy based VPN Gateway

It is possible to establish a S2S to a Policy based VPN from Azure Route Based. Except Basic SKU, every other SKU supports both IKEv1 and IKEv2

However, there is a bunch of requirements and supported algorithms. You should check if the supported Cryptographic algorithms are met at both side of the Tunnel. The following docs will come in handy,

• About cryptographic requirements and Azure VPN gateways
• You must enable "UsePolicyBasedTrafficSelectors" for the specific connection to Policy based VPN : Connect Azure VPN gateways to policy-based VPN
• Which Diffie-Hellman Groups are supported?
• 

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.