Cant access azure recources inside the vnet from a p2s vpn connection

Dorian Perić 0 Reputation points
2023-04-19T21:22:05.2+00:00

Soo i've setuped a VPN gateway inside a vnet that's peered with another vnet which holds my ILB ASE.

My goal was to use that gateway to establish a p2s connection with my ubuntu worker so I can deploy code on the ASE. I've setupped my certs as shown in the docs (https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux#cli) and uploaded them onto the vnet gateway in the p2s configuration. In addition to that I've setupped route tables and peered the two networks, no NSG-s for the subnets. I can connect w/o problem but when i try to ping the ASE my request time outs. To troubleshoot i've added another ILB ASE in the VPN gateway network and when i ping it also timeouts. in the .ovpn file i've also added the following lines:

route 10.2.0.0 255.255.0.0 
route 10.3.0.0 255.255.255.0 
push "route 10.2.0.0 255.255.0.0"

because the inbound private ip of the ASE is 10.2.1.4. I've tried pinging from my windows pc (while connected ofcourse) and these were my route tables before i pinged:

Destination        Netmask          Gateway          Interface   Metric
10.1.0.0        255.255.0.0         10.3.0.1         10.3.0.2    281
10.2.0.0        255.255.0.0         10.3.0.1         10.3.0.2    281
10.3.0.0      255.255.255.0         On-link          10.3.0.2    281
10.3.0.0      255.255.255.0         10.3.0.1         10.3.0.2    281
10.3.0.2    255.255.255.255         On-link          10.3.0.2    281
10.3.0.255  255.255.255.255         On-link          10.3.0.2    281 ........

if i try "tracert 10.2.1.4":


Tracing route to 10.2.1.4 over a maximum of 30 hops

  1     *        *        *     Request timed out.
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.

Not really sure why it doesnt work, what else do i need to setup (both on the client and azure) for this deploy scenario to work, and can i use the following code to deploy from ubuntu:

INTERFACE_NAME=$(ip addr show | grep -E "tun[0-9]+" -o | head -n 1) echo "INTERFACE_NAME=$INTERFACE_NAME" >> $GITHUB_ENV


curl --interface "${{ env.INTERFACE_NAME }}" -X POST 'https://10.1.1.4/api/deploy' \-H 'Authorization: Bearer ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE }}' \-H 'Host: "my-web-app-name"'-H 'Content-Type: application/zip' \--data-binary '@/home/runner/work/"my-repo-name"/"my-repo-name"/"my-app-name"/bin/Release/net6.0/"my-app-name".zip'
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,796 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,775 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,969 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.