Can I connect an on premises Windows 10 machine through Azure VPN Gateway - Basic - to a DC in Azure -P2S - this is a student lab. We don't have Azure AD Tenant. Just a point to site connection with certificate authentication.

Dave 20 Reputation points
2023-05-25T17:52:09.97+00:00

We have a student lab setup - students have servers in Azure and have configured Azure VPN Gateway with the Basic SKU. We can connect Windows 10/11 machines to Azure with tunnel using self signed certificates. We can ping the server in Azure and can see file shares like \10.0.0.4\sharedfolder\file.txt

We would like to connect the client to the server in Azure after promoting the Server in Azure to a domain controller. Is this possible? How do you set the DNS configuration of the VPN Tunnel? The settings for subnet IP are for a 172.x.x.0/27 type address.

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,451 questions
{count} votes

Accepted answer
  1. KapilAnanth-MSFT 41,071 Reputation points Microsoft Employee
    2023-05-26T05:09:18.2266667+00:00

    @Dave

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    Can you please elaborate on what you mean by "How do you set the DNS configuration of the VPN Tunnel?".

    To answer your questions,

    1. We would like to connect the client to the server in Azure after promoting the Server in Azure to a domain controller. Is this possible?
      1. Yes
      2. The Azure VM being a DC has no effect on the plain network connectivity
      3. You should be able to ping and TcpPing the VM from P2S clients nevertheless.
    2. How do you set the DNS configuration of the VPN Tunnel?
      1. I assume that you would like the Remote P2S Clients to use this VM(DC) as DNS servers
      2. I believe the above is your requirement, if not, please do let me know
      3. Now, you can make requests to certain domain go to a VM in Azure - This is doable.
      4. For this, you have to edit the configuration files
        1. Add DNS Suffix - If your domain is contoso.com, you must add <dnssuffix>.constoso.net</dnssuffix>
        2. Add Custom DNS Servers - You must add the DC server IP <dnsserver>x.x.x.x</dnsserver> which will resolve your DNS queries.
        POINT TO NOTE:

    Kindly let us know if this helps or you need further assistance on this issue.

    Thanks,

    Kapil

    0 comments No comments

0 additional answers

Sort by: Most helpful