Azure to gcp

piyush shailly 20

I have two VPC in my gcp. I need to connect to azure single vpc using vpn one connection is getting active at one time only

Can you please tell me the procedure

Tech-Hyd-1989 5,806 Reputation points

2023-06-22T08:48:26.6266667+00:00

Hello piyush shailly

To connect two VPCs in Google Cloud Platform (GCP) to an Azure virtual network (VNet) using VPN, you can follow these general steps:

Set up an Azure VNet: Create a virtual network in Azure and define the desired address space, subnets, and other network configurations.

Configure Azure VPN Gateway: Create an Azure VPN Gateway in the Azure VNet. Configure the gateway settings, such as the VPN type (route-based or policy-based), and specify the Azure public IP address.

Configure the GCP VPCs: Set up the two VPCs in Google Cloud and configure their network settings, including defining the IP address ranges and creating subnets.

Create VPN Gateway in GCP: Create a VPN gateway in each GCP VPC. Configure the VPN gateway settings, such as the VPN type (Classic VPN or HA VPN), and define the external IP address.

Establish VPN Connection: Configure the VPN connection between the Azure VPN Gateway and the GCP VPN gateways. This involves exchanging the necessary configuration information, such as IP addresses, encryption settings, and shared secrets.

Verify Connectivity: Once the VPN connection is established, verify the connectivity between the Azure VNet and the GCP VPCs. Test communication between resources in each VPC and the Azure VNet to ensure connectivity is working as expected.

It's important to note that specific steps and configurations may vary depending on the versions and options available in GCP and Azure at the time of setup. Therefore, it is recommended to refer to the official documentation and guidelines provided by GCP and Azure for the most up-to-date and detailed instructions on setting up the VPN connections between the platforms.
piyush shailly 20 Reputation points

2023-06-22T10:54:45.8466667+00:00

DOne same not working for both but one is active
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-22T10:59:12.1666667+00:00
Hello @piyush shailly ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you are trying to connect 2 different GCP VPC to one Azure VPN gateway and only one connection is getting active at one time.

May I know what is your current Azure VPN gateway configuration?

What is the SKU of your Azure VPN gateway?

What is the VPN type of your Azure VPN gateway - Route-based or Policy-Based?

Is your Azure VPN gateway active-active enabled or is it active-passive?

Are you connecting the 2 different GCP VPCs to Azure using 2 different GCP gateways? Could you share a network diagram if possible?

Are there any address space overlaps between Azure Vnet and the 2 GCP VPC that you are trying to connect to?

Some helpful references: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#active-active-vpn-gateways

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell#3-vpn-and-bgp-parameters-for-your-second-on-premises-vpn-device

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-multi-site-to-site-resource-manager-portal

https://cloud.google.com/network-connectivity/docs/vpn/tutorials/create-ha-vpn-connections-google-cloud-azure

Regards,

Gita
piyush shailly 20 Reputation points

2023-06-22T11:44:13.32+00:00
VPNGW1
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-22T16:01:31.7333333+00:00

@piyush shailly , your comment was not complete. Could you please share the requested details again?
piyush shailly 20 Reputation points

2023-06-22T18:03:49.0366667+00:00
VPNGW1

Route based

Yes

no
piyush shailly 20 Reputation points

2023-06-22T18:05:21.2+00:00

Actually one of my connection is active and another is down in GCP its showing BGP: waiting for peers
piyush shailly 20 Reputation points

2023-06-23T08:41:07.7233333+00:00

can anyone help
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-23T16:18:43.8366667+00:00
Hello @piyush shailly ,

Is your Azure VPN gateway active-active enabled or active-passive?

Are you using any custom policies in your connection?

Is BGP enabled on the Azure connection object? Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto#2-configure-an-s2s-connection-with-bgp-enabled

Does the ASN and the BGP peer IP address on Azure local network gateway match your GCP configuration? Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto#1-create-a-local-network-gateway

For BGP IP addresses, are you using APIPA address or regular IP address? Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto#2-create-testvnet1-gateway-with-bgp

What is the status of the connection on Azure side?

You can view BGP peers, learned routes, and advertised routes on your Azure VPN gateway following the below article: https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-diagnostics

Regards,

Gita
piyush shailly 20 Reputation points

2023-06-23T16:24:03.2566667+00:00

active active

no custom policies

yes

yes

apipa

connected
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-23T16:55:50.3266667+00:00

Hello @piyush shailly , could you please refer the below doc which shows a similar setup but between Azure and AWS:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-aws-bgp

This doc will help you in validating the configuration.

Once you go through the doc, do let me know if you find any discrepancies or mismatches. If all looks good, then we may have to dig into the logs for further troubleshooting.

Regards,

Gita
piyush shailly 20 Reputation points

2023-06-26T05:08:25.9333333+00:00

can we connect for 5 to 10 min
piyush shailly 20 Reputation points

2023-06-26T07:32:59.2733333+00:00

Thanks by your blog help i am able to resolve my issue
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-26T07:53:33.78+00:00

Hello @piyush shailly , apologies, I was not available when you posted your comment at 10:38 AM IST. I see that you updated another comment stating you were able to resolve your issue following the article I suggested. Thank you for the update and I'm glad to hear that your issue is now fixed.

I've summarized our conversation and added it as answer below. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

Do let us know if you need further assistance on this issue.
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-27T13:29:23.48+00:00

@piyush shailly , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.
piyush shailly 20 Reputation points

2023-06-27T16:53:10.6266667+00:00

sure i have accepted the answer

can you explain me why the tunnel is getting down after some time
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-28T16:23:22.13+00:00

@piyush shailly , you mentioned earlier that the issue is resolved. Is the issue still persisting? What is the error message that you get?

Accepted answer

GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee

2023-06-26T07:55:12.0133333+00:00

Hello @piyush shailly ,

I understand that you are trying to connect 2 different GCP VPC to one Azure VPN gateway and only one connection is getting active at one time.

You were using active-active enabled Route based VPNGW1 SKU Azure VPN gateway and were connecting the 2 different GCP VPCs to Azure using 2 different GCP gateways.

You were not using custom policies. You were using APIPA addresses for BGP. There were no address space overlaps between Azure Vnet and the 2 GCP VPC that you are trying to connect to but still one of your connections was active and another was down in GCP with its showing BGP: waiting for peers. On Azure side, it was showing Connected.

I advised you to refer the below doc which shows a similar setup but between Azure and AWS as it will help you in validating the configuration.

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-aws-bgp

Some other helpful references:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#active-active-vpn-gateways

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell#3-vpn-and-bgp-parameters-for-your-second-on-premises-vpn-device

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-multi-site-to-site-resource-manager-portal

https://cloud.google.com/network-connectivity/docs/vpn/tutorials/create-ha-vpn-connections-google-cloud-azure

Following the below doc, you were able to resolve your issue:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-aws-bgp

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure to gcp

0 additional answers

Your answer