Azure VPN connection failed（macOS）

Question

Azure VPN connection failed（macOS）

Kang Le 20

I went to configure my VPN at this address, but the VPN connection failed

https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac

my computer system: macOS Ventura 13.4.1
my certificates：
User's image

my vpn configuration：
User's image

KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-20T04:26:23.55+00:00
@Kang Le

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you are trying to configure Azure P2S using IKEv2: native VPN client.

I see you are following the docs, https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac

From the screenshots,

1.

I see only one certificate is installed in your Keychain Access

However, you must make sure both Root and Client are installed.

Refer: Verify certificate install

The document says, in the Local ID field, specify the name of the certificate.

Specify certificate

Can you update these two and let us know if that helps.

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-20T06:19:23.83+00:00

@KapilAnanth-MSFT Thanks for the reply, I reconfigured the vpn and certificates but it doesn't work yet
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-20T06:51:23.4233333+00:00
@Kang Le

Sure.

What's the error message you are getting when you connect?

Also, in the P2S VPN Gateway configuration, can you confirm you have enabled IKEV2?

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-20T11:06:06.6233333+00:00
@KapilAnanth-MSFT

What's the error message you are getting when you connect?

I don't know how to view VPN logs，I only see the connection status of the VPN go from "connecting..." to "disconnected."

Also, in the P2S VPN Gateway configuration, can you confirm you have enabled IKEV2?

Yes, it's enabled and my other computer can access the VPN
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-21T05:15:26.9866667+00:00

@Kang Le

Cheers,

To troubleshoot this further, I think we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue.

If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Cheers,

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-24T06:14:44.3233333+00:00

What is the best way for me to share my screen with support engineer? Or how do I contact support engineer? @KapilAnanth-MSFT
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-24T08:25:35.81+00:00
@Kang Le

Is the other computer a MacOs device?

You should open a support Ticket with Microsoft.

In case you need a one-time free technical support could you please send an email to AzCommunity[At]Microsoft[Dot]Com with the below details.

Subject : Attn Kaananth

Thread URL: Link to this thread : https://learn.microsoft.com/en-us/answers/questions/1333389/azure-vpn-connection-failed-macos?comment=question#comment-1332614

Subscription ID : Subscription ID where the VPN Gateway is deployed
Kang Le 20 Reputation points

2023-07-24T08:37:33.16+00:00

@KapilAnanth-MSFT It's the computer I'm currently using.
Kang Le 20 Reputation points

2023-07-24T08:38:12.1166667+00:00
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-24T08:41:29.7966667+00:00

@Kang Le

I understand.

But the VPN Gateway should still be hosted in an Azure subscription right.

We will need the subscription ID to open a support request and for Engineers to check the VPN Gateway logs.

So, I request you to share the VPN Gateway's subscription ID.

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-24T08:46:24.1866667+00:00

@KapilAnanth-MSFT I'll send an email to AzCommunity@Microsoft.Com for a one-time free technology

Your answer

KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-20T04:26:23.55+00:00

@Kang Le

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you are trying to configure Azure P2S using IKEv2: native VPN client.

I see you are following the docs, https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac

From the screenshots,

1.

I see only one certificate is installed in your Keychain Access

However, you must make sure both Root and Client are installed.

Refer: Verify certificate install

The document says, in the Local ID field, specify the name of the certificate.

Specify certificate

Can you update these two and let us know if that helps.

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-20T06:19:23.83+00:00

@KapilAnanth-MSFT Thanks for the reply, I reconfigured the vpn and certificates but it doesn't work yet
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-20T06:51:23.4233333+00:00

@Kang Le

Sure.

What's the error message you are getting when you connect?

Also, in the P2S VPN Gateway configuration, can you confirm you have enabled IKEV2?

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-20T11:06:06.6233333+00:00

@KapilAnanth-MSFT

What's the error message you are getting when you connect?

I don't know how to view VPN logs，I only see the connection status of the VPN go from "connecting..." to "disconnected."

Also, in the P2S VPN Gateway configuration, can you confirm you have enabled IKEV2?

Yes, it's enabled and my other computer can access the VPN
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-21T05:15:26.9866667+00:00

@Kang Le

Cheers,

To troubleshoot this further, I think we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue.

If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Cheers,

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-24T06:14:44.3233333+00:00

What is the best way for me to share my screen with support engineer? Or how do I contact support engineer? @KapilAnanth-MSFT
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-24T08:25:35.81+00:00

@Kang Le

Is the other computer a MacOs device?

You should open a support Ticket with Microsoft.

In case you need a one-time free technical support could you please send an email to AzCommunity[At]Microsoft[Dot]Com with the below details.

Subject : Attn Kaananth

Thread URL: Link to this thread : https://learn.microsoft.com/en-us/answers/questions/1333389/azure-vpn-connection-failed-macos?comment=question#comment-1332614

Subscription ID : Subscription ID where the VPN Gateway is deployed
Kang Le 20 Reputation points

2023-07-24T08:37:33.16+00:00

@KapilAnanth-MSFT It's the computer I'm currently using.
Kang Le 20 Reputation points

2023-07-24T08:38:12.1166667+00:00
KapilAnanth-MSFT 49,611 Reputation points Microsoft Employee Moderator

2023-07-24T08:41:29.7966667+00:00

@Kang Le

I understand.

But the VPN Gateway should still be hosted in an Azure subscription right.

We will need the subscription ID to open a support request and for Engineers to check the VPN Gateway logs.

So, I request you to share the VPN Gateway's subscription ID.

Cheers,

Kapil
Kang Le 20 Reputation points

2023-07-24T08:46:24.1866667+00:00

@KapilAnanth-MSFT I'll send an email to AzCommunity@Microsoft.Com for a one-time free technology

Share via

Azure VPN connection failed（macOS）

Your answer