Azure Site to Site VPN

Question

Our Azure network running with Express route for on-prem, Now we have scope to implement the site to site vpn,

Requirement is Site-to-Site VPN to connect to sites which not connected through ExpressRoute --> In this configuration, both ExR and S2S connects to 2 different sites and hence are independent of each other.

Just getting public ip address from Microsoft can we do the implementation of site to site vpn,

Or do we need to ask specifically public ip address for site to site vpn implementation from microsoft, Is there any standard to get public ip address for site to site vpn implementation?

Answer 1

@nepolian A

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to create a VPN Connection between Azure and OnPREM Sites and know about the Public IP Address requirements

From Azure side,

• Please note that you must create a VPN Gateway in Azure VNET in order to create Site-to-Site connections.
• Now this VPN Gateway uses an Public IP from Azure
  • i.e., the IP comes along with the VPN Gateway and would belong to the VPN Gateway
• This can be created like any other resource, does not require any "standard" or "prerequisite" from Microsoft.

From OnPrem side,

• The IP Address used by your OnPrem side issued to you by your ISP
• You must make sure that they provide you a static IP and this does not change.
• You can also have a FQDN issued to you, but in this case you must make sure the FQDN always resolves to the current IP used by your OnPrem device
  • Also, in this case, the LNG must be created with FQDN type. See : Create a local network gateway

Once you have the above, you can follow Create a site-to-site VPN connection in the Azure portal

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.