This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I like to have windows clients have all their traffic flow through Azure VPN. I like to know what is needed to make this happen. I have gone through the azure side and the client side making sure gateways and dns and routing is setup.
default the client connects but no traffic flows through. on another machine I forced all traffic through and when I connect, I have no internet access.
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Thank you for reaching out.
Can you please share a rough network diagram of your set-up so that we have a clear idea on what is the expected traffic flow?
Thank you!
Just following up here to see if you were able take a look at my comment above. Thank you!
Just following up here to see if you were able take a look at my comment above. Thank you!
You have to edit the Route Table, there you can define the next hop, set the next hop to the gateway pointing to Azure.
If this answer helped you, accept the Answer ;)
Best regards,
Iohann Gessenay
Here are the route tables I have setup already.
Get-AzRouteTable -ResourceGroupName VPN | Format-Table
ResourceGroupName Name Location ProvisioningState DisableBgpRoutePropagation
VPN Traffic usgovvirginia Succeeded False
Get-AzRouteTable -ResourceGroupName VPN -Name Traffic | Format-List Routes
Routes : {ALL_Traffic}
$routeTable = Get-AzRouteTable -ResourceGroupName VPN -Name Traffic PS C:\Windows\system32> $routeTable.Routes | Where-Object { $_.Name -eq 'ALL_Traffic' } | Format-List
AddressPrefix : 0.0.0.0/0 NextHopType : VirtualNetworkGateway NextHopIpAddress : ProvisioningState : Succeeded Name : ALL_Traffic Etag : W/"132b84a7-6c0d-4353-9bd0-9a44a9a597af" Id : /subscriptions/26916ab8-cdd9-455f-8abb-eff5022e3de3/resourceGroups/VPN/providers/Microsoft.Netwo rk/routeTables/Traffic/routes/ALL_Traffic
Ensure that the Traffic route table is associated with the subnet where your Virtual Network Gateway resides. If it's not associated, the routes won't take effect.
Make sure that the VPN Gateway itself is correctly set up to handle the traffic. It should be a Route-based VPN gateway, and if you're using BGP, ensure that the BGP routes are correctly advertised and received.
On the client machine, after connecting to the VPN, use tracert to trace the route to an internet address. This will help determine where the traffic is getting blocked.