How Can I Get IPsec VPN Configuration Details in Azure?

Question

How Can I Get IPsec VPN Configuration Details in Azure?

Jose Carro 0

Hey there,

I've got this thing going on with Azure, and I've set up an IPsec VPN, and it's running smooth as butter. But here's the kicker: I'm curious if there's a way, maybe through some sneaky commands or whatever, to check out the configuration settings on the remote end of the VPN. I'm particularly interested in stuff like the encryption type and that whole Diffie Helman deal.

My partner mentioned that on his end, he's using a VPN on Google Cloud, and it kinda auto-magically does its thing with the parameters, so he's not sure how to get to them.

Any pointers or advice on how to tackle this would be appreciated. Thanks! 🕵️💻

ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-10-21T19:24:01.1033333+00:00

@Jose Carro

Thank you for reaching out.

I think running the Get-AzVirtualNetworkGatewayConnectionIkeSa command which will return the IKE Security Associations of your connection based on the Connection Name and Resource Group Name.

Were these the details you were looking for?

Thank you!
ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-10-23T17:50:23.6433333+00:00

@Jose Carro

Just following up here to see if you were able take a look at my comment above. Thank you!
Jose Carro 0 Reputation points

2023-10-23T18:51:28.49+00:00

Hey!! @ChaitanyaNaykodi-MSFT

Thanks for the quick response. I was just trying out the command you gave me, and it gives me info about my Azure virtual gateway, but it doesn't show detailed info about the remote peer gateway configuration.

I need it to give me the same result as the 'Get-AzVirtualNetworkGatewayConnectionIkeSa' command, but with info about the remote peer so I can compare the parameters of both.
Jose Carro 0 Reputation points

2023-10-23T19:10:42.12+00:00

Hey!! @ChaitanyaNaykodi-MSFT

Thanks for the quick response. I was just trying out the command you gave me, and it gives me info about my Azure virtual gateway, but it doesn't show detailed info about the remote peer gateway configuration.

I need it to give me the same result as the 'Get-AzVirtualNetworkGatewayConnectionIkeSa' command, but with info about the remote peer so I can compare the parameters of both.

1 answer

Your answer

ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-10-21T19:24:01.1033333+00:00

@Jose Carro

Thank you for reaching out.

I think running the Get-AzVirtualNetworkGatewayConnectionIkeSa command which will return the IKE Security Associations of your connection based on the Connection Name and Resource Group Name.

Were these the details you were looking for?

Thank you!
ChaitanyaNaykodi-MSFT 27,481 Reputation points Microsoft Employee Moderator

2023-10-23T17:50:23.6433333+00:00

@Jose Carro

Just following up here to see if you were able take a look at my comment above. Thank you!
Jose Carro 0 Reputation points

2023-10-23T18:51:28.49+00:00

Hey!! @ChaitanyaNaykodi-MSFT

Thanks for the quick response. I was just trying out the command you gave me, and it gives me info about my Azure virtual gateway, but it doesn't show detailed info about the remote peer gateway configuration.

I need it to give me the same result as the 'Get-AzVirtualNetworkGatewayConnectionIkeSa' command, but with info about the remote peer so I can compare the parameters of both.
Jose Carro 0 Reputation points

2023-10-23T19:10:42.12+00:00

Hey!! @ChaitanyaNaykodi-MSFT

Thanks for the quick response. I was just trying out the command you gave me, and it gives me info about my Azure virtual gateway, but it doesn't show detailed info about the remote peer gateway configuration.

I need it to give me the same result as the 'Get-AzVirtualNetworkGatewayConnectionIkeSa' command, but with info about the remote peer so I can compare the parameters of both.

Answer 1

@Jose Carro

Thank you for getting back and sharing the additional details here.

I was just trying out the command you gave me, and it gives me info about my Azure virtual gateway, but it doesn't show detailed info about the remote peer gateway configuration.

AFAIK I do not think there is a command available which will give you the required information here. Although I think you can try below options and see if you are able to get any insights.

Enable Diagnostic logging for the VPN Gateway and check the IKEDiagnosticLog and see if you able to get the required details.
Configure packet capture for VPN gateway and check the IKE and ESP traffic for the required details.

Hope this helps! Please let me know if you have any additional questions. Thank you!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

How Can I Get IPsec VPN Configuration Details in Azure?

1 answer

Your answer