P2S VPN Network Connection Issues

Question

P2S VPN Network Connection Issues

Travis K 20

Hello, I have set up a virtual network and a VPN gateway to establish a remote P2S connection to the network. I can connect to the gateway fine and can see the network on the network and sharing center, but it still says I have no network access. I have tried to turn on network discovery on the virtual machine, but that doesn't seem to save. I can ping the local computer from the VM when connected, but not the other way around. I've looked through all the diagnostics that I can find and everything seems to work correctly, except I don't have network access. If anyone has any suggestions, I would appreciate it.

Luis Arias 9,481 Reputation points Volunteer Moderator

2024-01-04T18:56:34.9366667+00:00
Hi Travis K ,

Can you share how is your configuration , Do you have NSGs on this vnet? Did you already try to connect from another VM in the same vnet to validate the comunication inside vnet?

Additional suggestions that you can make execute are:

DNS Issues: If you are trying to connect by Domain Name to this VM and doesn't work you might need to check the DNS server configuration. If you can connect to the VM using the private IP address but not the computer name, you may need to verify that DNS is properly configured.

Ping Issues: If you’re able to ping the local computer from the VM but not the other way around, it could be due to the Windows Defender Firewall blocking Network Discovery’s services. You could try enabling the rules titled “File and Printer Sharing (Echo Request - ICMPv4-In)” or disable the firewall to test.

NSG : The issue might be due NSG block incomming traffic to your VM (source: https://support.microsoft.com/en-us/topic/vpn-connection-issue-in-windows).

References:

VPN Gateway FAQ

Remote work using Azure VPN Gateway Point-to-site

Configure server settings for P2S VPN Gateway connections - certificate authentication - Azure portal

Let me know if this help you.

Luis
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Travis K 20 Reputation points

2024-01-04T20:58:01.3+00:00

Hey Luis, thank you for your help. It appears that the DNS is configured correctly in Azure, and I can't reach the VM through an IP address or the DNS. I have disabled the firewall and reconnected the VPN to check connectivity, but the connection was the same. It says I am connected, but in the Network and Sharing Center it says "No Network Access." I will try to launch a new VM in the same vnet and check connectivity that way as well.

The following image is all of the NSG rules that are applied. I see the rule named "DenyAllInBound" and thought that may be an issue, but I am unable to delete the rule.
Luis Arias 9,481 Reputation points Volunteer Moderator

2024-01-04T21:17:44.5966667+00:00

Hey Travis, that is a default denyall inbound on NSG , that you can do is create a network security rule with priority lower (such as 400) .

Let me know if your need further help

Answer accepted by question author

0 additional answers

Your answer

Luis Arias 9,481 Reputation points Volunteer Moderator

2024-01-04T18:56:34.9366667+00:00

Hi Travis K ,

Can you share how is your configuration , Do you have NSGs on this vnet? Did you already try to connect from another VM in the same vnet to validate the comunication inside vnet?

Additional suggestions that you can make execute are:

DNS Issues: If you are trying to connect by Domain Name to this VM and doesn't work you might need to check the DNS server configuration. If you can connect to the VM using the private IP address but not the computer name, you may need to verify that DNS is properly configured.

Ping Issues: If you’re able to ping the local computer from the VM but not the other way around, it could be due to the Windows Defender Firewall blocking Network Discovery’s services. You could try enabling the rules titled “File and Printer Sharing (Echo Request - ICMPv4-In)” or disable the firewall to test.

NSG : The issue might be due NSG block incomming traffic to your VM (source: https://support.microsoft.com/en-us/topic/vpn-connection-issue-in-windows).

References:

VPN Gateway FAQ

Remote work using Azure VPN Gateway Point-to-site

Configure server settings for P2S VPN Gateway connections - certificate authentication - Azure portal

Let me know if this help you.

Luis
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Travis K 20 Reputation points

2024-01-04T20:58:01.3+00:00

Hey Luis, thank you for your help. It appears that the DNS is configured correctly in Azure, and I can't reach the VM through an IP address or the DNS. I have disabled the firewall and reconnected the VPN to check connectivity, but the connection was the same. It says I am connected, but in the Network and Sharing Center it says "No Network Access." I will try to launch a new VM in the same vnet and check connectivity that way as well.

The following image is all of the NSG rules that are applied. I see the rule named "DenyAllInBound" and thought that may be an issue, but I am unable to delete the rule.
Luis Arias 9,481 Reputation points Volunteer Moderator

2024-01-04T21:17:44.5966667+00:00

Hey Travis, that is a default denyall inbound on NSG , that you can do is create a network security rule with priority lower (such as 400) .

Let me know if your need further help

Answer 1

Konstantinos Passadis 19,691 MVP

Hello @Travis K Tackett !

One thing i have always seen is the Local Firewall on the VM

Set an Inbound Rule on the Advanced Firewall Settings inside the VM , that allows the IP range your P2S VPN holds

Try again and kindly post your feedback

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Travis K 20 Reputation points

2024-01-05T14:20:23.9866667+00:00

Hey @Konstantinos Passadis thank you for the suggestion, but after following those steps on the VM, it still says I am connected with no network access after reconnecting the VPN.
Konstantinos Passadis 19,691 Reputation points MVP

2024-01-08T19:21:10.1733333+00:00

Hello @Travis K Tackett !

Thanks for the Accept!

Can you kindly tell us the solution? Was it the local Firewall ?

Regards

Share via

P2S VPN Network Connection Issues

0 additional answers

Your answer