Virtual WAN with Cisco two VTI

Nikoloz Abuashvili 0 Reputation points
2024-03-05T11:48:47.8366667+00:00

I have an implementation of Azure Cloud utilizing Virtual WAN for interconnection with on premise.

I'm using Virtual WAN, from virtual HUB -> VPN(Site-to-Site) trying to connect to on-premise Cisco router.

There are two virtual gateways on azure side:

instance-0 (10.103.0.13)

instance-1 (10.103.0.12)

On-premise side I have router with loopback-address: 172.22.12.141

it's a bgp source address

1 bgp peering is 10.103.0.13 <-> 172.22.12.141

2 bgp peering is 10.103.0.12 <-> 172.22.12.141

My problem is with VTI tunnels over IPSEC, looks like it is impossible to figure out an exact ip address for that Tunnel to use on premise, If I take an IP address from Hub private address space (10.103.0.0/23), for example 10.103.0.102/23 for the vti interface-1, than BGP is UP just one peering (10.103.0.13 <-> 172.22.12.141)

On the second VTI interface it is impossible to assign IP from same IP-range (10.103.0.0/23) due to subnet mask limitation.

At this point i fall into condition where there is no documentation regarding addressing of second VTI tunnel nor a configuration file which i have downloaded has an ip address described, to move further with implementation i need a bit of help.

Azure Virtual WAN
Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
219 questions
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,531 questions
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.