Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,559 questions
How to fix VPN gateway connection traffic, branch office IP overlapping
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 20%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
ctm386
0
Reputation points
Hi,
I am stuck in a problem where i can ping one application at a time from branch office, if i give branch office subnet in local network gateway. If i add branch office subnet in both LNG then i wont be able to reach both applications at a time. anyone has solution to it.
I am using VPNGW1 SKU with active-active. BGP is enabled
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT 26,216 Reputation points Microsoft Employee2024-07-31T02:04:06.3533333+00:00 Thank you for reaching out.
Can you perform following steps and see if that helps in troubleshooting the connectivity issue when the active active connection is enabled?
- Check the effective routes learned by the VPN Gateway and see if the required routes are present.
- Perform a packet capture on your VPN Gateway to get to know the source and destination of the packets going through the VPN gateway and help determine the if the traffic is reaching the VPN Gateway.
- You can also enable diagnostic logging for your VPN Gateway and check the RouteDiagnosticLog and check if correct routes are being exchanged.
Thanks
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(249.60000000000002, 79%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETM%3C/text%3E%3C/svg%3E)
Tariq Mahmood 1 Reputation point2024-07-31T10:29:55.87+00:00 - Check the effective routes learned by the VPN Gateway and see if the required routes are present. (Yes the routes are present in Routing table of VPN gateway) that is the reason i can ping application one at a time from branch office.
- Perform a packet capture on your VPN Gateway to get to know the source and destination of the packets going through the VPN gateway and help determine the if the traffic is reaching the VPN Gateway. ( will try this)
Sign in to comment
Sign in to answer