Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,613 questions
BGP Peer Not Establishing Over IPSEC Tunnel
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 87%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESF%3C/text%3E%3C/svg%3E)
Sam Faunt
1
Reputation point
Hi,
I'm trying to establish a tunnel between azure and a Juniper SRX. I have gotten the ipsec to come up and seems to be passing data but my bgp seems to flap, connects for 30 to 2mins at a time and then go offline for a while.
Does anyone have any idea?
{count} votes
-
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee2020-12-17T09:57:26.303+00:00 Hello @Sam Faunt ,
It is difficult to isolate the issue without actually looking into the setup.
I would request you to start isolating the issue by following the below troubleshooting articles and steps:
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-site-to-site-cannot-connectValidate your VPN device configuration : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-download-vpndevicescript
Azure Local network Gateway must have on premises BGPPeerIP as well as ASN. Local address space for local network gateway must be BGPPeerIP as a /32.
VPN Connection object must have BGP enabled.
Validate the configured ASN and make sure it doesn't fall under Azure or IANA reserved ranges.
Please refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-overview#what-asns-autonomous-system-numbers-can-i-use
Attempt to do a telnet or a psping to the BGP peering IP on port 179 of the VPN gateway and see if it succeeds. -
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee
2020-12-22T08:53:47.147+00:00 Hello @Sam Faunt ,
Could you please provide an update on this post?
Kindly let us know if the above helps or you need further assistance on this issue.
-
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee
2020-12-24T13:54:10.037+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 36%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
SaiKishor-MSFT 17,321 Reputation points2020-12-26T00:34:05.793+00:00 - Can you ping the remote BGP peer IP from your local BGP peer IP to verify the connectivity between the BGP peers when the issue happens?
- Can you share the BGP debug logs to troubleshoot further.
Thank you!
-
GitaraniSharma-MSFT 49,691 Reputation points Microsoft Employee
2020-12-29T09:42:30.173+00:00
Sign in to comment
Sign in to answer