How to enable VPN Gateway Diagnostics?

Konrads Klints 1 Reputation point
2021-01-03T04:42:19.2+00:00

Hello,

Where/how can I enable diagnostics on Azure VPN Gateway / Local Gateway so that I would see which peers connect when? I have gateway operating for several days now and AzureDiagnostics table in my only LA workspace is empty.

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,795 questions
{count} votes

2 answers

Sort by: Most helpful
  1. GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator
    2021-01-04T06:24:21.393+00:00

    Hello anonymous user ,

    To enable VPN Gateway Diagnostics, you need to use Azure Monitor. You can get the below resource logs once you enable VPN diagnostics:
    GatewayDiagnosticLog - Contains resource logs for gateway configuration events, primary changes and maintenance events.
    TunnelDiagnosticLog - Contains tunnel state change events. Tunnel connect/disconnect events have a summarized reason for the state change if applicable.
    RouteDiagnosticLog - Logs changes to static routes and BGP events that occur on the gateway.
    IKEDiagnosticLog - Logs IKE control messages and events on the gateway.
    P2SDiagnosticLog - Logs point-to-site control messages and events on the gateway.

    In your Azure portal, search for Monitor. Go to Diagnostics settings blade within Monitor and search for your VPN gateway in which you would like to enable diagnostics. To turn on diagnostics, double-click the gateway and then select Turn on diagnostics. Fill in the details, and ensure that Send to Log Analytics and TunnelDiagnosticLog are selected. Choose the Log Analytics Workspace where you want to send the logs to. It may take a few hours for the data to show up initially.
    53025-vpn-diag.jpg

    Please refer the below article to enable VPN diagnostics:
    https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-setup-alerts-virtual-network-gateway-log

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    4 people found this answer helpful.
    0 comments No comments

  2. JoyDutt 831 Reputation points
    2021-01-03T13:04:46.57+00:00

    Hi anonymous user

    Have you tried 1--12 steps completely from here - https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-setup-alerts-virtual-network-gateway-log

    ==

    (If this reply was helpful please don't forget to upvote and/or accept as an answer, Thank You)

    Regards,
    J.D.

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.