Azure routing | from p2s client VPN to s2s network on-prem

asked 2021-03-24T09:10:59.63+00:00
Fisnik Magashi 1 Reputation point

Hi,

We are trying to connect a machine behind a p2s connection to a network which lies behind a s2s connection through Azure.

on-prem < site-to-site > Azure vNet < point-to-site > client machine

I have read about that we should use BGP between on-prem and Azure vNet in order to advertise the routes but in our case we can not do that because we have Meraki MX which does not support BGP with non-meraki peers.

What we have done until now is that we have created custom rules on a routing table on Azure and attached this with the vNet which both of sites are connected to. On the client machine behind the p2s there is a route to the vNet via the p2s connection (route print shows that) but we also have a route to the on-prem network via this connection. But the problem is that we still can not connect to the on-prem network via p2s client machine.

My question is this, is this even possible to connect via custom routes or is it only via BGP that this is possible?

BR Nikart

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
1,536 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. answered 2021-03-31T18:50:31.583+00:00
    SaiKishor-MSFT 14,916 Reputation points Microsoft Employee

    @Fisnik Magashi Thank you for reaching out to us on Microsoft Q&A. We apologize for the delay in response.

    I understand that you are trying to connect from P2S client to on-prem via S2S VPN. However, this requires the S2S VPN to be using BGP as given here in this document. At the moment there is no work around for this and therefore will not work without BGP.

    I hope this answered your questions. Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

    Remember:

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

    Want a reminder to come back and check responses? Here is how to subscribe to a notification.