question

DanH-1829 avatar image
0 Votes"
DanH-1829 asked msrini-MSFT answered

Cloud <> On-prem networking with site-to-site VPN

Hi All,

I am new to this forum and looking for some help with networking. I have an on-prem subnet 10.0.0.0/23 and in azure 10.1.0.0/16.

10.1.0.0/16 (azure) has OpenVPN access server running.

10.0.0.0/23 (on-prem) has OpenVPN client running.

From 10.0.0.0/23 I can easily reach all the VMs in 10.1.0.0/16, VPN works as expected.

From 10.1.0.0/16 I can only reach 10.0.0.0/23 from withing my openvpn server but not from any other VM inside 10.1.0.0/16 . I know that openvpn has static routes setup so it is capable of sending traffic back to VPN client and on-prem subnet but how can I accomplish this for other VMs inside azure subnet 10.1.0.0/16 ?




azure-virtual-network
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

msrini-MSFT avatar image
0 Votes"
msrini-MSFT answered

Hi,

Even though you are able to connect from Azure to On-Prem via OpenVPN from the OpenVPN server, other VMs don't have the route to reach On-prem so the packets just drops.

So you need to add a route table in Azure , stating if the destination is 10.0.0.0/23, next hop as Interface of Open-VPN server. So the traffic reaches, OpenVPN server in Azure, and all you need to do is to route to On-Premises by configuring the sevrer.

Regards,
Msrini

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.