This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I established site to site VPN connection from on-premise vnet-1 to azure vnet-2 , vpn connection status is success and data in & out also working , but ping and RDP is not working ,even though i enable my ICMPIPV4. It not working may i know what is the reason for that. If have any doc or video link kindly share with me.
Hello anonymous user ,
Could you please clarify the below details for further troubleshooting of this issue:
1) When you say "site to site VPN connection from on-premise vnet-1 to azure vnet-2", is it from on-premise firewall to Azure Vnet or the site to site VPN setup is completely in Azure between 2 Vnets?
2) You mentioned that RDP is not working. Is the RDP port (3389) open on the NSG of your Azure VM? If NSG is applied on both the NIC and subnet of the VM, then port 3389 should be allowed on both the NSGs.
For RDP issue, you can refer the following troubleshooting doc : https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/troubleshoot-rdp-connection
3) If RDP is not working, how did you enable ICMP on the OS firewall of Azure VM? Are you logging into the VM using Public IP? If yes, could you check if ICMPv4 protocol for ping is allowed in your NSG rules?
The protocol on your NSG rule should be set to "Any" or include ICMP if you have allowed only TCP.
Refer : https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
To test the site to site connectivity, could you use PsPing or Telnet as it allows you to test connectivity to a specific TCP port?
Regards,
Gita
Hello anonymous user,
I'm following up on my above comment. Could you please let us know if your issue has now been resolved?
Kindly let us know if you need further assistance on this issue.
Regards,
Gita
Hello anonymous user
Have you checked the following settings?
-NSG at the NIC or Vnet level
-PSping command from any resource on your vnet
-RDP port 3389
-Route base/Policy based IPsec set up
and so ....