Azure NSG IPSec

Question

Just playing around trying to setup A VPN IPsec tunnel from a Virtual machine that sits wthin Azure.

The problem I've encountered is that it doesnt look like NSG's on azure support ESP IP ports for inbound traffic to allow the establishment of the VPN tunnel.

I havent seen any recent articles referencing this as most are from 2015-2017 and normally in reference to setting up a tunnel that points to azure.

I have seen mention that only TCP and UDP are supported on azure but nothing that is recent.

from the Azure documentation it doesnt seem very clear to me if its possible.

Answer 1

Hi @Bimbus the Broive ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are trying to configure rules to support ESP protocol in Azure NSG.

NSG supports the following protocols,

Refer: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

As of now, Portal support for configuring ESP and AH is not available.
You can leverage Azure PowerShell or Azure CLI to achieve this nevertheless.

• Powershell : https://learn.microsoft.com/en-us/powershell/module/az.network/add-aznetworksecurityruleconfig?view=azps-8.1.0
• CLI : https://learn.microsoft.com/en-us/cli/azure/network/nsg/rule?view=azure-cli-latest#az-network-nsg-rule-create

Please feel free to let us know if you have any questions about this.

Cheers,
Kapil.

----------------------------------------------------------------------------------------------------------------

If the above answer helped, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread