How to connect to azure vpn from linux ubuntu 18.04?

Question

How to connect to azure vpn from linux ubuntu 18.04?

Fuma 21

I want to connect to azure vpn from linux ubuntu 18.04 on-premise. I don't know how to issue a certificate from azure's VNet GW and connect from linux ubuntu. Are there any article with detailed instructions?

KapilAnanth-MSFT 49,536 Reputation points Microsoft Employee Moderator

2022-08-24T06:20:58.153+00:00
Hi @Fuma ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are trying to configure a P2S connection from an Ubuntu machine.

Please note that you have to manually create a Root(GA) certificate and a Client(User) Certificate

You have to upload the Root certificate to the VPN Gateway

And you have to install the client certificate on your Ubuntu machine.

To create the certificates,
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-linux

Post this, you can refer to the below docs,

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux#cli

Please let me know if you require more details on this.

Cheers,
Kapil

Accepted answer

0 additional answers

Your answer

KapilAnanth-MSFT 49,536 Reputation points Microsoft Employee Moderator

2022-08-24T06:20:58.153+00:00

Hi @Fuma ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are trying to configure a P2S connection from an Ubuntu machine.

Please note that you have to manually create a Root(GA) certificate and a Client(User) Certificate

You have to upload the Root certificate to the VPN Gateway

And you have to install the client certificate on your Ubuntu machine.

To create the certificates,
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-linux

Post this, you can refer to the below docs,

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux#cli

Please let me know if you require more details on this.

Cheers,
Kapil

Answer 1

Jackson Martins 10,606 MVP Volunteer Moderator

Hi @Fuma
there are two ways to do this, you can use a point to site VPN and a site to site VPN

For site-to-site
You will need to configure ipsec VPN on azure:

https://blog.azureacademy.com.br/2020/04/20/vpn-site-to-site-s2s-ubuntu-e-azure/

I wrote an article in Portuguese, you need to use Google translate.

For point-to-site
You will need to use open VPN on the client:

https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux

Get in touch if you need more help with this issue.

--please don't forget to "[Accept the answer]" if the reply is helpful--

tuioku 11 Reputation points

2022-08-24T03:54:14.537+00:00

Thank you.
Very helpful.

I want to connect to point to site VPNv, should I refer to "View VPN client profile files"?

https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux#view-vpn-client-profile-files
Jackson Martins 10,606 Reputation points MVP Volunteer Moderator

2022-08-24T09:31:04.147+00:00

Hi @tuioku
As mentioned by kapilananth-MSFT
You need to create certificates, you can follow the link:
https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux

Get in touch if you need more help with this issue.

--please don't forget to "[Accept the answer]" if the reply is helpful--
Fuma 21 Reputation points

2022-08-25T03:08:49.967+00:00

Hi @Jackson Martins

Thank you for your reply.
I would like to specify the VNet ip address and the VNetGwateWay ip address, but I don't know what values to use.
Should I set an ip address starting with 10.1.0.0/24(this ip adress is class A)?
Should I also set the vnet as "10.1.0.0/16"?

https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-create-gateway-portal
→ GateWay manual says ip address space is "10.1.0.0.0/16".

https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-linux#view-vpn-client-profile-files
→ According to the Point-to-site configuration, the address pool is "172.16.201.0/24".
Jackson Martins 10,606 Reputation points MVP Volunteer Moderator

2022-08-25T06:55:42.107+00:00

Hi @Fuma
On Point-to-site configuration, you can use any IP Private address range for any class (A, B, C)

You just need to choose a range that does not overlap with any existing network in your config.

On pool configuration you can use any
Get in touch if you need more help with this issue.

--please don't forget to "[Accept the answer]" if the reply is helpful--
tuioku 11 Reputation points

2022-08-25T11:04:44.883+00:00
I have created an azure vpn gateway and my mac and ubuntu 18.04 have a p2s connection.
However, both machines do not receive packat when pinging each other.
How can I get them to arrive?

Do I need to configure root forwarding?

■ azure vnet subnet

FrontEnd

10.1.0.0/24

GatewaySubnet

10.1.255.0/27

address space

10.0.0.0/16

10.1.0.0/16
tuioku 11 Reputation points

2022-08-25T11:04:57.72+00:00
■ azure vnet gateway

address pool

172.16.201.0/24

tunnel type

openVPN

■ mac

wifi ssid

A

private ip address network interface

eth0

10.2.59.83

utun3（vpn）

inet 172.16.201.4 --> 172.16.201.4

netstat -rn 172.16/24 utun3 USc utun3 172.16.201/24 link#17 UCS utun3 172.16.201.4 172.16.201.4 UH utun3 192.168.0/23 utun3 USc utun3

■ ubuntu 18.04

wifi ssid

B

private ip address network interface

wlan0

192.168.100.208

tun0（vpn）

172.16.201.3/24

route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface default _gateway 0.0.0.0 UG 20600 0 0 wlan0 default _gateway 0.0.0.0 UG 32766 0 0 l4tbr0 10.0.0.0 _gateway 255.255.0.0 UG 50 0 0 tun0 10.1.0.0 _gateway 255.255.0.0 UG 50 0 0 tun0 link-local 0.0.0.0 255.255.0.0 U 1000 0 0 l4tbr0 172.16.201.0 0.0.0.0 255.255.0.0 U 50 0 0 tun0 172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0 192.168.55.0 0.0.0.0 255.255.255.0 U 0 0 0 l4tbr0 192.168.100.0 0.0.0.0 255.255.255.0 U 600 0 0 wlan0
Jackson Martins 10,606 Reputation points MVP Volunteer Moderator

2022-08-25T12:56:07.993+00:00

Hi @tuioku

Everything looks good!

Did you check the internal firewall from the machines? On any server, can you ping the client?

Best

Share via

How to connect to azure vpn from linux ubuntu 18.04?

0 additional answers

Your answer